CABI 4.30 doesn't complete installation after upgrading to UIM 20.3
Article ID: 204803
Updated On:
Products
Issue/Introduction
Pre-upgrade: UIM 9.20 without CABI
Upgraded to UIM 20.3 and then installed CABI 4.30. CABI probe fails to decode the encrypted REST user password when attempting to use it to log into CABI.
The following appears in the cabi.log and cabi_install_archive.log files:
Dec 09 19:20:35:161 [main, cabi] the REST user password was already set, decrypting it and using it to log into CABI
Dec 09 19:20:35:161 [main, cabi] Could not decode the encrypted password
Dec 09 19:20:35:161 [main, cabi] javax.crypto.BadPaddingException: Given final block not properly padded. Such issues can arise if a bad key is used during decryption.
at com.sun.crypto.provider.CipherCore.unpad(CipherCore.java:975)
at com.sun.crypto.provider.CipherCore.fillOutputBuffer(CipherCore.java:1056)
at com.sun.crypto.provider.CipherCore.doFinal(CipherCore.java:853)
at com.sun.crypto.provider.AESCipher.engineDoFinal(AESCipher.java:446)
at javax.crypto.Cipher.doFinal(Cipher.java:2168)
at com.ca.cabi4uim.sso.jasper.ext.auth.Encrypter.decrypt(Encrypter.java:86)
at com.ca.cabi4uim.sso.jasper.ext.auth.EncryptorService.decrypt(EncryptorService.java:47)
at com.ca.cabi4uim.sso.UimToJasperUserSync.init(UimToJasperUserSync.java:82)
at com.ca.cabi4uim.sso.UimToJasperUserSync.<init>(UimToJasperUserSync.java:106)
at com.ca.cabi4uim.Probe.getUserSynchronizer(Probe.java:607)
at com.ca.cabi4uim.Probe.createRestUser(Probe.java:637)
at com.ca.cabi4uim.Probe.setupCabiInBundledMode(Probe.java:429)
at com.ca.cabi4uim.Probe.setupcabi(Probe.java:354)
at com.ca.cabi4uim.Probe.initOnTimer(Probe.java:702)
at com.nimsoft.nimbus.NimProbe.doForever(NimProbe.java:418)
at com.ca.cabi4uim.Probe.run(Probe.java:894)
at com.ca.cabi4uim.Probe.main(Probe.java:123)
Dec 09 19:20:35:161 [main, cabi] SSO JasperUserUtility will be using jasperAdminUser: CABI_REST_USER
Dec 09 19:20:35:191 [main, cabi] JasperUserUtility:login(): URL attempted :http://x.x.x.x:80/cabijs/login.html
Dec 09 19:20:35:192 [main, cabi] JasperUserUtility:login(): Response code :403
Dec 09 19:20:35:192 [main, cabi] JasperUserUtility:login(): Got an unauthorized response, I should fall back to superuser login
Dec 09 19:20:35:192 [main, cabi] UimToJasperUserSync(): Can't log into CABI! Is the password in the database is wrong?
Dec 09 19:20:35:192 [main, cabi] UimToJasperUserSync(): I'm going to try to recover from this and try some other login credentials
Dec 09 19:20:35:192 [main, cabi] SSO JasperUserUtility will be using jasperAdminUser: superuser
Dec 09 19:20:37:518 [main, cabi] I logged in with the default superuser password. Re-setting the CABI Rest user now.
Dec 09 19:20:37:518 [main, cabi] Resetting rest user 'CABI_REST_USER'
Dec 09 19:20:37:518 [attach_socket, cabi] I logged in with the default superuser password. Re-setting the CABI Rest user now.
Dec 09 19:20:37:519 [attach_socket, cabi] Resetting rest user 'CABI_REST_USER'
Dec 09 19:20:38:966 [attach_socket, cabi] Switched to secure CABI login. "superuser" can now be disabled.
Dec 09 19:20:38:966 [attach_socket, cabi] successfully saved the new CABI rest user to CABI
Dec 09 19:20:38:966 [attach_socket, cabi] Resetting the password in the UIM database for the CABI rest user.
Dec 09 19:20:38:972 [attach_socket, cabi] Unable to save rest user password to UIM database. Reverting the password in jasperserver to the last known value.
Dec 09 19:20:38:972 [attach_socket, cabi] Resetting rest user 'CABI_REST_USER'
Environment
Release : 20.3
Component : UIM - CABI
Cause
Java_jre version 2.05 installed on CABI server isn't able to decode the password as it is encrypted.
Java_jre version 2.00 was installed on the OC and Primary hub servers.
Resolution
Deployed java_jre 2.04 to the CABI server. That re-activated the CABI probe. It was then able to proceed and install correctly.
Feedback
