SmartDomain Manager shows that status of Domains is flapping between "Synchronized" / "Not Synchronized"

Support Center > Search Results > SecureKnowledge Details

Technical Level

Solution ID	sk106313
Technical Level
Product	SmartDomain Manager, Multi-Domain Security Management
Version	R77.10 (EOL), R77.20, R77.30 (EOL)
OS	Gaia, SecurePlatform 2.6, Linux
Platform / Model	All
Date Created	02-Jun-2015
Last Modified	15-Jan-2016

Symptoms

In Management HA configuration, SmartDomain Manager shows that status of some Domains is flapping between "Synchronized" / "Not Synchronized" after upgrade.
MDS level debugs show:

CMdsStatusMgr::m_handleCustomerMngStatus> customer: 'DOMAIN', sender: 'CMAPRI_._._DOMAIN' app: 'management_application_CMASEC_._._DOMAIN', new_status: 'Synchronized', old_status: 'Lagging'
CMA level debugs show:

.def journal: last refresh = , disk change = -1

.def status: Lagging

Cause

The .def files timestamp are calculated by stat command, but timestamps are refreshed only if $FWDIR/state/links.C file is updated. Since MDS was upgraded, but policy was not yet installed on the gateway, the links.C does not exist and therefore the .def timestamp were not refreshed.

Solution

Note: To view this solution you need to Sign In .