Avamar: La página web de carga de Avamar Client Manager se bloquea durante el inicio de sesión
Resumen: La carga de la página web de Avamar Client Manager (/aam) se bloquea durante el inicio de sesión. Es posible que el inicio de sesión nunca finalice o tarde decenas de minutos en completarse. ...
Síntomas
La página web de carga de Avamar Client Manager (/aam) se bloquea durante el inicio de sesión.
Es posible que el inicio de sesión nunca finalice o tarde horas en completarse.
Es posible que la página no agote el tiempo de espera, pero lo dejará esperando mucho tiempo.
Causa
La causa de este problema puede tener dos secciones:
- Una gran cantidad de servidores remotos agregados a un solo Avamar Client Manager está causando el aumento de la carga en el servidor web Tomcat.
Como se muestra a continuación, se agrega un gran número de servidores remotos a este Avamar desde la base de datos Tomcatxion_server Tabla
psql -p 5556 emdb select id, lastcontact, axionsystemname from axion_server; id | lastcontact | axionsystemname ---------------+---------------------+------------------------------ 1629287858128 | 1969-12-31 19:00:00 | AVAMAR10.EX.COM 1629287980100 | 1969-12-31 19:00:00 | AVAMAR20.EX.COM 1629287647775 | 1969-12-31 19:00:00 | AVAMAR30.EX.COM 1629287949115 | 1969-12-31 19:00:00 | AVAMAR19.EX.COM 1660563561277 | 1969-12-31 19:00:00 | AVAMAR40.EX.COM 1629287597140 | 1969-12-31 19:00:00 | AVAMAR50.EX.COM 1629287775889 | 1969-12-31 19:00:00 | AVAMAR60.EX.COM 1629287812033 | 1969-12-31 19:00:00 | AVAMAR70.EX.COM 1629288006387 | 1969-12-31 19:00:00 | AVAMAR80.EX.COM 1629287515457 | 1969-12-31 19:00:00 | AVAMAR90.EX.COM 1 | 1969-12-31 19:00:00 | AVAMAR100.EX.COM 1629287732083 | 1969-12-31 19:00:00 | AVAMAR200.EX.COM 1629288102775 | 1969-12-31 19:00:00 | AVAMAR300.EX.COM 1662042283060 | 1969-12-31 19:00:00 | AVAMAR400.EX.COM 1651676768316 | 1969-12-31 19:00:00 | AVAMAR500.EX.COM (15 rows)
- Un servidor remoto con
MCUserLa contraseña tiene un problema. En el resultado de la tabla anterior, Avamar ServerAVAMAR300.EX.COMSe produjo un problema con el archivoMCUsercontraseña.
En elAVAMAR300.EX.COM, el servicio MCS estaba en ejecución y se realizó una prueba de inicio de sesión conMCUseren la interfaz de usuario, así como en la línea de comandos.
Ejemplo:
avmgr logn --id=MCUser --ap=MyMCUserPass 1 Request succeeded 7161 privilege level (enabled,create,read,backup,access,move,delete,maint,fullmanage,noticketrequired) 2 block type (directory)
Aunque esto se ve bien, en el servidor remoto AVAMAR300.EX.COM the mcserver.out El registro muestra que hay un problema claro con el MCUser contraseña:
vi /usr/local/avamar/var/mc/server_data/prefs/mcserver.out === BEGIN === check.mcs (prestart) check.mcs passed === PASS === check.mcs PASSED OVERALL (prestart) Starting Administrator Server at Tue Aug 30 15:04:25 EDT 2022 ... Upgrade MCS Preference: processing time = 325ms Upgrade MCDB: processing time = 262ms Check node list: processing time = 1527ms Prepare MC SSL Properties: processing time = 2ms Init node: processing time = 420ms Install service: com.avamar.mc.prefs.MCSPreferencesService, processing time = 12ms Install service: com.avamar.mc.message.MessageEventService, processing time = 15ms Event Size: 18548 Install service: com.avamar.mc.event.EventService, processing time = 11388ms Install service: com.avamar.mc.jms.push.JmsPushService, processing time = 40ms Install service: com.avamar.mc.dpn.DPNProxyService, processing time = 2031ms Install service: