Skip to main content
Question

Issue with Airgap installtion IFS 23r1su08 and IFS Aurena IAM client pages gives a server fault

  • January 7, 2025
  • 1 reply
  • 50 views

Forum|alt.badge.img+7
  • Sidekick (Partner)

Hi nayone seen this issue. We have an Airgap installation but when accessing all kind if iam pages we get a server error. When looking into the odata server log we find this jave exception stack
 

com.ifsworld.fnd.common.exceptions.ODataProviderException:
Error 
while invoking method iamUserList().
  at com.ifsworld.fnd.storage.invoker.JavaOperationInvoker.invokeOperation(JavaOperationInvoker.java:166)
  at com.ifsworld.fnd.storage.invoker.JavaOperationInvoker.invoke(JavaOperationInvoker.java:91)
  at com.ifsworld.fnd.storage.invoker.BpaInvokerWrapper.invoke(BpaInvokerWrapper.java:168)
  at com.ifsworld.fnd.provider.processor.FndComplexCollectionProcessor.readComplexCollection(FndComplexCollectionProcessor.java:116)
  at org.apache.olingo.server.core.ODataDispatcher.handleComplexDispatching(ODataDispatcher.java:411)
  at org.apache.olingo.server.core.ODataDispatcher.handleFunctionDispatching(ODataDispatcher.java:207)
  at org.apache.olingo.server.core.ODataDispatcher.handleResourceDispatching(ODataDispatcher.java:148)
  at org.apache.olingo.server.core.ODataDispatcher.dispatch(ODataDispatcher.java:119)
  at org.apache.olingo.server.core.ODataHandlerImpl.processInternal(ODataHandlerImpl.java:168)
  at org.apache.olingo.server.core.ODataHandlerImpl.process(ODataHandlerImpl.java:89)
  at com.ifsworld.fnd.provider.ODataHandlerWrapper.process(ODataHandlerWrapper.java:64)
  at com.ifsworld.fnd.provider.ODataHandlerWrapper.process(ODataHandlerWrapper.java:77)
  at com.ifsworld.fnd.web.api.FndODataServletBase.serviceODataRequest(FndODataServletBase.java:330)
  at com.ifsworld.fnd.web.api.FndODataServletBase.serviceProjectionRequest(FndODataServletBase.java:163)
  at com.ifsworld.fnd.web.api.FndODataServletBase.service(FndODataServletBase.java:112)
  at javax.servlet.http.HttpServlet.service(HttpServlet.java:791)
  at com.ibm.ws.webcontainer.servlet.ServletWrapper.service(ServletWrapper.java:1258)
  at com.ibm.ws.webcontainer.servlet.ServletWrapper.handleRequest(ServletWrapper.java:746)
  at com.ibm.ws.webcontainer.servlet.ServletWrapper.handleRequest(ServletWrapper.java:443)
  at com.ibm.ws.webcontainer.filter.WebAppFilterChain.invokeTarget(WebAppFilterChain.java:193)
  at com.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter(WebAppFilterChain.java:98)
  at com.ifsworld.fnd.web.api.ResponseFilterBase.doFilter(ResponseFilterBase.java:60)
  at com.ibm.ws.webcontainer.filter.FilterInstanceWrapper.doFilter(FilterInstanceWrapper.java:201)
  at com.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter(WebAppFilterChain.java:91)
  at com.ifsworld.fnd.web.api.InitConfigurationFilterBase.doFilter(InitConfigurationFilterBase.java:202)
  at com.ibm.ws.webcontainer.filter.FilterInstanceWrapper.doFilter(FilterInstanceWrapper.java:201)
  at com.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter(WebAppFilterChain.java:91)
  at com.ibm.ws.security.jaspi.JaspiServletFilter.doFilter(JaspiServletFilter.java:56)
  at com.ibm.ws.webcontainer.filter.FilterInstanceWrapper.doFilter(FilterInstanceWrapper.java:201)
  at com.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter(WebAppFilterChain.java:91)
  at com.ibm.ws.webcontainer.filter.WebAppFilterManager.doFilter(WebAppFilterManager.java:1002)
  at com.ibm.ws.webcontainer.filter.WebAppFilterManager.invokeFilters(WebAppFilterManager.java:1140)
  at com.ibm.ws.webcontainer.webapp.WebApp.handleRequest(WebApp.java:5049)
  at com.ibm.ws.webcontainer.osgi.DynamicVirtualHost$2.handleRequest(DynamicVirtualHost.java:316)
  at com.ibm.ws.webcontainer.WebContainer.handleRequest(WebContainer.java:1007)
