HPE Software Products: Cloud Service Automation Practitioners Forum
Share |

Problem When Deleting Component From Topology DesignOpen in a New Window

Hi,

I am using HP 4.50 .

I have a desing which includes a  topology component assigned from Designer Tab .

I have created an offering based on that and several services with that design from BYP. Then I have undeployed services (there is no garbage behind) . I have removed offering.

Then, when I want to delete the component from Designer tab, I receive below error. Could you please help me what may cause this problem?

Error: failed to update the graph: Unable to modify read-only artifact 'KBK' (com.hp.ccue.common.options.dao.dao-exception:exception.dao.unable.to.modify.artifact)

 

Regards

 

 

Certificate and HPE Operation OrchestrationOpen in a New Window

Hello,

I follow this guide : "Operations Orchestration Software Version: 10.70 Windows and Linux Operating Systems OO User Guide".

I try to install certificate to not have warning certificate on my web browser with the OO homepage. I don't understand step 4 from chapter Replacing the Central TLS Server Certificate (p. 322). I understand that I convert a .cer certificate (or .pem) in a PKCS12 format. However, I don't know what the private key "inkey" is. Where can I find it please ? How did it generate ? I don't know what is name in the same command.

The command : openssl pkcs12 –export –in <cert.pem> -inkey <.key> -out <certificatename>.p12 –name <name>

Thanks.

Nicolas

 

[SOLVED] SSL Error: SELF_SIGNED_CERT_IN_CHAIN for MPPOpen in a New Window

Hi,

I follow instructions from the 4.70 CSA Configuration Guide for install certificates on my server. I follow this :

  • Configure CSA to Use an Internal Certificate Authority-Signed Certificate

For the CSA portal, it works fine, I haven't ths certificates warning message with my browser.

For MPP, it crashes. I haven't the certificate warning message but I have this (with a an image like a lightning) :

Service non disponible.

Une erreur s´est produite lors de la connexion au service. Veuillez réessayer ultérieurement.

In English : Service unavailable. Error during service connection. Try again later.

When I look logs messages from HPE-CSA-HOME/portal/logs, I find :

{"level":"error","message":"Error retrieving organization CONSUMER 503 Error: SSL Error: SELF_SIGNED_CERT_IN_CHAIN\n    at Request.onRequestResponse (E:\\HPE-CSA\\portal\\node_modules\\mpp-server\\node_modules\\request\\request.js:890:24)\n    at ClientRequest.emit (events.js:107:17)\n    at HTTPParser.parserOnIncomingClient [as onIncoming] (_http_client.js:426:21)\n    at HTTPParser.parserOnHeadersComplete (_http_common.js:111:23)\n    at TLSSocket.socketOnData (_http_client.js:317:20)\n    at TLSSocket.emit (events.js:107:17)\n    at readableAddChunk (_stream_readable.js:163:16)\n    at TLSSocket.Readable.push (_stream_readable.js:126:10)\n    at TCP.onread (net.js:540:20)","timestamp":"22 Mar 2017 03:44:58,715"}

I don't know where is the origin of this error.

An extract of my mpp.json (I erase some private informations) :

  "provider": {
    "url": "https://FQDN:8444",
    "contextPath": "/csa/api/mpp",
    "strictSSL": true,
    "TLSVersions": "1.2",
    "ca": "HPE-CSA-HOME/certificates/csa_ca_signed.cer"
  },
  "idmProvider": {
    "url": "https://FQDN:8444",
    "returnUrl": "https://FQDN:8089",
    "contextPath": "/idm-service",
    "username": "idmTransportUser",
    "password": "ENC(XXX)",
    "strictSSL": true,
    "TLSVersions": "1.2",
    "ca": "HPE-CSA-HOME/certificates/csa_ca_signed.cer"
  },
  "https": {
    "enabled": true,
    "options": {
      "pfx": "HPE-CSA-HOME/portal/conf/.mppkeystore_ca_signed",
      "passphrase": "ENC(XXX)",

 

It's not my passphrase because when I try a false password, I have the certificate warning on my browser.

Can you help me please ?

Nicolas

 

CSA SAML Integration Example, Need SupportOpen in a New Window

Dear Team,

we are trying to do SAML integration, we have followed Configuration guide CSA 4.8 starting from Page 254.,


we have created first Rule #1 257  as it's mentioned, i have concern for outgoing Claim , as since we try to access CSA through SAML it give access denied.


