Troubleshooting
Problem
In Cloud Pak for Business Automation(CP4BA), Resource registry shows the following errors in the dba-rr pod logs when any client tries to log in: "auth: authentication failed, invalid user ID or password"
Symptom
Review the oc logs output of dba-rr pods and confirm this message is seen:
"msg":"invalid authentication was requested","user":"writer","error":"auth: authentication failed, invalid user ID or password"
"msg":"invalid authentication was requested","user":"writer","error":"auth: authentication failed, invalid user ID or password"
Attempting to connect to etcd with the credentials from the resource registry admin secret(icp4adeploy-rr-admin-secret by default) has the same auth failure. Run this command from one of the resource registry pods.
etcdctl --cacert=/shared/resources/tls/ca-cert.pem --user=root:<root password> --insecure-skip-tls-verify get "" --from-key
The root password can be determine by checking the admin secret.Cause
This issue can happen if the passwords in the resource registry admin secret do not match what is stored in the etcd backup data that is used to initialize the etcd cluster. Because of this it is not supported to change the secret's password after etcd has been initialized.
The password might change because the secret was deleted and regenerated by the operator, someone updated a value in the secret, or configured a new admin secret name.
Resolving The Problem
Forcing etcd to reinitialize without backup data will allow it to be rebuilt with the new passwords
- Scale the cp4a-operator to 0.
- Login to one of the dba-rr pods. Then, remove the data in the /shared/backup directory.
- Delete all the dba-rr pods.
- Scale the cp4a-operator back to 1.
Once the cp4a-operator creates the dba-rr pods, they should be initialized with the new passwords from the secret.
Document Location
Worldwide
[{"Type":"MASTER","Line of Business":{"code":"LOB10","label":"Data and AI"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSBYVB","label":"IBM Cloud Pak for Business Automation"},"ARM Category":[{"code":"a8m0z0000001gWWAAY","label":"Other-\u003ECloudPak4Automation Platform"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]
Was this topic helpful?
Document Information
Modified date:
06 February 2024
UID
ibm17071654