WTD 5.0.2 - WTD broken after adding IPs to whitelist
2 years ago
Originally Published: 2015-05-21
Article Number
000061514
Applies To
RSA Product Set: Web Threat Detection
RSA Product/Service Type: Mitigator
RSA Version/Condition: 5.0
Platform: Linux
O/S Version: Red Hat Enterprise Linux 6.x
 
Issue
Customer reported that WTD is broken after adding IPs to whitelist. They can't log into any of the UI.

They added 400+ entries to whitelist under IP attribute.

Below is the error log :-

May 21 09:47:52 gibuxprcmnst06 cprofileupdater[50195]: [crit] gibuxprcmnst06 ==50195.0== StAbort(ip!=INADDR_NONE) ./2-os/metadata/whitelist.h:119 st::IpWhiteList::IpWhiteList(T*) [with T = const universal::Whitelist] 
May 21 09:47:52 gibuxprcmnst06 cprofileupdater[50195]: [crit] gibuxprcmnst06 ==50195.1== st::StAbort(char const*, char const*, unsigned int, char const*)+21 
May 21 09:47:52 gibuxprcmnst06 cprofileupdater[50195]: [crit] gibuxprcmnst06 ==50195.2== st::WhiteList* st::MakeWhiteList<universal::Whitelist const>(universal::Whitelist const*, bool)+557 
May 21 09:47:52 gibuxprcmnst06 cprofileupdater[50195]: [crit] gibuxprcmnst06 ==50195.3== st::AtomicAttribute::AtomicAttribute(st::TokenDictionary*, universal::attribute::Atomic const*, unsigned short)+231 
May 21 09:47:52 gibuxprcmnst06 cprofileupdater[50195]: [crit] gibuxprcmnst06 ==50195.4== st::MakeAttribute(st::TokenDictionary*, universal::Attribute const*, unsigned short, st::list::LinkedList<st::Attribute const> const&)+1226 
May 21 09:47:52 gibuxprcmnst06 cprofileupdater[50195]: [crit] gibuxprcmnst06 ==50195.5== st::AttributeSchema::AddAttribute(st::TokenDictionary*, universal::Attribute const*, int)+24 
May 21 09:47:52 gibuxprcmnst06 cprofileupdater[50195]: [crit] gibuxprcmnst06 ==50195.6== st::AttributeSchema::Init(st::TokenDictionary*)+818 
May 21 09:47:52 gibuxprcmnst06 cprofileupdater[50195]: [crit] gibuxprcmnst06 ==50195.7== st::AttributeSchema::AttributeSchema(universal::Attribute const*, st::TokenDictionary*, bool)+182 
May 21 09:47:52 gibuxprcmnst06 cprofileupdater[50195]: [crit] gibuxprcmnst06 ==50195.8== st::TransactionWorker::MakeScanner()+267 
May 21 09:47:52 gibuxprcmnst06 cprofileupdater[50195]: [crit] gibuxprcmnst06 ==50195.9== st::TransactionWorker::Init()+18 
Cause
It seems that customer copy pasted the IP entries. Hence the below invalid entry was created in universal_conf.py

_(
    name='\xef\xbb\xbf116.193.80.0'
, and_=21
, invisible='true'
)
, _(
Resolution
Please verify the universal_conf.py to make sure valid entries are entered.

The invalid entry was removed in the files, which fixed the problem.
Don't see what you're looking for?