Why do I get error "A system error occurred" from i2 Analyst's Notebook after logging into the Information Store?

Troubleshooting

Problem

As the system administrator, I made some changes to the Security schema in i2 Analyze, ran the toolkit commands to deploy and start the opal-server with no errors. However, when I log in to access the Information Store from i2 Analyst's Notebook, I get an error stating "A system error occurred."

Another possible error from i2 Analyst's Notebook can state "The server at 'http://<hostname>/opal' is unavailable. Log in to the server when it becomes available again."

However, when I log in to the opal server from the web client, IBM i2 Enterprise Insight Analysis Investigate, I can log in with no error.

Diagnosing The Problem

There are two log files to check whether you hit the problem described in this technote:

IBM HTTP Server access.log
i2 Analyze deployed opal-server IBM_i2_Analysis_Repository.log

The following error in the IBM HTTP Server access.log prevents the log in access:

"GET /opal/api/v1/core/securityschema?redirectForAuthentication=false HTTP/1.1" 503

The error status can be either 503 or 500; however, the opal-server is still running.

The access.log is typically location in the installation location of the IBM HTTP Server.

For example: C:\IBM\HTTPServer\logs\access.log

In the IBM_i2_Analysis_Repository.log there is a warning message at the end of the log:

2020-01-06 10:27:59,256 235641441 [Default Executor-thread-160705] WARN  com.i2group.disco.coreservice.securityschema.internal.SecuritySchemaSubResource - kWj_yG6FsKKTOZO9kWfKA8I 452c9cb5-4583-417b-a644-98c0fd004ddc  -
com.i2group.disco.common.exception.InternalServerErrorException: Default security dimension values provider specified no values for the dimensions with these IDs: '[SD-SL]'.
    at com.i2group.disco.coreservice.securityschema.internal.DefaultSecurityDimensionValuesValidator.validateDefaultSecurityDimensionValues(DefaultSecurityDimensionValuesValidator.java:80)
    at com.i2group.disco.coreservice.securityschema.internal.SecuritySchemaResponseProvider.provideSecuritySchemaResponse(SecuritySchemaResponseProvider.java:82)
    at com.i2group.disco.coreservice.securityschema.internal.SecuritySchemaSubResource.getSecuritySchema(SecuritySchemaSubResource.java:36)
    at com.i2group.disco.common.interceptors.internal.ExpectedServerConfigInterceptor.invoke(ExpectedServerConfigInterceptor.java:55)
    at com.i2group.disco.common.http.cache.internal.CacheControlInterceptor.invoke(CacheControlInterceptor.java:24)
    at com.i2group.disco.common.interceptors.internal.DatabaseConnectionInterceptor.invoke(DatabaseConnectionInterceptor.java:36)
    at com.i2group.disco.common.interceptors.internal.ClientErrorExceptionInterceptor.invoke(ClientErrorExceptionInterceptor.java:29)
    at com.i2group.disco.common.interceptors.internal.ServerErrorExceptionInterceptor.invoke(ServerErrorExceptionInterceptor.java:40)
    at com.i2group.apollo.service.AccessibleScopeInterceptor.invoke(AccessibleScopeInterceptor.java:42)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
    at java.lang.reflect.Method.invoke(Method.java:498)
    at ...

The location of this log is found in the deployment path of your i2 Analyze opal-server:

For example: C:\IBM\i2EIA\deploy\wlp\usr\servers\opal-server\logs\opal-services-is\IBM_i2_Analysis_Repository.log

Resolving The Problem

The error in the IBM_i2_Analysis_Repository.log has details referring to your Security schema definitions. It points out which Security Dimension is missing a default value in the ApolloServerSettingsMandatory.properties file. You must define at least one default value for each Security Dimension in your Security schema.

To verify your default values:

In a text editor, open the configuration\fragments\common\WEB-INF\classes\ApolloServerSettingsMandatory.properties file from the deployment toolkit.
Check the values in the DefaultSecurityDimensionValues property.
For example:
```
  DefaultSecurityDimensionValues=OSI,HI
```
In a text editor, open the Security schema file whose name is listed under property DynamicSecuritySchemaResource
For example:
```
  DynamicSecuritySchemaResource=example-dynamic-security-schema.xml
```
For this example, edit file configuration\fragments\common\WEB-INF\classes\example-dynamic-security-schema.xml
Your Security schema file shows the Security Dimensions. Each AccessSecurityDimension requires at least one default value (highlighted in yellow) listed from each Dimension (ID is identified in the red boxes):

The IBM_i2_Analysis_Repository.log error points out the Security Dimension missing a default value. For example:

com.i2group.disco.common.exception.InternalServerErrorException: Default security dimension values provider specified no values for the dimensions with these IDs: '[SD-SL]'.

This error indicates the Security Dimension with 'id="SD-SL"' does not have a default value set in the values listed in DefaultSecurityDimensionValues. Add a default value for the identified Dimension:

For example:

  DefaultSecurityDimensionValues=OSI,HI,CON

Save your ApolloServerSettingsMandatory.properties file, then redeploy the opal-server:

  .\setup -s opal-server -t deploy

Note: Enterprise Insight Analysis (EIA) version 2.3.1 diagnoses the missing default security dimension values when you deploy. Also, in version 2.3.1, the location of the DefaultSecurityDimensionValues is moved from the property in the ApolloServerSettingsMandatory.properties file to an element of the Security schema file. See Setting default dimension values in the version 2.3.1 IBM Knowledge Center documentation for IBM i2 Enterprise Insight Analysis.

Related Information

Setting default Security Schema dimension values for Opal (for version 2.3.0)

Document Location

Worldwide

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSXVXZ","label":"IBM i2 Enterprise Insight Analysis"},"Component":"i2 Analyze","Platform":[{"code":"PF016","label":"Linux"},{"code":"PF033","label":"Windows"}],"Version":"2.3.0","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Historical Number

TS003178941

Was this topic helpful?

Document Information

Modified date:
13 January 2020

UID

ibm11165990

Tips