Description

Sometimes, the Junos space is unable to sync with the device due to password expiry on the device end. This article helps how to identify and fix this issue

Symptoms

  • When you do resync with the network as per this link, it will fail with the below error:
Error while reading config from device: DeviceName

Failed while executing the following RPC:<get-hardware-inventory/>

<get-software-inventory/

 

  • While checking netconf trace logs from the Device, you can see that Junos space is closing the connection after getting the response:
May 22 11:58:24 [NETCONF] - [65290] Incoming: <?xml version="1.0" encoding="UTF-8"?><rpc message-id="1"><get-system-information/></rpc>

]]>]]>

May 22 11:58:24 [NETCONF] - [65290] Outgoing: <rpc-reply xmlns="urn:ietf:params:xml:ns:netconf:base:1.0" xmlns:junos="http://xml.juniper.net/junos/21.3R0/junos" message-id="1">

May 22 11:58:24 [NETCONF] - [65290] Outgoing: <system-information>

May 22 11:58:24 [NETCONF] - [65290] Outgoing: <hardware-model>srx4100</hardware-model>

May 22 11:58:24 [NETCONF] - [65290] Outgoing: <os-name>junos-es</os-name>

May 22 11:58:24 [NETCONF] - [65290] Outgoing: <os-version>21.3R3-S3.3</os-version>

May 22 11:58:24 [NETCONF] - [65290] Outgoing: <serial-number>DJ0419AR1121</serial-number>

May 22 11:58:24 [NETCONF] - [65290] Outgoing: <host-name>LV-Firewall</host-name>

May 22 11:58:24 [NETCONF] - [65290] Outgoing: <cluster-node/>

May 22 11:58:24 [NETCONF] - [65290] Outgoing: </system-information>

May 22 11:58:24 [NETCONF] - [65290] Outgoing: </rpc-reply>

May 22 11:58:24 [NETCONF] - [65290] Outgoing: ]]>]]>

May 22 11:58:25 [NETCONF] - [65290] Incoming: <rpc><close-session/></rpc>]]>]]>

May 22 11:58:25 [NETCONF] - [65290] Outgoing: <rpc-reply xmlns="urn:ietf:params:xml:ns:netconf:base:1.0" xmlns:junos="http://xml.juniper.net/junos/21.3R0/junos">

May 22 11:58:25 [NETCONF] - [65290] Outgoing: <ok/>

May 22 11:58:25 [NETCONF] - [65290] Outgoing: </rpc-reply>

May 22 11:58:25 [NETCONF] - [65290] Outgoing: ]]>]]>

 

 

 

  • You can see the below error from server.log on Junos space:

 

2023-05-22 11:58:26,701 ERROR [net.juniper.jmp.cmp.netconf.ejb.rpc.DmiMessageAdapter] (Thread-63 (ActiveMQ-client-global-threads)) Failed to process RPC request: <get-chassis-inventory/>

2023-05-22 11:58:26,702 ERROR [net.juniper.jmp.cmp.netconf.ejb.rpc.NetconfChannel] (Thread-63 (ActiveMQ-client-global-threads)) Error found: net.juniper.jmp.exception.JMPException: Failed to parse response <rpc-reply><message xmlns:junos="http://xml.juniper.net/junos/21.3R0/junos">Password for 'sdcon' will expire in 4 day(s)</message>

2023-05-22 11:42:24,061 ERROR [net.juniper.jmp.cmp.netconf.ejb.rpc.DmiMessageAdapter] (m-resync-98304) Failed to process RPC request: <get-software-information><node>local</node></get-software-information>

2023-05-22 11:42:24,061 ERROR [net.juniper.jmp.cmp.netconf.ejb.rpc.NetconfChannel] (m-resync-98304) Error found: net.juniper.jmp.exception.JMPException: Failed to parse response <rpc-reply><message xmlns:junos="http://xml.juniper.net/junos/21.3R0/junos">Password for 'DeviceUser' will expire in 4 day(s)</message>

 

 

 

  •  As per the above error, there is a warning "Password for 'DeviceUser' will expire in 4 days" while getting the response from the device for the RPC request. Due to this Junos space is unable to parse the RPC response received from the device.

Solution

To resolve the issue, please change the password for the user on the device from Junos Space by selecting the check box "Change on device" using the below document:
Modifying the Authentication Mode on the Devices

Modification History

6th March 2024: Publishing the KB since the issue occurred on this SR 2024-0301-089824 as well