PowerProtect Data Manager:无法启动 PPDM 服务
摘要: PowerProtect Data Manager:无法启动 PPDM 服务
症状
重新启动没有帮助。
通常,当 PPDM 无法启动时,这是因为 AAA级 或 secretsmgr 是一个问题。
我们看到的会导致此行为的关键消息在这里:
/var/log/brs/secretsmgr/secretsmgr.log
2021-10-19T05:01:38.546Z INFO [] [main] [][][][][] [o.s.c.s.PostProcessorRegistrationDelegate$BeanPostProcessorChecker.postProcessAfterInitialization(326)] - Bean 'org.springframework.cloud.autoconfigure.ConfigurationPropertiesRebinderAutoConfiguration' of type [org.springframework.cloud.autoconfigure.ConfigurationPropertiesRebinderAutoConfiguration$$EnhancerBySpringCGLIB$$e19ec26f] is not eligible for getting processed by all BeanPostProcessors (for example: not eligible for auto-proxying)
2021-10-19T05:01:38.590Z INFO [] [main] [][][][][] [c.e.b.s.c.AbstractLockboxBase.setNodeName(83)] - Use nodeId as nodeName 77eb2b66-8a47-4dbe-addb-9e932e5ce7f2
2021-10-19T05:01:38.591Z INFO [] [main] [][][][][] [c.e.b.s.c.LockboxJavaBase.<init>(106)] - lockboxPath /data01/secretsmgr/data/lockbox.lb
2021-10-19T05:01:38.591Z INFO [] [main] [][][][][] [c.e.b.s.c.LockboxJavaBase.<init>(108)] - SSV Table file=/data01/secretsmgr/data/lb.ssv
2021-10-19T05:01:38.672Z ERROR [] [main] [][][][][] [c.e.b.s.c.LockboxJavaBase.openLockbox(305)] - Lockbox Exception The Lockbox stable value threshold was not met because the system fingerprint has changed. To reset the system fingerprint, open the Lockbox using the password.
2021-10-19T05:01:38.672Z ERROR [] [main] [][][][][] [c.e.b.s.c.LockboxJavaBase.retrieveItemAsBinary(348)] - got SecretsManagerException: The Lockbox passphrase is incorrect.
2021-10-19T05:01:38.845Z INFO [] [main] [][][][][] [c.z.h.HikariDataSource.getConnection(110)] - HikariPool-1 - Starting...
2021-10-19T05:01:39.033Z INFO [] [main] [][][][][] [c.z.h.HikariDataSource.getConnection(123)] - HikariPool-1 - Start completed.
2021-10-19T05:01:39.159Z INFO [] [main] [][][][][] [o.s.o.j.LocalContainerEntityManagerFactoryBean.createNativeEntityManagerFactory(361)] - Building JPA container EntityManagerFactory for persistence unit 'default'
2021-10-19T05:01:40.292Z INFO [] [main] [][][][][] [o.s.o.j.LocalContainerEntityManagerFactoryBean.buildNativeEntityManagerFactory(415)] - Initialized JPA EntityManagerFactory for persistence unit 'default'
