Gateway is not boot strapping after restart
search cancel

Gateway is not boot strapping after restart

book

Article ID: 241456

calendar_today

Updated On:

Products

CA API Gateway

Issue/Introduction

I'm running into an issue where the bootstrap is not occurring after rebooting. I can see the process id for ssg but when I tail the ssg log I don't see the normal bootstrap log entries. I've looked at the ssgruntimedefs.sh and don't see any problems. Please provide suggestions on how do I proceed to resolve this issue. 

 

Environment

Release : 10.1

Component : API GATEWAY

Cause

Changes were made to add AppDynamic agent to the gateway.  During these changes the permission to ssg.policy was changed resulting in the user not having access to the ssg.policy

 

Resolution

Reviewed the ownership and permissions of all files in /opt/SecureSpan

# ls -laR /opt/SecureSpan  >lslar.txt

/opt/SecureSpan/Gateway/runtime/etc

-rwx------ 1 layer7 layer7  1470 May  6 11:38 ssg.policy           <------------Permissions

Change to 444

#chmod 444 /opt/SecureSpan/Gateway/runtime/etc/ssg.policy

Results:

-r--r--r-- 1 layer7 layer7  1470 Jan 13 23:48 ssg.policy

-r--r--r-- 1 layer7 layer7   301 Jan 13 23:48 ssg.security



Additional Information

Error permission error is observed when running gateway manual with -console option:

$ /opt/SecureSpan/Gateway/runtime/bin/gateway.sh start -console

$ Could not load Logmanager "com.l7tech.server.boot.GatewayBoot$GatewayLogManager"

java.security.AccessControlException: access denied ("java.lang.RuntimePermission" "shutdownHooks")

at java.base/java.security.AccessControlContext.checkPermission(AccessControlContext.java:472)

at java.base/java.security.AccessController.checkPermission(AccessController.java:897)

at java.base/java.lang.SecurityManager.checkPermission(SecurityManager.java:322)

at java.logging/java.util.logging.LogManager.checkSubclassPermissions(LogManager.java:315)

at java.logging/java.util.logging.LogManager.<init>(LogManager.java:294)

at com.l7tech.server.boot.GatewayBoot$GatewayLogManager.<init>(Unknown Source)

at java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)

at java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62)

at java.base/jdk.internal.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)