com.avamar.mc.datatap.MCDataTapService, processing time = 22ms Install service: com.avamar.mc.cm.ClusterManagerService, processing time = 12ms [output shortened...] Install service: com.avamar.mc.ws.MCJettyService, processing time = 1272ms Install service: com.avamar.mc.repl.ReplicationService, processing time = 85ms Install service: com.avamar.mc.st.SessionTicketService, processing time = 1434ms Install service: com.avamar.mc.ras.McEbmsService, processing time = 2051ms Install service: com.avamar.mc.migration.MigrationService, processing time = 60ms Start service container: processing time = 51304ms log4j:WARN No appenders could be found for logger (org.apache.axiom.util.stax.dialect.StAXDialectDetector). log4j:WARN Please initialize the log4j system properly. Init crontab: processing time = 3800ms Update axion system table: processing time = 3ms Update connect emc email subject: processing time = 70ms Administrator Server started at Tue Aug 30 15:05:26 EDT 2022. Update connect emc email subject: processing time = 70ms Administrator Server started at Tue Aug 30 15:05:26 EDT 2022. MCS Preference has been decrypted failed: com/avamar/mc/dpn/users/MCUSERAP MCS Preference has been decrypted failed: com/avamar/mc/dpn/users/MCUSERAP MCS Preference has been decrypted failed: com/avamar/mc/dpn/users/MCUSERAP MCS Preference has been decrypted failed: com/avamar/mc/dpn/users/MCUSERAP MCS Preference has been decrypted failed: com/avamar/mc/dpn/users/MCUSERAP ERROR: Invalid AES key length MCS Preference has been decrypted failed: com/avamar/mc/dpn/users/MCUSERAP MCS Preference has been decrypted failed: com/avamar/mc/dpn/users/MCUSERAP MCS Preference has been decrypted failed: com/avamar/mc/dpn/users/MCUSERAP
Resolución
Procedimiento:
- Elimine TODOS los servidores Axion ADEMÁS del servidor de origen (el servidor al que está agregando otros servidores). La columna ID para el servidor de origen que no toca tiene un
ID = 1.
Original Table contents from cause section
psql -p 5556 emdb select id, lastcontact, axionsystemname from axion_server; id | lastcontact | axionsystemname ---------------+---------------------+------------------------------ 1629287858128 | 1969-12-31 19:00:00 | AVAMAR10.EX.COM 1629287980100 | 1969-12-31 19:00:00 | AVAMAR20.EX.COM 1629287647775 | 1969-12-31 19:00:00 | AVAMAR30.EX.COM 1629287949115 | 1969-12-31 19:00:00 | AVAMAR19.EX.COM 1660563561277 | 1969-12-31 19:00:00 | AVAMAR40.EX.COM 1629287597140 | 1969-12-31 19:00:00 | AVAMAR50.EX.COM 1629287775889 | 1969-12-31 19:00:00 | AVAMAR60.EX.COM 1629287812033 | 1969-12-31 19:00:00 | AVAMAR70.EX.COM 1629288006387 | 1969-12-31 19:00:00 | AVAMAR80.EX.COM 1629287515457 | 1969-12-31 19:00:00 | AVAMAR90.EX.COM 1 | 1969-12-31 19:00:00 | AVAMAR100.EX.COM 1629287732083 | 1969-12-31 19:00:00 | AVAMAR200.EX.COM 1629288102775 | 1969-12-31 19:00:00 | AVAMAR300.EX.COM 1662042283060 | 1969-12-31 19:00:00 | AVAMAR400.EX.COM 1651676768316 | 1969-12-31 19:00:00 | AVAMAR500.EX.COM (15 rows)
Ejecute el comando delete para eliminar todos los servidores, excepto el id=1 server (AVAMAR100.EX.COM)
// connect to emdb
psql -p 5556 emdb // delete each server besides source server delete from axion_server where id!='1';
- Confirme que todos los otros servidores remotos se hayan eliminado:
select id, lastcontact, axionsystemname from axion_server; id | lastcontact | axionsystemname ---------------+---------------------+------------------------------ 1 | 1969-12-31 19:00:00 | AVAMAR100.EX.COM
- Salga de
emdbusopostgresql.
