Error code 100, while trying to search a DFW rule by IP in Global Managers [GM]

Products

• VMware vDefend Firewall

Issue/Introduction

Unable to search DFW rules by IP criteria, the following error is displayed:

Error: General error has occurred. java.util.concurrent.ExecutionException: com.vmware.nsx.management.common.exceptions.BaseException: The requested object : /global-infra/sites/<site name>/enforcement-points/default could not be found. Object identifiers are case sensitive. (Error code: 100) 

 

/var/log/gmanager/gmanager-ui.log shows the following messages:

[nsx@6876 comp="global-manager" level="INFO" reqId="f330957d-3928-42df-ae8b-af96796576a1" subcomp="global-manager" username="[email protected]"] {"user":"[email protected]","message":"Api Errors->","messageData":{"headers":{"normalizedNames":{},"lazyUpdate":null},"status":500,"statusText":"Internal Server Error","url":"https://xxxxxxx.xxxxxx.com/global-manager/api/v1/ui/firewall/sections?resource_type=SecurityPolicy&page_size=100&cursor=0&sort_by=internal_sequence_number,unique_id&sort_ascending=true","ok":false,"name":"HttpErrorResponse","message":"Http failure response for https://xxxxx.xxxx.comglobal-manager/api/v1/ui/firewall/sections?resource_type=SecurityPolicy&page_size=100&cursor=0&sort_by=internal_sequence_number,unique_id&sort_ascending=true: 500 Internal Server Error","error":{"module_name":"common-services","error_message":"Error: General error has occurred. java.util.concurrent.ExecutionException: org.springframework.security.access.AccessDeniedException: User is not authorized to perform this operation on the application. Please contact the system administrator to get access. (Error code: 100)","details":"java.util.concurrent.ExecutionException: org.springframework.security.access.AccessDeniedException: User is not authorized to perform this operation on the application. Please contact the system administrator to get access.","error_code":100,"error_data":{"status":500}}},"level":"Error","browser":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","time":"Wed Nov 27 2024 13:10:11 GMT-0500 (Eastern Standard Time)","location":"/app/security/dfw/module/categories/infrastructure"}

Environment

NSX Federation Environment

Cause

When UI sends specific site-wise request, the value of enforcement_point_path in the header x-nsx-context-path-query-string needs to site specific, which is NOT the case here.

Resolution

Please upgrade to 4.2.1 or above