Unable to sign into NFA Console after integration with NetOps Portal

Products

• CA Network Flow Analysis (NetQos / NFA)

Issue/Introduction

When trying to log in to the NFA Console after integration with Performance Management I get the below 500 message below:

 

HTTP ERROR 500

Problem accessing /sso/sign-in-process.jsp. Reason:

Server Error

Caused by:

javax.servlet.ServletException: org.apache.jasper.JasperException: An exception occurred processing JSP page /sign-in-process.jsp at line 146
143: else
144: {
145:     // Validate the user
146:     userId = authenticationUtility.authenticateUser(session, singleSignOnWSSoap, username, password);
147:     // Check the result
148:     if (userId <= 0)
149:     {
Stacktrace:
	at org.eclipse.jetty.server.handler.HandlerCollection.handle(HandlerCollection.java:146)
	at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:132)
	at org.eclipse.jetty.rewrite.handler.RewriteHandler.handle(RewriteHandler.java:335)
	at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:132)
	at org.eclipse.jetty.server.Server.handle(Server.java:561)
	at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:334)
	at org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.java:251)
	at org.eclipse.jetty.io.AbstractConnection$ReadCallback.succeeded(AbstractConnection.java:279)
	at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:104)
	at org.eclipse.jetty.io.ssl.SslConnection.onFillable(SslConnection.java:289)
	at org.eclipse.jetty.io.ssl.SslConnection$3.succeeded(SslConnection.java:149)
	at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:104)
	at org.eclipse.jetty.io.ChannelEndPoint$2.run(ChannelEndPoint.java:124)
	at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.doProduce(EatWhatYouKill.java:247)
	at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.produce(EatWhatYouKill.java:140)
	at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.run(EatWhatYouKill.java:131)
	at org.eclipse.jetty.util.thread.ReservedThreadExecutor$ReservedThread.run(ReservedThreadExecutor.java:243)
	at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:679)
	at org.eclipse.jetty.util.thread.QueuedThreadPool$2.run(QueuedThreadPool.java:597)
	at java.lang.Thread.run(Thread.java:748)
Caused by: org.apache.jasper.JasperException: An exception occurred processing JSP page /sign-in-process.jsp at line 146
143: else
144: {
145:     // Validate the user
146:     userId = authenticationUtility.authenticateUser(session, singleSignOnWSSoap, username, password);
147:     // Check the result
148:     if (userId <= 0)
149:     {

Environment

DX Netops Network Flow Analysis

DX NetOps Performance Management
 

Cause

Local Override set in NFA for the "LDAP Connection Password" is not encrypted by the NFA SSO Configuration tool, however the NFA SSO Module expects the LDAP Password to be encrypted if you are linked to NetOps Portal.  

This will only happen if NFA is linked to NetOps Portal, and the LDAPConnectionPassword is set in NFA Directly with a Local Override in the SsoConfig tool.

Resolution

1. Make sure in NetOps Portal machine the SSO Settings have the LDAP Connection Password set with "Remote Override" so that the password will sync down to NFA.  If you make any changes make sure to resync the NFA Data Source.

 

2. Remove the "Local Override" in NFA for the "LDAP Connection Password" by running the query below on the NFA Console server:

          

          mysql -P3308 -D -unetqos -pnetqos reporter -t -e "delete from performance_center_properties where PropName = 'LdapConnectionPassword' and Priority = 2;"

 

3. Attempt to login to NFA again.