SAP Knowledge Base Article - Preview

3357972 - RSecSSFs: SSFS-1670: Update of the secure storage is locked by user

Symptom

Setup replication from Site A to Site B. After few hours, there are Error in Replication Status "As Communication Channel closed".
After restart the SiteB, HANA DB is not coming up with following error in the nameserver trace:


[54845]{-1}[-1/-1] 2023-07-15 07:08:40.308923 e CryptoSSFS       RawRootKeyStoreAccessor.cpp(00297) : RSecSSFs: SSFS-1670: Update of the secure storage is locked by user "xxxadm" from host "a-aaaa-a-aa" since "2023-07-14  12:27:09  UTC" [/bas/753_REL/src/krn/rsec/rsecssfs.c 5175]
[54845]{-1}[-1/-1] 2023-07-15 07:08:40.309089 e Crypto           RootKeyStoreAccessor.cpp(01095) : Error during SSFS deleteAll: exception  1: no.301103  (Crypto/Ssfs/RootKeyAccess/RawAccess/RawRootKeyStoreAccessor.cpp:56) TID: 54845
    RawRootKeyStoreWriter::write: SSFS-1670: Update of the secure storage is locked by user "xxxadm" from host "a-aaaa-a-aa" since "2023-07-14  12:27:09  UTC"
exception throw location:
   0: 0x00007efcd8b9ca7b in Crypto::SecureStore::RootKeyAccess::RawAccess::RawRootKeyStoreWriter<true, true>::write(Crypto::Buffer const&)+0xb7 at Crypto/Ssfs/RootKeyAccess/RawAccess/RawRootKeyStoreAccessor.cpp:287 (libhdbbasement.so)
   1: 0x00007efcd8b97974 in Crypto::SecureStore::RootKeyAccess::RawAccess::RawRootKeyStore<true, true>::write(ltt::basic_string<char, ltt::char_traits<char>, ltt::integral_constant<int, 64> > const&, ltt::basic_string<char, ltt::char_traits<char>, ltt::integral_constant<int, 64> > const&, ltt::basic_string<char, ltt::char_traits<char>, ltt::integral_constant<int, 64> > const&, ltt::basic_string<char, ltt::char_traits<char>, ltt::integral_constant<int, 64> > const&, Crypto::Buffer const&)+0x100 at Crypto/Ssfs/RootKeyAccess/RawAccess/RawRootKeyStore.cpp:124 (libhdbbasement.so)
   2: 0x00007efcd8ba72e9 in Crypto::SecureStore::RootKeyAccess::SsfsAccessorBase::writeValueForContentKey(ltt::basic_string<char, ltt::char_traits<char>, ltt::integral_constant<int, 64> > const&, Crypto::Buffer const&)+0x165 at Crypto/Ssfs/RootKeyAccess/SsfsAccessorBase.cpp:167 (libhdbbasement.so)
   3: 0x00007efcd8bba9f7 in Crypto::SecureStore::RootKeyAccess::RootKeyStoreAccessor<Crypto::SecureStore::RootKeyAccess::PersistenceRootKeyStoreAccessor>::deleteAll(bool)+0x173 at Crypto/Ssfs/RootKeyAccess/RootKeyStoreAccessor.cpp:1062 (libhdbbasement.so)
   4: 0x00007efcd8bbd0bc in Crypto::SecureStore::RootKeyAccess::RootKeyStoreAccessor<Crypto::SecureStore::RootKeyAccess::PersistenceRootKeyStoreAccessor>::writeBackupOfCacheToSSFS(unsigned int, ltt::map<unsigned int, Crypto::SecureStore::RootKeyAccess::SSFSValueType, ltt::less<unsigned int>, ltt::rb_tree_balancier> const&, bool, bool)+0x158 at Crypto/Ssfs/RootKeyAccess/RootKeyStoreAccessor.cpp:973 (libhdbbasement.so)
   5: 0x00007efcd8b6b759 in Crypto::RootKeyManagerSsfs::overwriteExistingKeys(Crypto::SecureStore::RootKeyAccess::SsfsKeyType, ltt::map<unsigned int, Crypto::SecureStore::RootKeyAccess::SSFSValueType, ltt::less<unsigned int>, ltt::rb_tree_balancier> const&, unsigned int, Crypto::RootKeyManager::CheckProducer)+0x65 at Crypto/RootKeyManager/RootKeyManagerSsfs.cpp:466 (libhdbbasement.so)
