No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

HUAWEI CLOUD Stack 6.5.0 Alarm and Event Reference 04

Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
SCC Background

SCC Background

ALM-FusionGuard_ntp_alarm NTP Server Unreachable

Description

The management node is configured with an incorrect NTP server address. As a result, the management node cannot synchronize the time from the NTP server, and the system generates an alarm.

Attribute

Alarm ID

Alarm Severity

Auto Clear

FusionGuard_ntp_alarm

Minor

Yes

Parameters

None

Impact on the System

Incorrect time is recorded in the log and in the database. If the time recorded is more than 30 minutes different from the correct time, the service fails to respond to user requests.

Possible Causes

The network between the management node and the clock server is disconnected.

Procedure

  1. Log in to ManageOne Maintenance Portal using a browser.

    • URL: https://Address for accessing the homepage of ManageOne Maintenance Portal:31943, for example, https://oc.type.com:31943
    • Default username: admin; default password: Huawei12#$

  2. Click Enter System.
  3. On the menu bar, choose Alarms > Current Alarms. In Details, locate IP Address/URL/Domain Name of the alarm.
  4. Use PuTTY to log in to the management VM by using the IP address specified by IP Address/URL/Domain Name in Details.

    Default username: sccadmin; default password: Scloud12#$

  5. Run the following command and enter the password Cloud12#$ of user root to switch to the root user:

    sudo su - root

  6. Run the following command to disable user logout upon system timeout:

    TMOUT=0

  7. Use a browser to log in to DMK.

    • Login address: https://DMK homepage address:8443.
    • Default username: fusionguard; default password: Huawei12#$

  8. Go to the Configuration page to locate the IP address corresponding to g_ntp:ip.
  9. Run the following command to query the NTP server IP address in the configuration file:

    cat /etc/ntp.conf

    server 172.31.19.71 iburst
    restrict 172.31.19.71
    server 172.31.19.72 iburst
    restrict 172.31.19.72

  10. Check whether the IP addresses of the NTP servers in 8 and 9 are the same.

    • If yes, go to 12.
    • If no, go to 11.

  11. Run the following command to change the IP address of the NTP server in the configuration file to the IP address in 8, save the modification, and exit:

    vi /etc/ntp.conf

    server 172.31.19.71 iburst
    restrict 172.31.19.71
    server 172.31.19.72 iburst
    restrict 172.31.19.72

  12. Run the following command to restart the NTP service:

    /bin/systemctl restart ntpd.service

  13. Run the following command to check whether the IP addresses of the two NTP servers can be pinged:

    ping NTP server IP address

    • If yes, go to 14.
    • If no, the NTP server is unreachable. Contact technical support for assistance.
    NOTE:

    You can obtain the IP address of the NTP server from 8.

  14. Run the following command to check whether the NTP server is reachable. If the following command output is displayed, the NTP server is reachable.

    sh /etc/cron.daily/check_ntp.sh.
    [root@ser_h1 ~]# sh /etc/cron.daily/check_ntp.sh 
    except
    this alarm already cleared
    • If yes, go to 15.
    • If no, contact technical support for assistance.

  15. Wait for 10 to 20 minutes and check whether the alarm is automatically cleared.

    • If yes, no further action is required.
    • If no, contact technical support for assistance.

Related Information

None

ALM-SCC_00061 Server Certificate Expired

Description

The system checks the validity period of a certificate every day. This alarm is generated when the validity period of a certificate has expired or the certificate is invalid.

Attribute

Alarm ID

Alarm Severity

Auto Clear

SCC_00061

Critical

Yes

Parameters

None

Impact on the System

Only HTTP-based access is available. HTTPS-based access is unavailable. Security services are unavailable.

Possible Causes

The validity period of the certificate has ended.

Procedure

  1. Log in to ManageOne Maintenance Portal using a browser.

    • URL: https://Address for accessing the homepage of ManageOne Maintenance Portal:31943, for example, https://oc.type.com:31943
    • Default username: admin; default password: Huawei12#$

  2. Click Enter System.
  3. On the menu bar, choose Alarms > Current Alarms. In Details, see IP Address/URL/Domain Name of the alarm and the location information.

    • If Web server=Tomcat is displayed in the location information, go to 4.
    • If Web server =Gaussdb is displayed in the location information, go to Replacing the SCC-DB Node Certificate.
    • If Web server =Nginx is displayed in the location information, go to 8.

  4. On the ManageOne Maintenance Portal homepage, choose Quick Links > Service OM and select a region. The Service OM page is displayed.
  5. Choose Computing > ECS > Compute instances. The VM management page is displayed.
  6. Based on IP, query and record the VM name corresponding to the IP address in 3.
  7. Perform Replacing the Tomcat Certificate (SCC-Service, SCC-Console, SCC-OM, and SSA-SSAM Nodes) based on the VM name in 6.
  8. Return to the homepage of ManageOne Maintenance Portal and choose System > Unified Certificate.
  9. Click Certificate Management. On the Certificate Management page that is displayed, click the FusionGuard tab. See Figure 11-1.

