3 Replies Latest reply on Nov 23, 2016 2:22 PM by Edwin Lindeman

    Unexpected Error During Compliance Testing

    Edwin Lindeman

      Were testing some of the DISA Red Hat Enterprise 6 rules and as a non BLAdmin I get an error during a test where its using TARGET.Remediation Properties. If I run it as a BLAdmin no issues. Below is screen shot with error and rule being executed. My initial thoughts its a permission somewhere and I have no idea where. Anyone else run into this  issue? Thank you in advance.

       

      screenshot.30.jpg

        • 1. Re: Unexpected Error During Compliance Testing
          Edwin Lindeman

          here is some additional appserver logs. Main thing that sticks out is No access allowed for Property Remediation This could be a probe message from the client to the authentication server.         ... 20 more         at com.bladelogic.om.infra.ast.visitor.conditionresult.evaluator.NewConditionResultSuccessVisitor.getPropertyValue(NewConditionResultSuccessVisitor.java:1428)         at com.bladelogic.om.infra.ast.evaluator.ReferenceEvaluator.evaluate(ReferenceEvaluator.java:106)         at com.bladelogic.om.infra.ast.evaluator.ReferenceEvaluator.evaluateRecursively(ReferenceEvaluator.java:172)         at com.bladelogic.om.infra.ast.evaluator.ReferenceEvaluator.evalSimple(ReferenceEvaluator.java:196)         at com.bladelogic.om.infra.model.typesystem.value.SimplePropertyReferenceBlValueImpl.evaluate(SimplePropertyReferenceBlValueImpl.java:394)         at com.bladelogic.om.infra.model.typesystem.value.SimplePropertyReferenceBlValueImpl.evaluateInternal(SimplePropertyReferenceBlValueImpl.java:420) Caused by: com.bladelogic.om.infra.model.typesystem.value.NoAccessBlValueException: No access allowed for Property: Remediation Properties.         ... 11 more         at com.bladelogic.om.infra.app.api.manage.APIMethodInvocationProvider.executeRequest(APIMethodInvocationProvider.java:54)         at com.bladelogic.om.infra.compliance.ComplianceRuleServiceRequestHandlerImpl.execute(ComplianceRuleServiceRequestHandlerImpl.java:90)         at com.bladelogic.om.infra.compliance.ComplianceRuleServiceRequestHandlerImpl.verifyComponent_3(ComplianceRuleServiceRequestHandlerImpl.java:196)         at com.bladelogic.om.infra.compliance.ComplianceRuleServiceImpl.verifyComponent(ComplianceRuleServiceImpl.java:265)         at com.bladelogic.om.infra.compliance.ComplianceRuleImpl.verifyComponent(ComplianceRuleImpl.java:766)         at com.bladelogic.om.infra.compliance.ComplianceRuleImpl.testCompliance(ComplianceRuleImpl.java:901)         at com.bladelogic.om.infra.ast.evaluator.NewConditionEvaluator.evaluate(NewConditionEvaluator.java:191)         at com.bladelogic.om.infra.model.condition.expression.PropertyConditionImpl.accept(PropertyConditionImpl.java:363)         at com.bladelogic.om.infra.ast.visitor.conditionresult.evaluator.NewConditionResultSuccessVisitor.visit(NewConditionResultSuccessVisitor.java:431)         at com.bladelogic.om.infra.ast.visitor.conditionresult.evaluator.NewConditionResultSuccessVisitor.getPropertyValue(NewConditionResultSuccessVisitor.java:1431) Caused by: java.lang.RuntimeException: com.bladelogic.om.infra.model.typesystem.value.NoAccessBlValueException: No access allowed for Property: Remediation Properties .         at com.bladelogic.om.infra.app.service.thread.BlBlockingThread.run(BlBlockingThread.java:95)         at com.bladelogic.om.infra.mfw.net.ClientWorkerThread.execute(ClientWorkerThread.java:27)         at com.bladelogic.om.infra.mfw.net.ClientWorkerThread.execute(ClientWorkerThread.java:101)         at com.bladelogic.om.infra.mfw.net.ClientWorkerThread.handleClientRequest(ClientWorkerThread.java:182)         at com.bladelogic.om.infra.mfw.net.ClientWorkerThread.processClientRequest(ClientWorkerThread.java:282)         at com.bladelogic.om.infra.mfw.net.ClientWorkerThread.processRequest(ClientWorkerThread.java:385)         at com.bladelogic.om.infra.message.app.frame.APIMessageFrame.service(APIMessageFrame.java:114)         at com.bladelogic.om.infra.app.api.manage.APIRequestManager.executeRequest(APIRequestManager.java:31)         at com.bladelogic.om.infra.app.service.routing.RoutingServiceImpl.invoke(RoutingServiceImpl.java:210)         at com.bladelogic.om.infra.app.service.routing.RoutingServiceImpl.invokeMethodLocally(RoutingServiceImpl.java:267)         at com.bladelogic.om.infra.app.api.manage.APIMethodInvocationProvider.invoke(APIMethodInvocationProvider.java:39)         at com.bladelogic.om.infra.app.api.manage.APIMethodInvocationProvider.executeRequest(APIMethodInvocationProvider.java:65) com.bladelogic.om.infra.mfw.util.BlException: Unexpected exception while handling request.com.bladelogic.om.infra.compliance.ComplianceRuleService_verifyComponent(com .bladelogic.om.infra.model.template.Template, com.bladelogic.om.infra.model.component.Component, com.bladelogic.om.infra.compliance.ComplianceRule) [23 Nov 2016 11:01:55,353] [Client-Connections-Thread-7] [WARN] [plinde01@EDC.DS1.USDA.GOV:NITC-OSB-Linux_OSAdmin:10.200.29.14] [Client] Unexpected exception while ha ndling request.com.bladelogic.om.infra.compliance.ComplianceRuleService_verifyComponent(com.bladelogic.om.infra.model.template.Template, com.bladelogic.om.infra.model .component.Component, com.bladelogic.om.infra.compliance.ComplianceRule)         at com.bladelogic.om.infra.app.service.thread.BlBlockingThread.run(BlBlockingThread.java:95)

          • 2. Re: Unexpected Error During Compliance Testing
            Bill Robinson

            does your role have access to modify the property it's trying to modify in the rule ?  there's probably an instance in the 'remeidation_properties' class for this server that your role lacks access to.

            • 3. Re: Unexpected Error During Compliance Testing
              Edwin Lindeman

              Thanks Bill

               

              That's exactly what it was. There was an instance in the Remediation Properties Custom Property Class section that only had BLAdmins access to it. Once I added that role to have access it went just fine.

               

              Thanks again