NFA OData pages won't load in NetOps Portal

Products

• CA Network Flow Analysis (NetQos / NFA)

Issue/Introduction

If your new NFA OData pages refuse to show up in the NetOps Portal, you may be running into an issue with the SSO Encryption / Decryption keys. 

To see if you have this problem, check your x:/ca/nfa/odata/logs/odata-wrapper.log and check for this error

INFO   | jvm 1    | 2021/07/28 14:47:04 | 2021-07-28 14:47:04.542 ERROR 3124 --- [nio-8981-exec-9] c.c.n.odata.common.security.Encryption   : Error performing encryption operation
INFO   | jvm 1    | 2021/07/28 14:47:04 | 
INFO   | jvm 1    | 2021/07/28 14:47:04 | javax.crypto.BadPaddingException: Error finalising cipher data: pad block corrupted
INFO   | jvm 1    | 2021/07/28 14:47:04 |  at org.bouncycastle.jcajce.provider.BaseCipher.engineDoFinal(Unknown Source)
INFO   | jvm 1    | 2021/07/28 14:47:04 |  at javax.crypto.Cipher.doFinal(Cipher.java:2164)
INFO   | jvm 1    | 2021/07/28 14:47:04 |  at com.ca.nfa.odata.common.security.Encryption.doOperation(Encryption.java:196)
INFO   | jvm 1    | 2021/07/28 14:47:04 |  at com.ca.nfa.odata.common.security.Encryption.decryptFromBytes(Encryption.java:127)
INFO   | jvm 1    | 2021/07/28 14:47:04 |  at com.ca.nfa.odata.common.security.Encryption.decrypt(Encryption.java:116)
INFO   | jvm 1    | 2021/07/28 14:47:04 |  at com.ca.nfa.odata.common.security.Encrypter.decrypt(Encrypter.java:73)
INFO   | jvm 1    | 2021/07/28 14:47:04 |  at com.ca.nfa.odata.common.security.SsoToken.parseToken(SsoToken.java:93)
INFO   | jvm 1    | 2021/07/28 14:47:04 |  at com.ca.nfa.odata.common.security.SsoToken.parseParameter(SsoToken.java:71)
INFO   | jvm 1    | 2021/07/28 14:47:04 |  at com.ca.nfa.odata.authservice.impl.AuthenticationServiceImpl.getSsoToken(AuthenticationServiceImpl.java:591)
INFO   | jvm 1    | 2021/07/28 14:47:04 |  at com.ca.nfa.odata.authservice.impl.AuthenticationServiceImpl.performAPIAuthorization(AuthenticationServiceImpl.java:213)
INFO   | jvm 1    | 2021/07/28 14:47:04 |  at com.ca.nfa.odata.filter.RoutingFilter.doFilter(RoutingFilter.java:79)
INFO   | jvm 1    | 2021/07/28 14:47:04 |  at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
INFO   | jvm 1    | 2021/07/28 14:47:04 |  at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
INFO   | jvm 1    | 2021/07/28 14:47:04 |  at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:198)
INFO   | jvm 1    | 2021/07/28 14:47:04 |  at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:96)
INFO   | jvm 1    | 2021/07/28 14:47:04 |  at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:493)
INFO   | jvm 1    | 2021/07/28 14:47:04 |  at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:140)
INFO   | jvm 1    | 2021/07/28 14:47:04 |  at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:81)
INFO   | jvm 1    | 2021/07/28 14:47:04 |  at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:87)
INFO   | jvm 1    | 2021/07/28 14:47:04 |  at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:342)
INFO   | jvm 1    | 2021/07/28 14:47:04 |  at org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:800)
INFO   | jvm 1    | 2021/07/28 14:47:04 |  at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:66)
INFO   | jvm 1    | 2021/07/28 14:47:04 |  at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:806)
INFO   | jvm 1    | 2021/07/28 14:47:04 |  at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1498)
INFO   | jvm 1    | 2021/07/28 14:47:04 |  at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)
INFO   | jvm 1    | 2021/07/28 14:47:04 |  at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
INFO   | jvm 1    | 2021/07/28 14:47:04 |  at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
INFO   | jvm 1    | 2021/07/28 14:47:04 |  at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
INFO   | jvm 1    | 2021/07/28 14:47:04 |  at java.lang.Thread.run(Thread.java:748)

 

 

Environment

Network Flow Analysis

NetOps Portal

Cause

The SSO Config tool between the NetOps Portal does not match. Ensure that these values match in each products SSO Config Tool. 

Resolution

Make sure that the values used for Encryption/Decryption Key match identically between the 2 products. Then restart the Performance Center SSO service and then CA NFA RIB Source Service on the NFA Console. 

On the PC machine:

Gather the SsoEncryptionDecryptionsKey from the MySQL database.

$ mysql -uroot -p

mysql> select PropValue, Priority, Deleted from netqosportal.performance_center_properties where PropName = 'SsoEncryptionDecryptionKey';

+-----------+----------+---------+
| PropValue | Priority | Deleted |
+-----------+----------+---------+
| a1P4UMWW  |        0 | N       |
+-----------+----------+---------+
1 row in set (0.00 sec)

Get the PropValue value and update the sso config