  at com.ibm.ws.webcontainer.osgi.DynamicVirtualHost$2.run(DynamicVirtualHost.java:281)
  at com.ibm.ws.http.dispatcher.internal.channel.HttpDispatcherLink$TaskWrapper.run(HttpDispatcherLink.java:1184)
  at com.ibm.ws.http.dispatcher.internal.channel.HttpDispatcherLink.wrapHandlerAndExecute(HttpDispatcherLink.java:453)
  at com.ibm.ws.http.dispatcher.internal.channel.HttpDispatcherLink.ready(HttpDispatcherLink.java:412)
  at com.ibm.ws.http.channel.internal.inbound.HttpInboundLink.handleDiscrimination(HttpInboundLink.java:566)
  at com.ibm.ws.http.channel.internal.inbound.HttpInboundLink.handleNewRequest(HttpInboundLink.java:500)
  at com.ibm.ws.http.channel.internal.inbound.HttpInboundLink.processRequest(HttpInboundLink.java:360)
  at com.ibm.ws.http.channel.internal.inbound.HttpICLReadCallback.complete(HttpICLReadCallback.java:70)
  at com.ibm.ws.tcpchannel.internal.WorkQueueManager.requestComplete(WorkQueueManager.java:504)
  at com.ibm.ws.tcpchannel.internal.WorkQueueManager.attemptIO(WorkQueueManager.java:574)
  at com.ibm.ws.tcpchannel.internal.WorkQueueManager.workerRun(WorkQueueManager.java:958)
  at com.ibm.ws.tcpchannel.internal.WorkQueueManager$Worker.run(WorkQueueManager.java:1047)
  at com.ibm.ws.threading.internal.ExecutorServiceImpl$RunnableWrapper.run(ExecutorServiceImpl.java:238)
  at java.base\/java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
  at java.base\/java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
  at java.base\/java.lang.Thread.run(Unknown Source)
Caused by: java.lang.reflect.InvocationTargetException
  at java.base\/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
  at java.base\/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
  at java.base\/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
  at java.base\/java.lang.reflect.Method.invoke(Unknown Source)
  at com.ifsworld.fnd.storage.invoker.JavaOperationInvoker.invokeOperation(JavaOperationInvoker.java:153)
  ... 
50 more
Caused by: java.lang.NullPointerException
  at com.ifsworld.fndadm.projection.util.IdentityAndAccessHandlingUtils.getTokenEndpoint(IdentityAndAccessHandlingUtils.java:211)
  at com.ifsworld.fndadm.projection.util.IdentityAndAccessHandlingUtils.getAccessToken(IdentityAndAccessHandlingUtils.java:216)
  at com.ifsworld.fndadm.projection.util.IdentityAndAccessHandlingUtils.getAccessTokenByROPC(IdentityAndAccessHandlingUtils.java:259)
  at com.ifsworld.fndadm.projection.util.IdentityAndAccessHandlingUtils.refetchTokens(IdentityAndAccessHandlingUtils.java:272)
  at com.ifsworld.fndadm.projection.util.IdentityAndAccessHandlingUtils.buildRequest(IdentityAndAccessHandlingUtils.java:338)
  at com.ifsworld.fndadm.projection.util.IdentityAndAccessHandlingUtils.getResource(IdentityAndAccessHandlingUtils.java:370)
  at com.ifsworld.fndadm.projection.util.IdentityAndAccessHandlingUtils.getResource(IdentityAndAccessHandlingUtils.java:390)
  at com.ifsworld.projection.IdentityAndAccessHandlingFunctionsImpl.iamUserList(IdentityAndAccessHandlingFunctionsImpl.java:279)
  ... 
55 more
 

Forum|alt.badge.img+11
  • Hero (Employee)
  • January 10, 2025

It doesn’t show in this stacktrace, but through other channels it was discovered that the issue seem to be a conflicting cidr of the internal k8s network.

The customer had added a zero to the default PodCidrRange in main_config.json which makes it conflict with “some” network resource in the internet public network ranges. (unclear exactly what)
"PodCidrRange":  "100.64.0.0/16"


We have updated the techdoc for 25r1 to be more clear that the k8s internal network (ifs.PodCidrRange) need to be a private network

i.e.
Use RFC 1918 Private IP Ranges: 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16 to avoid network overlap of other system IP's


Reply


Cookie policy

We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

 
Cookie settings