NFA 23.3.3+ 500 errors after trying to login
search cancel

NFA 23.3.3+ 500 errors after trying to login

book

Article ID: 278283

calendar_today

Updated On:

Products

DX NetOps CA Network Flow Analysis (NetQos / NFA)

Issue/Introduction

After upgrading to NFA 23.3.3 - 23.3.6 you may run into an issue to where if you try to enter your LDAP / AD credentials to the NFA SSO page that it returns a 500 error. 

Environment

NFA 23.3.3+

Cause

This is a known issue and bug for these versions of NFA:

NFA 23.3.3 / 23.3.4 Known Issues

 

Resolution

We need to get the encrypted LDAP Connection Password value from the NetOps Portal NetQoS Portal Database and manually insert it into the NFA database.

  1. First start on the NetOps Portal Server and run the below query with the proper credentials. This will return the <encryptedvalue>.

    mysql -P3306 -D netqosportal -uroot -p -t -e "select PropValue from performance_center_properties where propname='LDAPConnectionPassword' and priority = (select max(priority) from performance_center_properties where propname='LDAPConnectionPassword' and deleted='N');"

  2. Next run this command from the NFA Console and observe the returned data:

    mysql -P3308 -D reporter -uroot -proot@123 -t -e "select * from performance_center_properties where propname='LdapConnectionPassword' and priority=2;"

  3. If the above command in step 2 returns a value, run the below command and substitute the <encryptedvalue> with the value returned in step 1:

    mysql -P3308 -D reporter -uroot -proot@123 -t -e "update performance_center_properties set propvalue='<encryptedvalue>',deleted='N' where propname='LdapConnectionPassword' and priority > 1;"

  4. If no value was returned, then run the below query and substitute the <encryptedvalue> with the value returned from step 1:

    mysql -P3308 -D reporter -uroot -proot@123  -t -e "INSERT INTO performance_center_properties ( PropName, Priority, PropValue, Deleted, UpdatedOn ) VALUES( 'LdapConnectionPassword', '2', '<encryptedvalue>', 'N', unix_timestamp() );"

  5. Now you can restart the NFA Consoles "Performance Center SSO Service" (it may be named CA Performance Center SSO Service on your server).

  6. You should now be able to log in.