\q
- Reinicie Tomcat e identifique cuándo se reinicia el servlet y obtiene los registros más recientes para el problema como usuario raíz:
emwebapp.sh --restart
- Inicie sesión en System Manager.
/aam) de nuevo e intente agregar servidores remotoshostname yMCUsercredential
En este ejemplo, AVAMAR300.EX.COM que arrojó un error. En la ACMTrace.log después de reiniciar el servidor Tomcat, se observa un error en los siguientes registros por intentar agregar AVAMAR300.EX.COM:
vi /usr/local/avamar-tomcat/logs/ACMTrace.log
// latest logs post tomcat restart start with "Servlet Context Launched."
2022-09-21 16:03:57,802 INFO [localhost-startStop-1]-listeners.ContextLauncher: Servlet Context Launched.
2022-09-21 16:04:00,623 INFO [localhost-startStop-1]-sdk.ServiceConnection: Wait for task: STORAGE_INFO: Getting storage information
2022-09-21 16:04:01,625 INFO [localhost-startStop-1]-sdk.ServiceConnection: Task done: STORAGE_INFO
2022-09-21 16:04:01,660 INFO [localhost-startStop-1]-utils.ACMProperties: Cas Server Url Ssl Prefix: https://AVAMAR300.EX.COM
2022-09-21 16:04:06,669 INFO [ajp-nio-0:0:0:0:0:0:0:1-8509-exec-1]-filters.ImageLocaleFilter: Locale in China: false
2022-09-21 16:04:07,926 INFO [ajp-nio-0:0:0:0:0:0:0:1-8509-exec-8]-filters.ImageLocaleFilter: Locale in China: false
2022-09-21 16:04:10,172 WARN [ajp-nio-0:0:0:0:0:0:0:1-8509-exec-1]-helper.LDAPManagerUserAuth: LDAP property 'ldap.url.*' is not defined
2022-09-21 16:04:10,176 WARN [ajp-nio-0:0:0:0:0:0:0:1-8509-exec-1]-helper.LDAPManagerUserAuth: LDAP property 'ldap.url.*' is not defined
2022-09-21 16:04:10,178 WARN [ajp-nio-0:0:0:0:0:0:0:1-8509-exec-1]-helper.LDAPManagerUserAuth: LDAP property 'ldap.url.*' is not defined
2022-09-21 16:04:10,179 WARN [ajp-nio-0:0:0:0:0:0:0:1-8509-exec-1]-helper.LDAPManagerUserAuth: LDAP property 'ldap.url.*' is not defined
2022-09-21 16:04:10,180 INFO [ajp-nio-0:0:0:0:0:0:0:1-8509-exec-1]-auth.AvamarAuthConfigurationUserAuth: Authentication Type: Web Restore Avamar
2022-09-21 16:04:11,037 WARN [ajp-nio-0:0:0:0:0:0:0:1-8509-exec-1]-cli.MCInternalCLIUserAuth: MCCLI exec catch Execption: Unable to initialize MCCLI
2022-09-21 16:04:11,043 INFO [ajp-nio-0:0:0:0:0:0:0:1-8509-exec-1]-cli.MCInternalCLIUserAuth: authenticate result out: 0,23000,CLI command completed successfully.
