Hi all,

I am now able to access AAI after restarting the aaf-locate pod. Thanks for 
your help.
But it still maybe a bug here.

Best Regards,
Ruoyu

From: Ying, Ruoyu
Sent: Tuesday, October 30, 2018 9:24 PM
To: 'GATHMAN, JONATHAN C' <jg1...@att.com>; FORSYTH, JAMES <jf2...@att.com>; 
onap-discuss@lists.onap.org
Cc: Ranganathan, Dileep <dileep.ranganat...@intel.com>; Huang, Haibin 
<haibin.hu...@intel.com>
Subject: RE: [onap-discuss] [OOM][AAI]Request to AAI got access denied

Hi Jonathan,

We’re having this issue in both OOF and VFC tenant in the integration lab. And 
I got this issue after redeploying other components(I think AAI may also got 
upgraded at that time). And I check the aaf-locate service port, it seems fine 
here.
Thanks.

Best Regards,
Ruoyu

From: GATHMAN, JONATHAN C [mailto:jg1...@att.com]
Sent: Tuesday, October 30, 2018 9:18 PM
To: FORSYTH, JAMES <jf2...@att.com<mailto:jf2...@att.com>>; Ying, Ruoyu 
<ruoyu.y...@intel.com<mailto:ruoyu.y...@intel.com>>; 
onap-discuss@lists.onap.org<mailto:onap-discuss@lists.onap.org>
Cc: Ranganathan, Dileep 
<dileep.ranganat...@intel.com<mailto:dileep.ranganat...@intel.com>>; Huang, 
Haibin <haibin.hu...@intel.com<mailto:haibin.hu...@intel.com>>
Subject: Re: [onap-discuss] [OOM][AAI]Request to AAI got access denied

Is this on SB04?, and what time was the connection problem?

I have been monitoring SB04 all morning, and it continues to be fine.

The “seems to stop sometimes” is because it appears that SB04 is bounced, and 
there is something different about the Persistence mechanism on SB04, so that 
it doesn’t come up right all the time.  Otherwise, if no-one restarts, it is 
very stable.

I also checked early on “The Dailies” and they are up and functional as well.


--
Jonathan Gathman
Principled-System Architect
ATO Tech Dev/SEAT/Platform Architecture and Technology Management

AT&T Services, Inc.
2349 Oaker, Arnold, MO 63010
m  314-550-3312  |  
jonathan.gath...@us.att.com<mailto:jonathan.gath...@us.att.com>


From: "FORSYTH, JAMES" <jf2...@att.com<mailto:jf2...@att.com>>
Date: Tuesday, October 30, 2018 at 8:13 AM
To: "Ying, Ruoyu" <ruoyu.y...@intel.com<mailto:ruoyu.y...@intel.com>>, 
"onap-discuss@lists.onap.org<mailto:onap-discuss@lists.onap.org>" 
<onap-discuss@lists.onap.org<mailto:onap-discuss@lists.onap.org>>
Cc: "Ranganathan, Dileep" 
<dileep.ranganat...@intel.com<mailto:dileep.ranganat...@intel.com>>, "Huang, 
Haibin" <haibin.hu...@intel.com<mailto:haibin.hu...@intel.com>>, "GATHMAN, 
JONATHAN C" <jg1...@att.com<mailto:jg1...@att.com>>
Subject: Re: [onap-discuss] [OOM][AAI]Request to AAI got access denied

Hi, Ruoyu,

Yes, we’ve observed that the aaf-locate service stops sometimes and users get 
access denied in AAI.  AAF team, do you more info or a workaround?