    Figure 11-1 FusionGuard tab

  10. In the row that contains FusionGuard-Nginx, click Update to update the certificate.
  11. Run the following command on the VM background according to 6 to check whether the certificate takes effect immediately:

    sh /opt/scc/operation/cert_check.sh

    The certificate immediately takes effective if the command output is displayed:

    this alarm already cleared
    • If yes, go to 12.
    • If no, go to 13.

  12. Wait for 5 to 10 minutes and check whether the alarm is automatically cleared.

    • If yes, no further action is required.
    • If no, contact technical support for assistance.

  13. On the next day, the system automatically checks whether the certificate takes effect. Then, check whether the alarm is automatically cleared.

    • If yes, no further action is required.
    • If no, contact technical support for assistance.

Related Information

None

ALM-SCC_00062 The Server Certificate Is About to Expire in Seven Days

Description

The system checks the validity period of a certificate every day. This alarm is generated when the validity period of a certificate is less than seven days.

Attribute

Alarm ID

Alarm Severity

Auto Clear

SCC_00062

Critical

Yes

Parameters

None

Impact on the System

The system is not affected. However, you need to replace the certificate as soon as possible. Services are unavailable upon the expiration of the certificate.

Possible Causes

The certificate is about to expire.

Procedure

  1. Log in to ManageOne Maintenance Portal using a browser.

    • URL: https://Address for accessing the homepage of ManageOne Maintenance Portal:31943, for example, https://oc.type.com:31943
    • Default username: admin; default password: Huawei12#$

  2. Click Enter System.
  3. On the menu bar, choose Alarms > Current Alarms. In Details, locate IP Address/URL/Domain Name of the alarm.
  4. On the ManageOne Maintenance Portal homepage, choose Quick Links > Service OM and select a region. The Service OM page is displayed.
  5. Choose Computing > ECS > Compute instances. The VM management page is displayed.
  6. Based on IP, query and record the VM name corresponding to the IP address in 3.
  7. Return to the homepage of ManageOne Maintenance Portal and choose System > Unified Certificate.
  8. Click Certificate Management. On the Certificate Management page that is displayed, click the FusionGuard tab. See Figure 11-2.

    Figure 11-2 FusionGuard tab

  9. Perform corresponding certificate update actions based on the VM name in 6.

    • If the VM name is SCC-Console, SCC-Service, SCC-OM, or SSA-SSAM, go to 10.
    • If the VM name is SCC-DB, go to 11.
    • If the VM name is SCC-LB or Agent-LB-FusionGuard, go to 12.

  10. In the row that contains FusionGuard-Service, click Update to update the certificate.
  11. In the row that contains FusionGuard-GaussDB, click Update to update the certificate.
  12. In the row that contains FusionGuard-Nginx, click Update to update the certificate.
  13. Run the following command on the VM background according to 6 to check whether the certificate takes effect immediately:

    sh /opt/scc/operation/cert_check.sh

    The certificate immediately takes effective if the command output is displayed:

    this alarm already cleared
    • If yes, go to 14.
    • If no, go to 15.

  14. Wait for 5 to 10 minutes and check whether the alarm is automatically cleared.

    • If yes, no further action is required.
    • If no, contact technical support for assistance.

  15. On the next day, the system automatically checks whether the certificate takes effect. Then, check whether the alarm is automatically cleared.

    • If yes, no further action is required.
    • If no, contact technical support for assistance.

Related Information

None

ALM-SCC_00063 The Server Certificate Is About to Expire in 30 Days

Description

The system checks the validity period of a certificate every day. This alarm is generated when the validity period of a certificate is less than 30 days.

Attribute

Alarm ID

Alarm Severity

Auto Clear

SCC_00063

Critical

Yes

Parameters

None

Impact on the System

The system is not affected. However, you need to replace the certificate as soon as possible. If the certificate expires, services are unavailable.

Possible Causes

The certificate is about to expire.

Procedure

  1. Log in to ManageOne Maintenance Portal using a browser.

    • URL: https://Address for accessing the homepage of ManageOne Maintenance Portal:31943, for example, https://oc.type.com:31943
    • Default username: admin; default password: Huawei12#$

  2. Click Enter System.
  3. On the menu bar, choose Alarms > Current Alarms. In Details, locate IP Address/URL/Domain Name of the alarm.
  4. On the ManageOne Maintenance Portal homepage, choose Quick Links > Service OM and select a region. The Service OM page is displayed.
  5. Choose Computing > ECS > Compute instances. The VM management page is displayed.
  6. Based on IP, query and record the VM name corresponding to the IP address in 3.
  7. Return to the homepage of ManageOne Maintenance Portal and choose System > Unified Certificate.
  8. Click Certificate Management. On the Certificate Management page that is displayed, click the FusionGuard tab. See Figure 11-3.

