Avamar: O carregamento da página da Web do Avamar Client Manager (/aam) trava no login

Summary: Avamar: O carregamento da página da Web do Avamar Client Manager (/aam) trava no login. O log-in pode nunca terminar ou levar dezenas de minutos para ser concluído.

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.

Symptoms

Avamar: O carregamento da página da Web do Avamar Client Manager (/aam) trava no login.
O log-in pode nunca terminar ou levar dezenas de minutos para ser concluído.
A página pode não ter timeout, mas deixará você esperando por um longo tempo.

Cause

A causa desse problema pode ser dividida em duas:
1. Uma grande quantidade de servidores remotos adicionados a um único Avamar Client Manager, fazendo com que a carga no servidor da Web tomcat aumente.

Podemos ver uma grande quantidade de servidores remotos adicionados a este Avamar a partir da tabela tomcat database axion_server
psql -p 5556 emdb

select id, lastcontact, axionsystemname from axion_server;

      id       |     lastcontact     |       axionsystemname        
---------------+---------------------+------------------------------
 1629287858128 | 1969-12-31 19:00:00 | AVAMAR10.EX.COM              
 1629287980100 | 1969-12-31 19:00:00 | AVAMAR20.EX.COM
 1629287647775 | 1969-12-31 19:00:00 | AVAMAR30.EX.COM     
 1629287949115 | 1969-12-31 19:00:00 | AVAMAR19.EX.COM  
 1660563561277 | 1969-12-31 19:00:00 | AVAMAR40.EX.COM    
 1629287597140 | 1969-12-31 19:00:00 | AVAMAR50.EX.COM                                             
 1629287775889 | 1969-12-31 19:00:00 | AVAMAR60.EX.COM              
 1629287812033 | 1969-12-31 19:00:00 | AVAMAR70.EX.COM              
 1629288006387 | 1969-12-31 19:00:00 | AVAMAR80.EX.COM              
 1629287515457 | 1969-12-31 19:00:00 | AVAMAR90.EX.COM       
             1 | 1969-12-31 19:00:00 | AVAMAR100.EX.COM              
 1629287732083 | 1969-12-31 19:00:00 | AVAMAR200.EX.COM  
 1629288102775 | 1969-12-31 19:00:00 | AVAMAR300.EX.COM              
 1662042283060 | 1969-12-31 19:00:00 | AVAMAR400.EX.COM              
 1651676768316 | 1969-12-31 19:00:00 | AVAMAR500.EX.COM              
(15 rows)             


2. Um servidor remoto com problema de senha do MCUser

Na saída da tabela acima, o Avamar Server AVAMAR300.EX.COM teve um problema com a senha do MCUser.

No AVAMAR300.EX.COM, o serviço MCS estava em execução e um teste de log-in com MCUser passou bem na GUI, bem como na linha de comando.
Exemplo:
avmgr logn --id=MCUser --ap=MyMCUserPass
1  Request succeeded
7161  privilege level  (enabled,create,read,backup,access,move,delete,maint,fullmanage,noticketrequired)
2  block type  (directory)

Podemos ver que, embora isso pareça normal, no servidor remoto AVAMAR300.EX.COM o registro mcserver.out mostra que há um problema claro com a senha do MCUser.
vi /usr/local/avamar/var/mc/server_data/prefs/mcserver.out