----------------------------------------------------------------


c:[Type ==

"http://schemas.microsoft.com/ws/2008/06/identity/claims/windowsaccountname",

Issuer == "AD AUTHORITY"]=> issue(store = "Active Directory", types =

("Group"), query = ";tokenGroups;{0}", param = c.Value);

---------------------------------------------------------------


we even tried with Rule#2 , 258 Step 9 -

For the LDAP attribute, select Token-Groups – Unqualified Names  >>> is that suppoed to be mapped to outgoing to anything ?!

I have to say that we see that documentation is confusing in that part, at least it should give sample configuration for that area.

 

Did anyone done that integration before?

 

 

Cannot retrieve Subscriptions from CSA REST APIOpen in a New Window

I'm trying to retrieve Subscriptions from a Subscriber, following this guide: http://h20565.www2.hpe.com/hpsc/doc/public/display?sp4ts.oid=5271084&docLocale=en_US&docId=emr_na-c04220392. I'm using SoapUI 5.0.3 to test the responses.

 

Unfortunately, my call keeps timing out. Would this be because there are a large number of subscriptions per subscriber? I set the timeout limit to maximum but nothing is ever returned.

My call is formed like this:

https://lb-csa-test.example.com/csa/rest/user/mysubscription?userIdentifier={adminId}&requestor={CSAUser}&scope=view&creationStartDate=2016-01-01&creationEndDate=2017-03-01

Is there a way to limit the query to only return 1 subscription, so that the request doesn't time out? Or is my call not formed correctly?

 

Problem When Login to MPP with Email AdressOpen in a New Window

Hi,

We are using HP CSA 4.50.
We are using Ldap for authenticating users and we had decided using email instead of username while logging to MPP.
For this, we have changed Organization's LDAP "User Search Filter" area to mail={0} .
User can successfully login to MPP create services.
But, when a consumer organization administrator wants to check a user's subscriptions from MPP, user receives error written in mpp log :

"messageKey":"Svr.mppUserNotInSession","description":"Cannot get current user in session. Check that X-Auth-Token is valid.","httpStatusCode":403,"level":"error","message":"Error retrieving subscription list 403","timestamp":"15 Mar 2017 10:06:52,058"

I have digged in to a little bit the mpp ui code and saw that email address encoded for POST uri. Because it contains @ sign, I guess it is encoded twice while sending this to CSA.

I want to ask that is this a BUG or you do not consider that username contains @ sign?

Could you give an urgent answer as this is an importan problem for our production? Otherwise we will switch using regular usernames.

Regards

 

CSA - HPE CSA Remote Console Minimum resource RequirementsOpen in a New Window

Hi all

Please let me know minimum resource requirements for "HPE CSA Remote Console"
CPU/MEM/Disks

BR

 

 

CSA - Email Notification Upon Request ApprovedOpen in a New Window

Hi Experts,

Understand that there is an email notification to the requestor upon the request has been approved (but no email notification to approvers). 

In the event that there is an offerring subscription that only required 2 out of 5 approver to approve the subscription, any idea on how to enable email notification to send email to all the approvers (5 of them) upon the request has been approved?

 

Change OO Process Engine from single server to point to OO ClusterOpen in a New Window

Dear Team,

previously we have single CSA and Single OO , now we are building Cluster of both.

So OO cluster is done , now CSA Cluster in progress but since we need to integrate with OO Cluster we need to change OO process engine in old CSA to point to OO Cluster , is it just from csa.properties file only!

I am thinking to run PDT again that will override the Pointing of OO to the Cluster ? but nor sure that will work or not.

 

Register now: HPE GO4SAP – Getting Orchestrated for SAPOpen in a New Window

HPE Software provides a solution approach with Getting Orchestrated for SAP (HPE GO4SAP) to help you to quickly, easily and cost-efficiently automate and orchestrate your SAP environment, including management-ready analytics, show back and usage. The HPE GO4SAP Starter Edition includes 4 popular use cases with an average ROI of 700% and can be expanded as required. On average, up to 74% of the SAP budget is spent on operation and maintenance. Through SAP Basis automation, orchestration and standardization of specific use cases (across infrastructure and applications) and recurring tasks, activities and processes, an average saving of up to 90% per use case is possible. Learn more about it and experience the solution live in one of the following seminars:

March 30, HPE Office Zurich/Duebendorf

April 27, HPE Office Vienna 

May 9, SAP Headquarters Walldorf. (The seminars will be conducted in German language.)

