Rudder

The webapp logs:

[2018-01-24 11:52:22] ERROR com.normation.rudder.rest.RestAuthentication - Authentication API forbids read access to Techniques for user REST Account: "Rudder system account" (rudder-system-api-account)
[2018-01-24 11:52:22] WARN  bootchecks - Could not authenticate in ncf API, maybe it was not initialized yet, retrying in 5 seconds
[2018-01-24 11:52:26] INFO  com.normation.inventory.provisioning.endpoint.FusionReportEndpoint - New input inventory: 'server-root.ocs'
[2018-01-24 11:52:27] ERROR com.normation.inventory.provisioning.fusion.RudderAgentNameParsing - No key for agent Community defined, a key is mandatory
[2018-01-24 11:52:27] INFO  com.normation.inventory.provisioning.endpoint.FusionReportEndpoint - Inventory 'server-root.ocs' parsed in 658 milliseconds ms, now checking signature
[2018-01-24 11:52:27] INFO  com.normation.inventory.provisioning.endpoint.FusionReportEndpoint - Inventory 'server-root.ocs' signature checked in 221 milliseconds ms, now saving
[2018-01-24 11:52:27] ERROR com.normation.rudder.rest.RestAuthentication - Authentication API forbids read access to Techniques for user REST Account: "Rudder system account" (rudder-system-api-account)
[2018-01-24 11:52:27] WARN  bootchecks - Could not authenticate in ncf API, maybe it was not initialized yet, retrying in 5 seconds
[2018-01-24 11:52:31] INFO  com.normation.inventory.provisioning.endpoint.FusionReportEndpoint - Report file processed in 3 seconds and 966 milliseconds ms
[2018-01-24 11:52:32] ERROR com.normation.rudder.rest.RestAuthentication - Authentication API forbids read access to Techniques for user REST Account: "Rudder system account" (rudder-system-api-account)
[2018-01-24 11:52:32] WARN  bootchecks - Could not authenticate in ncf API, maybe it was not initialized yet, retrying in 5 seconds
[2018-01-24 11:52:37] ERROR com.normation.rudder.domain.nodes.NodeInfo - Error when trying to get the CFEngine-MD5 digest of CFEngine public key for node 'server.rudder.local' (root) <- unable to decode base64 string: invalid characters encountered in base64 data
[2018-01-24 11:52:37] ERROR com.normation.rudder.rest.RestAuthentication - Authentication API forbids read access to Techniques for user REST Account: "Rudder system account" (rudder-system-api-account)
[2018-01-24 11:52:37] WARN  bootchecks - Could not authenticate in ncf API, maybe it was not initialized yet, retrying in 5 seconds

The problem is fixed by a "Clear Cache"

LDAP content is consistant and contains all the needed information.

After a "clear cache", the correct information are displayed in node list => we missed a cache invalidation somewhere when the node was accepted. It's unlikely that the bug is 4.3 specific.

I got the same issue: No Machine Inventory, then Inventory, then No Machine Inventory
On the web interface, I don't have everything (no machine type, no manufacturer, etc)
In the LDAP, entry DN: nodeId=root,ou=Nodes,ou=Accepted Inventories,ou=Inventories,cn=rudder-configuration is missing the "container" attribute

Could happen on 4.1 also !

Ok, once an inventory has been accepted, receving a new inventory for this node break the link to the container

So, this is kind of funny:

- we never set correctly when a node and its machine were both accepted the machine ID in the node (other cases were set correctly);
- with #12026, we enforce that the content of the node is strictly saved to LDAP, and that non existing attribute are removed;
- so the machine id was removed, as it wasn't set in the node.

Double bugs can make tests API for 7 years.