This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Health Warning After Update to SSPR v4.4.0.1

MigrationDeletedUser over 5 years ago

Hi

I have updated to SSPR v4.4.0.1 b340 r39737 from 4.3.0.5 and I am seeing the following health caution:

"The cluster system can not operate normally: error writing node service heartbeat: 5079 ERROR_LDAP_DATA_ERROR (error writing node service data: javax.naming.directory.InvalidAttributeIdentifierException: [LDAP: error code 17 - Undefined Attribute Type])"

I am running an SSPR appliance, and it is a single instance (no clustering). SSPR seems to be running OK, password changes are working and so on as far as I can see.

Interestingly, I am not seeing the warning on my test appliance, also updated in the same way. It is only showing in production. Any suggestions of what to look at would be appreciated.

Thanks
Robert

Top Replies

0 aburgemeister over 5 years ago

LDAP 17 means that an attribute which should exist in schema does not, so
that probably means you have not fully extended schema in this tree. If
your Test tree does have schema extended properly, that would explain the
difference.

Check the SSPR documentation for how to extend schema. This can often be
done via LDAP with an LDIF file, and if that is the case then you also can
see the attributes and look for them ahead of time to see which are missing.

--
Good luck.

If you find this post helpful and are logged into the web interface,
show your appreciation and click on the star below.

If you want to send me a private message, please let me know in the
forum as I do not use the web interface often.
Cancel
Vote Up +1 Vote Down

Cancel
0 MigrationDeletedUser over 5 years ago in reply to aburgemeister

https://www.netiq.com/documentation/self-service-password-reset-44/sspr-install/data/b1l54no8.html#c42xta2d

pwmData (new in the Self Service Password Reset 4.4 release or later)

Unfortunately not commented in the upgrade process only the install.
Cancel
Vote Up 0 Vote Down

Cancel
0 Geoffrey Carman over 5 years ago in reply to MigrationDeletedUser

On 4/18/2019 10:14 AM, gturcsik wrote:
>
> https://www.netiq.com/documentation/self-service-password-reset-44/sspr-install/data/b1l54no8.html#c42xta2d
>
> *pwmData *(new in the Self Service Password Reset 4.4 release or later)
>
> Unfortunately not commented in the upgrade process only the install.

Raising the question. What is pwmData used to store in 4.4 or later?
Cancel
Vote Up 0 Vote Down

Cancel
0 MigrationDeletedUser over 5 years ago in reply to MigrationDeletedUser

Thanks! Adding pwmData fixed it. I missed this as I was following the upgrade instructions and didn't read the full document.
Robert
Cancel
Vote Up 0 Vote Down

Cancel
0 MigrationDeletedUser over 5 years ago in reply to Geoffrey Carman

geoffc;2498563 wrote:
On 4/18/2019 10:14 AM, gturcsik wrote:
>
> https://www.netiq.com/documentation/self-service-password-reset-44/sspr-install/data/b1l54no8.html#c42xta2d
>
> *pwmData *(new in the Self Service Password Reset 4.4 release or later)
>
> Unfortunately not commented in the upgrade process only the install.

Raising the question. What is pwmData used to store in 4.4 or later?

In my opinion (and as I saw the error message):

I compared the 4.3 and 4.4.0.1 versions, and in the new version under the Settings -> Application -> Session Management there is a new function:

Node Service Enabled: 'Enable or Disable the node service. The node service allows SSPR to detect and identify when multiple application nodes are similar configured and can share user sessions.'

If you set the storage mode to 'LDAP Directory' you need this new attribute.
Cancel
Vote Up 0 Vote Down

Cancel
0 Geoffrey Carman over 5 years ago in reply to MigrationDeletedUser

On 4/25/2019 9:04 AM, gturcsik wrote:
>
> geoffc;2498563 Wrote:
>> On 4/18/2019 10:14 AM, gturcsik wrote:
>>>
>>>
>> https://www.netiq.com/documentation/self-service-password-reset-44/sspr-install/data/b1l54no8.html#c42xta2d
>>>
>>> *pwmData *(new in the Self Service Password Reset 4.4 release or
>> later)
>>>
>>> Unfortunately not commented in the upgrade process only the install.
>>
>> Raising the question. What is pwmData used to store in 4.4 or later?
>
> In my opinion (and as I saw the error message):
>
> I compared the 4.3 and 4.4.0.1 versions, and in the new version under
> the Settings -> Application -> Session Management there is a new
> function:
>
> Node Service Enabled: 'Enable or Disable the node service. The node
> service allows SSPR to detect and identify when multiple application
> nodes are similar configured and can share user sessions.'
>
> If you set the storage mode to 'LDAP Directory' you need this new
> attribute.

Ah, using eDir instead of DB for shared state between nodes. Good to
know. Good approach I think.
Cancel
Vote Up 0 Vote Down

Cancel
0 6423241 over 5 years ago in reply to MigrationDeletedUser

I am getting the same error, but I checked the schema and pwmData is present. What else could be causing this? If I have no need to share session data, can I just uncheck 'Node Service Enabled'?
Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 Geoffrey Carman over 5 years ago in reply to 6423241

Somewhere in the Configuration there is a help option that decribes the needed schema updates. Might be worth checking the pwmResponseSet and other attributes are all there.
Cancel
Vote Up 0 Vote Down

Cancel
0 6423241 over 5 years ago in reply to Geoffrey Carman

I checked for the attributes added during the 4.4 upgrade and they were all present. Then I checked for *all* SSPR-related attributes and found that my schema has all of them except pwmUser. I wonder how that got skipped during the install. It's interesting that the application functions without it.
Cancel
Vote Up 0 Vote Down

Cancel
0 6423241 over 5 years ago in reply to 6423241

Scratch that. pwmUser is a class not an attribute, and it's present. So I'm back to square one.
Cancel
Vote Up 0 Vote Down

Cancel

Menu

SSPR User Discussions

Health Warning After Update to SSPR v4.4.0.1

Top Replies

Resources