Data Aggregator - Unable to Contact in Data Sources - 401 Unauthorized

Products

• DX NetOps
• CA Performance Management - Usage and Administration

Issue/Introduction

The DAs in FT were not active. After resolving this issue, the Data Aggregator test connection fails in Data Sources.

The following error is found in the /opt/CA/PerformanceCenter/PC/PCService.log file:

Received WebServiceException from version check for data source Data Aggregator@da-proxy. CAUSE=org.apache.cxf.transport.http.HTTP Exception: HTTP response '401: Unauthorized' when communicating with http://da-proxy:8581/DataSourceWS. MESSAGE=Could not send Message... Returning DS_COMM_FAILURE result.  

There is no issue opening the following URLs:

• http://DA:8581/rest
• http://DAPROXY:8581/rest

The SsoEncryptionDecryptionKey is correct. Confirmed on the following locations:

mysql> select PropValue,Priority from netqosportal.performance_center_properties where PropName = 'SsoEncryptionDecryptionKey';
mysql> select PropValue,Priority from em.performance_center_properties where PropName = 'SsoEncryptionDecryptionKey';

curl -u admin -v -s -k -X GET http://<Data_Aggregator_IP>:8581/rest/dataaggregator

Search for <SsoEncryptionDecryptionKey><EncryptionKey></SsoEncryptionDecryptionKey>

No errors in the DA karaf.log and AuthenticationLog.log files.

The DA hostnames are correct in the daproxy.toml file on the DAPROXY host.

But unable to login on this URL: http://DAPROXY:8581/odataquery/index.html

Environment

Performance Management 22.2.3

Cause

When opening the http://DAPROXY:8581/odataquery/index.html, the SSO is accepting the credential, but the cookie it generates and passes to DA is not being accepted.

The Linux Time was wrong on the Portal host.

Run: timedatectl

Resolution

After fixing the incorrect time on Portal, the issue was resolved.