=== BEGIN === check.mcs (prestart)
check.mcs                        passed
=== PASS === check.mcs PASSED OVERALL (prestart)
Starting Administrator Server at Tue Aug 30 15:04:25 EDT 2022 ...
Upgrade MCS Preference: processing time = 325ms
Upgrade MCDB: processing time = 262ms
Check node list: processing time = 1527ms
Prepare MC SSL Properties: processing time = 2ms
Init node: processing time = 420ms
Install service: com.avamar.mc.prefs.MCSPreferencesService, processing time = 12ms
Install service: com.avamar.mc.message.MessageEventService, processing time = 15ms
Event Size: 18548
Install service: com.avamar.mc.event.EventService, processing time = 11388ms
Install service: com.avamar.mc.jms.push.JmsPushService, processing time = 40ms
Install service: com.avamar.mc.dpn.DPNProxyService, processing time = 2031ms
Install service: com.avamar.mc.datatap.MCDataTapService, processing time = 22ms
Install service: com.avamar.mc.cm.ClusterManagerService, processing time = 12ms
[output shortened...]
Install service: com.avamar.mc.ws.MCJettyService, processing time = 1272ms
Install service: com.avamar.mc.repl.ReplicationService, processing time = 85ms
Install service: com.avamar.mc.st.SessionTicketService, processing time = 1434ms
Install service: com.avamar.mc.ras.McEbmsService, processing time = 2051ms
Install service: com.avamar.mc.migration.MigrationService, processing time = 60ms
Start service container: processing time = 51304ms
log4j:WARN No appenders could be found for logger (org.apache.axiom.util.stax.dialect.StAXDialectDetector).
log4j:WARN Please initialize the log4j system properly.
Init crontab: processing time = 3800ms
Update axion system table: processing time = 3ms
Update connect emc email subject: processing time = 70ms
Administrator Server started at Tue Aug 30 15:05:26 EDT 2022.
Update connect emc email subject: processing time = 70ms
Administrator Server started at Tue Aug 30 15:05:26 EDT 2022.
MCS Preference has been decrypted failed: com/avamar/mc/dpn/users/MCUSERAP
MCS Preference has been decrypted failed: com/avamar/mc/dpn/users/MCUSERAP
MCS Preference has been decrypted failed: com/avamar/mc/dpn/users/MCUSERAP
MCS Preference has been decrypted failed: com/avamar/mc/dpn/users/MCUSERAP
MCS Preference has been decrypted failed: com/avamar/mc/dpn/users/MCUSERAP
ERROR: Invalid AES key length
MCS Preference has been decrypted failed: com/avamar/mc/dpn/users/MCUSERAP
MCS Preference has been decrypted failed: com/avamar/mc/dpn/users/MCUSERAP
MCS Preference has been decrypted failed: com/avamar/mc/dpn/users/MCUSERAP

Resolution

Etapas

1.
Remova TODOS os servidores de axion ALÉM do servidor de origem (o servidor ao qual você está adicionando outros servidores). A coluna ID do servidor de origem que você não tocará tem um ID = 1.

Conteúdo original da tabela da seção de causa
psql -p 5556 emdb

select id, lastcontact, axionsystemname from axion_server;

      id       |     lastcontact     |       axionsystemname        
---------------+---------------------+------------------------------
 1629287858128 | 1969-12-31 19:00:00 | AVAMAR10.EX.COM              
 1629287980100 | 1969-12-31 19:00:00 | AVAMAR20.EX.COM
 1629287647775 | 1969-12-31 19:00:00 | AVAMAR30.EX.COM     
 1629287949115 | 1969-12-31 19:00:00 | AVAMAR19.EX.COM  
 1660563561277 | 1969-12-31 19:00:00 | AVAMAR40.EX.COM    
 1629287597140 | 1969-12-31 19:00:00 | AVAMAR50.EX.COM                                         
 1629287775889 | 1969-12-31 19:00:00 | AVAMAR60.EX.COM              
 1629287812033 | 1969-12-31 19:00:00 | AVAMAR70.EX.COM              
 1629288006387 | 1969-12-31 19:00:00 | AVAMAR80.EX.COM              
 1629287515457 | 1969-12-31 19:00:00 | AVAMAR90.EX.COM       
             1 | 1969-12-31 19:00:00 | AVAMAR100.EX.COM              
 1629287732083 | 1969-12-31 19:00:00 | AVAMAR200.EX.COM  
 1629288102775 | 1969-12-31 19:00:00 | AVAMAR300.EX.COM              
 1662042283060 | 1969-12-31 19:00:00 | AVAMAR400.EX.COM              
 1651676768316 | 1969-12-31 19:00:00 | AVAMAR500.EX.COM              
(15 rows)          

Execute o comando delete para excluir cada servidor, exceto o id=1 server (AVAMAR100.EX.COM)

// connect to emdb
psql -p 5556 emdb

// delete each server besides source server
delete from axion_server where id!='1';


2. Confirme se todos os outros servidores remotos foram excluídos.

select id, lastcontact, axionsystemname from axion_server;

      id       |     lastcontact     |       axionsystemname        
---------------+---------------------+------------------------------
             1 | 1969-12-31 19:00:00 | AVAMAR100.EX.COM              


3. Saia da emdb usando a sintaxe postgresql.

\q

 

