Network Management

Hi, installing at clean MySQL 8.0 server IMC from iMC_PLAT_7.3_E0705_Enterprise_Linux.zip package I got few errors:

Begin to install imcwlandm database and data...
-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
Current Database is Mysql
Begin to create wlan_db database...
mysql: [Warning] Using a password on the command line interface can be insecure.
mysql: [Warning] Using a password on the command line interface can be insecure.
mysql: [Warning] Using a password on the command line interface can be insecure.
ERROR 1064 (42000) at line 2: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'identified by 'iMC5_Pxe2mFnOiL'' at line 1
The install of imcwlandm finished unsuccessfully

The script for creating a user ends with a query: 

create user imc_wsm@'%'

I did google a bit and found out that in MySQL 8.0 there is a bit different process of granting user privilages than in MySQL 5.7 more on it can be found at https://ma.ttias.be/mysql-8-removes-shorthand-creating-user-permissions/

The user imc_wsm is created but has no password:

mysql> use mysql;
Database changed
mysql> select * from user where user like 'imc_wsm';
+------+---------+-------------+-------------+-------------+-------------+-------------+-----------+-------------+---------------+--------------+-----------+------------+-----------------+------------+------------+--------------+------------+-----------------------+------------------+--------------+-----------------+------------------+------------------+----------------+---------------------+--------------------+------------------+------------+--------------+------------------------+----------+------------------------+--------------------------+----------------------------+---------------+-------------+-----------------+----------------------+-----------------------+-----------------------+------------------+-----------------------+-------------------+----------------+------------------+----------------+------------------------+---------------------+--------------------------+-----------------+
| Host | User | Select_priv | Insert_priv | Update_priv | Delete_priv | Create_priv | Drop_priv | Reload_priv | Shutdown_priv | Process_priv | File_priv | Grant_priv | References_priv | Index_priv | Alter_priv | Show_db_priv | Super_priv | Create_tmp_table_priv | Lock_tables_priv | Execute_priv | Repl_slave_priv | Repl_client_priv | Create_view_priv | Show_view_priv | Create_routine_priv | Alter_routine_priv | Create_user_priv | Event_priv | Trigger_priv | Create_tablespace_priv | ssl_type | ssl_cipher | x509_issuer | x509_subject | max_questions | max_updates | max_connections | max_user_connections | plugin | authentication_string | password_expired | password_last_changed | password_lifetime | account_locked | Create_role_priv | Drop_role_priv | Password_reuse_history | Password_reuse_time | Password_require_current | User_attributes |
+------+---------+-------------+-------------+-------------+-------------+-------------+-----------+-------------+---------------+--------------+-----------+------------+-----------------+------------+------------+--------------+------------+-----------------------+------------------+--------------+-----------------+------------------+------------------+----------------+---------------------+--------------------+------------------+------------+--------------+------------------------+----------+------------------------+--------------------------+----------------------------+---------------+-------------+-----------------+----------------------+-----------------------+-----------------------+------------------+-----------------------+-------------------+----------------+------------------+----------------+------------------------+---------------------+--------------------------+-----------------+
| % | imc_wsm | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | | 0x | 0x | 0x | 0 | 0 | 0 | 0 | mysql_native_password | | N | 2020-04-06 18:05:11 | NULL | N | N | N | NULL | NULL | NULL | NULL |
+------+---------+-------------+-------------+-------------+-------------+-------------+-----------+-------------+---------------+--------------+-----------+------------+-----------------+------------+------------+--------------+------------+-----------------------+------------------+--------------+-----------------+------------------+------------------+----------------+---------------------+--------------------+------------------+------------+--------------+------------------------+----------+------------------------+--------------------------+----------------------------+---------------+-------------+-----------------+----------------------+-----------------------+-----------------------+------------------+-----------------------+-------------------+----------------+------------------+----------------+------------------------+---------------------+--------------------------+-----------------+
1 row in set (0.00 sec)

Does any one know and want to share here the solution how to overcome this error for module imcwlandm?

Alternatively does anyone know how to debug wsm_script_mysql.hz ?

The other problem is that IMC use rather old java client and I get errors regarding SSL encryption.

cat /opt/iMC/tmp/stdout_1586203080713.txt
keytool error: java.lang.Exception: Certificate not imported, alias <cacerts> already exists

cat /opt/iMC/tmp/stderr_1586203080713.txt
Warning: use -cacerts option to access cacerts keystore

WARN: Establishing SSL connection without server's identity verification is not recommended. According to MySQL 5.5.45+, 5.6.26+ and 5.7.6+ requirements SSL connection must be established by default if explicit option isn't set. For compliance with existing applications not using SSL the verifyServerCertificate property is set to 'false'. You need either to explicitly disable SSL by setting useSSL=false, or set useSSL=true and provide truststore for server certificate verification.

