Symptom
On FMC HA switchover, in the new Active FMC unit, for deployable devices, Advanced View diff generation and Pending Changes Reports generation is not working
Conditions
In FMC HA, when Advanced View diff generation or Pending Changes Reports generation is done on Active FMC, in the next sync cycle, the pendingChangesReports directory is synced to the Standby FMC
In Active FMC, the directory pendingChangesReports and the folders within this has casuser:casusers permission
When this directory is synced to Standby FMC, pendingChangesReports directory has root:root permission
Upon FMC HA switchover, the new Active FMC HA unit has pendingChangesReports directory with root:root permission, when Advanced View diff generation or Pending Changes Reports generation is triggered from this unit, report generation fails.
Report generation is failed due to 'Directory could not be created' error
Please refer to attached error logs
Workaround
To unblock the report generation, following steps need to be followed :
1) Login to FMC SSH
2) Go to root folder
3) Execute cd /var/opt/CSCOpx/MDC/temp and do ls -lrt
check the user permission for pendingChangesReports directory
If permission is root:root then execute chown casuser:casusers pendingChangesReports/
After this, try report generation, it should work
Further Problem Description