Unable to access admin services on the Gateway: com.l7tech.identity.PersistentUser; local class incompatible

Products

• CA API Gateway

Issue/Introduction

Solution

Background

The Layer 7 Gateway requires that the Layer 7 Policy Manager connecting to it be running at equivalent versions. For example: Version 9.4 of the Gateway must run Version 9.4 of the Policy Manager. Versions of the Policy Manager are not backward- or forward-compatible with other versions of the Gateway application. Version-specificity is required because of periodic changes to the API used by the Policy Manager for managing the Gateway. The version numbers of the Policy Manager and Gateway are intrinsically locked in order to ensure that certain changes to the API do not manifest as improper or incorrect configurations being stored on the Gateway. This is done for the safety and integrity of the Gateway application.

Presentation

The following error message will be logged in the Policy Manager log file stored on the workstation from which the Policy Manager is being run:

com.l7tech.console.panels.LogonDialog handleLogonThrowable

WARNING: Could not connect to admin service server

org.springframework.remoting.RemoteAccessException: Could not deserialize result from HTTP invoker remote service [https://securespangateway/ssg/manager/AdminLogin?nested exception is java.io.InvalidClassException: com.l7tech.identity.PersistentUser; local class incompatible: stream classdesc serialVersionUID = 2639191569783954551, local class serialVersionUID = -4811518437943778465

at org.springframework.remoting.httpinvoker.HttpInvokerClientInterceptor.convertHttpInvokerAccessException(HttpInvokerClientInterceptor.java:208)

at org.springframework.remoting.httpinvoker.HttpInvokerClientInterceptor.invoke(HttpInvokerClientInterceptor.java:145)

at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)

at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:202)

at com.sun.proxy.$Proxy0.login(Unknown Source)

at com.l7tech.console.security.SecurityProviderImpl.login(Unknown Source)

at com.l7tech.console.panels.wc.construct(Unknown Source)

at com.l7tech.gui.util.vb.run(Unknown Source)

at java.lang.Thread.run(Unknown Source)

Caused by: java.io.InvalidClassException: com.l7tech.identity.PersistentUser; local class incompatible: stream classdesc serialVersionUID = 2639191569783954551, local class serialVersionUID = -4811518437943778465

Additionally, the following dialog box may appear:

 

Environment

Release:
Component: APIGTW

Resolution

Resolution

As indicated previously, the Policy Manager and Gateway application must be at the same version level. Version 9.4 of the Policy Manager can only access Version 9.4 of the Gateway. There is no backward- or forward-compatibility of different versions of these products and there is no intention to incorporate such functionality. If an organization is required to maintain multiple versions of the Gateway throughout its infrastructure then it is recommended that the browser-based Policy Manager be used instead. This functionality will use the Gateway's local resources to render the correct version of the Policy Manager from within a browser applet. This allows an operator or administrator to access multiple versions of the Gateway without having to download a version-specific client. More information on this feature can be found in the Layer 7 Policy Manager User Manual for the applicable version of the Gateway under the section titled "Running the Browser Client."