Anthony
Dec 01, 2015Nimbostratus
Removed iApp - now can't config-sync
I've been having a tidy up today on our production loadbalancers. This involved removing some unused APM iApps.
One of them seems to have left a load of 'apm policy policy-item' entries in the bigip.conf, and the config-sync now fails with the following message:
Dec 1 14:02:22 notice mcpd[6141]: 01071038:5: Loading keys from the file.
Dec 1 14:02:25 warning mcpd[6141]: 010712e9:4: Resuming log processing at this invocation; held 22 messages.
Dec 1 14:02:25 warning mcpd[6141]: 010712e9:4: pva.syncookies.connectionthreshold is not in BigDB.dat.
Dec 1 14:02:25 warning mcpd[6141]: 010712e9:4: pva.listeners.dest.maxentries is not in BigDB.dat.
Dec 1 14:02:25 warning mcpd[6141]: 010712e9:4: pva.adaptivereaper.scrubperiodms is not in BigDB.dat.
Dec 1 14:02:25 warning mcpd[6141]: 010712e9:4: pva.syncookies.serverwindow is not in BigDB.dat.
Dec 1 14:02:25 warning mcpd[6141]: 010712e9:4: md.maxtransactionperaggrphase is not in BigDB.dat.
Dec 1 14:02:25 warning mcpd[6141]: 010712e9:4: Per-invocation log rate exceeded; throttling.
Dec 1 14:02:25 err mcpd[6141]: 01070277:3: The requested access policy item (/Common/Citrix_APM.app/Citrix_APM_apm_securid) was not found.
Dec 1 14:02:25 err mcpd[6141]: 01071488:3: Remote transaction for device group /Common/Sync-Failover-Group to commit id 126 6223315446436815030 /Common/..com 0 failed with error 01070277:3: The requested access policy item (/Common/Citrix_APM.app/Citrix_APM_apm_securid) was not found..
Dec 1 14:02:25 notice mcpd[6141]: 01071038:5: Loading keys from the file.
Dec 1 14:02:25 notice mcpd[6141]: 01071038:5: Master Key updated by user %cmi-mcpd-peer-192.168.84.2
Dec 1 14:02:26 notice mcpd[6141]: 010714a0:5: Sync of device group /Common/device_trust_group to commit id 126 6223315446438941225 /Common/..com 0 from device /Common/..com complete.
Anyone seen this sort of behaviour before, or know of a way to get around it? I am starting to think that manually removing the items from the bigip.conf and forcing a load via tmsh is the only way.
Thanks in advance,
Anthony