ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

Gateway is not boot strapping after restart

book

Article ID: 241456

calendar_today

Updated On:

Products

CA API Gateway

Issue/Introduction

I'm running into an issue where the bootstrap  is not occurring after rebooting. I can see the process id for ssg but when I tail the ssg log I don't see the normal bootstrap log entries. I've looked at the ssgruntimedefs.sh and don't see any problems. Please provide suggestions on how do I proceed to resolve this issue. 

 

Cause

Changes were made to add AppDynamic agent tp the gateway.  During these changes the permission to ssg.policy was changed resulting in the user  not having access to the ssg.policy

 

Environment

Release : 10.1

Component : API GATEWAY

Resolution

Reviewed the ownership and permissions of all files in /opt/SecureSpan

# ls -laR /opt/SecureSpan  >lslar.txt

/opt/SecureSpan/Gateway/runtime/etc

-rwx------ 1 layer7 layer7  1470 May  6 11:38 ssg.policy           <------------Permissions

Change to 444

#chmod 444 /opt/SecureSpan/Gateway/runtime/etc/ssg.policy

Results:

-r--r--r-- 1 layer7 layer7  1470 Jan 13 23:48 ssg.policy

-r--r--r-- 1 layer7 layer7   301 Jan 13 23:48 ssg.security



Additional Information

Error permission error is observed when running gateway manual with -console option:

$ /opt/SecureSpan/Gateway/runtime/bin/gateway.sh start -console

$ Could not load Logmanager "com.l7tech.server.boot.GatewayBoot$GatewayLogManager"

java.security.AccessControlException: access denied ("java.lang.RuntimePermission" "shutdownHooks")

at java.base/java.security.AccessControlContext.checkPermission(AccessControlContext.java:472)

at java.base/java.security.AccessController.checkPermission(AccessController.java:897)

at java.base/java.lang.SecurityManager.checkPermission(SecurityManager.java:322)

at java.logging/java.util.logging.LogManager.checkSubclassPermissions(LogManager.java:315)

at java.logging/java.util.logging.LogManager.<init>(LogManager.java:294)

at com.l7tech.server.boot.GatewayBoot$GatewayLogManager.<init>(Unknown Source)

at java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)

at java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62)

at java.base/jdk.internal.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)