    Figure 11-3 FusionGuard tab

  9. Perform corresponding certificate update actions based on the VM name in 6.

    • If the VM name is SCC-Console, SCC-Service, SCC-OM, or SSA-SSAM, go to 10.
    • If the VM name is SCC-DB, go to 11.
    • If the VM name is SCC-LB or Agent-LB-FusionGuard, go to 12.

  10. In the row that contains FusionGuard-Service, click Update to update the certificate.
  11. In the row that contains FusionGuard-GaussDB, click Update to update the certificate.
  12. In the row that contains FusionGuard-Nginx, click Update to update the certificate.
  13. Run the following command on the VM background according to 6 to check whether the certificate takes effect immediately:

    sh /opt/scc/operation/cert_check.sh

    The certificate immediately takes effective if the command output is displayed:

    this alarm already cleared
    • If yes, go to 14.
    • If no, go to 15.

  14. Wait for 5 to 10 minutes and check whether the alarm is automatically cleared.

    • If yes, no further action is required.
    • If no, contact technical support for assistance.

  15. On the next day, the system automatically checks whether the certificate takes effect. Then, check whether the alarm is automatically cleared.

    • If yes, no further action is required.
    • If no, contact technical support for assistance.

Related Information

None

ALM-SCC_00064 Account Password Has Expired

Description

This alarm is generated when the password of the system management account has expired.

Attribute

Alarm ID

Alarm Severity

Auto Clear

SCC_00064

Critical

Yes

Parameters

None

Impact on the System

Users cannot log in to the system using a service account, which does not affect the normal running of the system.

Possible Causes

The validity period of the password has ended.

Procedure

  1. Log in to ManageOne Maintenance Portal using a browser.

    • URL: https://Address for accessing the homepage of ManageOne Maintenance Portal:31943, for example, https://oc.type.com:31943
    • Default username: admin; default password: Huawei12#$

  2. Click Enter System.
  3. On the menu bar, choose Alarms > Current Alarms. In Details, locate IP Address/URL/Domain Name of the alarm.
  4. Change the password of the sccadmin account. For details, see "Account Management > Account Management Policy > How to Change the Password of an Account" in HUAWEI CLOUD Stack 6.5.0 Security Management Guide.

    NOTE:

    4 describes how to change the password of the sccadmin account only. The validity period of the root user is unlimited. Therefore, this alarm is generated only when the password validity of the service account sccadmin has ended.

Related Information

None

ALM-SCC_00065 The Password Is About to Expire in Seven Days

Description

This alarm is generated when the password of the system account is about to expire in seven days.

Attribute

Alarm ID

Alarm Severity

Auto Clear

SCC_00065

Critical

Yes

Parameters

None

Impact on the System

The system is not affected. However, you need to change the password as soon as possible. If the password expires, the service account cannot be used to log in to the system.

Possible Causes

The password will expire soon.

Procedure

  1. Log in to ManageOne Maintenance Portal using a browser.

    • URL: https://Address for accessing the homepage of ManageOne Maintenance Portal:31943, for example, https://oc.type.com:31943
    • Default username: admin; default password: Huawei12#$

  2. Click Enter System.
  3. On the menu bar, choose Alarms > Current Alarms. In Details, locate IP Address/URL/Domain Name of the alarm.
  4. Change the password of the sccadmin account. For details, see "Account Management > Account Management Policy > How to Change the Password of an Account" in HUAWEI CLOUD Stack 6.5.0 Security Management Guide.

    NOTE:

    4 describes how to change the password of the sccadmin account only. The validity period of the root user is unlimited. Therefore, this alarm is generated only when the password validity of the service account sccadmin has ended.

Related Information

None

ALM-SCC_00066 The Password Is About to Expire in 30 Days

Description

This alarm is generated when the password of the system account is about to expire in 30 days.

Attribute

Alarm ID

Alarm Severity

Auto Clear

SCC_00066

Critical

Yes

Parameters

None

Impact on the System

The system is not affected. However, you need to change the password as soon as possible. If the password expires, the service account cannot be used to log in to the system.

Possible Causes

The password will expire soon.

Procedure

  1. Log in to ManageOne Maintenance Portal using a browser.

    • URL: https://Address for accessing the homepage of ManageOne Maintenance Portal:31943, for example, https://oc.type.com:31943
    • Default username: admin; default password: Huawei12#$

  2. Click Enter System.
  3. On the menu bar, choose Alarms > Current Alarms. In Details, locate IP Address/URL/Domain Name of the alarm.
  4. Change the password of the sccadmin account. For details, see "Account Management > Account Management Policy > How to Change the Password of an Account" in HUAWEI CLOUD Stack 6.5.0 Security Management Guide.

    NOTE:

    4 describes how to change the password of the sccadmin account only. The validity period of the root user is unlimited. Therefore, this alarm is generated only when the password validity of the service account sccadmin has ended.

Related Information

None

Translation
Download
Updated: 2019-08-30

Document ID: EDOC1100062365

Views: 34539

Downloads: 31

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next