DCDebug page is redirecting to SSO HTTP even if the Netops Performance Management Data Aggregator is using HTTPS

Products

• CA Performance Management
• Network Observability

Issue/Introduction

Trying to open the DCDebug page from this URL:

https://<DA_host>:8582/dcdebug/searchdebug.html

is redirected to the SSO service page on the NetOps Portal - e.g:

https://<DA_host>:8382/sso/sign-in.jsp?SsoProductCode=da&SsoRedirectUrl=http%3A%2F%2Fxxxxx.xxxx.xxx%3A8582%2Fdcdebug%2Fsearchdebug.html

But after successful authentication it is redirected to the following page (non HTTPS):

    http://<DA_host>:8582/dcdebug/searchdebug.html

This URL does not work and you need to manually fix it by replacing "http" with "https" to be able to access the page.

Environment

DX NetOps CAPM Release : 22.2.x or later

Cause

The 'ConsoleProtocol' value for the Data Aggregator data source is still set to 'HTTP' in the data_sources2 table of the NetOps Portal database.

The 'SsoRedirectUrl' is built from the data_sources2 table entry on NetOps Portal.  For some reason the 'ConsoleProtocol' value for the Data Aggregator data source didn't get update to HTTPS.

We can verify this by looking at the database/data_sources2.txt file on NetOps Portal.

See the 'ConsoleProtocol' value for the Data Aggregator SourceID - for example: 

+----------+------------+--------------------------------------+-------------------------------------+-----------------------+-------------+-----------------+-----------------------+------+----------+----------+----------+----------------------+------------------+------------------+------------+---------------+------------+------
| SourceID | SourceType | SourceGUID                           | ConsoleName                         | ConsoleHost           | ConsolePort | ConsoleProtocol | Host                  | Port | Protocol | AuthType | Username | Password             | Version          | MinVersion       | UpdatedOn  | SyncRequestOn | PolledOn   | PollInterval | Priority | Mode | State | Deleted | Enabled | Removable | PushDevicesFromOtherSources | SyncRetiredItems | SyncDeviceLifeCycleStates | ContributeInventoryToDataAggregator | TenantID |
+----------+------------+--------------------------------------+-------------------------------------+-----------------------+-------------+-----------------+-----------------------+------+----------+----------+----------+----------------------+------------------+------------------+------------+---------------+------------+------

|        3 |     262144 | 33db2eb92d0a4eaf840448507657af8f     | Data [e-mail] | test.xxxx.xxx   |        8582 | http            | test.xxxx.xxx  | 8582 | https    |        0 |          |                      |  844454995821240 |  281474976710656 | 1595399485 |          NULL | 1595957862 |          300 |        0 |    6 |     1 | N       | Y       | Y         |                           1 |                0 |                         0 |                                   1 |     NULL |

And run the following REST (GET) request to verify the value on the Data Aggregator:

https://<DA_host>:8582/rest/dataaggregator

Check the value:

<DataAggregatorInfoList>
    <DataAggregatorInfo version="1.0.0">
        <ID>58206</ID>
        <NpcSyncChunkSize>5000</NpcSyncChunkSize>
        <DAConsoleProtocol>http</DAConsoleProtocol>

Resolution

Follow these steps to update the 'ConsoleProtocol' value to HTTPS:

1. Open a MySql prompt on the NetOps Portal. Go to (default path) /opt/CA/MySql/bin.
   
   
2. Run this command and enter the password when prompted:
   
   ./mysql -uroot -p netqosportal


3. At the MySQL prompt, run the following:
   
   update data_sources2 set ConsoleProtocol='https',UpdatedOn=UNIX_TIMESTAMP() where sourceid=<DA_sourceID>;

Then do a normal Data Aggregator synchronization:
 go to Administration -> Data Sources -> Data Sources, select the Data Aggregator Data Source, and select the Resync button (not the Full checkbox).

There is no no need to restart the NetOps Portal processes.

When done, verify that the 'ConsoleProtocol' settings are updated in datasources2.txt and from https://DA:8582/rest/dataaggregator