Issue with importing a group during active directory setup: "Bad request LDAP group could not be found based on search criteria..." - ibm-cloud-private

After setting up LDAP connection successfully, I'm attempting to import a group into my ICP so that users within our active directory can log into the ICP platform. On the Import Group screen, I've attempted to use many different variations of CN= OU= but I'm not sure what the fields should contain and keep getting the following error: "Bad request LDAP group could not be found based on search criteria. Please refine your search and try again."

Which ICP release are you used? 2.1.0 or 2.1.0.1? You can run below command to check:
docker images | grep icp-inception
It should be a known issue for ICP 2.1.0, please upgrade ICP to 2.1.0.1 if you are using 2.1.0, thanks.

Related

Fortinet FortiGate logs re not getting inserted in elastic search using fleet integration

Can someone please assist me, what all settings I can cross check at fortinet side to ensure that syslog matches Fortinet FortiGate logs integration requirement?
Current status:
Integration and all required assets are installed in kiana.
No error and warn noticed in elastic agent logs.
OLD question:
Could you please assist me on how I can add RFC3164 version to
logs-fortinet.firewall-1.7.2 ingest pipeline?
ALso, is it possible to add RFC3103 (using syslog_pri filter or kv filter) if yes, please assist with some examples to parse data?

How to list all Websphere installed applications for a given Middleware server using jython

I have a Websphere 8.5.5.12 installation with multiple applications running on it. For a given Middleware Server, I'd like to be able to list all applications associated with it using Jython.
I have gone as far as writing this code:
wsadmin>print AdminApp.list("WebSphere:cell=myCell,node=myNode")
However this is retrieving applications for a different Dynamic Cluster
If I add a specific server, it errors out
wsadmin>print AdminApp.list("WebSphere:cell=myCell,server=myServer")
ADMA0184E: myServer is not a valid target.
Your query should look like:
wsadmin>AdminApp.list("WebSphere:cell=myCell,node=myNode,server=server1")
It appears you're missing the node identifier in your query. And if wsadmin still returns "myServer is not a valid target", then the server name is wrong, try looking at your app server profile directory structure to double check it.

Websphere instalation v 7 Error

I'm trying to install websphere application server v7
I followed the steps
and when I click on next after after entering security administration password I got this error message
System Prerequisite Check
The system prerequisite check failed. The error messages are as follows:
 
Unable to retrieve information from the minimal service level (MSL) file of the installation.
thanks for helping
You can use the instructions in this IBM Technote to disable MSL checking (you'll need to substitute v70 for v80 in the property name). I must also point out that you're trying to install a version of WAS that goes out of service in 5 months. You may instead want to invest in installation of a more modern version of WAS like v9.

Elastic Search JDBC River Plugin SQL Server Integrated Security

So I've been working on implementing elastic search using the JDBC River plugin to get data from our SQL Server DB into elastic search.
I've got it working fine using the SQL Server credentials, but trying to use integrated security doesn't work. It will create the index, but it doesn't have data in it.
The parameters I've been using are:
PUT /_river/test_river/_meta
{
"type":"jdbc",
"jdbc":
{
"driver":"com.microsoft.sqlserver.jdbc.SQLServerDriver",
"url":"jdbc:sqlserver://testServer:1433;databaseName=TestDb;
integratedSecurity=true;",
"user":"",
"password":"",
"sql": "select * from users",
"poll":"30s",
"index":"testindex",
"type":"testusers"
}
}
I've tried quite a few things, including removing the user and password fields completely, removing integratedSecurity=true, but it gave the same result.
I've checked on their github for the river plugin and it says this issue was fixed back in January, but it still doesn't seem to be working.
Also I'm using elastic search version: 1.5.1
and jdbc river plugin version : 1.4.0.10
Any help would be much appreciated
Get rid of the user and password options. You're not gonna need them.
Check the console when running elasticserch.bat, you should see an error message when it tries to update the river. I'm going to go out on a limb and assume you're probably seeing an error stating that the file sqljdbc_auth.dll can't be found. If this is the case, you can download this file from here and copy the x64 version of sqljdbc_auth.dll to your java lib folder. For me, this folder is C:\ProgramData\Oracle\Java\javapath but you can type echo %path% in a console window to find yours.
Once you have followed these steps, restart elasticsearch.bat, and it should start processing your river. If not, post back with the output you're seeing when running elasticsearch.bat.

DB2 Full Text Search IQQD0040E Error

I have a production database running DB2 at 10.1.2 workgroup (OpenSuse 12.2) and I have Full Text Search running pretty well there. Now I'm trying to build a test enviroment, but when I turn over de production backup into test machine with 10.1.2 express-c the FTS is presenting this error:
<message>IQQD0040E The client specified the wrong authentication token.
com.ibm.es.nuvo.inyo.common.InyoFactoryWrapper.authenticate(InyoFactoryWrapper.java:203)
com.ibm.es.nuvo.inyo.common.InyoFactoryWrapper.getHandler(InyoFactoryWrapper.java:85)
com.ibm.es.nuvo.inyo.common.InyoServer$InyoListener.run(InyoServer.java:425)
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1121)
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:614)
java.lang.Thread.run(Thread.java:769)</message>
The redbook says to me that this error cause is: "Usually this error occurs when there are 2 or more text search instances configured with the same port number and one instance is already running".
I've already searched other instances but I've only found one. So "usually" does not apply to my situation.
Anyone know what else I can do to fix that?
Best regards,
jacker
I've found out a solution. When the backup is transported to a new instance of DB2, de FTS application engage it communication with a token. After restored, we just need to go to the bin directory of FTS, commonly at /home/db2inst1/db2tss/bin and run this command:
configTool generateToken -seed <username> -configPath ~/sqllib/db2tss/config
Hope this help anyone who's passing by this trouble.
Regards.

Resources