javax.net.ssl.SSLException
MESSAGE: closing inbound before receiving peer's close_notify

STACKTRACE:

javax.net.ssl.SSLException: closing inbound before receiving peer's close_notify
at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:129)
at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:117)
at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:308)
at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:264)
at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:255)
at java.base/sun.security.ssl.SSLSocketImpl.shutdownInput(SSLSocketImpl.java:645)
at java.base/sun.security.ssl.SSLSocketImpl.shutdownInput(SSLSocketImpl.java:624)
at com.mysql.cj.protocol.a.NativeProtocol.quit(NativeProtocol.java:1313)
at com.mysql.cj.NativeSession.quit(NativeSession.java:182)
at com.mysql.cj.jdbc.ConnectionImpl.realClose(ConnectionImpl.java:1743)
at com.mysql.cj.jdbc.ConnectionImpl.cleanup(ConnectionImpl.java:618)
at com.mysql.cj.jdbc.ConnectionImpl.<init>(ConnectionImpl.java:462)
at com.mysql.cj.jdbc.ConnectionImpl.getInstance(ConnectionImpl.java:240)
at com.mysql.cj.jdbc.NonRegisteringDriver.connect(NonRegisteringDriver.java:207)
at java.sql/java.sql.DriverManager.getConnection(DriverManager.java:677)
at java.sql/java.sql.DriverManager.getConnection(DriverManager.java:228)
at com.h3c.imc.deploy.tasks.ExecuteSqlTask$SqlExecuteWorker.doInBackground(ExecuteSqlTask.java:399)
at com.h3c.imc.deploy.tasks.ExecuteSqlTask$SqlExecuteWorker.doInBackground(ExecuteSqlTask.java:383)
at com.h3c.imc.deploy.tasks.SwingWorker$1.call(SwingWorker.java:294)
at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
at com.h3c.imc.deploy.tasks.SwingWorker.run(SwingWorker.java:333)
at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)
at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)
at java.base/java.lang.Thread.run(Thread.java:834)

** END NESTED EXCEPTION **

Task execute failed
Master tasks execute failed, please see dmslog.txt on master server.
Deploy 'iMC-NME-FAULT' failed

I managed to mitigate error for javax.net.ssl.SSLException by disabling SSL fom MySQL server adding

[mysqld]
ssl=0
skip_ssl

but I still get warnings for establishing SSL connection without server's identity verification is not recommended

Any ideas how to fix this?

I also can mention here that to solve problem of

Begin to create wlan_db database...
mysql: [Warning] Using a password on the command line interface can be insecure.
mysql: [Warning] Using a password on the command line interface can be insecure.
ERROR 1396 (HY000) at line 5: Operation DROP USER failed for 'imc_wsm'@'%'
mysql: [Warning] Using a password on the command line interface can be insecure.
ERROR 1819 (HY000) at line 1: Your password does not satisfy the current policy requirements
The install of imcwlandm finished unsuccessfully, please contact your local IMC support centre.

one can disable or just uninstall validate_password plugin at mysql server:

for MySQL 5.x:

mysql> uninstall plugin validate_password;

for MySQL 8.0

mysql> UNINSTALL COMPONENT 'file://component_validate_password';

Hi, did you followed this guide (IMC 7.3 on local/remote MySQL 8.0 on Linux)?

Yes I first followed:

https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=a00094094en_us

but on CentOS release 7.7.1908

and then I followed

https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=a00094095en_us

with mysql Ver 8.0.19 for Linux on x86_64 (MySQL Community Server - GPL)

I found a way to overcome this problem partially by running following script:

while [ ! -f ok ]; do
if [ -f /tmp/*/*/wlan_db.DBS ] || [ -f /tmp/*/*/wips_db.DBS ]; then
dir=`find /tmp/ -type d -name 'script'`; para_user_pass=`grep '^PARA_USER_PASSWORD=' $dir/install_script.sh | sed 's/PARA_USER_PASSWORD=//'`; cat $dir/db.USR; if [ -f /tmp/*/*/wlan_db.DBS ]; then
printf "%s\n%s\n" "create user imc_wsm@'%' identified by '$para_user_pass';" "grant all privileges on wlan_db.* to imc_wsm@'%';" > $dir/db.USR;
else
if [ -f /tmp/*/*/wips_db.DBS ]; then
printf "%s\n%s\n" "create user imc_wips@'%' identified by '$para_user_pass';" "grant all privileges on wips_db.* to imc_wips@'%';" > $dir/db.USR;
fi;
fi; cat $dir/db.USR;
fi;
done

in background during the process of IMC installation.

It's not the cleaniest way so maybe someone will be able to provide better one.

if installing through dma.sh with GUI then /tmp path should be changed to imc destination dir default /opt/iMC