Troubleshooting
Problem
Due to an enforcement of the hostname verification on SSL certificates Liberty implemented in versions equal or greater than 24.0.0.8, environments using certificates configured without a SAN value matching the hostname may experience problems when scheduling on dynamic agents and when connecting DWC to the master. The problems occur on the following versions:
- 9.5 : from GA up to FP7
- 10.1: from GA up to FP5
- 10.2 GA, 10.2.1, 10.2.2, and 10.2.3
Environments configured to perform hostname verification on SSL certificates are not impacted.
Symptom
There are different symptoms of the problem and they are summarized in the following three scenarios.
Scenario 1 - Master Domain Manager or Dynamic Domain Manager fresh installation
In case of fresh installation of a MDM or a DDM using a Liberty version equal or greater than 24.0.0.8 the installation completes successfully but the dynamic agent installed on the master is not able to register itself. In detail a "composer li ws @/@" shows the following workstations:
Workstation Name Type Domain Ignored Updated On Locked By
---------------- ------- ---------------- ------- ---------- ----------------
EU-TWS-LNX11 manager MASTERDM 09/19/2024 -
EU-TWS-LNX11_XA x-agent - 09/19/2024 -
AWSBIA291I Total objects: 2
and the<DATADIR>/stdlist/JM/JobManager_message.log file contains the error message:
AWSITA082E The agent got an error response while sending the resource information to the server. The error code is "AWKRRP086E_DOMAIN_NOT_CREATED" and the error message is "AWKRRP086E The agent "EU-TWS-LNX11_1" could not be created because the domain "1" is not present.".
Scenario 2 - Upgrade of Liberty to a version equal or greater than 24.0.0.8 in an already installed MDM/DDM
In case of upgrade of Liberty in an already installed environment, after restarting the application server in order to activate the new version, dynamic agents are not able to connect anymore and submitted jobs remains in EXEC (internal state WAIT+) and the joblog contains the following error message:
AWKJDE500E The job cannot be submitted to "https://10.14.37.133:31114/ita/JobManager/job".
The following error occurred: "AWSRES003E The REST service cannot be contacted. Check if the service is running or the existence of firewall rules or some issues on the dns side resolving the server hostname that could prevent contacting the service. The internal error message is: No subject alternative names present.
The following error occurred: "AWSRES003E The REST service cannot be contacted. Check if the service is running or the existence of firewall rules or some issues on the dns side resolving the server hostname that could prevent contacting the service. The internal error message is: No subject alternative names present.
In some cases the problem occurs only on dynamic agents installed after the Liberty upgrade.
Scenario 3 - Use of a Liberty version equal or greater than 24.0.0.8 with DWC
In case a Liberty version equal or greater than 2024.08 is used with DWC, after a DWC fresh installation or after a Liberty upgrade, the login keeps working but during the "connection engine" test one of the following messages appear:
In case a Liberty version equal or greater than 2024.08 is used with DWC, after a DWC fresh installation or after a Liberty upgrade, the login keeps working but during the "connection engine" test one of the following messages appear:
- AWSUI0833E The operation could not be completed. There has been a communication failure.The internal message is: AWSJCS011E An internal error has occurred. The error is the following: "No name matching localhost found"
- AWSUI0833E The operation could not be completed. There has been a communication failure.The internal message is: AWSJCS011E An internal error has occurred. The error is the following: "No subject alternative names present"
- AWSUI0796E The specified action cannot be performed. Reason: AWSJCS011E An internal error has occurred. The error is the following: "No subject alternative DNS name matching mdmhost.anyco.com found.".
Document Location
Worldwide
[{"Type":"MASTER","Line of Business":{"code":"LOB77","label":"Automation Platform"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSGSPN","label":"IBM Workload Scheduler"},"ARM Category":[{"code":"a8m0z0000000CenAAE","label":"Technote"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]
Log InLog in to view more of this document
This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.
Was this topic helpful?
Document Information
Modified date:
19 November 2024
UID
ibm17172844