2022-09-21 16:04:11,310 WARN [ajp-nio-0:0:0:0:0:0:0:1-8509-exec-1]-cli.MCInternalCLIUserAuth: MCCLI exec catch Execption: Unable to initialize MCCLI
2022-09-21 16:04:11,312 INFO [ajp-nio-0:0:0:0:0:0:0:1-8509-exec-1]-cli.MCInternalCLIUserAuth: get privilege command output: <CLIOutput>
<Results>
<ReturnCode>0</ReturnCode>
<EventCode>23000</EventCode>
<EventSummary>CLI command completed successfully.</EventSummary>
</Results>
<Data>
<Row>
<Name>erx1mxe</Name>
<Role>Administrator</Role>
<Domain>/</Domain>
<Authenticator>Axion Authentication System</Authenticator>
<Domain>/</Domain>
<Authenticator>Axion Authentication System</Authenticator>
</Row>
</Data>
</CLIOutput>
2022-09-21 16:04:11,692 INFO [ajp-nio-0:0:0:0:0:0:0:1-8509-exec-2]-sdk.ServiceConnection: Wait for task: STORAGE_INFO: Getting storage information
2022-09-21 16:04:12,693 INFO [ajp-nio-0:0:0:0:0:0:0:1-8509-exec-2]-sdk.ServiceConnection: Task done: STORAGE_INFO
2022-09-21 16:04:32,272 WARN [ajp-nio-0:0:0:0:0:0:0:1-8509-exec-1]-helper.LDAPManagerUserAuth: LDAP property 'ldap.url.*' is not defined
2022-09-21 16:04:32,273 WARN [ajp-nio-0:0:0:0:0:0:0:1-8509-exec-1]-helper.LDAPManagerUserAuth: LDAP property 'ldap.url.*' is not defined
2022-09-21 16:04:32,273 WARN [ajp-nio-0:0:0:0:0:0:0:1-8509-exec-1]-helper.LDAPManagerUserAuth: LDAP property 'ldap.url.*' is not defined
2022-09-21 16:04:32,273 WARN [ajp-nio-0:0:0:0:0:0:0:1-8509-exec-1]-helper.LDAPManagerUserAuth: LDAP property 'ldap.url.*' is not defined
2022-09-21 16:04:32,274 INFO [ajp-nio-0:0:0:0:0:0:0:1-8509-exec-1]-auth.AvamarAuthConfigurationUserAuth: Authentication Type: Web Restore Avamar
2022-09-21 16:04:32,528 WARN [ajp-nio-0:0:0:0:0:0:0:1-8509-exec-1]-cli.MCInternalCLIUserAuth: MCCLI exec catch Execption: Unable to initialize MCCLI
2022-09-21 16:04:32,529 INFO [ajp-nio-0:0:0:0:0:0:0:1-8509-exec-1]-cli.MCInternalCLIUserAuth: authenticate result out: 0,23000,CLI command completed successfully.
2022-09-21 16:04:32,791 WARN [ajp-nio-0:0:0:0:0:0:0:1-8509-exec-1]-cli.MCInternalCLIUserAuth: MCCLI exec catch Execption: Unable to initialize MCCLI
2022-09-21 16:04:32,792 INFO [ajp-nio-0:0:0:0:0:0:0:1-8509-exec-1]-cli.MCInternalCLIUserAuth: get privilege command output: <CLIOutput>
<Results>
<ReturnCode>0</ReturnCode>
<EventCode>23000</EventCode>
<EventSummary>CLI command completed successfully.</EventSummary>
</Results>
<Data>
<Row>
<Name>root</Name>
<Role>Administrator</Role>
<Domain>/</Domain>
<Authenticator>Axion Authentication System</Authenticator>
</Row>
</Data>
</CLIOutput>
2022-09-21 16:04:33,073 INFO [ajp-nio-0:0:0:0:0:0:0:1-8509-exec-2]-sdk.ServiceConnection: Wait for task: STORAGE_INFO: Getting storage information
2022-09-21 16:04:34,074 INFO [ajp-nio-0:0:0:0:0:0:0:1-8509-exec-2]-sdk.ServiceConnection: Task done: STORAGE_INFO
- La tarjeta NVRAM tiene un problema.
MCUsercredencial en elAVAMAR300.EX.COM. Seela sección Causa #2 para más detalles.
Como se mencionó anteriormente, MCUser No se ha podido descifrar. Cuando el Avamar de origen intenta registrar el Avamar remoto mediante su MCUser credencial, falla. Ejecute el comando change-passwords como usuario raíz para actualizar MCUser on AVAMAR300.EX.COM.
No es necesario cambiar la contraseña de lo que es actualmente. Se puede ingresar la misma contraseña en el script, pero el script se debe ejecutar para actualizar la contraseña en todos los archivos de configuración con la clave de cifrado y descifrado adecuada aplicada.
change-passwords
- Después de la actualización
MCUserpassword en el servidor remoto, actualice el administrador de clientes del servidor de origen (/aam) (AVAMAR100.EX.COM). A continuación, intente volver a agregarla correctamenteAVAMAR300.EX.COMal servidor de origen.