This website uses Cookies. Click Accept to agree to our website's cookie use as described in our Privacy Policy. Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Log in to ask a question
Log in to ask a question

Apigee MTLS 4.51.00 issue

Posted on 07-28-2022 01:45 AM
WeeTatYeo
Bronze 1
Bronze 1
Reply posted on --/--/---- --:-- AM

Hi all,

I have error when i enabled all MTLS in all my nodes

IP1=192.xxx.xx.x # ZooKeeper, Cassandra
IP2=192.xxx.xx.x # ZooKeeper, Cassandra
IP3=192.xxx.xx.x # ZooKeeper, Cassandra
IP4=192.xxx.xx.x # Router, Message Processor
IP5=192.xxx.xx.x # Router, Message Processor
IP6=192.xxx.xx.x # Management Server, OpenLDAP, UI , Devportal
IP7=192.xxx.xx.x # Management Server, OpenLDAP, UI , Devportal
IP8=192.xxx.xx.x # Postgres (M)
IP9=192.xxx.xx.x # Postgres (S)
IP10=192.168.11.2 # Qpid
IP11=192.168.11.3 # Qpid
 
I have a lot of "Authentication failed" errors between management server/RMP and Cassandra nodes.
If i disable MTLS, there are no issue in connection, all apigee components are up and running.
Hence I suspected it due to Cassandra nodes and MTLS connections.
 
And when i start up Cassandra nodes, i have information below in console. Is this is root cause ?
 
Checking the status of Cassandra before shutdown
 Disabling thrift...
nodetool: Failed to connect to 'localhost:7199' - URISyntaxException: 'Malformed IPv6 address at index 7: rmi://[localhost]:7199'.
 Unable to disable thrift. Disabling binary...
nodetool: Failed to connect to 'localhost:7199' - URISyntaxException: 'Malformed IPv6 address at index 7: rmi://[localhost]:7199'.
 Unable to disable binary. Disabling gossip...
nodetool: Failed to connect to 'localhost:7199' - URISyntaxException: 'Malformed IPv6 address at index 7: rmi://[localhost]:7199'.
 Unable to disable gossip. Draining...
nodetool: Failed to connect to 'localhost:7199' - URISyntaxException: 'Malformed IPv6 address at index 7: rmi://[localhost]:7199'.
 Could not drain.done
apigee-service: apigee-cassandra: pid=89431
apigee-service: apigee-cassandra: OK
 


0 1 279
Topic Labels
0 Likes
1 REPLY 1

Posted on --/--/---- --:-- AM
ElangoD
Bronze 3
Bronze 3
Reply posted on --/--/---- --:-- AM

This issue cause when  Attempts to run nodetool with newer Java versions breaks because the host in the RMI URL is enclosed in square brackets (from NodeProbe.java class):

Solution:

1. Make sure Java version:

 

 

2. Add the "legacy" parsing flag when running nodetool, for example:

 

$ nodetool -Dcom.sun.jndi.rmiURLParsing=legacy status

 

0 Likes