Sorry I took so long...
I created NIFI-4237. A community person might want to polish my JIRA entry.
Thanks,
Russ
On 07/26/2017 11:47 AM, Andy LoPresto wrote:
Russell,
Thanks for following up and documenting this. If you are willing to
file a Jira, we can hopefully improve the error messaging to make this
easier for users to diagnose, and as there is already a ticket
(NIFI-3116 [1]) to remove Jasypt (the underlying library which is
generating the stacktrace), they may be done in conjunction. Thanks.
[1] https://issues.apache.org/jira/browse/NIFI-3116
Andy LoPresto
alopre...@apache.org <mailto:alopre...@apache.org>
/alopresto.apa...@gmail.com <mailto:alopresto.apa...@gmail.com>/
PGP Fingerprint: 70EC B3E5 98A6 5A3F D3C4 BACE 3C6E F65B 2F7D EF69
On Jul 26, 2017, at 8:39 AM, Russell Bateman <r...@windofkeltia.com
<mailto:r...@windofkeltia.com>> wrote:
Follow-up...
We use openJRE, so the JCE problem doesn't affect us.
The problem was as Mark suggested: Our Ansible instructions upgraded
NiFi and created a newnifi.sensitive.props.key. In /nifi.properties/
this property, if extant, is used to encrypt sensitive properties in
/flow.xml.gz/. Thus, upon relaunching NiFi, the wrong key was used to
decrypt resulting in the reported failure to start, /flow.xml.gz/ is
no longer useful.
How did we solve it?
We looked in the /nifi.properties.rpmsave/ file, what RPM does with a
file it's changed, and copied the old key from this property to paste
in over the newly generated key in /nifi.properties/. Relaunched,
NiFi worked with no problem. The full solution, in our case, is to
insist in Ansible that it not generate for and replace
nifi.sensitive.props.key with a new key.
Many thanks to Mark and Joe for their very immediate and useful help
saving us much time down!
Russ
On 07/26/2017 07:53 AM, Russell Bateman wrote:
Thanks for these suggestions, guys. I've only come in this morning
to this complaint on a customer's production server to which I don't
have access. So, I'm at the beginning of it, but I've never seen
this before and thought I'd ask in the meantime. Your suggestions
are invaluable; I'm sure that something like what you say must be
going on. I'll confer with the DevOps guys when they get in for the day.
Many thanks,
Russ
On 07/26/2017 07:46 AM, Joe Witt wrote:
Has the version of java being used changed by chance on the system?
And if so, or perhaps even if not, were the JCE extensions
installed/configured previously and now it is not? Other than that
the only other thing that comes to mind is if the sensitive properties
key was changed
On Wed, Jul 26, 2017 at 9:40 AM, Russell Bateman<r...@windofkeltia.com> wrote:
I'm getting this stack trace reported. I'm completely unfamiliar with this
problem or what could cause it--never having seen it before. I could use
some help here.
Thanks.
2017-07-25 23:23:31,148 WARN [main] org.apache.nifi.web.server.JettyServer
Failed to start web server... shutting down.
org.apache.nifi.encrypt.EncryptionException:
org.jasypt.exceptions.EncryptionOperationNotPossibleException
at
org.apache.nifi.encrypt.StringEncryptor.decrypt(StringEncryptor.java:149)
~[nifi-framework-core-1.1.2.jar:1.1.2]
at
org.apache.nifi.controller.serialization.FlowFromDOMFactory.decrypt(FlowFromDOMFactory.java:474)
~[nifi-framework-core-1.1.2.jar:1.1.2]
at
org.apache.nifi.controller.serialization.FlowFromDOMFactory.getProperties(FlowFromDOMFactory.java:411)
~[nifi-framework-core-1.1.2.jar:1.1.2]
at
org.apache.nifi.controller.serialization.FlowFromDOMFactory.getControllerService(FlowFromDOMFactory.java:96)
~[nifi-framework-core-1.1.2.jar:1.1.2]
at
org.apache.nifi.fingerprint.FingerprintFactory.addFlowControllerFingerprint(FingerprintFactory.java:211)
~[nifi-framework-core-1.1.2.jar:1.1.2]
at
org.apache.nifi.fingerprint.FingerprintFactory.createFingerprint(FingerprintFactory.java:176)
~[nifi-framework-core-1.1.2.jar:1.1.2]
at
org.apache.nifi.fingerprint.FingerprintFactory.createFingerprint(FingerprintFactory.java:146)
~[nifi-framework-core-1.1.2.jar:1.1.2]
at
org.apache.nifi.controller.StandardFlowSynchronizer.checkFlowInheritability(StandardFlowSynchronizer.java:1335)
~[nifi-framework-core-1.1.2.jar:1.1.2]
at
org.apache.nifi.controller.StandardFlowSynchronizer.checkFlowInheritability(StandardFlowSynchronizer.java:1325)
~[nifi-framework-core-1.1.2.jar:1.1.2]
at
org.apache.nifi.controller.StandardFlowSynchronizer.sync(StandardFlowSynchronizer.java:240)
~[nifi-framework-core-1.1.2.jar:1.1.2]
at
org.apache.nifi.controller.FlowController.synchronize(FlowController.java:1461)