2021-10-19T05:01:40.300Z WARN [] [main] [][][][][] [o.s.b.w.s.c.AnnotationConfigServletWebServerApplicationContext.refresh(559)] - Exception encountered during context initialization - cancelling refresh attempt: org.springframework.context.ApplicationContextException: Unable to start web server; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'servletContainerConfiguration' defined in URL [jar:file:/usr/local/brs/lib/mvnrepo/repository/com/emc/dpsg/ecdm/spring-boot-specific/spring-boot-specific-web/2.0-19.6.0-7/spring-boot-specific-web-2.0-19.6.0-7.jar!/com/emc/brs/spring/boot/specific/web/ssl/ServletContainerConfiguration.class]: Bean instantiation via constructor failed; nested exception is org.springframework.beans.BeanInstantiationException: Failed to instantiate [com.emc.brs.spring.boot.specific.web.ssl.ServletContainerConfiguration$$EnhancerBySpringCGLIB$$3447bcff]: Constructor threw exception; nested exception is com.emc.brs.secretsmgr.common.SecretsMgrException: Cannot get Secret from SecretRepository
2021-10-19T05:01:40.300Z INFO [] [main] [][][][][] [o.s.o.j.LocalContainerEntityManagerFactoryBean.destroy(597)] - Closing JPA EntityManagerFactory for persistence unit 'default'原因
某些作系统信息必须已更改,这会导致密码箱中的内容不匹配。
如果我们 cat /data01/secretsmgr/data/lockbox.ssv 文件,我们可以看到作系统相关信息存储如下:admin@sky6:~> cat /data01/secretsmgr/data/lockbox.ssv[Linux, amd64, 6.00, :::8;:::8;:::8;:::8;:::8;:::8;:::8;:::8;:::8;:::8;:::8;:::8;:::8;:::8;:::8;:::8;:::8;:::8, Linux version 4.12.14-122.41-default (geeko@buildhost) (gcc version 4.8.5 (SUSE Linux) ) #1 SMP Thu Oct 8 11:51:56 UTC 2020 (0b22929)]BIOS 版本。 您可以运行以下命令来检查当前版本:
6.00 is admin@sky6:~> sudo dmidecode -s bios-version[sudo] password for root:6.00
:::8;:::8;:::8;:::8;:::8;:::8;:::8;:::8;:::8;:::8;:::8;:::8;:::8;:::8;:::8;:::8;:::8;:::8 is 进程分区列表,您可以通过运行如下命令来获取,其中数字是主要数字。admin@sky6:~> cat /proc/partitionsmajor minor #blocks name
8 0 102400000 sda 8 1 159744 sda1 8 2 208896 sda2 8 3 30715904 sda3 8 4 8393728 sda4 8 5 62919680 sda5 8 64 5242880 sde 8 65 5118976 sde1 8 48 10485760 sdd 8 49 10238976 sdd1 8 80 5242880 sdf 8 81 5118976 sdf1 8 16 512000000 sdb 8 17 511997952 sdb1 8 32 10485760 sdc 8 33 10484736 sdc1 8 96 5242880 sdg 8 97 5118976 sdg1
For more details, Refer to https://confluence.cec.lab.emc.com/display/AECPE/Secretsmgr+SSV+Troubleshooting
解决方案
1.找出确切的变化:
您可以使用此命令生成 lockbox.ssv 并与原始 ssv 进行比较:/usr/local/brs/lib/secretsmgr/bin/secretsmgr-api -i -d /tmp/ -n Changeme_1 (此命令将在 /tmp/ 中生成 lockbox.ssv)
要进行比较,请运行以下命令: diff /tmp/lockbox.ssv /data01/secretsmgr/data/lockbox.ssv
提醒:其中 Changeme_1 是一个 密码箱密码示例,您应替换它。
如果客户不知道密码箱密码,请参阅 https://confluence.cec.lab.emc.com/display/AECPE/How+to+Recover+Lockbox+Password
如果运行上述命令时遇到任何问题,只需复制 /data01/secretsmgr/data/lockbox.ssv 首先,转到步骤 2。
阿拉伯数字。更新密码箱:
PPDM 19.7 或更低版本:/usr/local/brs/lib/secretsmgr/bin/secretsmgr-api -r -o Changeme_1 -n Changeme_1
PPDM 19.8 或更高版本/usr/local/brs/lib/secretsmgr/bin/secretsmgr-api -r -o Changeme_1
提醒:其中 Changeme_1 是一个 密码箱密码示例,您应替换它。/data01/secretsmgr/data/lockbox.ssv 将被更新,您可以将文件与原始文件进行比较以找出差异。
3.重新启动 PPDM