AppSync: Příkaz AppSync CLI občas selže
Summary: Příkaz AppSync CLI občas selže
Symptoms
K tomuto problému dochází, když dojde k několika pokusům o současné přihlášení pomocí rozhraní příkazového řádku AppSync. Tento problém je velmi občasný.
Uživatel spouští rozhraní AppSync CLI ke spuštění servisního plánu, vypsání všech kopií a připojení nebo odpojení kopie, ale občas dojde k selhání.
Spuštění servisního plánu selže s chybou:
C:\EMC\AppSync\appsync-cli\appsync-cli.bat -login server=xxxxxx port=8445 user=admin password=xxxxxxxx INFO: Successfully authenticated AppSync! C:\EMC\AppSync\appsync-cli\appsync-cli.bat -runSP app=filesystem service_plan=xxxxxxx ERROR: Failed to run SP!
Seznam všech kopií vytvořených pro servisní plán nebo objekt aplikace selhal se zprávou:
C:\EMC\AppSync\appsync-cli\appsync-cli.bat -login server=xxxxxx port=8445 user=admin password=xxxxxxxx INFO: Successfully authenticated AppSync! C:\EMC\AppSync\appsync-cli\appsync-cli.bat -listCopies app=filesystem service_plan=xxxxxx age=all ERROR: Could not locate copies!
Nástroj AppSync cas.log umístěný ve složce C:\EMC\AppSync\apache-tomcat\bin zobrazuje následující:
2017-01-05 10:20:18,330 INFO [com.emc.archway.cas.auth.CASAuthenticationAdaptor] - CASAuthenticationAdaptor constructor 2017-01-05 10:20:18,330 INFO [com.emc.archway.cas.auth.CASAuthenticationHandler] - CASAuthenticationManager::authenticateUsernamePasswordInternal username = admin 2017-01-05 10:20:18,330 INFO [com.emc.archway.cas.auth.CASAuthenticationAdaptor] - CASAuthenticationAdaptor::authenticate 2017-01-05 10:20:18,330 INFO [com.emc.archway.cas.auth.CASAuthenticationAdaptor] - CASAuthenticationAdaptor::authenticate Using CST... 2017-01-05 10:20:18,330 INFO [com.emc.archway.cas.auth.CSTInterface] - Checking for LDAP authority: PSO-AD-Authority 2017-01-05 10:20:18,345 INFO [com.emc.archway.cas.auth.ArchwayAuthCredentialProvider] - obtainCredentials: authority = PSO-AD-Authority 2017-01-05 10:20:18,345 INFO [com.emc.archway.cas.auth.ArchwayAuthCredentialProvider] - found choice authority = PSO-AD-Authority (PSO-AD-Authority) 2017-01-05 10:20:18,345 INFO [com.emc.archway.cas.auth.CSTInterface] - CST authentication failure com.emc.csp.error.SystemException: Error decrypting data 2017-01-05 10:20:18,345 INFO [com.emc.archway.cas.auth.ArchwayAuthentication] - OS Login disabled 2017-01-05 10:20:18,345 INFO [com.emc.archway.cas.auth.ArchwayAuthCredentialProvider] - obtainCredentials: authority = LocalDirectoryTest 2017-01-05 10:20:18,345 INFO [com.emc.archway.cas.auth.ArchwayAuthCredentialProvider] - found choice authority = LocalDirectoryTest 2017-01-05 10:20:18,345 INFO [com.emc.archway.cas.auth.CASAuthenticationAdaptor] - CASAuthenticationAdaptor constructor 2017-01-05 10:20:18,345 INFO [com.emc.archway.cas.auth.CASAuthenticationHandler] - CASAuthenticationManager::authenticateUsernamePasswordInternal username = admin 2017-01-05 10:20:18,345 INFO [com.emc.archway.cas.auth.CASAuthenticationAdaptor] - CASAuthenticationAdaptor::authenticate 2017-01-05 10:20:18,345 INFO [com.emc.archway.cas.auth.CASAuthenticationAdaptor] - CASAuthenticationAdaptor::authenticate Using CST... 2017-01-05 10:20:18,345 INFO [com.emc.archway.cas.auth.CSTInterface] - Checking for LDAP authority: PSO-AD-Authority 2017-01-05 10:20:18,361 INFO [com.emc.archway.cas.auth.ArchwayAuthCredentialProvider] - obtainCredentials: authority = PSO-AD-Authority 2017-01-05 10:20:18,361 INFO [com.emc.archway.cas.auth.ArchwayAuthCredentialProvider] - found choice authority = PSO-AD-Authority (PSO-AD-Authority) 2017-01-05 10:20:18,361 INFO [com.emc.archway.cas.auth.CSTInterface] - CST authentication failure com.emc.csp.error.SystemException: Error decrypting data 2017-01-05 10:20:18,361 INFO [com.emc.archway.cas.auth.ArchwayAuthentication] - OS Login disabled 2017-01-05 10:20:18,361 INFO [com.emc.archway.cas.auth.ArchwayAuthCredentialProvider] - obtainCredentials: authority = LocalDirectoryTest 2017-01-05 10:20:18,361 INFO [com.emc.archway.cas.auth.ArchwayAuthCredentialProvider] - found choice authority = LocalDirectoryTest 2017-01-05 10:20:18,361 INFO [com.emc.archway.cas.auth.CSTInterface] - Authentication succeeded... 2017-01-05 10:20:18,361 INFO [com.emc.archway.cas.auth.CSTInterface] - Storing roles in lockbox ... 