Agenda & registration

 

Best of Show on Tour 2017: April 5 in Zurich/SwitzerlandOpen in a New Window

Join us for the Best of Show on Tour stop on April 5 at the HPE Offices in Zurich/Duebendorf where we will present the highlights of Discover London. Explore the current trends and developments in IT Operations Management. Learn how to master the challenges of digitalization without endangering IT operations. Agenda topics include: IT Operations – enabler of the Digital Enterprise; innovations in HPE Operations Bridge; integration of cloud-based services into HPE Operations Bridge-based monitoring; case studies for transforming into service-oriented IT operations. Don’t miss this opportunity and register now! (The event will be conducted in German language.)

Agenda & registration

 

Best of Show on Tour 2017: March 28 - Apr 6 in GermanyOpen in a New Window

Join us for the  Best of Show on Tour where we will present the latest trends and developments in IT Operations Management. We will explore how to master the challenges of digitalization without endangering IT operations. Jointly with you and our Gold Partner ITC and Platinum Partner IT Unlimited, we will cover the following topics: Innovations in HPE Operations Bridge; integrating cloud-based services into HPE Operations Bridge-based monitoring; handling of container-based services; case studies for transforming into service-oriented IT operations. Don’t miss this opportunity in a city near you and register now! (The events will be conducted in German language.)

Agenda & registration

 

[CSA 4.8] Configuring Remote Console ServiceOpen in a New Window

Hi all,

I've followed all the instructions for the instalation and configuration of the Remote Console Service to be accessible through the Marketplace but am having difficulties on opening up any remote console.

Whenever I click the open remote console a popup connecting to guacamole appears but always shows the same error, "Invalid Parameters passed to the host." (screenshot attached). Has anyone been able to configure this?

Also on the manual (Remote Console Service Installation Guide) page 13 it says:
server.hostName - Map IP Address (example: ip, ipaddr) field name used at the time of creating customized designs.

Is this correct or is it a typo ?

Is there any way to troubleshoot this sort of errors? I mean, are there logs that show what information leaves CSA and gets to the guacamole server? I haven't been able to find any relevant information on either side.

 

Thank you in advance

 

Can I Make Localization for Offering Options for MPPOpen in a New Window

Hi,

 

I am using HP CSA 4.50. I have made localization of MPP and it can change the language according to browser language.

But I have a problem.  Topology Design Options which seems on the MPP can not show localized strings as normal.

It writes the display name of the option which I have written in CSA Design.

I want to ask that is there way to localize them also?

 

Regards

Mehmet

 

HP Operations Orchestration Content Pack Not Visible in CSA Topology ComponentsOpen in a New Window

Hi all, I've designed a simple content pack using HPOO studio to send email notification and successfully imported into HPOO content packs. However, the content packs is not visible in CSA Topology Components' import wizard and consequently no way to import into CSA.

Any idea on what are the potential issues which might lead to this problem?

 

CSA Marketplace Email Notification to Third-Party Upon Approval ApprovedOpen in a New Window

Hi all, understand that there are email notification that will be sent to requester & approval when requestor request for the offerring and approval approved the request. however, any idea on how to do trigger an additional email notification [for third-party team to work on the request mannually (E.g.Admin task)] upon csa offerring has been approved? 

 

Expose CSA MPP to well-known portsOpen in a New Window

Hello,

 

my customer only want to expose the mpp on one well-known port (eg 443).

Therefore we tried to implement a reverse proxy which handles the conversion from 8089 to 443, but then we have problems to also handle the redirect to the IDM-Login page (Port 8444) and back to the MPP.

Did anyone achieve such a config/architecture, to handle a request from a user to the mpp, with no visible change in the URL? Does anyone have an example configuration for nginx, apache...?

Best regards
Florian 

 

changing CSA access URLOpen in a New Window

hi everyone,

has anyone tried to change the access url of csa? 

example: old access url = https://csa.domain.com:8444/csa and wanted to change to new url = https://csa.domain-name.com:8444/csa

thank you!

 

Capsule Installer failed to install Microsoft AzureOpen in a New Window

I have CSA 4.60 and OO 10.51.

Using capsule instaaller version CapsuleInstaller_15.12_4.6.63 to install CC-Microsoft-Azure-16.07-157 is failing....

( E:\Azure\CapsuleInstaller_15.12_4.6.63>java -jar CapsuleInstaller.jar -version Installer: 4.60.000_63 )

At logfile, the installation failed at OO step....any tip ?