Thanks,
jimmy

From: "Ying, Ruoyu" <ruoyu.y...@intel.com<mailto:ruoyu.y...@intel.com>>
Date: Tuesday, October 30, 2018 at 9:10 AM
To: "FORSYTH, JAMES" <jf2...@att.com<mailto:jf2...@att.com>>, 
"onap-discuss@lists.onap.org<mailto:onap-discuss@lists.onap.org>" 
<onap-discuss@lists.onap.org<mailto:onap-discuss@lists.onap.org>>
Cc: "Ranganathan, Dileep" 
<dileep.ranganat...@intel.com<mailto:dileep.ranganat...@intel.com>>, "Huang, 
Haibin" <haibin.hu...@intel.com<mailto:haibin.hu...@intel.com>>
Subject: RE: [onap-discuss] [OOM][AAI]Request to AAI got access denied

Hi jimmy,

I check the aaf pods, they are running normally.
However, I did see an error log inside aai-resources like this:
Authenticating Service unavailable from 10.42.192.221:38084 ( No Entries found 
for 
'https://aaf-locate.onap:8095/locate/AAF_NS.service:2.0<https://urldefense.proofpoint.com/v2/url?u=https-3A__aaf-2Dlocate.onap-3A8095_locate_AAF-5FNS.service-3A2.0&d=DwQGaQ&c=LFYZ-o9_HUMeMTSQicvjIg&r=Oej6QUk5p2KdqNEWySpOHA&m=ppCUj4qlFS8I48q0jwv4CT0RPvB8S_NXSh9SkEVDwWc&s=lN1MYjQy3wcoiCP2w259iCYN-iTtA0WRKRk26AwYxyQ&e=>'
 )

Any suggestion here? Thanks.

Best Regards,
Ruoyu

From: FORSYTH, JAMES [mailto:jf2...@att.com]
Sent: Tuesday, October 30, 2018 9:02 PM
To: onap-discuss@lists.onap.org<mailto:onap-discuss@lists.onap.org>; Ying, 
Ruoyu <ruoyu.y...@intel.com<mailto:ruoyu.y...@intel.com>>
Cc: Ranganathan, Dileep 
<dileep.ranganat...@intel.com<mailto:dileep.ranganat...@intel.com>>; Huang, 
Haibin <haibin.hu...@intel.com<mailto:haibin.hu...@intel.com>>
Subject: Re: [onap-discuss] [OOM][AAI]Request to AAI got access denied

First step – you should verify if AAF is running.  If you look at the logs for 
the aai-resources pod it will usually tell you if it can’t get an answer from 
AAF.

Thanks,
-jimmy

From: <onap-discuss@lists.onap.org<mailto:onap-discuss@lists.onap.org>> on 
behalf of "Ying, Ruoyu" <ruoyu.y...@intel.com<mailto:ruoyu.y...@intel.com>>
Reply-To: "onap-discuss@lists.onap.org<mailto:onap-discuss@lists.onap.org>" 
<onap-discuss@lists.onap.org<mailto:onap-discuss@lists.onap.org>>, 
"ruoyu.y...@intel.com<mailto:ruoyu.y...@intel.com>" 
<ruoyu.y...@intel.com<mailto:ruoyu.y...@intel.com>>
Date: Tuesday, October 30, 2018 at 9:00 AM
To: "onap-discuss@lists.onap.org<mailto:onap-discuss@lists.onap.org>" 
<onap-discuss@lists.onap.org<mailto:onap-discuss@lists.onap.org>>
Cc: "Ranganathan, Dileep" 
<dileep.ranganat...@intel.com<mailto:dileep.ranganat...@intel.com>>, "Huang, 
Haibin" <haibin.hu...@intel.com<mailto:haibin.hu...@intel.com>>
Subject: [onap-discuss] [OOM][AAI]Request to AAI got access denied

Hi AAI team,

Got an issue while curling AAI in OOF tenant in the integration lab. With Basic 
auth enabled and ssl cert verification off, the response of all the requests 
from AAI looks like this:
{
    "timestamp": 1540900280234,
    "status": 403,
    "error": "Forbidden",
    "message": "Access Denied",
    "path": "/aai/v14/cloud-infrastructure/complexes/complex/DLLSTX233"
}

Any solution or workaround to solve it?
Thanks.

Best Regards,
Ruoyu




-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#13392): https://lists.onap.org/g/onap-discuss/message/13392
Mute This Topic: https://lists.onap.org/mt/27791822/21656
Group Owner: onap-discuss+ow...@lists.onap.org
Unsubscribe: https://lists.onap.org/g/onap-discuss/unsub  
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to