IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  Upgrading from 9.0.7.2 to 10.0.4 problem with Virtual junction

    Posted Tue October 11, 2022 10:27 AM
    Has anyone encountered any issue with upgrading from 9.0.7.2 to 10.0.4?  We upgrade our Production ISAM over the weekend.  All standard junctions connected fine to backend server, but our one virtual junction is a problem.  It usually comes back as running but appears not to be HTTP server.  I attempted to delete junction before upgrade and recreate it after but same issue.  Below is some of the errors we are receiving on that WebSEAL instance.

    DPWAD0432E Failed to execute the server task 'cluster last-modified' on dph-webseald-ccf084samp1.illinois.gov: HPDBA0219E An error occurred reading data from an SSL connection.
    DPWAD0438E Failed to synchronize with the cluster master
    DPWAD0405E Failed to synchronize the WebSEAL server.

    Unable to delete this virtual junction icare from the proxy on either ISAM appliance in the cluster.

    System Error

    DPWWM2071E Could not delete Virtual Host Junction
    DPWWA1225E Could not delete entry from junction database

    ------------------------------
    Patrick Davis
    ------------------------------


  • 2.  RE: Upgrading from 9.0.7.2 to 10.0.4 problem with Virtual junction

    Posted Tue October 11, 2022 04:18 PM

    Patrick,

     

    This doesn't appear to be an issue with your junction, but an issue with the policy server communicating with the WebSEAL instance which is hosting the junction.  I would check that the machine on which the policy server is running is able to contact the machine which is running the dph-webseald-ccf084samp1.illinois.gov instance.

     

    Scott A. Exton
    Senior Software Engineer
    Chief Programmer - IBM Security Verify Access
    IBM Master Inventor

    cid4122760825*<a href=image002.png@01D85F83.85516C50">

     

     

     




    Original Message


  • 3.  RE: Upgrading from 9.0.7.2 to 10.0.4 problem with Virtual junction

    Posted Tue October 11, 2022 04:28 PM
    Thanks for replying Scott.  The policy server runs on the 1st master appliance as one of the WebSEAL instances that has the issue.  Why would the policy server not be able to contact the dph-webseald-ccf084samp1.illinois.gov? Did you find my ticket?

    ------------------------------
    Patrick Davis
    ------------------------------

    Original Message


  • 4.  RE: Upgrading from 9.0.7.2 to 10.0.4 problem with Virtual junction

    Posted Tue October 11, 2022 05:34 PM

    Patrick,

     

    There are numerous reasons as to why the policy server might not be able to communicate with the WebSEAL server.  It could be a DNS resolution issue, a networking issue, or an issue with negotiating the SSL session.  I would suggest that you take a look at the policy server log file to see if it provides further information as to why it can't communicate with the WebSEAL server.

     

    If you have already opened a support ticket with IBM I would suggest that you work with the support team to further isolate and debug your problem.

     

    Thanks.

     

     

    Scott A. Exton
    Senior Software Engineer
    Chief Programmer - IBM Security Verify Access
    IBM Master Inventor

    cid4122760825*<a href=image002.png@01D85F83.85516C50">

     

     

     




    Original Message


Related Content