Unable to Login to UI after upgrade from 4.16.01 to 4.16.05

After the upgrade of LDAP from 4.16.01 to 4.16.05, we are seeing the following issues:

  1. Unable to login to edge UI
    Unknown username and password combination.
    
  2. Unable to start management server which is in dead state.
Solved Solved
0 1 440
1 ACCEPTED SOLUTION

  1. Checked the system.log of Management server and noticed the following exception in it:
    2017-12-09 02:08:12,521 main ERROR KERNEL - MicroKernel.deployAll() : MicroKernel.deployAll() : Error in deploying the deployment : ZooKeeperService 
    com.apigee.rest.framework.security.UnAuthorizedException: Invalid EmailId Password for authentication 
    at com.apigee.rbac.datastore.ldap.LdapContextFactory.logAndThrowAuthnFailedException(LdapContextFactory.java:149) ~[rbac-1.0.0.jar:na] 
    at com.apigee.rbac.datastore.ldap.LdapContextFactory.createDirCtx(LdapContextFactory.java:91) 
    ...<snipped>
    	
  2. The stacktrace indicated that we are passing incorrect email id/password to LDAP from the management server.
  3. During the upgrade of LDAP, the password is changed to a new password.
  4. However, this new password was not updated in the management server. The management server was still using the old password and as a result the authentication failed.
  5. Updated the new password on the Management Server node:
    /<inst_root>/apigee/apigee-service/bin/apigee-service edge-management-server store_ldap_credentials -p newPword
    
  6. After this, the management server started successfully without any errors.
  7. We were also able to login to UI successfully.

View solution in original post

1 REPLY 1

  1. Checked the system.log of Management server and noticed the following exception in it:
    2017-12-09 02:08:12,521 main ERROR KERNEL - MicroKernel.deployAll() : MicroKernel.deployAll() : Error in deploying the deployment : ZooKeeperService 
    com.apigee.rest.framework.security.UnAuthorizedException: Invalid EmailId Password for authentication 
    at com.apigee.rbac.datastore.ldap.LdapContextFactory.logAndThrowAuthnFailedException(LdapContextFactory.java:149) ~[rbac-1.0.0.jar:na] 
    at com.apigee.rbac.datastore.ldap.LdapContextFactory.createDirCtx(LdapContextFactory.java:91) 
    ...<snipped>
    	
  2. The stacktrace indicated that we are passing incorrect email id/password to LDAP from the management server.
  3. During the upgrade of LDAP, the password is changed to a new password.
  4. However, this new password was not updated in the management server. The management server was still using the old password and as a result the authentication failed.
  5. Updated the new password on the Management Server node:
    /<inst_root>/apigee/apigee-service/bin/apigee-service edge-management-server store_ldap_credentials -p newPword
    
  6. After this, the management server started successfully without any errors.
  7. We were also able to login to UI successfully.