Launching soon: The world's first vendor agnostic bug scrubLearn more & join waitlist
OPERATIONAL DEFECT DATABASE
...
...
Issue 1: Unable to create Access List ++ When you navigate to Policies > ACP > PolicyNAME > NEW UI [Default] > Add Rule > Observed that all fields are empty with "No data" ++++++++++++++++++++++++++++++++++++++ TCAT: 09-12 21:44:33 [ajp-nio-127.0.0.1-9009-exec-9] ERROR com.cisco.api.external.rest.common.resource.ContainerServerResource - Search Service TCAT: 09-12 21:44:33 com.cisco.nm.vms.search.SearchException$INTERNAL_ERROR: Search Service TCAT: 09-12 21:44:33 at com.cisco.nm.vms.buildingblock.search.BuildingBlockSearchServiceImpl.globalSearch(BuildingBlockSearchServiceImpl.java:452) TCAT: 09-12 21:44:33 at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method) TCAT: 09-12 21:44:33 at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(Unknown Source) TCAT: 09-12 21:44:33 at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source) TCAT: 09-12 21:44:33 at java.base/java.lang.reflect.Method.invoke(Unknown Source) TCAT: 09-12 21:44:33 at com.cisco.nm.vms.common.external.VmsExternalProxy.invoke(VmsExternalProxy.java:221) TCAT: 09-12 21:44:33 at com.sun.proxy.$Proxy37.globalSearchWithDomain(Unknown Source) TCAT: 09-12 21:44:33 at com.cisco.api.external.rest.resource.GlobalSearchResource.searchObjects(GlobalSearchResource.java:378) TCAT: 09-12 21:44:33 at com.cisco.api.external.rest.resource.GlobalSearchResource.getObjects(GlobalSearchResource.java:287) TCAT: 09-12 21:44:33 at com.cisco.api.external.rest.resource.AbstractRESTResource.getObjects(AbstractRESTResource.java:316) TCAT: 09-12 21:44:33 at com.cisco.api.external.rest.application.ConfigServiceProxyImpl.getObjects(ConfigServiceProxyImpl.java:232) TCAT: 09-12 21:44:33 at com.cisco.api.external.rest.common.resource.FrameworkResource.fetchObjects(FrameworkResource.java:476) TCAT: 09-12 21:44:33 at com.cisco.api.external.rest.common.resource.FrameworkResource.fetchData(FrameworkResource.java:430) TCAT: 09-12 21:44:33 at com.cisco.api.external.rest.common.resource.ContainerServerResource.get(ContainerServerResource.java:172) TCAT: 09-12 21:44:33 at org.restlet.resource.ServerResource.doHandle(ServerResource.java:603) TCAT: 09-12 21:44:33 at com.cisco.api.external.rest.common.resource.FrameworkResource.doHandle(FrameworkResource.java:216) TCAT: 09-12 21:44:33 at org.restlet.resource.ServerResource.doNegotiatedHandle(ServerResource.java:662) TCAT: 09-12 21:44:33 at org.restlet.resource.ServerResource.handle(ServerResource.java:1022) ++++++++++++++++++++++++++++++++++++++ and Issue 2: Search for Network Object Fails with error "Error Loading Data. Search Service Please try again" ++ When you navigate to Objects > Object Management > Network > Enter text "nameobject" and Search > Fails with abovr error +++++++++++++++++++++++++++++++++++ USMS: 09-12 22:09:08 USMS: 09-12 22:09:08 [ERROR],(BuildingBlockSearchServiceImpl.java:799) USMS: 09-12 22:09:08 com.cisco.nm.vms.buildingblock.search.BuildingBlockSearchServiceImpl, ajp-nio-127.0.0.1-9009-exec-8 USMS: 09-12 22:09:08 Exception thrown! USMS: 09-12 22:09:08 java.lang.IllegalArgumentException: Could not create directory: "/var/opt/CSCOpx/MDC/search/BuildingBlock/text" USMS: 09-12 22:09:08 at com.cisco.nm.vms.search.SearchUtils.getDirectory(SearchUtils.java:128) USMS: 09-12 22:09:08 at com.cisco.nm.vms.search.SearchUtils.getFSDirectory(SearchUtils.java:144) USMS: 09-12 22:09:08 at com.cisco.nm.vms.search.SearchUtils.getIndexSearcher(SearchUtils.java:234) USMS: 09-12 22:09:08 at com.cisco.nm.vms.search.AbstractSearchService.initIndexSearcher(AbstractSearchService.java:104) USMS: 09-12 22:09:08 at com.cisco.nm.vms.search.AbstractSearchService.getIndexSearcher(AbstractSearchService.java:118) +++++++++++++++++++++++++++++++++++ USMS: 09-12 22:09:08 [ERROR],(AbstractSearchService.java:398) USMS: 09-12 22:09:08 