Connectrix: RAS-1004 Software 'verify' Error Detected on 9.1.x Switch
Summary: RAS-1004 Software 'verify' error detected on 9.1.x switch in environments using Fully Qualified Domain Name (FQDN).
Symptoms
Brocade switch running on FOS 9.1.x reports RAS-1004 messages which can cause the switch to full panic.
[RAS-1004], 339418/36028, SLOT 2 | FFDC | FID 128, INFO, SwitchA, Software 'verify' error detected., assert.c, line: 352, comp:weblinker, ltime:2023/09/27-14:34:09:650377 [RAS-1004], 339473/36053, SLOT 2 | FFDC | FID 128, INFO, SwitchA, Software 'verify' error detected., assert.c, line: 352, comp:weblinker, ltime:2023/09/27-14:39:09:440280 [RAS-1004], 339475/36054, SLOT 2 | FFDC | FID 128, INFO, SwitchA, Software 'verify' error detected., assert.c, line: 352, comp:weblinker, ltime:2023/09/27-14:39:09:552376 [RAS-1004], 339477/36055, SLOT 2 | FFDC | FID 128, INFO, SwitchA, Software 'verify' error detected., assert.c, line: 352, comp:weblinker, ltime:2023/09/27-14:39:09:657673 [NS-5002], 2158422/0, FID 128, WARNING, SwitchA, NS lib arg decode info 0x2, 0x0, 0, 20, 8, public.c, line: 154, comp:weblinker, ltime:2023/05/12-04:18:22:053232 [SAPI-5004], 2158423/0, FID 128, INFO, SwitchA,, Not enough resource: shmat (1) failed (12), sapi.c, line: 337, comp:weblinker, ltime:2023/05/12-04:21:08:263064 [NS-5001], 2158424/0, FID 128, WARNING, SwitchA,, NS lib IPC Argument decode failed rcv_size 28, rc -22, resp_args 0x17570ef8, err_num -4, public.c, line: 149, comp:weblinker, ltime:2023/05/12-04:21:08:444398
Cause
The VERIFY posted prior to weblinker termination are the result of shared memory operation failures with weblinker.
If the user has a Lightweight Directory Access Protocol (LDAP) server configured in FQDN format, the memory leak is seen during HTTP authentication with the remote authentication server in FQDN format.
Resolution
Workaround:
The workaround is to use an IP address instead of FQDN. This can be reconfigured with the aaaconfig command.
LDAP CONFIGURATIONS =================== Position : 1 Server : example.broadcom.domain <-- amend to IPaddress Port : 389 Domain : broadcom.domain Timeout(s) : 3 LDAP TLS Mode : STARTTLS
Resolution:
This issue is expected to be addressed in a future code, the best solution now is to reconfigure using an IP address instead of the FQDN. If the VERIFY continues after reconfiguration, it may be that a memory leak has occurred, and a hareboot or hafailover should be done to release the stuck memory.