Data Aggregator and NetOps portal sync failure following upgrade to 22.2
Article ID: 251496
Updated On:
Products
Issue/Introduction
DX NetOps Performance Management was recently upgraded from v3.7.9 to v22.2. Following the upgrade, web UI login was successful but when trying to reestablish data sources there was a synchronization failure between the Data Aggregator and NetOps Portal.
Environment
Dx NetOps Performance Management 22.x
Cause
Output from SSOService.log file:
WARN | xxx-29 | 2022-10-04 15:56:20,733 | com.ca.im.portal.api.security.Encryption
| Couldn't complete encryption/decryption due to: Error finalising cipher data: pad block corrupted
WARN | qtp1741959107-29 | 2022-10-04 15:56:20,734 | com.ca.im.portal.common.web.util.AuthInterceptor
| SsoToken is expired or could not be decrypted in request https://<PM_Portal>:8382/sso/webservices/sar/sar/xxx
INFO | xxx-23 | 2022-10-04 15:56:44,754 | org.apache.cxf.wsdl.service.factory.ReflectionServiceFactoryBean
| Creating Service {http://netqos.com/SingleSignOnWS}SingleSignOnWSSoapService from class com.netqos.singlesignonws.SingleSignOnWSSoap
INFO | xxx-28 | 2022-10-04 15:56:48,896 | org.apache.cxf.wsdl.service.factory.ReflectionServiceFactoryBean
| Creating Service {http://netqos.com/SingleSignOnWS}SingleSignOnWSSoapService from class com.netqos.singlesignonws.SingleSignOnWSSoap
INFO | xxx-23 | 2022-10-04 15:56:52,312 | org.apache.cxf.wsdl.service.factory.ReflectionServiceFactoryBean
| Creating Service {http://netqos.com/SingleSignOnWS}SingleSignOnWSSoapService from class com.netqos.singlesignonws.SingleSignOnWSSoap
Resolution
To resolve this, we ran a few commands against MySql:
- select * from em.performance_center_properties where PropName='SsoEncryptionDecryptionKey';
- select * from em.performance_center_properties where PropName='SsoEncryptionAlgorithm';
- select * from netqosportal.performance_center_properties where PropName='SsoEncryptionAlgorithm';
- select * from netqosportal.performance_center_properties where PropName='SsoEncryptionDecryptionKey';
We also checked: http://<da>:8581/rest/dataaggregator to check:
<SsoEncryptionAlgorithm>AES</SsoEncryptionAlgorithm>
<SsoEncryptionDecryptionKey><EncryptionKey></SsoEncryptionDecryptionKey>
... to compare values and make sure everything matched up
The key for the DA and Portal did not match
To resolve we updated the DA to match the Portal with the following command:
curl -v -u admin -X PUT -H 'Content-Type: application/xml' -d'<DataAggregatorInfo version="1.0.0"><SsoEncryptionDecryptionKey><EncryptionKey></SsoEncryptionDecryptionKey></DataAggregatorInfo>' http://<da>:8581/rest/dataaggregator/<DA ID>
Feedback