4. Reinicie o tomcat para que possamos identificar quando o servlet é reiniciado e obter os registros mais recentes para o problema, como usuário root
emwebapp.sh --restart

5. Faça log-in na página da Web do Client Manager (/aam) novamente e tente adicionar servidores remotos novamente por hostname/credencial MCUser. Neste exemplo, tentamos adicionar um erro AVAMAR300.EX.COM erro. Podemos ver no ACMTrace.log depois que o servidor tomcat foi reiniciado, os seguintes registros para tentar adicionar AVAMAR300. EX.COM.
vi /usr/local/avamar-tomcat/logs/ACMTrace.log

// latest logs post tomcat restart start with "Servlet Context Launched."
2022-09-21 16:03:57,802 INFO  [localhost-startStop-1]-listeners.ContextLauncher: Servlet Context Launched.
2022-09-21 16:04:00,623 INFO  [localhost-startStop-1]-sdk.ServiceConnection: Wait for task: STORAGE_INFO: Getting storage information
2022-09-21 16:04:01,625 INFO  [localhost-startStop-1]-sdk.ServiceConnection: Task done: STORAGE_INFO
2022-09-21 16:04:01,660 INFO  [localhost-startStop-1]-utils.ACMProperties: Cas Server Url Ssl Prefix: https://AVAMAR300.EX.COM
2022-09-21 16:04:06,669 INFO  [ajp-nio-0:0:0:0:0:0:0:1-8509-exec-1]-filters.ImageLocaleFilter: Locale in China: false
2022-09-21 16:04:07,926 INFO  [ajp-nio-0:0:0:0:0:0:0:1-8509-exec-8]-filters.ImageLocaleFilter: Locale in China: false
2022-09-21 16:04:10,172 WARN  [ajp-nio-0:0:0:0:0:0:0:1-8509-exec-1]-helper.LDAPManagerUserAuth: LDAP property 'ldap.url.*' is not defined
2022-09-21 16:04:10,176 WARN  [ajp-nio-0:0:0:0:0:0:0:1-8509-exec-1]-helper.LDAPManagerUserAuth: LDAP property 'ldap.url.*' is not defined
2022-09-21 16:04:10,178 WARN  [ajp-nio-0:0:0:0:0:0:0:1-8509-exec-1]-helper.LDAPManagerUserAuth: LDAP property 'ldap.url.*' is not defined
2022-09-21 16:04:10,179 WARN  [ajp-nio-0:0:0:0:0:0:0:1-8509-exec-1]-helper.LDAPManagerUserAuth: LDAP property 'ldap.url.*' is not defined
2022-09-21 16:04:10,180 INFO  [ajp-nio-0:0:0:0:0:0:0:1-8509-exec-1]-auth.AvamarAuthConfigurationUserAuth: Authentication Type: Web Restore Avamar
2022-09-21 16:04:11,037 WARN  [ajp-nio-0:0:0:0:0:0:0:1-8509-exec-1]-cli.MCInternalCLIUserAuth: MCCLI exec catch Execption: Unable to initialize MCCLI
2022-09-21 16:04:11,043 INFO  [ajp-nio-0:0:0:0:0:0:0:1-8509-exec-1]-cli.MCInternalCLIUserAuth: authenticate result out: 0,23000,CLI command completed successfully.

2022-09-21 16:04:11,310 WARN  [ajp-nio-0:0:0:0:0:0:0:1-8509-exec-1]-cli.MCInternalCLIUserAuth: MCCLI exec catch Execption: Unable to initialize MCCLI
2022-09-21 16:04:11,312 INFO  [ajp-nio-0:0:0:0:0:0:0:1-8509-exec-1]-cli.MCInternalCLIUserAuth: get privilege command output: <CLIOutput>
  <Results>
    <ReturnCode>0</ReturnCode>
    <EventCode>23000</EventCode>
    <EventSummary>CLI command completed successfully.</EventSummary>
  </Results>
  <Data>
    <Row>
      <Name>erx1mxe</Name>
      <Role>Administrator</Role>
      <Domain>/</Domain>
      <Authenticator>Axion Authentication System</Authenticator>
      <Domain>/</Domain>
      <Authenticator>Axion Authentication System</Authenticator>
    </Row>
  </Data>
</CLIOutput>

