Saturday, January 28, 2017

Junos Space Polymorphic Security Zone Issue

Recently, deployed the Junos Space for one of our clients. During the implementation, found the Polymorphic Security Zone under the variables is not working at all. It will only use the default value, not the value actually under the security device context. Logged the call with Juniper support, they confirmed this is a software bug and the following fix can apply:

1. Request the patched sm.ear from Juniper support;
2. Take the backup of original sm.ear from /usr/local/jboss/standalone/deployments/06 folder into /home/admin directory;
3. Overwrite patch sm.ear in /usr/local/jboss/standalone/deployments/06;
4. Change the file permission to rwxr-x--- using chmod 750 sm.ear command;
4. Change the file user access to jboss:jboss using chown jboss:jboss sm.ear command;
5. Check the sha1sum value of new sm.ear using sha1sum sm.ear command
6. Update that value in /usr/local/jboss/domain/configuration/domain.xml (find sm.ear and replace the sha1 value)
7. Go to /usr/local/jboss/bin folder
8. Connect to controller using: /usr/local/jboss/bin/jboss-cli.sh --connect --user=admin --password=xxx --controller=xxx
9. run /server-groups=platform/deployment=sm.ear:undeploy
10. run  /server-groups=platform/deployment=sm.ear:remove
11. run /deployment=sm.ear:remove
All the above commands execution should be SUCCESS.
12. Execute Command - deploy /usr/local/jboss/standalone/deployments/06/sm.ear --server-groups=platform

No comments:

Post a Comment