Hi Jonathan,

We’re having this issue in both OOF and VFC tenant in the integration lab. And 
I got this issue after redeploying other components(I think AAI may also got 
upgraded at that time). And I check the aaf-locate service port, it seems fine 
here.
Thanks.

Best Regards,
Ruoyu

From: GATHMAN, JONATHAN C [mailto:[email protected]]
Sent: Tuesday, October 30, 2018 9:18 PM
To: FORSYTH, JAMES <[email protected]>; Ying, Ruoyu <[email protected]>; 
[email protected]
Cc: Ranganathan, Dileep <[email protected]>; Huang, Haibin 
<[email protected]>
Subject: Re: [onap-discuss] [OOM][AAI]Request to AAI got access denied

Is this on SB04?, and what time was the connection problem?

I have been monitoring SB04 all morning, and it continues to be fine.

The “seems to stop sometimes” is because it appears that SB04 is bounced, and 
there is something different about the Persistence mechanism on SB04, so that 
it doesn’t come up right all the time.  Otherwise, if no-one restarts, it is 
very stable.

I also checked early on “The Dailies” and they are up and functional as well.


--
Jonathan Gathman
Principled-System Architect
ATO Tech Dev/SEAT/Platform Architecture and Technology Management

AT&T Services, Inc.
2349 Oaker, Arnold, MO 63010
m  314-550-3312  |  
[email protected]<mailto:[email protected]>


From: "FORSYTH, JAMES" <[email protected]<mailto:[email protected]>>
Date: Tuesday, October 30, 2018 at 8:13 AM
To: "Ying, Ruoyu" <[email protected]<mailto:[email protected]>>, 
"[email protected]<mailto:[email protected]>" 
<[email protected]<mailto:[email protected]>>
Cc: "Ranganathan, Dileep" 
<[email protected]<mailto:[email protected]>>, "Huang, 
Haibin" <[email protected]<mailto:[email protected]>>, "GATHMAN, 
JONATHAN C" <[email protected]<mailto:[email protected]>>
Subject: Re: [onap-discuss] [OOM][AAI]Request to AAI got access denied

Hi, Ruoyu,

Yes, we’ve observed that the aaf-locate service stops sometimes and users get 
access denied in AAI.  AAF team, do you more info or a workaround?

Thanks,
jimmy

From: "Ying, Ruoyu" <[email protected]<mailto:[email protected]>>
Date: Tuesday, October 30, 2018 at 9:10 AM
To: "FORSYTH, JAMES" <[email protected]<mailto:[email protected]>>, 
"[email protected]<mailto:[email protected]>" 
<[email protected]<mailto:[email protected]>>
Cc: "Ranganathan, Dileep" 
<[email protected]<mailto:[email protected]>>, "Huang, 
Haibin" <[email protected]<mailto:[email protected]>>
Subject: RE: [onap-discuss] [OOM][AAI]Request to AAI got access denied

Hi jimmy,

I check the aaf pods, they are running normally.
However, I did see an error log inside aai-resources like this:
Authenticating Service unavailable from 10.42.192.221:38084 ( No Entries found 
for 
'https://aaf-locate.onap:8095/locate/AAF_NS.service:2.0<https://urldefense.proofpoint.com/v2/url?u=https-3A__aaf-2Dlocate.onap-3A8095_locate_AAF-5FNS.service-3A2.0&d=DwQGaQ&c=LFYZ-o9_HUMeMTSQicvjIg&r=Oej6QUk5p2KdqNEWySpOHA&m=ppCUj4qlFS8I48q0jwv4CT0RPvB8S_NXSh9SkEVDwWc&s=lN1MYjQy3wcoiCP2w259iCYN-iTtA0WRKRk26AwYxyQ&e=>'
 )

Any suggestion here? Thanks.

Best Regards,
Ruoyu

From: FORSYTH, JAMES [mailto:[email protected]]
Sent: Tuesday, October 30, 2018 9:02 PM
To: [email protected]<mailto:[email protected]>; Ying, 
Ruoyu <[email protected]<mailto:[email protected]>>
Cc: Ranganathan, Dileep 
<[email protected]<mailto:[email protected]>>; Huang, 
Haibin <[email protected]<mailto:[email protected]>>
Subject: Re: [onap-discuss] [OOM][AAI]Request to AAI got access denied

First step – you should verify if AAF is running.  If you look at the logs for 
the aai-resources pod it will usually tell you if it can’t get an answer from 
AAF.

Thanks,
-jimmy

From: <[email protected]<mailto:[email protected]>> on 
behalf of "Ying, Ruoyu" <[email protected]<mailto:[email protected]>>
Reply-To: "[email protected]<mailto:[email protected]>" 
<[email protected]<mailto:[email protected]>>, 
"[email protected]<mailto:[email protected]>" 
<[email protected]<mailto:[email protected]>>
Date: Tuesday, October 30, 2018 at 9:00 AM
To: "[email protected]<mailto:[email protected]>" 
<[email protected]<mailto:[email protected]>>
Cc: "Ranganathan, Dileep" 
<[email protected]<mailto:[email protected]>>, "Huang, 
Haibin" <[email protected]<mailto:[email protected]>>
Subject: [onap-discuss] [OOM][AAI]Request to AAI got access denied

Hi AAI team,

Got an issue while curling AAI in OOF tenant in the integration lab. With Basic 
auth enabled and ssl cert verification off, the response of all the requests 
from AAI looks like this:
{
    "timestamp": 1540900280234,
    "status": 403,
    "error": "Forbidden",
    "message": "Access Denied",
    "path": "/aai/v14/cloud-infrastructure/complexes/complex/DLLSTX233"
}

Any solution or workaround to solve it?
Thanks.

Best Regards,
Ruoyu




-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#13388): https://lists.onap.org/g/onap-discuss/message/13388
Mute This Topic: https://lists.onap.org/mt/27791822/21656
Group Owner: [email protected]
Unsubscribe: https://lists.onap.org/g/onap-discuss/unsub  
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to