Connection reset by peer (IBM DataPower Extension)

[serhat_balik]

We've installed this plugin in our managed system. We can "telnet" port 5500 from ActiveGate VM of this appliance with no problems, but we're seeing this error in log files and also when we try to curl the XML Management Interface.

We have only one metric showing up in the UI, which is, "Connectivity". It shows 0.

Do you guys have any suggestions?

[kalle_lahtinen · Accepted solution]

Hi,

I remember faintly that we had a similar issue, which was related to the access rights given to the user which we had defined in the DataPower endpoint config. Unfortunately I don't have any documentation about it, but it was fixed by the DataPower specialist who saw in the local DP logs that the user wasn't authorized to do what it was trying to do. It was directly fixed by him, so I indeed don't have the details about what rights exactly were required. But if that helps in any way, I'd recommend investigating this on the DataPower end.

[Babar_Qayyum]

Hello @kalle_lahtinen & @serhat_balik 

What is the default port? I used 5550/5500/443 with and without credentials, but no metrics/services data is retrieving. What could be the issue?
Regards,
Babar

[Mike_L]

5550 is the default one (the default URL is in the display hint when setting up the extension)

[Babar_Qayyum]

Hello @Mike_L 
Thank you. Is the given URL hint, or should it be the same URL? The DataPower person is unable to provide the correct information.

Regards,

Babar

[Mike_L]

There have been some customers with a different URL, but in 90-95% of the cases it has been the one in the displayhint.

[Babar_Qayyum]

Hello @Mike_L 
I will go through with them and come back to you for further assistance if required.

Regards,

Babar

[Babar_Qayyum]

Hello @Mike_L 

Once port 5550 (https://00.00.00.00:5550/service/mgmt/current) opened then we tried a user having the read access on the default and read/write access on all projects but we are not getting any sort of metric data plus the services. We used LDAP user.

What could be the issue?

What types of permissions are required?

Regards,

Babar

[DavidMass]

Hi @Babar_Qayyum,

Based on the properties, it appears some of the calls are working correctly. Can you please check the extension logs to see what may be going on? 

C:\ProgramData\dynatrace\remotepluginmodule\log\remoteplugin\custom.remote.python.datapowerxml

or

/var/lib/dynatrace/remotepluginmodule/log/remoteplugin/custom.remote.python.datapowerxml

 Thanks, 
David

[Babar_Qayyum]

Hello @DavidMass 

I did not find anyother thing except the following:

2022-08-21 13:12:02.156 UTC WARNING [Python][17093318922597055693][IBM DataPower][139800935380736][Thread-852] - [write] /dyna/dm_config/remotepluginmodule/agent/runtime/engine_unzipped/site-packages/urllib3/connectionpool.py:1013: InsecureRequestWarning: Unverified HTTPS request is being made to host '00.00.00.00'. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.io/en/1.26.x/advanced-usage.html#ssl-warnings
warnings.warn(

Regards,

Babar