Is It possible to customize the health check service ssg/ping like removing or adding some contents in it? I want to remove let's say build version from health check response page? Is it possible?
Hi so you had 2 items here with the ping page.
First removal second adding information.
For Removal its pretty easy you can do this without a lot of customization.
I have myself made a service "MyPingPage" on the gateway to call the ping page. And in my service I used a regex to only put what I want returned in a return template response to requester.
For the addition of data I dont know of a "Supported" approach to doing this. Though I do know for most of the data it calls a .sh on the appliance. And in theory you can modify this script. But I would prefer for sup-portability that there is no modification to it. So it might help if you want to expound upon what you are trying to accomplish, so we can determine if there is another better supported way to get it.
But it would be easy to build a /ssg/myping page,
And just remove the contents of, "I want to remove let's say build version" in this method without making any modifications to the default script itself. And returning a response with only the data you want provided.
Thanks, I tried that as well but the problem is when I try to route https://localhost:8443/ssg/ping/systemInfo?node=Gateway1 from myPingPage in the case to check detailed status of a node. It says
"WARNING 1381 com.l7tech.server.PingServlet: Creds do not authenticate against any registered id provider." and fails.
Just to let you know that my pingServlet.mode=OPEN.
If I provide HTTP credentials of gateway admin in the HTTP route it works fine. But providing credentials of a user created by me in IIDP whose role is administrator, it doesn't works.
Are you sure your new user didnt get locked by a password change rule? Or there isnt a typo of the password.
My default ping page was using the default Admin user. I moved over to a different user (custom) which had only 1 role defined which was Administrator. It failed for me, BUT I noticed when I went back into the Internal IP that the user was locked. I unlocked it and ensured the password was correct and this custom user works fine now in my route command.
My default CWP value was pingServlet.mode=REQUIRE_CREDS but I also changed this after success to, pingServlet.mode=OPEN and it continued to work. So a custom user with only the Administrator role should work fine and does for me.
Have you tried opening the extended node status link https://<domain>:8443/ssg/ping/systemInfo?node=Gateway1 with the new administrator user?
I just copied your link into a Fresh Internet Explorer window.
Substitute <domain> for MyIP
I get a prompt for Cert.
I then Get a login
Supplied user "chuck"
Which has only 1 role Administrator
And I get the full ping page output.
Thanks it works, but only after I login with that user in the policy manager and it asked me to change the password.
It looks strange to me that even the status of the user was Active still it was not able to access node status details page. But after login through policy manager, updating the password, and trying to access the service after this it works fine.
Also, are you able to do the same if the user role is of operator and not of admin? Ideally operator should also be able to view this details page.
Yes Operator works for me but "Manage cluster status" only does not. If I remove all roles Administrator by iteslf, or operator by itself gets data.
Thanks. I got it working and the reason was I had "force password change for new user and reset" option checked for the password policy. Once unchecked it works like a charm.
issue resolved through support case