2017-01-05 10:20:18,361 INFO [com.emc.archway.cas.auth.CSTInterface] - Storing userRole1 = DataAdministrator 2017-01-05 10:20:18,361 INFO [com.emc.archway.cas.auth.CSTInterface] - Storing userRole2 = ResourceAdmin 2017-01-05 10:20:18,377 INFO [com.emc.archway.cas.auth.CSTInterface] - Storing userRole3 = SecurityAdmin 2017-01-05 10:20:18,377 INFO [com.emc.archway.cas.auth.CSTInterface] - Storing userRole4 = ServicePlanAdministrator 2017-01-05 10:20:18,377 INFO [com.emc.archway.cas.auth.CSTInterface] - Authentication succeeded... 2017-01-05 10:20:18,377 INFO [com.emc.archway.cas.auth.CSTInterface] - Storing roles in lockbox ... 2017-01-05 10:20:18,377 INFO [com.emc.archway.cas.auth.CSTInterface] - Total roles = 4 2017-01-05 10:20:18,377 INFO [com.emc.archway.cas.auth.ArchwayAuthentication] - Authentication succeeded - token 2017-01-05 10:20:18,377 INFO [com.emc.archway.cas.attributes.rolePersonAttributeDao] - getPerson called for admin 2017-01-05 10:20:18,377 INFO [com.emc.archway.cas.attributes.rolePersonAttributeDao] - retrieved cstIF ....com.emc.archway.cas.auth.CSTInterface@16ea70b 2017-01-05 10:20:18,377 INFO [com.emc.archway.cas.auth.CSTInterface] - Accesing roles in lockbox ... 2017-01-05 10:20:18,377 INFO [com.emc.archway.cas.auth.CSTInterface] - Accesing roles in lockbox ... 2017-01-05 10:20:18,377 INFO [com.emc.archway.cas.auth.CSTInterface] - CSTInterface authenticat - storing roles - exception The Lockbox item already exists 2017-01-05 10:20:18,377 INFO [com.emc.archway.cas.auth.CSTInterface] - Total roles found = 4 2017-01-05 10:20:18,377 INFO [com.emc.archway.cas.auth.CSTInterface] - CSTInterface authenticat - storing roles - exception The Lockbox item already exists 2017-01-05 10:20:18,392 INFO [com.emc.archway.cas.auth.CSTInterface] - Accessed role DataAdministrator 2017-01-05 10:20:18,392 INFO [com.emc.archway.cas.auth.CSTInterface] - CSTInterface authenticat - storing roles - exception The Lockbox item already exists 2017-01-05 10:20:18,392 INFO [com.emc.archway.cas.auth.CSTInterface] - Accessed role ResourceAdmin 2017-01-05 10:20:18,392 INFO [com.emc.archway.cas.auth.CSTInterface] - CSTInterface authenticat - storing roles - exception The Lockbox item already exists 2017-01-05 10:20:18,392 INFO [com.emc.archway.cas.auth.CSTInterface] - Accessed role SecurityAdmin 2017-01-05 10:20:18,392 INFO [com.emc.archway.cas.auth.CSTInterface] - Total roles = 4 2017-01-05 10:20:18,392 INFO [com.emc.archway.cas.auth.ArchwayAuthentication] - Authentication succeeded - token 2017-01-05 10:20:18,392 INFO [com.emc.archway.cas.attributes.rolePersonAttributeDao] - getPerson called for admin 2017-01-05 10:20:18,392 INFO [com.emc.archway.cas.attributes.rolePersonAttributeDao] - retrieved cstIF ....com.emc.archway.cas.auth.CSTInterface@16ea70b 2017-01-05 10:20:18,392 INFO [com.emc.archway.cas.auth.CSTInterface] - Accesing roles in lockbox ... 2017-01-05 10:20:18,392 INFO [com.emc.archway.cas.auth.CSTInterface] - Accesing roles in lockbox ... 2017-01-05 10:20:18,392 INFO [com.emc.archway.cas.auth.CSTInterface] - Total roles found = 4 2017-01-05 10:20:18,408 INFO [com.emc.archway.cas.auth.CSTInterface] - Accessed role ServicePlanAdministrator 2017-01-05 10:20:18,408 INFO [com.emc.archway.cas.auth.CSTInterface] - Accessed role exception 2017-01-05 10:20:18,408 ERROR [com.emc.archway.cas.auth.CSTInterface] - The item name does not exist in the Lockbox com.emc.csp.error.ObjectNotFoundException: The item name does not exist in the Lockbox at com.emc.cst.cstBridge.cstBridgeJNI.LockboxService_retrieveItemAsText(Native Method) at com.emc.cst.cstBridge.LockboxService.retrieveItemAsText(LockboxService.java:153) at com.emc.csp.services.lockbox.LockboxService.retrieveItemAsText(LockboxService.java:509)
Cause
Server AppSync je navržený tak, aby shromažďoval seznam rolí přiřazených uživateli po ověření.
Server AppSync shromáždí informace o roli po ověření a zapíše je do bezpečnostního modulu (podobá se souboru), aby je později načetl.
Jakmile server AppSync načte uložené informace, odstraní se. Pokud by však bylo vyzkoušeno více přihlášení současně, jedna relace by informace odstranila dříve, než by je načetla jiná relace.
Zjednodušeně řečeno, jedná se o problém souběžnosti kvůli více přihlášením (více než jednomu) současně.
Resolution
Řešení:
Řešení tohoto problému existuje, ale vyžaduje pomoc zákaznické podpory společnosti Dell Technologies.
Obraťte se na zákaznickou podporu společnosti Dell Technologies a opravu hotfix naleznete v tomto článku.