   6: 0x00007efcd8b52664 in Crypto::DistributedRootKeyManager::overwriteExistingKeys(Crypto::SecureStore::RootKeyAccess::SsfsKeyType, ltt::map<unsigned int, Crypto::SecureStore::RootKeyAccess::SSFSValueType, ltt::less<unsigned int>, ltt::rb_tree_balancier> const&, unsigned int, Crypto::RootKeyManager::CheckProducer)+0x20 at Crypto/RootKeyManager/DistributedRootKeyManager.cpp:213 (libhdbbasement.so)
   7: 0x00007efcd8b8be08 in Crypto::SecureStore::Backup::RootKeyBackupManager::drWriteContentOnSecondary(void const*, unsigned long, Crypto::RootKeyManager&)+0xf4 at Crypto/Ssfs/Backup/RootKeyBackupManager.cpp:400 (libhdbbasement.so)
   8: 0x00007efcd89f7ebc in NameServer::DRClientUtils::drDeserializeAndWriteRootKeys(NameServer::Transferable&, ltt::basic_string<char, ltt::char_traits<char>, ltt::integral_constant<int, 64> > const&)+0x5b8 at TREXNameServer/DRUtils/DRClientUtils.cpp:295 (libhdbbasement.so)
   9: 0x00007efd01ca673e in NameServer::TREXNameServerUtilsWrapper::drDeserializeAndWriteRootKeysWrapper(NameServer::Transferable&, ltt::basic_string<char, ltt::char_traits<char>, ltt::integral_constant<int, 64> > const&)+0x1a at TREXNameServer/TREXNameServerUtilsWrapper.cpp:32 (libhdbns.so)
  10: 0x00007efd01da3106 in NameServer::fetchRootKeyStoreForDbid(unsigned int, int, NameServer::TREXNameServerUtilsWrapper&, ltt::allocator&)+0x2c2 at TREXNameServer/SecurityUtils/RootKeyStoreDistribution.cpp:99 (libhdbns.so)
  11: 0x00005594fc2430ac in TRexAPI::TREXIndexServer::assign(NameServer::ServiceStartInfo&, bool, TREX_ERROR::TRexError&)+0x3a8 at TREXIndexServer2/TREXIndexServer.cpp:1129 (hdbnameserver)
  12: 0x00005594fc247e24 in TRexAPI::AssignThread::run(void*)+0x30 at TREXIndexServer2/TREXIndexServer.cpp:532 (hdbnameserver)
  13: 0x00007efcd873d427 in TrexThreads::PoolThread::run()+0xe53 at TrexThreads/PoolThread.cpp:423 (libhdbbasement.so)
  14: 0x00007efcd873ef00 in TrexThreads::PoolThread::run(Execution::ThreadRC&)+0x10 at TrexThreads/PoolThread.cpp:120 (libhdbbasement.so)
  15: 0x00007efcd45743ee in Execution::Thread::staticMainImp(Execution::Thread*)+0x54a at Basis/Execution/impl/Thread.cpp:593 (libhdbbasis.so)
  16: 0x00007efcd457cb05 in Execution::pthreadFunctionWrapper(Execution::Thread*)+0x1c1 at Basis/Execution/impl/ThreadInterposition.cpp:703 (libhdbbasis.so)
  17: 0x00007efcd3b436ea in start_thread+0xd8 (libpthread.so.0)
  18: 0x00007efcd262aa6f in __GI___clone+0x3b (libc.so.6)
exception type information:
 - 0: public Crypto::RootKeyStoreException@0x00007efcd52b4738 SI
   - 0: public Crypto::Exception@0x00007efcd52b4750 SI
     - 0: public ltt::exception@0x00007efcd3a10878


Read more...

Environment

SAP HANA DB Version 2.0

Product

SAP HANA, platform edition 2.0

Keywords

KBA , HAN-DB-HA , SAP HANA High Availability (System Replication, DR, etc.) , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.