7 Replies Latest reply on May 22, 2018 6:22 AM by Bill Robinson

    Unexpected Error During Compliance Testing

    Edwin Lindeman
      Share This:

      Were testing some of the DISA Red Hat Enterprise 6 rules and as a non BLAdmin I get an error during a test where its using TARGET.Remediation Properties. If I run it as a BLAdmin no issues. Below is screen shot with error and rule being executed. My initial thoughts its a permission somewhere and I have no idea where. Anyone else run into this  issue? Thank you in advance.

       

      screenshot.30.jpg

        • 1. Re: Unexpected Error During Compliance Testing
          Edwin Lindeman

          here is some additional appserver logs. Main thing that sticks out is No access allowed for Property Remediation This could be a probe message from the client to the authentication server.         ... 20 more         at com.bladelogic.om.infra.ast.visitor.conditionresult.evaluator.NewConditionResultSuccessVisitor.getPropertyValue(NewConditionResultSuccessVisitor.java:1428)         at com.bladelogic.om.infra.ast.evaluator.ReferenceEvaluator.evaluate(ReferenceEvaluator.java:106)         at com.bladelogic.om.infra.ast.evaluator.ReferenceEvaluator.evaluateRecursively(ReferenceEvaluator.java:172)         at com.bladelogic.om.infra.ast.evaluator.ReferenceEvaluator.evalSimple(ReferenceEvaluator.java:196)         at com.bladelogic.om.infra.model.typesystem.value.SimplePropertyReferenceBlValueImpl.evaluate(SimplePropertyReferenceBlValueImpl.java:394)         at com.bladelogic.om.infra.model.typesystem.value.SimplePropertyReferenceBlValueImpl.evaluateInternal(SimplePropertyReferenceBlValueImpl.java:420) Caused by: com.bladelogic.om.infra.model.typesystem.value.NoAccessBlValueException: No access allowed for Property: Remediation Properties.         ... 11 more         at com.bladelogic.om.infra.app.api.manage.APIMethodInvocationProvider.executeRequest(APIMethodInvocationProvider.java:54)         at com.bladelogic.om.infra.compliance.ComplianceRuleServiceRequestHandlerImpl.execute(ComplianceRuleServiceRequestHandlerImpl.java:90)         at com.bladelogic.om.infra.compliance.ComplianceRuleServiceRequestHandlerImpl.verifyComponent_3(ComplianceRuleServiceRequestHandlerImpl.java:196)         at com.bladelogic.om.infra.compliance.ComplianceRuleServiceImpl.verifyComponent(ComplianceRuleServiceImpl.java:265)         at com.bladelogic.om.infra.compliance.ComplianceRuleImpl.verifyComponent(ComplianceRuleImpl.java:766)         at com.bladelogic.om.infra.compliance.ComplianceRuleImpl.testCompliance(ComplianceRuleImpl.java:901)         at com.bladelogic.om.infra.ast.evaluator.NewConditionEvaluator.evaluate(NewConditionEvaluator.java:191)         at com.bladelogic.om.infra.model.condition.expression.PropertyConditionImpl.accept(PropertyConditionImpl.java:363)         at com.bladelogic.om.infra.ast.visitor.conditionresult.evaluator.NewConditionResultSuccessVisitor.visit(NewConditionResultSuccessVisitor.java:431)         at com.bladelogic.om.infra.ast.visitor.conditionresult.evaluator.NewConditionResultSuccessVisitor.getPropertyValue(NewConditionResultSuccessVisitor.java:1431) Caused by: java.lang.RuntimeException: com.bladelogic.om.infra.model.typesystem.value.NoAccessBlValueException: No access allowed for Property: Remediation Properties .         at com.bladelogic.om.infra.app.service.thread.BlBlockingThread.run(BlBlockingThread.java:95)         at com.bladelogic.om.infra.mfw.net.ClientWorkerThread.execute(ClientWorkerThread.java:27)         at com.bladelogic.om.infra.mfw.net.ClientWorkerThread.execute(ClientWorkerThread.java:101)         at com.bladelogic.om.infra.mfw.net.ClientWorkerThread.handleClientRequest(ClientWorkerThread.java:182)         at com.bladelogic.om.infra.mfw.net.ClientWorkerThread.processClientRequest(ClientWorkerThread.java:282)         at com.bladelogic.om.infra.mfw.net.ClientWorkerThread.processRequest(ClientWorkerThread.java:385)         at com.bladelogic.om.infra.message.app.frame.APIMessageFrame.service(APIMessageFrame.java:114)         at com.bladelogic.om.infra.app.api.manage.APIRequestManager.executeRequest(APIRequestManager.java:31)         at com.bladelogic.om.infra.app.service.routing.RoutingServiceImpl.invoke(RoutingServiceImpl.java:210)         at com.bladelogic.om.infra.app.service.routing.RoutingServiceImpl.invokeMethodLocally(RoutingServiceImpl.java:267)         at com.bladelogic.om.infra.app.api.manage.APIMethodInvocationProvider.invoke(APIMethodInvocationProvider.java:39)         at com.bladelogic.om.infra.app.api.manage.APIMethodInvocationProvider.executeRequest(APIMethodInvocationProvider.java:65) com.bladelogic.om.infra.mfw.util.BlException: Unexpected exception while handling request.com.bladelogic.om.infra.compliance.ComplianceRuleService_verifyComponent(com .bladelogic.om.infra.model.template.Template, com.bladelogic.om.infra.model.component.Component, com.bladelogic.om.infra.compliance.ComplianceRule) [23 Nov 2016 11:01:55,353] [Client-Connections-Thread-7] [WARN] [plinde01@EDC.DS1.USDA.GOV:NITC-OSB-Linux_OSAdmin:10.200.29.14] [Client] Unexpected exception while ha ndling request.com.bladelogic.om.infra.compliance.ComplianceRuleService_verifyComponent(com.bladelogic.om.infra.model.template.Template, com.bladelogic.om.infra.model .component.Component, com.bladelogic.om.infra.compliance.ComplianceRule)         at com.bladelogic.om.infra.app.service.thread.BlBlockingThread.run(BlBlockingThread.java:95)

          • 2. Re: Unexpected Error During Compliance Testing
            Bill Robinson

            does your role have access to modify the property it's trying to modify in the rule ?  there's probably an instance in the 'remeidation_properties' class for this server that your role lacks access to.

            • 3. Re: Unexpected Error During Compliance Testing
              Edwin Lindeman

              Thanks Bill

               

              That's exactly what it was. There was an instance in the Remediation Properties Custom Property Class section that only had BLAdmins access to it. Once I added that role to have access it went just fine.

               

              Thanks again

              • 4. Re: Unexpected Error During Compliance Testing

                where is the option to modify the property permission

                • 5. Re: Unexpected Error During Compliance Testing

                  I am running compliance job on a linux server with non BLAdmin role "Prod_CAS" but it gives me error as below

                   

                  com.bladelogic.om.infra.model.typesystem.value.NoAccessBlValueException: No access allowed for Property: Remediation Properties.

                   

                  I gave permission (*) on target and reran the job but still giving same error.

                   

                  Please help

                   

                   

                   

                  • 6. Re: Unexpected Error During Compliance Testing
                    Bill Robinson

                    you can open the property instance and there should be a tab in the window that pops up.

                    • 7. Re: Unexpected Error During Compliance Testing
                      Bill Robinson
                      com.bladelogic.om.infra.model.typesystem.value.NoAccessBlValueException: No access allowed for Property: Remediation Properties.

                      there's a Remediation Properties class that contains a property instance for this server.  the role running the job needs some level of access to this instance.