~[nifi-framework-core-1.1.2.jar:1.1.2]
at
org.apache.nifi.persistence.StandardXMLFlowConfigurationDAO.load(StandardXMLFlowConfigurationDAO.java:83)
~[nifi-framework-core-1.1.2.jar:1.1.2]
at
org.apache.nifi.controller.StandardFlowService.loadFromBytes(StandardFlowService.java:678)
~[nifi-framework-core-1.1.2.jar:1.1.2]
at
org.apache.nifi.controller.StandardFlowService.load(StandardFlowService.java:508)
~[nifi-framework-core-1.1.2.jar:1.1.2]
at
org.apache.nifi.web.contextlistener.ApplicationStartupContextListener.contextInitialized(ApplicationStartupContextListener.java:69)
~[na:na]
at
org.eclipse.jetty.server.handler.ContextHandler.callContextInitialized(ContextHandler.java:837)
~[jetty-server-9.3.9.v20160517.jar:9.3.9.v20160517]
at
org.eclipse.jetty.servlet.ServletContextHandler.callContextInitialized(ServletContextHandler.java:533)
~[jetty-servlet-9.3.9.v20160517.jar:9.3.9.v20160517]
at
org.eclipse.jetty.server.handler.ContextHandler.startContext(ContextHandler.java:810)
~[jetty-server-9.3.9.v20160517.jar:9.3.9.v20160517]
at
org.eclipse.jetty.servlet.ServletContextHandler.startContext(ServletContextHandler.java:345)
~[jetty-servlet-9.3.9.v20160517.jar:9.3.9.v20160517]
at
org.eclipse.jetty.webapp.WebAppContext.startWebapp(WebAppContext.java:1404)
~[jetty-webapp-9.3.9.v20160517.jar:9.3.9.v20160517]
at
org.eclipse.jetty.webapp.WebAppContext.startContext(WebAppContext.java:1366)
~[jetty-webapp-9.3.9.v20160517.jar:9.3.9.v20160517]
at
org.eclipse.jetty.server.handler.ContextHandler.doStart(ContextHandler.java:772)
~[jetty-server-9.3.9.v20160517.jar:9.3.9.v20160517]
at
org.eclipse.jetty.servlet.ServletContextHandler.doStart(ServletContextHandler.java:262)
~[jetty-servlet-9.3.9.v20160517.jar:9.3.9.v20160517]
at
org.eclipse.jetty.webapp.WebAppContext.doStart(WebAppContext.java:520)
~[jetty-webapp-9.3.9.v20160517.jar:9.3.9.v20160517]
at
org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:68)
~[jetty-util-9.3.9.v20160517.jar:9.3.9.v20160517]
at
org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:132)
~[jetty-util-9.3.9.v20160517.jar:9.3.9.v20160517]
at
org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:114)
~[jetty-util-9.3.9.v20160517.jar:9.3.9.v20160517]
at
org.eclipse.jetty.server.handler.AbstractHandler.doStart(AbstractHandler.java:61)
~[jetty-server-9.3.9.v20160517.jar:9.3.9.v20160517]
at
org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:68)
~[jetty-util-9.3.9.v20160517.jar:9.3.9.v20160517]
at
org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:132)
~[jetty-util-9.3.9.v20160517.jar:9.3.9.v20160517]
at
org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:106)
~[jetty-util-9.3.9.v20160517.jar:9.3.9.v20160517]
at
org.eclipse.jetty.server.handler.AbstractHandler.doStart(AbstractHandler.java:61)
~[jetty-server-9.3.9.v20160517.jar:9.3.9.v20160517]
at
org.eclipse.jetty.server.handler.gzip.GzipHandler.doStart(GzipHandler.java:231)
~[jetty-server-9.3.9.v20160517.jar:9.3.9.v20160517]
at
org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:68)
~[jetty-util-9.3.9.v20160517.jar:9.3.9.v20160517]
at
org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:132)
~[jetty-util-9.3.9.v20160517.jar:9.3.9.v20160517]
at org.eclipse.jetty.server.Server.start(Server.java:411)
~[jetty-server-9.3.9.v20160517.jar:9.3.9.v20160517]
at
org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:106)
~[jetty-util-9.3.9.v20160517.jar:9.3.9.v20160517]
at
org.eclipse.jetty.server.handler.AbstractHandler.doStart(AbstractHandler.java:61)
~[jetty-server-9.3.9.v20160517.jar:9.3.9.v20160517]
at org.eclipse.jetty.server.Server.doStart(Server.java:378)
~[jetty-server-9.3.9.v20160517.jar:9.3.9.v20160517]
at
org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:68)
~[jetty-util-9.3.9.v20160517.jar:9.3.9.v20160517]
at
org.apache.nifi.web.server.JettyServer.start(JettyServer.java:675)
~[nifi-jetty-1.1.2.jar:1.1.2]
at org.apache.nifi.NiFi.<init>(NiFi.java:156)
[nifi-runtime-1.1.2.jar:1.1.2]
at org.apache.nifi.NiFi.main(NiFi.java:262)
[nifi-runtime-1.1.2.jar:1.1.2]
Caused by: org.jasypt.exceptions.EncryptionOperationNotPossibleException:
null
at
org.jasypt.encryption.pbe.StandardPBEByteEncryptor.decrypt(StandardPBEByteEncryptor.java:1055)
~[jasypt-1.9.2.jar:na]
at
org.jasypt.encryption.pbe.StandardPBEStringEncryptor.decrypt(StandardPBEStringEncryptor.java:725)
~[jasypt-1.9.2.jar:na]
at
org.apache.nifi.encrypt.StringEncryptor.decrypt(StringEncryptor.java:147)
~[nifi-framework-core-1.1.2.jar:1.1.2]
... 42 common frames omitted