Identification Engine: Discovery status is FAILURE, Identification sections in pattern failed: section: Azure Subscription identification, error: Match step predicate is not matched.

RamSagar · ‎11-04-2020

Hi,

When am trying to validate the azure service account am getting the error -

Identification Engine: Discovery status is FAILURE, Identification sections in pattern failed: section: Azure Subscription identification, error: Match step predicate is not matched. "

============================================

"message" : "2020-11-04 13:45:09: Exception occurred while executing operation Cloud REST Query. Custom operation Failed to run script due to the following error: JAVASCRIPT_CODE_FAILURE: com.snc.sw.exception.CommandFailureException: Failed to execute cloud request. Reason: SSLHandshakeException:sun.security.validator.ValidatorException: PKIX path building failed: java.security.cert.CertPathBuilderException: Unable to find certificate chain. (script_include:AzureApiCommand; line 111). Custom operation Failed to run script due to the following error: JAVASCRIPT_CODE_FAILURE: com.snc.sw.exception.CommandFailureException: Failed to execute cloud request. Reason: SSLHandshakeException:sun.security.validator.ValidatorException: PKIX path building failed: java.security.cert.CertPathBuilderException: Unable to find certificate chain. (script_include:AzureApiCommand; line 111)",

==============================================

Please find the below log:

{
"name" : "Discovery Log",
"status" : "FAILURE",
"children" : [ {
    "name" : "Pre Pattern Execution",
    "id" : "pre_pattern_execution_script",
    "status" : "SUCCESS",
    "level" : 2,
    "messages" : [ {
      "message" : "2020-11-04 13:45:08: Getting pre pattern execution data generated by script."
    }, {

