CONTAP-392355: ONTAP FPolicy configuration replay fails after node reboot or upgrade
Issue
- FPolicy configuration replay fails after a node reboot or ONTAP upgrade
- The following errors appear repeatedly in the FPolicy log:
[kern_fpolicy:error:9887] No Vserver Configured...
[kern_fpolicy:error:9887] Populate ScreenReq failed with error = 3. Setting nblade response to ALLOW - The following event is logged on the affected node:
mgmt.fpolicy.replay.failed: FPolicy configuration replication process failed. - FPolicy Service Manager process exits repeatedly and attempts to restart:
spm.fpolicy.process.exit: Fpolicy Service Manager process with ID <pid> exited as a result of signal signal 15. The service will attempt to restart. vserver fpolicy show-enginemay return an RPC error on the affected node:
Warning: Unable to list entries on node <node>. RPC: Remote system error [from mgwd on node "<node>" (VSID: -1) to fpolicy at <address>]- FPolicy nblade configuration cache becomes out of sync with the mirror tables following the failed replay