2022-09-21 16:04:11,692 INFO  [ajp-nio-0:0:0:0:0:0:0:1-8509-exec-2]-sdk.ServiceConnection: Wait for task: STORAGE_INFO: Getting storage information
2022-09-21 16:04:12,693 INFO  [ajp-nio-0:0:0:0:0:0:0:1-8509-exec-2]-sdk.ServiceConnection: Task done: STORAGE_INFO
2022-09-21 16:04:32,272 WARN  [ajp-nio-0:0:0:0:0:0:0:1-8509-exec-1]-helper.LDAPManagerUserAuth: LDAP property 'ldap.url.*' is not defined
2022-09-21 16:04:32,273 WARN  [ajp-nio-0:0:0:0:0:0:0:1-8509-exec-1]-helper.LDAPManagerUserAuth: LDAP property 'ldap.url.*' is not defined
2022-09-21 16:04:32,273 WARN  [ajp-nio-0:0:0:0:0:0:0:1-8509-exec-1]-helper.LDAPManagerUserAuth: LDAP property 'ldap.url.*' is not defined
2022-09-21 16:04:32,273 WARN  [ajp-nio-0:0:0:0:0:0:0:1-8509-exec-1]-helper.LDAPManagerUserAuth: LDAP property 'ldap.url.*' is not defined
2022-09-21 16:04:32,274 INFO  [ajp-nio-0:0:0:0:0:0:0:1-8509-exec-1]-auth.AvamarAuthConfigurationUserAuth: Authentication Type: Web Restore Avamar
2022-09-21 16:04:32,528 WARN  [ajp-nio-0:0:0:0:0:0:0:1-8509-exec-1]-cli.MCInternalCLIUserAuth: MCCLI exec catch Execption: Unable to initialize MCCLI
2022-09-21 16:04:32,529 INFO  [ajp-nio-0:0:0:0:0:0:0:1-8509-exec-1]-cli.MCInternalCLIUserAuth: authenticate result out: 0,23000,CLI command completed successfully.

2022-09-21 16:04:32,791 WARN  [ajp-nio-0:0:0:0:0:0:0:1-8509-exec-1]-cli.MCInternalCLIUserAuth: MCCLI exec catch Execption: Unable to initialize MCCLI
2022-09-21 16:04:32,792 INFO  [ajp-nio-0:0:0:0:0:0:0:1-8509-exec-1]-cli.MCInternalCLIUserAuth: get privilege command output: <CLIOutput>
  <Results>
    <ReturnCode>0</ReturnCode>
    <EventCode>23000</EventCode>
    <EventSummary>CLI command completed successfully.</EventSummary>
  </Results>
  <Data>
    <Row>
      <Name>root</Name>
      <Role>Administrator</Role>
      <Domain>/</Domain>
      <Authenticator>Axion Authentication System</Authenticator>
    </Row>
  </Data>
</CLIOutput>

2022-09-21 16:04:33,073 INFO  [ajp-nio-0:0:0:0:0:0:0:1-8509-exec-2]-sdk.ServiceConnection: Wait for task: STORAGE_INFO: Getting storage information
2022-09-21 16:04:34,074 INFO  [ajp-nio-0:0:0:0:0:0:0:1-8509-exec-2]-sdk.ServiceConnection: Task done: STORAGE_INFO

6. Agora que sabemos que há um problema com a credencial MCUser no AVAMAR300.EX.COM, consulte a seção Causa nº 2 para obter detalhes. Como mencionado anteriormente, o MCUser não conseguiu ser descriptografado, portanto, quando o Avamar de origem tenta registrar o Avamar remoto usando sua credencial MCUser, ele falha. 
Devemos executar change-passwords como usuário root para udpate MCUser no AVAMAR300. EX.COM.
A senha não precisa ser alterada do que é atualmente. A mesma senha pode ser inserida no script, mas o script deve ser executado para atualizar a senha em todos os arquivos de configuração com a chave de criptografia/descriptografia adequada aplicada.
change-passwords

7. Depois de atualizar a senha do MCUser no servidor remoto, atualize a página da Web do Client Manager (/aam) do servidor de origem (AVAMAR100.EX.COM). Em seguida, tente adicionar novamente o AVAMAR300.EX.COM ao servidor de origem.

Affected Products

Avamar
Article Properties
Article Number: 000203605
Article Type: Solution
Last Modified: 08 يناير 2026
Version:  9
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.