com.cisco.nm.vms.search.AbstractSearchService, ajp-nio-127.0.0.1-9009-exec-8 USMS: 09-12 22:09:08 Exception thrown! USMS: 09-12 22:09:08 java.util.concurrent.ExecutionException: java.lang.IllegalArgumentException: Could not create directory: "/var/opt/CSCOpx/MDC/search/BuildingBlock/text" USMS: 09-12 22:09:08 at java.base/java.util.concurrent.FutureTask.report(Unknown Source) USMS: 09-12 22:09:08 at java.base/java.util.concurrent.FutureTask.get(Unknown Source) USMS: 09-12 22:09:08 at com.cisco.nm.vms.search.AbstractSearchService.search(AbstractSearchService.java:389) USMS: 09-12 22:09:08 at com.cisco.nm.vms.search.AbstractSearchService.searchByText(AbstractSearchService.java:485) USMS: 09-12 22:09:08 at com.cisco.nm.vms.api.buildingblock.LwBuildingBlockManagerImpl.getPolicyObjects(LwBuildingBlockManagerImpl.java:801) USMS: 09-12 22:09:08 at com.cisco.nm.vms.api.buildingblock.LwBuildingBlockManagerImpl.getPolicyObjectsForListing(LwBuildingBlockManagerImpl.java:700) USMS: 09-12 22:09:08 at jdk.internal.reflect.GeneratedMethodAccessor595.invoke(Unknown Source) USMS: 09-12 22:09:08 at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source) USMS: 09-12 22:09:08 at java.base/java.lang.reflect.Method.invoke(Unknown Source) USMS: 09-12 22:09:08 at com.cisco.nm.vms.common.external.VmsExternalProxy.invoke(VmsExternalProxy.java:221) USMS: 09-12 22:09:08 at com.sun.proxy.$Proxy90.getPolicyObjectsForListingWithDomain(Unknown Source) USMS: 09-12 22:09:08 at com.cisco.nm.vms.rpc.buildingblock.BuildingBlockRPCImpl.getPolicyObjectsForListing(BuildingBlockRPCImpl.java:257) USMS: 09-12 22:09:08 at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method) USMS: 09-12 22:09:08 at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(Unknown Source) USMS: 09-12 22:09:08 at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source) USMS: 09-12 22:09:08 at java.base/java.lang.reflect.Method.invoke(Unknown Source) +++++++++++++++++++++++++++++++++++ Also observing that the directory ownership for MDC has changed to root instead of casuser. Due to this change, the search directory is not created . Exception: Could not create directory: "/var/opt/CSCOpx/MDC/search/BuildingBlock/text" +++++++++++++++++++++++++++++++++++ root@firepower:/var/opt/CSCOpx# ls -lah total 112K drwxr-xr-x 27 root root 4.0K Sep 9 01:44 . drwxr-xr-x 7 root root 4.0K Sep 8 23:24 .. -rw-r--r-- 1 casuser casusers 24 Sep 7 17:59 .CSCO.vars drwxr-xr-x 27 root root 4.0K Sep 8 23:24 MDC +++++++++++++++++++++++++++++++++++
Running impacted versions, both the issues Issue 1 and Issue 2 are interrelated.
1. Login to FMC , elevate as root user 2. navigate to dir : /var/opt/CSCOpx/ by issuing command cd /var/opt/CSCOpx/ 3. Check the ownership of dir MDC +++++++++++++++++++++++++++++++++++ root@firepower:/var/opt/CSCOpx# ls -lah total 112K drwxr-xr-x 27 root root 4.0K Sep 9 01:44 . drwxr-xr-x 7 root root 4.0K Sep 8 23:24 .. -rw-r--r-- 1 casuser casusers 24 Sep 7 17:59 .CSCO.vars drwxr-xr-x 27 root root 4.0K Sep 8 23:24 MDC +++++++++++++++++++++++++++++++++++ 4. Change the ownership of the dir MDC to the user/group to casuser/casusers , use command : root@firepower:/var/opt/CSCOpx# chown casuser:casusers MDC 5. Confirm the ownership of dir is updated . root@firepower:/var/opt/CSCOpx# ls -lah total 112K drwxr-xr-x 27 root root 4.0K Sep 9 01:44 . drwxr-xr-x 7 root root 4.0K Sep 8 23:24 .. -rw-r--r-- 1 casuser casusers 24 Sep 7 17:59 .CSCO.vars drwxr-xr-x 27 casuser casusers 4.0K Sep 8 23:24 MDC 6. Restart Tomcat using pmtool 7. Verify : Issue 1 : --> Switch to domain - Firewalls in FMC GUI -->Navigate to Policies > ACP > Edit POLICY > NEW UI [Default] > Add Rule > Populates all data Issue 2: --> Switch to domain - Firewalls in FMC GUI -->Navigate to Objects > Object Management > Network > Enter text "Zoom" and Search > Returns the network objects which contain name "zoom".
No further problem