Hi, Alexis, If aaf-locate is not working in your environment (as Jonathan said we’ve observed this in SB04 and it seems like it might be happening in other tenant labs) then changing the credentials won’t help. It’s a good thing to move to the new credentials for the future but aaf-locate has to be running for authentication and authorization to work in AAI whether it’s a new-style or legacy credential.
Thanks, jimmy From: <[email protected]> on behalf of Alexis de Talhouet <[email protected]> Reply-To: "[email protected]" <[email protected]>, "[email protected]" <[email protected]> Date: Tuesday, October 30, 2018 at 9:18 AM To: "LEFEVRE, CATHERINE" <[email protected]> Cc: "[email protected]" <[email protected]>, "[email protected]" <[email protected]>, "[email protected]" <[email protected]>, "GATHMAN, JONATHAN C" <[email protected]>, "FORSYTH, JAMES" <[email protected]>, Seshu m <[email protected]> Subject: Re: [onap-discuss] [SO][AAF] AAI request gets Unauthorized There seems to be an issue with AAF locate, as mentioned in that thread: https://lists.onap.org/g/onap-discuss/message/13384<https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.onap.org_g_onap-2Ddiscuss_message_13384&d=DwMFaQ&c=LFYZ-o9_HUMeMTSQicvjIg&r=Oej6QUk5p2KdqNEWySpOHA&m=1Xva7GsUGSDi3jH_9OZMvIeLutq4RGy9MmSriSdLZ4Y&s=CnazOQeQn34fQag9SWSdm88os1t4PfHKePfrMJ0JycU&e=> Former AAI auth *should* work, but due to the AAF locate feature failing currently on us, let’s migrate to the new creds for AAI within SO. Here is the patch: https://gerrit.onap.org/r/#/c/71456/<https://urldefense.proofpoint.com/v2/url?u=https-3A__gerrit.onap.org_r_-23_c_71456_&d=DwMFaQ&c=LFYZ-o9_HUMeMTSQicvjIg&r=Oej6QUk5p2KdqNEWySpOHA&m=1Xva7GsUGSDi3jH_9OZMvIeLutq4RGy9MmSriSdLZ4Y&s=NPXlakS7OCvhBbzqp_pXhiN1BPE3YVTIQNDZaRHPVfA&e=> Alexis On Oct 30, 2018, at 5:16 AM, Lefevre, Catherine <[email protected]<mailto:[email protected]>> wrote: Dear all, Are you testing this on SB04? I understand this is the only lab that is current fort the moment. If you are testing in another lab then you will need to replicate similar SB04 settings Good morning Jonathan, Can you please look at this issue with Jimmy? Best regards Catherine From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Guangrong Fu Sent: Tuesday, October 30, 2018 9:59 AM To: [email protected]<mailto:[email protected]> Cc: [email protected]<mailto:[email protected]>; [email protected]<mailto:[email protected]> Subject: 答复: Re: 答复: [onap-discuss] [SO][AAF] AAI request gets Unauthorized I'm having this issue on the instance deployed in the DCAE tenant. 原始邮件 发件人：PavelParoulek <[email protected]<mailto:[email protected]>> 收件人：onap-discuss <[email protected]<mailto:[email protected]>>; 抄送人："Alexis de Talhouët" <[email protected]<mailto:[email protected]>>;onap-discuss <[email protected]<mailto:[email protected]>>; 日 期 ：2018年10月30日 16:25 主 题 ：Re: 答复: [onap-discuss] [SO][AAF] AAI request gets Unauthorized Hi, on what instance/environment do you experience this problem? ---- On Tue, 30 Oct 2018 09:20:53 +0100 Guangrong Fu<[email protected]<mailto:[email protected]>> wrote ---- Same issue here. Could anybody help? 