rshera Absent Member.
Absent Member.
1162 views

Health Warning After Update to SSPR v4.4.0.1

Hi

I have updated to SSPR v4.4.0.1 b340 r39737 from 4.3.0.5 and I am seeing the following health caution:

"The cluster system can not operate normally: error writing node service heartbeat: 5079 ERROR_LDAP_DATA_ERROR (error writing node service data: javax.naming.directory.InvalidAttributeIdentifierException: [LDAP: error code 17 - Undefined Attribute Type])"

I am running an SSPR appliance, and it is a single instance (no clustering). SSPR seems to be running OK, password changes are working and so on as far as I can see.

Interestingly, I am not seeing the warning on my test appliance, also updated in the same way. It is only showing in production. Any suggestions of what to look at would be appreciated.

Thanks
Robert
0 Likes
10 Replies
Knowledge Partner Knowledge Partner
Knowledge Partner

Re: Health Warning After Update to SSPR v4.4.0.1

LDAP 17 means that an attribute which should exist in schema does not, so
that probably means you have not fully extended schema in this tree. If
your Test tree does have schema extended properly, that would explain the
difference.

Check the SSPR documentation for how to extend schema. This can often be
done via LDAP with an LDIF file, and if that is the case then you also can
see the attributes and look for them ahead of time to see which are missing.

--
Good luck.

If you find this post helpful and are logged into the web interface,
show your appreciation and click on the star below.

If you want to send me a private message, please let me know in the
forum as I do not use the web interface often.
0 Likes
gturcsik Absent Member.
Absent Member.

Re: Health Warning After Update to SSPR v4.4.0.1

https://www.netiq.com/documentation/self-service-password-reset-44/sspr-install/data/b1l54no8.html#c42xta2d

pwmData (new in the Self Service Password Reset 4.4 release or later)

Unfortunately not commented in the upgrade process only the install.
0 Likes
Knowledge Partner
Knowledge Partner

Re: Health Warning After Update to SSPR v4.4.0.1

On 4/18/2019 10:14 AM, gturcsik wrote:
>
> https://www.netiq.com/documentation/self-service-password-reset-44/sspr-install/data/b1l54no8.html#c42xta2d
>
> *pwmData *(new in the Self Service Password Reset 4.4 release or later)
>
> Unfortunately not commented in the upgrade process only the install.


Raising the question. What is pwmData used to store in 4.4 or later?


0 Likes
gturcsik Absent Member.
Absent Member.

Re: Health Warning After Update to SSPR v4.4.0.1

geoffc;2498563 wrote:
On 4/18/2019 10:14 AM, gturcsik wrote:
>
> https://www.netiq.com/documentation/self-service-password-reset-44/sspr-install/data/b1l54no8.html#c42xta2d
>
> *pwmData *(new in the Self Service Password Reset 4.4 release or later)
>
> Unfortunately not commented in the upgrade process only the install.


Raising the question. What is pwmData used to store in 4.4 or later?


In my opinion (and as I saw the error message):

I compared the 4.3 and 4.4.0.1 versions, and in the new version under the Settings -> Application -> Session Management there is a new function:

Node Service Enabled: 'Enable or Disable the node service. The node service allows SSPR to detect and identify when multiple application nodes are similar configured and can share user sessions.'

If you set the storage mode to 'LDAP Directory' you need this new attribute.
0 Likes
Knowledge Partner
Knowledge Partner

Re: Health Warning After Update to SSPR v4.4.0.1

On 4/25/2019 9:04 AM, gturcsik wrote:
>
> geoffc;2498563 Wrote:
>> On 4/18/2019 10:14 AM, gturcsik wrote:
>>>
>>>

>> https://www.netiq.com/documentation/self-service-password-reset-44/sspr-install/data/b1l54no8.html#c42xta2d
>>>
>>> *pwmData *(new in the Self Service Password Reset 4.4 release or

>> later)
>>>
>>> Unfortunately not commented in the upgrade process only the install.

>>
>> Raising the question. What is pwmData used to store in 4.4 or later?

>
> In my opinion (and as I saw the error message):
>
> I compared the 4.3 and 4.4.0.1 versions, and in the new version under
> the Settings -> Application -> Session Management there is a new
> function:
>
> Node Service Enabled: 'Enable or Disable the node service. The node
> service allows SSPR to detect and identify when multiple application
> nodes are similar configured and can share user sessions.'
>
> If you set the storage mode to 'LDAP Directory' you need this new
> attribute.


Ah, using eDir instead of DB for shared state between nodes. Good to
know. Good approach I think.


0 Likes
rshera Absent Member.
Absent Member.

Re: Health Warning After Update to SSPR v4.4.0.1

Thanks! Adding pwmData fixed it. I missed this as I was following the upgrade instructions and didn't read the full document.
Robert
0 Likes
6423241 Respected Contributor.
Respected Contributor.

Re: Health Warning After Update to SSPR v4.4.0.1

I am getting the same error, but I checked the schema and pwmData is present.  What else could be causing this? If I have no need to share session data, can I just uncheck 'Node Service Enabled'? 

Thanks

 

0 Likes
Knowledge Partner
Knowledge Partner

Re: Health Warning After Update to SSPR v4.4.0.1

Somewhere in the Configuration there is a help option that decribes the needed schema updates. Might be worth checking the pwmResponseSet and other attributes are all there.

0 Likes
6423241 Respected Contributor.
Respected Contributor.

Re: Health Warning After Update to SSPR v4.4.0.1

I checked for the attributes added during the 4.4 upgrade and they were all present. Then I checked for *all* SSPR-related attributes and found that my schema has all of them except pwmUser. I wonder how that got skipped during the install.  It's interesting that the application functions without it.

 

 

 

 

 

0 Likes
6423241 Respected Contributor.
Respected Contributor.

Re: Health Warning After Update to SSPR v4.4.0.1

Scratch that. pwmUser is a class not an attribute, and it's present.  So I'm back to square one.

 

 

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.