簡介
本檔案介紹在升級到7.2.1版後,如何修正安全網路分析(SNA)管理員對的升級問題。
背景資訊
此處顯示的問題是,將輔助SNA管理員升級為版本7.2.1後,不能使用管理員帳戶登入。
問題
將輔助SNA管理器升級到版本7.2.1後,使用者無法使用管理員帳戶登入。錯誤為:
The authentication service was unable to fulfill your request. If this problem persists, contact your Stealthwatch administrator.
裝置在中央管理中顯示為關閉。
smc-users.log檔案中的錯誤與LSQ-5595 / SWD-15027中的故障一致。但是,嘗試的修復(刪除user.xml檔案並重新啟動SMC/tomcat服務)未解決問題。重建的user.xml檔案看起來與舊檔案相同。
2021-09-08 16:38:30,908 INFO [UserDAOImpl] reading /lancope/var/smc/config/users/admin/user.xml
2021-09-08 16:38:30,910 WARN [XmlWebApplicationContext] Exception encountered during context initialization - cancelling refresh attempt: org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'authenticateServiceImpl' defined in file [/opt/apache/tomcat7/webapps/smc-users/WEB-INF/classes/com/lancope/sws/smc/service/authenticateService/AuthenticateServiceImpl.class]: Unsatisfied dependency expressed through constructor parameter 3; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'usersService' defined in ServletContext resource [/WEB-INF/serviceContext.xml]: Cannot resolve reference to bean 'userDao' while setting bean property 'userDao'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'userDao' defined in ServletContext resource [/WEB-INF/daoContext.xml]: Bean instantiation via constructor failed; nested exception is org.springframework.beans.BeanInstantiationException: Failed to instantiate [com.lancope.sws.smc.user.data .UserDAOImpl]: Constructor threw exception; nested exception is com.lancope.server.table.TableResourceException: java.lang.NullPointerException
2021-09-08 16:38:30,912 ERROR [ContextLoader] Context initialization failed
此時無法升級主Manager。升級失敗,並顯示一條消息,表示無法與輔助SMC對話:
2021-09-07 22:21:02,157 - update-smc-7.2.1.2020.05.16.0002-02 - DEBUG - {u'status': u'Failed to upgrade appliance', u'timestamp': 1631053262.129825, u'message': u'We could not finish the Smart Licensing Readiness Check because the SMC/Central Manager at 10.128.208.46 is not responding. Restart your SMC and try to update this appliance again.', u'complete': 1, u'error': 1}.
刪除user.xml檔案後,主管理器和輔助管理器能夠進行複製,損壞的user.xml檔案從主管理器複製。
解決方案
刪除主目錄上的問題user.xml檔案,然後使用命令重新啟動lc-tomcat(主管理器仍位於版本7.1.1上) systemctl restart lc-tomcat
.然後刪除輔助Manager上的user.xml檔案,並使用命令重新啟動管理器清單 systemctl restart smc-manifest
.