Error: HTTP 401 Unauthorized in OperationalReportsServer.log after upgrading SRM-rib to 25.4.8

Products

• Network Observability
• CA Performance Management
• Spectrum

Issue/Introduction

After upgrading DX NetOps to version 25.4.8 or higher, the Operational Reports Server (srm-rib) may fail to register with the Portal. The OperationalReportsServer.log shows com.broadcom.netops.srm.exceptions.UnauthorizedException: HTTP 401 Unauthorized.

Environment

• Product: DX NetOps Spectrum / SRM-rib
• Version: 25.4.8 and higher
• Component: Operational Reports Server (srm-rib)

Cause

DX NetOps 25.4.8 introduces an allowlist feature for the Operational Reports Server to improve security. It's touched on here in the Enhancement to Operation Reports section about new features.

The upgrade process auto-populates this allowlist, but if the host identifier (short name, FQDN, or IP) used in the Spectrum Data Source configuration in the NetOps Portal does not match an entry in the srm-rib allowlist, the connection is rejected with a 401 Unauthorized error.

Resolution

Update the allowlist configuration to include the host identifier used by the NetOps Portal.

1. Log in to the SRM-rib host.
2. Navigate to the following directory: cd /opt/SRM/srm-rib/webapps/srm-rib/WEB-INF/
3. Open the application.properties file for editing.
4. Locate the allowlist property.
5. Add the specific host identifier (e.g., short name) used in the Spectrum Data Source configuration within the NetOps Portal.
6. Save the changes to the file.
7. Restart the service: systemctl restart srm-rib
8. In the NetOps Portal, navigate to Administration > Data Sources, select the Spectrum Data Source, and click Test to verify connectivity.

Additional Information

• Ensure all identifiers used to access the OneClick/SRM host (IP, Short Name, and FQDN) are included in the allowlist for maximum compatibility.
• If you need to direct a customer specifically to a support phone number, see Contact Support. Scroll to the bottom of the page and click on your respective region.
• Subscribe to this article to receive updates on this feature: How to subscribe to a Knowledge Base Article.