test hashicorp connectivity from EIC

[Oushat]

Hi,

i configured an AD connection which is working successfully, however when i add  hashicorp connection to it to save credentials in hashicorp vault, the connection is failing.

could you please guide me on how to test connectivity between EIC and hashicorp vault ?

Thanks,

Oushat 

[Dave]

I'm assuming you followed this document? https://docs.saviyntcloud.com/bundle/HashiCorp-v2022x/page/Content/Understanding-the-Integration-bet...

[Oushat]

Hi Dave,

thanks for your response. actually i am following this one Using Vault for Credentials Management (saviyntcloud.com)

[Saathvik]

For vault connection you cannot test connection from UI like some other connectors. 

You need to look for logs on clicking save connection to get the details of failures. or you can check logs when you tried to select vault connection on AD and did test connection

[NageshK]

@Oushat After selecting the vault connection inside AD Connection, did you click on "Advanced" and select "Encrypted" against the password field? If that is already "Encrypted", verify if you are checking the box "save to vault" before clicking on "save and test" in the AD Connection. 

If these are verified and the connection still fails, please share the logs from ecm on when you click on "save and test" in AD Connection

[Oushat]

Hi Nagesh,

thanks for the response. it seems we were missing some config properties from the vendor. it looks like more config parameters got added recently in the hashicorp connection template. 

btw, could you please share the required fields in the hashicorp connection ?

[Nishanth]

There should be no spaces in the AD connector name; otherwise, the vault connector mapping will fail.

[NageshK]

@Oushat Those additional fields are not mandatory. As long as you have url, access_token, default_path and response_path, you are good. 

[rushikeshvartak]

I am getting below error after configuration and saving REST connector

2-08T00:45:19-05:00-ecm-{"log":"2023-12-08 05:45:18,243 [http-nio-8080-exec-105] DEBUG vaults.VaultsSystemService - Response Status Code :::: 403\n","stream":"stdout","time":"2023-12-08T05:45:18.24341397Z"}

2023-12-08T00:45:19-05:00-ecm-{"log":"2023-12-08 05:45:18,243 [http-nio-8080-exec-105] DEBUG vaults.VaultsSystemService - Exception in processAPIVault : java.lang.Exception: 403\n","stream":"stdout","time":"2023-12-08T05:45:18.243449295Z"}

2023-12-08T00:45:19-05:00-ecm-{"log":"2023-12-08 05:45:18,243 [http-nio-8080-exec-105] DEBUG vaults.VaultsSystemService - Inside token Expiry Exception block. memento.refreshTryCount : 3\n","stream":"stdout","time":"2023-12-08T05:45:18.243453635Z"}

2023-12-08T00:45:19-05:00-ecm-{"log":"2023-12-08 05:45:18,243 [http-nio-8080-exec-105] DEBUG vaults.VaultsSystemService - Incrementing memento.refreshTryCount : 4\n","stream":"stdout","time":"2023-12-08T05:45:18.243456316Z"}

2023-12-08T00:45:19-05:00-ecm-{"log":"2023-12-08 05:45:18,243 [http-nio-8080-exec-105] DEBUG vaults.VaultsSystemService - maxRefreshTryCount : 5\n","stream":"stdout","time":"2023-12-08T05:45:18.243490805Z"}

2023-12-08T00:45:19-05:00-ecm-{"log":"2023-12-08 05:45:18,243 [http-nio-8080-exec-105] DEBUG vaults.VaultAuthenticationService - Exception in populateAccessToken :: \n","stream":"stdout","time":"2023-12-08T05:45:18.24388043Z"}

2023-12-08T00:45:19-05:00-ecm-{"log":"java.lang.NullPointerException: Cannot get property 'authType' on null object\n","stream":"stdout","time":"2023-12-08T05:45:18.24388804Z"}

https://saviyntsupport.saviynt.com/support/tickets/2009465