Search Engine: Elastic

Article ID: 132283, created on Feb 21, 2018, last review on Mar 5, 2018

  • Applies to:
  • Operations Automation 7.3

Symptoms

  1. After OA upgrade to 7.3 Azure periodic tasks Azure CSP: Archiving and deleting old reports and Azure CSP: check budget cap are failing with error:

    Last execution output   Access denied.
    
  2. Odin Automation core node is configured with two (or more) IP Addresses for example 10.20.79.10 and 10.20.80.10.

  3. On attempt to access different tabs under Services > Applications > Azure Cloud Solution Provider > Instance following exception appears:

    Access denied.
    Error code: access_denied
    Error Category: api
    
  4. azure.log on Azure CSP Endpoint contains records like:

    ============
    2018-02-13 01:10:34,829 INFO  [com.odin.azure.server.AuthorizeController] (azure task-9) <APS-APP> A key store file for the server key of an application with the instance id  'f2c11c32-b408-4cfd-93a1-11a22a3344c6' doesn't contain a certificate for 'https://10.20.80.10:6308/' APS controller.
    2018-02-13 01:10:34,830 DEBUG [com.odin.azure.server.ServerLogs] (azure task-9) <SERVER> Incoming request 'GET https://10.20.80.19:10443/azure/aps/applications/1994ba5e-2566-4607-8391-1be12f3e4a56/full' has been finished: HTTP 403 Forbidden
    ============
    
  5. In core.log on Core Node it represents as the following:

    Feb 13 01:15:26.709 : DBG [aps-service:7247 aps-service-task-1:504 pau]: c.p.p.s.c.e.EndpointExecutorBean opening new connection for application f2c66c32-b408-4cfd-93a1-46a35a1534c6
    Feb 13 01:15:26.724 : DBG [aps-service:7247 aps-service-task-1:504 pau]: c.p.p.s.c.e.EndpointExecutorBean closed connection for application ff7d4ae6-2adf-444c-a9af-49ea154bb27b
    Feb 13 01:15:26.724 : DBG [aps-service:7247 aps-service-task-1:504 pau]: c.p.p.s.c.e.EndpointExecutorBean Begin request: 'GET https://10.20.80.19:10443/azure/aps/applications/1994ba5e-2566-4607-8391-1be12f3e4a56/base_currency' TLSv1.2
    Feb 13 01:15:26.749 : DBG [aps-service:7247 aps-service-task-1:504 pau]: c.p.p.s.c.e.EndpointExecutorBean End request: 'GET https://10.20.80.19:10443/azure/aps/applications/1994ba5e-2566-4607-8391-1be12f3e4a56/base_currency' '403 Forbidden'
    Feb 13 01:15:26.750 : DBG [aps-service:7247 aps-service-task-1:504 pau]: c.p.p.tracer exit by exception: com.parallels.pa.service.connectivity.ejb.EndpointExecutorBean.call com.parallels.pa.service.aps.api.APSEndpointExecutionException: Access denied.
    

Cause

After Odin Automation platform upgrade APS-Controller-URI was changed from https://10.20.79.10:6308/ to https://10.20.80.10:6308/. Azure CSP application does not support handle such changes. Software-related issue #APSA-19557 has been addressed to Odin platform Development team.

Resolution

Please contact Odin Technical Support to apply workaround.

Additionally please contact pta@odin.com or Technical Account Manager to trace the status of the software issue.

5356b422f65bdad1c3e9edca5d74a1ae caea8340e2d186a540518d08602aa065 e12cea1d47a3125d335d68e6d4e15e07 dd79f16c76b9dca75205ab5e9f5465ea 1941880841f714e458ae4dc3d9f3062d

Email subscription for changes to this article
Save as PDF