Can I delete the "default" policy manager zone in CPPM?

Aruba Employee
Q:

Can I delete the "default" policy manager zone in CPPM? Will that create any issue?



A:

No, it's not recommended to delete "default" policy manager zone. In CPPM 6.6 a validation is enabled which prevails the user from  deleting the default policy manager zone and  will display the following error.

 

If the default zone is deleted it will create problem in a cluster setup. Administrator will not be able to add Subscriber to the cluster and it will fail with below errors:

2016-09-02 18:13:21,570 INFO   Tips.Db DbSetupSubscriber ******************************************
2016-09-02 18:13:21,571 INFO   Tips.Db DbSetupSubscriber ******* Starting DbSetupSubscriber *******
2016-09-02 18:13:21,571 INFO   Tips.Db DbSetupSubscriber ******************************************
...
2016-09-02 18:18:04,896 ERROR  Tips.Db DbSetupSubscriber Adding entry to publisher failed. StatusMsgList = ['ERROR - Adding subscriber node entry failed. Host=svr-orw-nac-02.wv.mentorg.com Management IP=xxx.xxx.xx.xx']
2016-09-02 18:18:04,897 ERROR  OUT  DbSetupSubscriber Adding entry to publisher failed
2016-09-02 18:18:04,897 ERROR  Tips.Db DbSetupSubscriber Adding node entry to publisher failed
Traceback (most recent call last):
  File "/usr/local/avenda/tips/lib64/python2.4/DbSetupSubscriber.py", line 67, in do_setup_subscriber
    conn_info_list = _add_node_entry_inpublisher(publisher_ip, publisher_password)
  File "/usr/local/avenda/tips/lib64/python2.4/DbSetupSubscriber.py", line 117, in _add_node_entry_inpublisher
    conn_info_list = _do_publisher_check_and_add_entry(publisher_ip, publisher_password)
  File "/usr/local/avenda/tips/lib64/python2.4/DbSetupSubscriber.py", line 244, in _do_publisher_check_and_add_entry
    raise TipsException(msg)
TipsException: Adding entry to publisher failed
2016-09-02 18:18:04,898 ERROR  OUT  DbSetupSubscriber Check that publisher is accessible and the password is correct
2016-09-02 18:18:04,898 ERROR  OUT  DbSetupSubscriber Verify that publisher runs the same software version as this node
2016-09-02 18:18:04,899 ERROR  OUT  DbSetupSubscriber Verify that publisher does not contain a duplicate entry for this node
2016-09-02 18:18:04,953 ERROR  Tips.Db DbSetupSubscriber Exception setting up local machine as subscriber. Publisher IP=xxx.xxx.xx.xx
Traceback (most recent call last):
  File "/usr/local/avenda/tips/bin/DbSetupSubscriber", line 79, in <module>
    restoreLocalNodeConfig, createBackup)
  File "/usr/local/avenda/tips/lib64/python2.4/DbSetupSubscriber.py", line 67, in do_setup_subscriber
    conn_info_list = _add_node_entry_inpublisher(publisher_ip, publisher_password)
  File "/usr/local/avenda/tips/lib64/python2.4/DbSetupSubscriber.py", line 117, in _add_node_entry_inpublisher
    conn_info_list = _do_publisher_check_and_add_entry(publisher_ip, publisher_password)
  File "/usr/local/avenda/tips/lib64/python2.4/DbSetupSubscriber.py", line 244, in _do_publisher_check_and_add_entry
    raise TipsException(msg)
TipsException: Adding entry to publisher failed
2016-09-02 18:18:04,953 ERROR  OUT  DbSetupSubscriber Setting up subscriber failed

 

NOTE:  Administrator would need to collect logs from ClearPass [ Policy Manager » Administration » Server Manager » Server Configuration » Collect Logs]. In the logs the above mentioned error can be verified in PolicyManagerLogs\platform-utils\platform.log.*

This happens because, deletion of  default zone will cause the insert operation for new node to fail in the publisher.  

In this scenario if we re-add the default zone and try to bring the cluster setup it should work.

 

Version history
Revision #:
1 of 1
Last update:
2 weeks ago
Updated by:
 
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: