Some of the monitored hosts that share the same credential and confirmed to have resource mapping definitions are failing to establish connection even after performing all the standard configuration steps to enable the connections.
In the Foglight Agent Manager log
ECHO WARN [Quartz[0]-1] com.quest.glue.core.credentials.CredentialManager - No credentials were found that match the monitored host. You can add credentials through Administration > Credentials dashboard on the Management Server.
VERBOSE [Quartz[0]-1] com.quest.glue.core.credentials.CredentialServerImpl - Credential query cannot be resolved. No upstream connection available. Returning empty credential result-set to caller.
In the Foglight Management server log:
ERROR [FglAM:IncomingMessage[6]-24] com.quest.nitro.service.credentials.CredentialQueryExecutorService - Credential mapping evaluation failed for credential "Credential_Name" (ID: 143f06eb-619b-4c30-a190-e9fce5c60df0). This credential may not be available to clients that need to receive it. Error details: java.lang.IllegalArgumentException: Empty label is not a legal name
Invalid resource mappings:
"Query Credential" error in Manage Credential error message "Empty label is not a legal name".
IDNA_EQUIVALENT conditions are meant to match one particular domain name in its various textual representations. They are not meant to provide domain suffix matches. Therefore, the value used in these conditions must itself be a valid domain name. The leading dots in the two IDNA_EQUIVALENT conditions above make the domain names invalid, hence the exception.
target.host.name: IDNA_EQUIVALENT: [hostname..domain.com], null matches: false
Credential queries for the invalid resource mapping record and the ones after it will not return results.
Edit the Resource Mapping of the offending Credential removing the leading period or consecutive ones from the domain names.
BEFORE:
.MARKIT.PARTNERS
.ACCDMZ.LOCAL
hostname..domain.com
AFTER:
MARKIT.PARTNERS
ACCDMZ.LOCAL
hostname.domain.com
This screenshot indicates in Resource Mapping where one selects Domain Name (IDNA_EQUIVALENT) or Regex.
Here's an example Diagnostic Snapshot information that shows the IDNA_EQUIVALENT entries and identifying the actual Credential Name.
-- credential 0
id: 1c1e0f5b-3eb6-40bb-ae61-3c42aad1b8e9
name: Default Foglight Account for Monitoring UnixOS
records: 5
target.host.name: STRING_REGEX_MATCH: [^([a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9\-\_]{0,61}[a-zA-Z0-9])(\.([a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9\-\_]{0,61}[a-zA-Z0-9]))*$], null matches: false
AND purpose: STRING_EXACT_MATCH: [UnixOS], null matches: false OR
target.host.name: IDNA_EQUIVALENT: [.MARKIT.PARTNERS], null matches: false
AND purpose: STRING_EXACT_MATCH: [UnixOS], null matches: false OR
target.host.name: IDNA_EQUIVALENT: [.ACCDMZ.LOCAL], null matches: false
AND purpose: STRING_EXACT_MATCH: [UnixOS], null matches: false OR
target.host.name: STRING_REGEX_MATCH: [.*], null matches: false
AND purpose: STRING_EXACT_MATCH: [UnixOS], null matches: false OR
target.host.name: IDNA_EQUIVALENT: [hostname..domain.com], null matches: false
AND purpose: STRING_EXACT_MATCH: [UnixOS], null matches: false
© ALL RIGHTS RESERVED. Feedback Nutzungsbedingungen Datenschutz Cookie Preference Center