Join the Customer Advisory Board

WebSphere & Liberty CAB

Join this online group to communicate across IBM product users and experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Expand all | Collapse all

WAS 8.5.5.18 | Sync problem between dmgr and node agents

  • 1.  WAS 8.5.5.18 | Sync problem between dmgr and node agents

    Posted Fri December 01, 2023 04:24 AM

    Hi all!,

    In WAS 8.5.5.18 we have a cell with two nodes. The synchronization of the dmrg eith 2 agent nodes is not working, the exception shown in the logs of the node agent seems to be related to the certification chain: 

    [11/30/23 13:52:45:962 UTC] 0000016a NodeSync      E   ADMS0005E: The system is unable to generate synchronization request: com.ibm.websphere.management.exception.AdminException: Admin client connection to deployment manager is unavailable; nodeagent has not discovered the dmgr
    	at com.ibm.ws.management.sync.NodeSync.getAdminClient(NodeSync.java:552)
    	at com.ibm.ws.management.sync.NodeSync.getCellRepositoryEpoch(NodeSync.java:427)
    	at com.ibm.ws.management.sync.NodeSyncTask.doSync(NodeSyncTask.java:248)
    	at com.ibm.ws.management.sync.NodeSyncTask.run(NodeSyncTask.java:157)
    	at java.lang.Thread.run(Thread.java:822)

    The dmgr shows in the logs this error message:

    11/30/23 13:53:15:971 UTC] 000002c5 MultiSyncMana A   ADMS0207I: Node Synchronization state for node: WEPREODMDCSRVNode01 - initiate time: 2023.11.30 at 13:52:45:962 UTC
    complete time: 2023.11.30 at 13:52:45:971 UTC
    result: Error
    No update occurred.
    [11/30/23 13:53:15:971 UTC] 000002c5 MultiSyncMana A   ADMS0206I: The configuration synchronization failed for node: WEPREODMDCSRVNode01.
    [11/30/23 13:53:16:034 UTC] 000002c5 MultiSyncMana A   ADMS0203I: The automatic synchronization mode is enabled for node: WEPREODMDCSRVNode01.
    [11/30/23 13:53:16:034 UTC] 000002c5 MultiSyncMana A   ADMS0209W: The configuration synchronization complete for cell, errors occurred.

    The caducity of the server certificate was expiring yesterday and we imported the new certificate in the cell and in the nodes. We added also the certificate of the CA chain in the turst.p12 of the cell and the nodes.

    We re-started all and seems to be working but still the WAS console shows that the dmgr cannot synch with the nodes. Looks like the node agent cannot find the dmgr (nodeagent has not discovered the dmgr).

    ¿Is there something more that we need todo? 

    Thanks in advance.

    Best regards.



    ------------------------------
    Charo Álvarez Martínez
    Automation Architect
    DECIDE
    Madrid
    ------------------------------


  • 2.  RE: WAS 8.5.5.18 | Sync problem between dmgr and node agents

    Posted Mon December 04, 2023 02:05 AM

    From the logs it is hard to say what causes the issue. What I'd do is to stop all WAS servers on the failing node (including the nodeagent) and then run a `syncNode.sh` to manually sync the node and then startup the nodeagent again to see if the sync works again.

    What I've seen several times in the past was that the certificate used to secure the communication between the dmgr and nodeagent expired and the new certificate could not be synced (for example bacause the nodeagent was down). Therefore a manual sync should fix that. So I'd say give it a try and lets know the result.

    Have a good day, Hermann



    ------------------------------
    Hermann Huebler
    2innovate IT Consulting GmbH
    Vienna
    Austria

    #IBMChampion
    ------------------------------



  • 3.  RE: WAS 8.5.5.18 | Sync problem between dmgr and node agents

    Posted Thu December 14, 2023 07:54 AM
    Hi All!,
     
    Thanks Herman. As you suggested, we did manual sync and the problem was fixed. However, we cannot connect to the DataSource. The Exception shown in the logs of the node agent:
     
    [12/14/23 11:00:22:679 UTC] 0000008c DataSourceCon E   DSRA8040I: Failed to connect to the DataSource "jdbc/ilogDataSource".  Encountered java.sql.SQLException: The driver could not establish a secure connection to SQL Server by using Secure Sockets Layer (SSL) encryption. Error: "SQL Server did not return a response. The connection has been closed. ClientConnectionId:2c98d6a4-bd5e-48e0-9e5f-324f19da5b1b". DSRA0010E: SQL State = 08S01, Error Code = 0
    at com.microsoft.sqlserver.jdbc.SQLServerConnection.terminate(SQLServerConnection.java:1667)
    at com.microsoft.sqlserver.jdbc.TDSChannel.enableSSL(IOBuffer.java:1668)
    at com.microsoft.sqlserver.jdbc.SQLServerConnection.connectHelper(SQLServerConnection.java:1323)
    at com.microsoft.sqlserver.jdbc.SQLServerConnection.login(SQLServerConnection.java:991)
    at com.microsoft.sqlserver.jdbc.SQLServerConnection.connect(SQLServerConnection.java:827)
    at com.microsoft.sqlserver.jdbc.SQLServerDataSource.getConnectionInternal(SQLServerDataSource.java:621)
     
    The database server certificate is added to the certificate container (trust.p12) of the Cell and the Nodes.
    The environment is:
    • WebSphere Platform 8.5.5.18
    • Java version: 1.8.0_261
    • SQLDriver: sqljdbc4.jar

    The custom properties of the DataSource, as shown in the picture:

    Any suggestions?

    Thanks in advance.

    Best regards.



    ------------------------------
    Charo Álvarez Martínez
    Automation Architect
    DECIDE
    Madrid
    ------------------------------



  • 4.  RE: WAS 8.5.5.18 | Sync problem between dmgr and node agents

    Posted Thu December 14, 2023 10:35 AM

    Hello,

    is this the only error message you get when you try to connect? No further messages in the logs? The error says "SQL Server did not return a response" so are you sure the request hits teh SQL Server? Or is there probably a Firewall in between preventing the connection? What is the status of the sockets? If you start a tcpdump while trying to connect - which packets are flowing? You are trying to connect via SSL - does the DB server connect SSL? Any messages at the DB server side? 

    Hope that helps to investigate further but unforunately that's all I can say from the message. 

    Have a good day, Hermann

    P.S: I guess you are aware but your WebSphere Application Server code WAS 8.5.5.18 is quite outdated and old (over three! years). Not saying that it is related to the connection issue but definitely a (security) risk!



    ------------------------------
    Hermann Huebler
    2innovate IT Consulting GmbH
    Vienna
    Austria

    #IBMChampion
    ------------------------------



  • 5.  RE: WAS 8.5.5.18 | Sync problem between dmgr and node agents

    Posted Mon December 18, 2023 06:43 AM

    Hello Hermann,

    We have updated the JDBC Driver to 4.2 version, ant it worked.

    Thanks all!

    Best regards.



    ------------------------------
    Charo Álvarez Martínez
    Automation Architect
    DECIDE
    Madrid
    ------------------------------