Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Troubleshooting Login Issues

 

Administration Portal IP Address Is Not Reachable

Problem

Description: The CSO Administration Portal IP address is not reachable.

Solution

  1. Check the CSO Administration Portal IP address reachability from your local machine, where you access the user interface (UI).
    [user-host:~]user% ping 192.0.2.1
  2. Check the status of the CSO central microservices virtual machine.

    Log in to the server that is hosting the central microservices virtual machine. Log in as root at the shell prompt, and run the virsh list --all command.

    root@host:~# virsh list --all

    Check the status of all the virtual machines.

  3. Log in to central microservices virtual machine using SSHv2.
    • If you can log in using SSHv2 , then the /etc/network/interfaces is correct.

    • If you cannot log in to the CSO server hosting central microservices virtual machine, then execute the following commands:

      # virsh console centralmsvm

      # check file /etc/network/interfaces

      Check the default gateway and try to ping the gateway from the virtual machine. If the gateway is correct and if you can ping the gateway, then the issue must be related to lab environment.

  4. Check the routes and firewall policies with the help of Network Administrator.
  5. For further troubleshooting, collect the logs and output results and contact Juniper Networks Technical Support team.

Administration Portal User Interface Is Not Reachable

Problem

Description: CSO Administration Portal IP address is reachable, but the user interface is not reachable.

Solution

Check whether the firewall in the path is blocking port 443. Also, check whether the CSO Administration Portal performance-optimized data center (POD) and other PODs are running. You can check the PODs in the Icinga Web UI or in CSO central microservices virtual machine.

  • To check whether the firewall in the path is blocking port 443:

    user@host-csp-build:~$ telnet 192.213.10.54 443
  • To verify the POD status in Icinga:

    1. Log in to http://central-ms-vm-IP-Address:1947/icingaweb2.
    2. Enter the user name icinga and the password that is generated during CSO installation.
    3. Select Infrastructure > CSP Microservices > Central_Services > Central MS IP.

      The PODs are displayed along with their running status.

    4. Verify whether the Administration Portal POD status is running (indicated by green).

To verify the Administration Portal POD status in the CSO central microservices virtual machine.

  1. Log in to the CSO central microservices virtual machine, and execute the following command:
    root@centralmsvm:~# kubectl get pods –n central | grep admin-portal

    Verify whether the Administration Portal POD and the service is in running state, which is indicated by 1/1. In some cases, where the microservices are clubbed together in a POD, the running status is indicated by 2/2, or 3/3.

  2. Execute kubectl get pods to get the status of all POD running in the central microservices virtual machine. For example:
    root@centralmsvm:~# kubectl get pods –n central
    root@centralmsvm:~# kubectl get pods –n central | grep admin-portal
  3. Check if any other POD is not in running state or if the ready state is 0/1 instead of 1/1. Then check the corresponding POD log by executing the kubectl logs -f pod-name command.
    root@centralmsvm:~# kubectl logs -f csp.admin-portal-ui-2886357385-brtjg –n central
  4. For further troubleshooting, collect the logs and output results and contact Juniper Networks Technical Support team.

Resetting the Password without E-mail Access

Problem

Description: User is unable to log in to cspadmin account. The error message “Login failed. Check your username and password” is displayed. Resetting the password requires access to e-mail servers, but user does not have access to smtp servers.

Solution

The cspadmin user password is generated by the system for the first time. If the user has changed it from the UI, then the user must enter the changed password.

To reset the password:

  1. Execute the following commands:

    The system prompts for the password. Enter the keystone administrator password.

  2. If the cspadmin account is locked, then execute the following script to unlock the account.
  3. Check whether the keystone is running in the infrastructure virtual machine (infravm) with service apache2 status.
  4. Check whether the pod is in Running state. If the pod is not running, run the following command to delete the pod.
  5. Check the log message to see if the RabbitMQ connection is down. If the connection is down, then restart the RabbitMQ server.
  6. Navigate to msvm and run the kubectl delete pods --all --force --grace-period=0 command. to re-establish the connection with RabbitMQ.

Related Documentation