原始邮件 发件人：AlexisdeTalhouet <[email protected]<mailto:[email protected]>> 收件人：onap-discuss <[email protected]<mailto:[email protected]>>; 日 期 ：2018年10月30日 04:42 主 题 ：[onap-discuss] [SO][AAF] AAI request gets Unauthorized Team, Are they some configuration that should be updated regarding SO to AAI communication since AAI integrated with AFF? I’m facing an Unauthorized for my service request. Bellow a snippet of the BPMN logs: ``` 18-10-29T20:23:26.705Z|6d5938d9-9f3c-4c5a-82b3-9d86c1720aec| o.o.so.logging.jaxrs.filter.PayloadLoggingFilter - Making GET request to: https://aai.onap:<https://urldefense.proofpoint.com/v2/url?u=https-3A__aai.onap-3A&d=DwMGaQ&c=LFYZ-o9_HUMeMTSQicvjIg&r=ZglJ8LOeAfevY7wWaSximhFMAzXaMdza5QYCg-DW6SU&m=_OaRkxlchJi8zldR1n3yve_IhQlBI1ODsL5FIYnwGkw&s=iopnVRjiD9uC4AqQ3ydWTIlhjbshB-FOyomb3yGJZIk&e=>8443/aai/v14/business/customers/customer/Demonstration/service-subscriptions/service-subscription/vFW/service-instances?depth=2&service-instance-name=Service_Ete_Nameedbd0170-f5ac-487f-b044-305f73045e74 Request Headers: {Authorization=[Basic TVNPOk1TTw==], X-FromAppId=[MSO], X-TransactionId=[], Accept=[application/json], X-ONAP-RequestID=[6d5938d9-9f3c-4c5a-82b3-9d86c1720aec], X-ONAP-InvocationID=[1e70e4b5-7709-48e8-971b-c53ba402a0c9], X-ONAP-PartnerName=[SO]} 2018-10-29T20:23:27.043Z|6d5938d9-9f3c-4c5a-82b3-9d86c1720aec| o.o.so.logging.jaxrs.filter.PayloadLoggingFilter - Response from GET: https://aai.onap:<https://urldefense.proofpoint.com/v2/url?u=https-3A__aai.onap-3A&d=DwMGaQ&c=LFYZ-o9_HUMeMTSQicvjIg&r=ZglJ8LOeAfevY7wWaSximhFMAzXaMdza5QYCg-DW6SU&m=_OaRkxlchJi8zldR1n3yve_IhQlBI1ODsL5FIYnwGkw&s=iopnVRjiD9uC4AqQ3ydWTIlhjbshB-FOyomb3yGJZIk&e=>8443/aai/v14/business/customers/customer/Demonstration/service-subscriptions/service-subscription/vFW/service-instances?depth=2&service-instance-name=Service_Ete_Nameedbd0170-f5ac-487f-b044-305f73045e74 Response Headers: {connection=[close], Date=[Mon, 29 Oct 2018 20:23:26 GMT], Strict-Transport-Security=[max-age=16000000; includeSubDomains; preload;], WWW-Authenticate=[Basic realm="people.osaaf.org<https://urldefense.proofpoint.com/v2/url?u=http-3A__people.osaaf.org&d=DwMGaQ&c=LFYZ-o9_HUMeMTSQicvjIg&r=ZglJ8LOeAfevY7wWaSximhFMAzXaMdza5QYCg-DW6SU&m=_OaRkxlchJi8zldR1n3yve_IhQlBI1ODsL5FIYnwGkw&s=ryluFfkeKhPOJIgpCafLesJILgHS8xniJs-hyDMU7MI&e=>"]}{"requestError":{"policyException":{"messageId":"POL3300","text":"Unauthorized (msg=%1) (ec=%2)","variables":["Unauthorized","ERR.5.1.3300"]}}} 2018-10-29T20:23:27.154Z|6d5938d9-9f3c-4c5a-82b3-9d86c1720aec| o.o.s.b.i.workflow.tasks.WorkflowAction - WorkflowAction was unable to verify ifthe instance name already exist in AAI. Thanks, Alexis -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#13387): https://lists.onap.org/g/onap-discuss/message/13387 Mute This Topic: https://lists.onap.org/mt/27791959/21656 Group Owner: [email protected] Unsubscribe: https://lists.onap.org/g/onap-discuss/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