 

85472 [Thread-11] DEBUG com.hp.csl.installer.workflow.steps.DeployContentPackToOOExecutableStep - Uploading deployment process file
185472 [Thread-11] DEBUG com.hp.csl.rest.RESTClient - Completing REST API object with IP --> 127.0.0.1
185474 [Thread-11] DEBUG com.hp.csl.rest.RESTClient - HTTP Client --> 127.0.0.1 443 https
185474 [Thread-11] DEBUG com.hp.csl.rest.RESTClient - Success for HTTP client generation
185476 [Thread-11] DEBUG com.hp.csl.rest.RESTImporter - adding null
185479 [Thread-11] DEBUG com.hp.csl.rest.RESTImporter - adding null
185481 [Thread-11] DEBUG com.hp.csl.rest.RESTClient - POST https://127.0.0.1:443/oo/rest/deployments/871600006/files HTTP/1.1
186062 [Thread-11] DEBUG com.hp.csl.rest.RESTImporter - 200 :: OK
186063 [Thread-11] DEBUG com.hp.csl.installer.workflow.steps.DeployContentPackToOOExecutableStep - Successfully uploaded deployment process file
186064 [Thread-11] DEBUG com.hp.csl.installer.workflow.steps.DeployContentPackToOOExecutableStep - Starting asynchronous deployment of contents
186064 [Thread-11] DEBUG com.hp.csl.rest.RESTClient - Completing REST API object with IP --> 127.0.0.1
186065 [Thread-11] DEBUG com.hp.csl.rest.RESTClient - HTTP Client --> 127.0.0.1 443 https
186065 [Thread-11] DEBUG com.hp.csl.rest.RESTClient - Success for HTTP client generation
186066 [Thread-11] DEBUG com.hp.csl.rest.RESTClient - PUT https://127.0.0.1:443/oo/rest/deployments/871600006?force=false HTTP/1.1
186134 [Thread-11] DEBUG com.hp.csl.rest.RESTImporter - 204 :: No Content
186134 [Thread-11] DEBUG com.hp.csl.rest.RESTClient - Completing REST API object with IP --> 127.0.0.1
186136 [Thread-11] DEBUG com.hp.csl.rest.RESTClient - HTTP Client --> 127.0.0.1 443 https
186136 [Thread-11] DEBUG com.hp.csl.rest.RESTClient - Success for HTTP client generation
186136 [Thread-11] DEBUG com.hp.csl.rest.RESTClient - Issuing GET request
186197 [Thread-11] DEBUG com.hp.csl.rest.RESTImporter - Asynchronous deployement status: RUNNING
186197 [Thread-11] DEBUG com.hp.csl.installer.workflow.steps.DeployContentPackToOOExecutableStep - Waiting for the deployment to finish
246187 [Thread-11] DEBUG com.hp.csl.rest.RESTClient - Completing REST API object with IP --> 127.0.0.1
246188 [Thread-11] DEBUG com.hp.csl.rest.RESTClient - HTTP Client --> 127.0.0.1 443 https
246189 [Thread-11] DEBUG com.hp.csl.rest.RESTClient - Success for HTTP client generation
246189 [Thread-11] DEBUG com.hp.csl.rest.RESTClient - Issuing GET request
246250 [Thread-11] DEBUG com.hp.csl.rest.RESTImporter - Asynchronous deployement status: FAILED
246250 [Thread-11] DEBUG com.hp.csl.installer.workflow.steps.DeployContentPackToOOExecutableStep - Asynchronous deployment of content failed
246252 [Thread-11] DEBUG com.hp.csl.workflow.WorkflowRunThread - Asynchronous deployment of content failed
246253 [Thread-9] DEBUG com.hp.csl.installer.gui.customizers.ProgressPage - HPE Cloud Content Capsule Installer completed with error(s)

 

Creating the service from market portal, CSA 4.7 request is not reaching to OOOpen in a New Window

hi Team,

we are using CSA 4.7 with OO 10.60. We are facing issues while creating the service from market portal, CSA request is not reaching to OO.

Please find the error:

 

  1. No row with the given identifier exists: [com.hp.csa.model.impl.resource.ResourceBinding#[TOKEN:RSC_BINDING_ID]]
  2. populateFlowInputs -- No value is found for input parameter RSC_PROVIDER_ID

Please let me know,how to resolve this issue.

 

Thanks,

Ravi kumar.R

Contact Us

Vivit Worldwide
P.O. Box 18510
Boulder, CO 80308

Email: info@vivit-worldwide.org

Mission

Vivit's mission is to serve
the Hewlett Packard
Enterprise User
Community through
Advocacy, Community,
and Education.