IBM FlashSystem

IBM FlashSystem

Find answers and share expertise on IBM FlashSystem


#Storage
 View Only
  • 1.  Unexpected authentication behavior with Spectrum Virtualize API

    Posted Tue July 11, 2023 03:17 AM

    Hello,
      in our company's use case, we have a FS5100 that has two user accounts. One user is in the SecurityAdmin user group, the other is in the Monitor group. Before, we would use the Spectrum Virtualize resful API to acquire the disks' status by authenticating with the user in the Monitor group. After a while, the Monitor group user could no longer authenticate successfully, returning a "NodeUsernameInvalid: Node username invalid" response. The SecurtiyAdmin user could still successfully authenticate. We are looking to restore the Monitor user's access to the restful API. We are certain the Monitor user's password is unchanged since it can still log into the web UI and connect with ssh. We also could not find any records of any actions or configuration changes in the logs that would provide any clues to why the Monitor user would suddenly fail to authenticate. What might be the cause for this and how can we go about troubleshooting this issue?



    ------------------------------
    Cloud Comp
    ------------------------------


  • 2.  RE: Unexpected authentication behavior with Spectrum Virtualize API

    Posted Wed July 12, 2023 02:06 AM

    Hello Cloud Comp,

    What code level is your FS5100 running? I had seen this behaviour once on 8.3.1 code level.

    The workaround applied that resolved this was to run below CLI command. For being this a Service Assistant command (satask) it requires login with superuser account.

    satask restartservice -service cfrest



    ------------------------------
    Best regards, 

    Christian Schroeder
    IBM Storage Virtualize Support with Passion
    ------------------------------



  • 3.  RE: Unexpected authentication behavior with Spectrum Virtualize API

    Posted Thu July 13, 2023 04:08 AM

    Hello,
      if by code level you are referring to software version, the version number as indicated in the web UI is 8.4.0.3.
    After restarting the service using the CLI command, the Monitor user can now authenticate normally again. Is there any additional info on the cause of this issue, and if it is a bug, are any bugfixes or permanent solutions available?

    Thanks for your assistance.



    ------------------------------
    Cloud Comp
    ------------------------------



  • 4.  RE: Unexpected authentication behavior with Spectrum Virtualize API

    Posted Thu July 13, 2023 04:54 AM

    This behaviour you observed was not necessarily caused by a bug as such. Most likely the reason was some kind of out-of-memory condition, which caused the cfrest service, which drives the RESTful API back-end, not to work as expected. This is hard to diagnose further without support data.

    Eventually, excessive monitoring itself may have contributed to this, e.g. by querying the system (too) frequently. 

    My advise is to update the FS5100 to software version 8.4.0.11 available from IBM Fix Central.

    The V8.4 Release Notes list several fixes and improvements with regards to handling of out-of-memory conditions.



    ------------------------------
    Best regards, 

    Christian Schroeder
    IBM Storage Virtualize Support with Passion
    ------------------------------



  • 5.  RE: Unexpected authentication behavior with Spectrum Virtualize API

    Posted Sun August 20, 2023 06:20 AM

    Did the workaround as suggested by @christian helped ?



    ------------------------------
    Sandeep Sharma
    ------------------------------