000030292 - WTD 5.0.2 - WTD broken after adding IPs to whitelist

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 22, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000030292
Applies ToRSA Product Set: Web Threat Detection
RSA Product/Service Type: Mitigator
RSA Version/Condition: 5.0
Platform: Linux
O/S Version: Red Hat Enterprise Linux 6.x
 
IssueCustomer reported that WTD is broken after adding IPs to whitelist. They can't log into any of the UI.
They added 400+ entries to whitelist under IP attribute.
Below is the error log :-
May 21 09:47:52 gibuxprcmnst06 cprofileupdater[50195]: [crit] gibuxprcmnst06 ==50195.0== StAbort(ip!=INADDR_NONE) ./2-os/metadata/whitelist.h:119 st::IpWhiteList::IpWhiteList(T*) [with T = const universal::Whitelist] 
May 21 09:47:52 gibuxprcmnst06 cprofileupdater[50195]: [crit] gibuxprcmnst06 ==50195.1== st::StAbort(char const*, char const*, unsigned int, char const*)+21 
May 21 09:47:52 gibuxprcmnst06 cprofileupdater[50195]: [crit] gibuxprcmnst06 ==50195.2== st::WhiteList* st::MakeWhiteList<universal::Whitelist const>(universal::Whitelist const*, bool)+557 
May 21 09:47:52 gibuxprcmnst06 cprofileupdater[50195]: [crit] gibuxprcmnst06 ==50195.3== st::AtomicAttribute::AtomicAttribute(st::TokenDictionary*, universal::attribute::Atomic const*, unsigned short)+231 
May 21 09:47:52 gibuxprcmnst06 cprofileupdater[50195]: [crit] gibuxprcmnst06 ==50195.4== st::MakeAttribute(st::TokenDictionary*, universal::Attribute const*, unsigned short, st::list::LinkedList<st::Attribute const> const&)+1226 
May 21 09:47:52 gibuxprcmnst06 cprofileupdater[50195]: [crit] gibuxprcmnst06 ==50195.5== st::AttributeSchema::AddAttribute(st::TokenDictionary*, universal::Attribute const*, int)+24 
May 21 09:47:52 gibuxprcmnst06 cprofileupdater[50195]: [crit] gibuxprcmnst06 ==50195.6== st::AttributeSchema::Init(st::TokenDictionary*)+818 
May 21 09:47:52 gibuxprcmnst06 cprofileupdater[50195]: [crit] gibuxprcmnst06 ==50195.7== st::AttributeSchema::AttributeSchema(universal::Attribute const*, st::TokenDictionary*, bool)+182 
May 21 09:47:52 gibuxprcmnst06 cprofileupdater[50195]: [crit] gibuxprcmnst06 ==50195.8== st::TransactionWorker::MakeScanner()+267 
May 21 09:47:52 gibuxprcmnst06 cprofileupdater[50195]: [crit] gibuxprcmnst06 ==50195.9== st::TransactionWorker::Init()+18 
CauseIt seems that customer copy pasted the IP entries. Hence the below invalid entry was created in universal_conf.py
_(
    name='\xef\xbb\xbf116.193.80.0'
, and_=21
, invisible='true'
)
, _(
ResolutionPlease verify the universal_conf.py to make sure valid entries are entered.
The invalid entry was removed in the files, which fixed the problem.

Attachments

    Outcomes