    }, {
      "message" : "2020-11-04 13:45:08: setAttribute(build_relation_from_host_sys_id,false)",
      "severity" : "DEBUG"
    }, {
      "message" : "2020-11-04 13:45:08: setAttribute(no_relation,true)",
      "severity" : "DEBUG"
    }, {
      "message" : "2020-11-04 13:45:08: setAttribute(pattern_runtime_mode,horizontal)",
      "severity" : "DEBUG"
    } ],
    "type" : "NONE"
}, {
    "name" : "Selecting Pattern for Execution",
    "id" : "set_pattern_name",
    "status" : "SUCCESS",
    "level" : 2,
    "messages" : [ {
      "message" : "2020-11-04 13:45:08: Pattern: Azure Service account"
    }, {
      "message" : "2020-11-04 13:45:08: setAttribute(pattern,Azure Service account)",
      "severity" : "DEBUG"
    } ],
    "type" : "NONE"
}, {
    "name" : "Azure Subscription identification",
    "status" : "TERMINATION",
    "children" : [ {
      "name" : "Create Service Account From Input Params",
      "status" : "SUCCESS",
      "level" : 3,
      "messages" : [ {
        "message" : "2020-11-04 13:45:08: Library 'Create Service Account From Input Params' executing",
        "severity" : "DEBUG"
      } ],
      "type" : "STEP_TYPE"
    }, {
      "name" : "Create service account table if doesn't exist",
      "status" : "NOP",
      "level" : 3,
      "messages" : [ {
        "message" : "2020-11-04 13:45:08: Step condition is false. step not executed.",
        "severity" : "DEBUG"
      }, {
        "message" : "2020-11-04 13:45:08: Execution time: 0 ms",
        "severity" : "DEBUG"
      } ],
      "type" : "STEP_TYPE"
    }, {
      "name" : "Add credentials and account ID to service account table if don't exist",
      "status" : "NOP",
      "level" : 3,
      "messages" : [ {
        "message" : "2020-11-04 13:45:08: Step condition is false. step not executed.",
        "severity" : "DEBUG"
      }, {
        "message" : "2020-11-04 13:45:08: Execution time: 0 ms",
        "severity" : "DEBUG"
      } ],
      "type" : "STEP_TYPE"
    }, {
      "name" : "Verify account ID",
      "status" : "SUCCESS",
      "level" : 3,
      "messages" : [ {
        "message" : "2020-11-04 13:45:08: Execution time: 0 ms",
        "severity" : "DEBUG"
      } ],
      "type" : "STEP_TYPE"
    }, {
      "name" : "Get Azure Subscriptions",
      "status" : "MIXED",
      "level" : 3,
      "messages" : [ {
        "message" : "2020-11-04 13:45:08: setAttribute(headers,)",
        "severity" : "DEBUG"
      }, {
        "message" : "2020-11-04 13:45:08: setAttribute(method,GET)",
        "severity" : "DEBUG"
      }, {
        "message" : "2020-11-04 13:45:08: setAttribute(formatted,true)",
        "severity" : "DEBUG"
      }, {
        "message" : "2020-11-04 13:45:08: setAttribute(body,)",
        "severity" : "DEBUG"
      }, {
        "message" : "2020-11-04 13:45:08: setAttribute(url,https://management.azure.com/subscriptions?api-version=2016-06-01)",
        "severity" : "DEBUG"
      }, {
        "message" : "2020-11-04 13:45:08: setAttribute(headers,null)",
        "severity" : "DEBUG"
      }, {
        "message" : "2020-11-04 13:45:08: setAttribute(body,null)",
        "severity" : "DEBUG"
      }, {
        "message" : "2020-11-04 13:45:09: Exception occurred while executing operation Cloud REST Query. Custom operation Failed to run script due to the following error: JAVASCRIPT_CODE_FAILURE: com.snc.sw.exception.CommandFailureException: Failed to execute cloud request. Reason: SSLHandshakeException:sun.security.validator.ValidatorException: PKIX path building failed: java.security.cert.CertPathBuilderException: Unable to find certificate chain. (script_include:AzureApiCommand; line 111). Custom operation Failed to run script due to the following error: JAVASCRIPT_CODE_FAILURE: com.snc.sw.exception.CommandFailureException: Failed to execute cloud request. Reason: SSLHandshakeException:sun.security.validator.ValidatorException: PKIX path building failed: java.security.cert.CertPathBuilderException: Unable to find certificate chain. (script_include:AzureApiCommand; line 111)",
        "severity" : "DEBUG"
      }, {
        "message" : "2020-11-04 13:45:09: Execution time: 407 ms",
        "severity" : "DEBUG"
      } ],
      "type" : "STEP_TYPE"
    }, {
      "name" : "Verify if we have any valid response",
      "status" : "TERMINATION",
      "level" : 3,
      "messages" : [ {
        "message" : "2020-11-04 13:45:09: Execution time: 0 ms",
        "severity" : "DEBUG"
      } ],
      "type" : "STEP_TYPE"
    } ],
    "level" : 2,
    "type" : "IDENTIFICATION_SECTION_TYPE"
}, {
    "name" : "discovery",
    "id" : "discovery",
    "status" : "FAILURE",
    "children" : [ {
      "name" : "Check Processing Success",
      "id" : "Check Processing Success",
      "status" : "FAILURE",
      "level" : 3,
      "messages" : [ {
        "message" : "2020-11-04 10:45:10: Identification Engine: Discovery status is FAILURE, Identification sections in pattern failed: section: Azure Subscription identification, error: Match step predicate is not matched. "
      } ],
      "type" : "NONE"
    } ],
    "level" : 2,
    "type" : "NONE"
} ],
"level" : 0,
"messages" : [ {
    "message" : "2020-11-04 13:45:08: Task is running on MID server VWUNOWAPP101_AD",
    "severity" : "DEBUG"
}, {
    "message" : "2020-11-04 13:45:08: setAttribute(cmdb_ci_cloud_service_account,[{}])",
    "severity" : "DEBUG"
}, {
    "message" : "2020-11-04 13:45:08: setAttribute(cmdb_ci_cloud_service_account,[{}])",
    "severity" : "DEBUG"
} ],
"type" : "NONE"
}

Any thoughts why the error and unable to validate the service account.

Thanks in Advance

RamSagar · ‎11-12-2020

Hi Srini,

I had added all the capabilities to the MID servers.
Downloaded the PEM certificate from the azure website browser.
Added required roles to the MID server user.

Added the property com.glide.communications.trustmanager_trust_all to true.

still am facing the same issue. is there is any other reason why am unable to connect to azure.

Ashutosh Munot1 · ‎11-08-2020

Hi,

Do you have a custom step in this pattern?

Thanks,
Ashutosh

SriniK · ‎11-08-2020

I think the Pattern is failing at the Pattern Infra level (Designer) which is before the steps in the pattern

Ashutosh Munot1 · ‎11-08-2020

Not sure. Because i see the error on REST which can be cause of CAPI trail or in pattern,

Thnks,
Ashutosh

SriniK · ‎11-08-2020

Pattern Infra (Also called as Pattern Designer)

1) Execute Discover Now or Test Account or Debug Pattern

2) Pattern Designer responsible

2.1) Verify and Select the Correct MID

2.2) Execute REST

2.3) Verify Credentials

2.4) Store the Credential test success results in a temp table

3) Once the credentials are stored in temp, the cred_sys_id passed to the Pattern and then pattern executes the Steps

The above-mentioned issue "Exception occurred while executing operation Cloud REST Query" is failing at 2.1