Single Sign-On Requests Failing and Cisco IdS is in Out of Service State

From DocWiki

Jump to: navigation, search

Single Sign-On Requests Failing and Cisco IdS is in Out of Service State

Problem Summary Single Sign-On requests failing and Cisco IdS is in Out of Service state.
Error Message None
Possible Cause

Hazelcast grid on a node shuts down automatically if there is a high packet loss in the network (20% and above)

Verifying Grid has shutdown unexpectedly

2016-05-31 00:37:05.676 IST(+0530) [pool-2-thread-1] DEBUG com.cisco.ccbu.ids IdSStateProcessor.java:86 - processing the event IDS_DATA_GRID_STOPPED
2016-05-31 00:37:05.676 IST(+0530) [pool-2-thread-1] DEBUG com.cisco.ccbu.ids IdSStateProcessor.java:98 - event IDS_DATA_GRID_STOPPED is a failure event , so adding the event to the active list
2016-05-31 00:37:05.676 IST(+0530) [pool-2-thread-1] DEBUG com.cisco.ccbu.ids IdSStateProcessor.java:251 - the state corresponding to event IDS_CLUSTER_QUORUM_ERROR is STATE_PARTIAL_SERVICE
2016-05-31 00:37:05.676 IST(+0530) [pool-2-thread-1] DEBUG com.cisco.ccbu.ids IdSStateProcessor.java:251 - the state corresponding to event IDS_DATA_GRID_STOPPED is STATE_OUT_OF_SERVICE
2016-05-31 00:37:05.677 IST(+0530) [pool-2-thread-1] DEBUG com.cisco.ccbu.ids IdSStateProcessor.java:139 - Move to state STATE_OUT_OF_SERVICE because the list of active events [IDS_CLUSTER_QUORUM_ERROR, IDS_DATA_GRID_STOPPED]
2016-05-31 00:37:05.677 IST(+0530) [pool-2-thread-1] DEBUG com.cisco.ccbu.ids IdSStateManager.java:85 - event IDS_DATA_GRID_STOPPED posted to the processor resulted in the state: STATE_OUT_OF_SERVICE
2016-05-31 00:37:05.677 IST(+0530) [pool-2-thread-1] INFO com.cisco.ccbu.ids IdSStateManager.java:102 - changing the state as current state STATE_PARTIAL_SERVICE is different from new state STATE_OUT_OF_SERVICE as a result of IDS_DATA_GRID_STOPPED
2016-05-31 00:37:05.681 IST(+0530) [pool-1-thread-1] DEBUG com.cisco.ccbu.ids IdSAlarmManager.java:86 - Alarm IDS_DATA_GRID_STOPPED sent successfully
2016-05-31 00:37:05.681 IST(+0530) [pool-1-thread-1] DEBUG com.cisco.ccbu.ids IdSAlarmManager.java:124 - Alarm STATE_OUT_OF_SERVICE sent successfully 

If the above logs repeats then there is packet loss happening in network.

Recommended Action
Cisco IdS starts hazelcast back in such situations but this is a recovery mechanism. The issue gets resolved by fixing the network issues.

Release Release 11.5(1)
Associated CDETS # None


Rating: 0.0/5 (0 votes cast)

Personal tools