Announcing the Saviynt Knowledge Exchange unifying the Saviynt forums, documentation, training,
and more in a single search tool across platforms. Read the announcement here.

test hashicorp connectivity from EIC

Oushat
New Contributor
New Contributor

Hi,

i configured an AD connection which is working successfully, however when i add  hashicorp connection to it to save credentials in hashicorp vault, the connection is failing.

could you please guide me on how to test connectivity between EIC and hashicorp vault ?

Thanks,

Oushat 

8 REPLIES 8

Dave
Community Manager
Community Manager

Oushat
New Contributor
New Contributor

Hi Dave,

thanks for your response. actually i am following this one Using Vault for Credentials Management (saviyntcloud.com)

For vault connection you cannot test connection from UI like some other connectors. 

You need to look for logs on clicking save connection to get the details of failures. or you can check logs when you tried to select vault connection on AD and did test connection


Regards,
Saathvik
If this reply answered your question, please Accept As Solution and give Kudos to help others facing similar issue.

NageshK
Saviynt Employee
Saviynt Employee

@Oushat After selecting the vault connection inside AD Connection, did you click on "Advanced" and select "Encrypted" against the password field? If that is already "Encrypted", verify if you are checking the box "save to vault" before clicking on "save and test" in the AD Connection. 

If these are verified and the connection still fails, please share the logs from ecm on when you click on "save and test" in AD Connection

Oushat
New Contributor
New Contributor

Hi Nagesh,

thanks for the response. it seems we were missing some config properties from the vendor. it looks like more config parameters got added recently in the hashicorp connection template. 

btw, could you please share the required fields in the hashicorp connection ?

Nishanth
New Contributor III
New Contributor III

There should be no spaces in the AD connector name; otherwise, the vault connector mapping will fail.

NageshK
Saviynt Employee
Saviynt Employee

@Oushat Those additional fields are not mandatory. As long as you have url, access_token, default_path and response_path, you are good. 

I am getting below error after configuration and saving REST connector

2-08T00:45:19-05:00-ecm-{"log":"2023-12-08 05:45:18,243 [http-nio-8080-exec-105] DEBUG vaults.VaultsSystemService - Response Status Code :::: 403\n","stream":"stdout","time":"2023-12-08T05:45:18.24341397Z"}
 
2023-12-08T00:45:19-05:00-ecm-{"log":"2023-12-08 05:45:18,243 [http-nio-8080-exec-105] DEBUG vaults.VaultsSystemService - Exception in processAPIVault : java.lang.Exception: 403\n","stream":"stdout","time":"2023-12-08T05:45:18.243449295Z"}
 
2023-12-08T00:45:19-05:00-ecm-{"log":"2023-12-08 05:45:18,243 [http-nio-8080-exec-105] DEBUG vaults.VaultsSystemService - Inside token Expiry Exception block. memento.refreshTryCount : 3\n","stream":"stdout","time":"2023-12-08T05:45:18.243453635Z"}
 
2023-12-08T00:45:19-05:00-ecm-{"log":"2023-12-08 05:45:18,243 [http-nio-8080-exec-105] DEBUG vaults.VaultsSystemService - Incrementing memento.refreshTryCount : 4\n","stream":"stdout","time":"2023-12-08T05:45:18.243456316Z"}
 
2023-12-08T00:45:19-05:00-ecm-{"log":"2023-12-08 05:45:18,243 [http-nio-8080-exec-105] DEBUG vaults.VaultsSystemService - maxRefreshTryCount : 5\n","stream":"stdout","time":"2023-12-08T05:45:18.243490805Z"}
 
2023-12-08T00:45:19-05:00-ecm-{"log":"2023-12-08 05:45:18,243 [http-nio-8080-exec-105] DEBUG vaults.VaultAuthenticationService - Exception in populateAccessToken :: \n","stream":"stdout","time":"2023-12-08T05:45:18.24388043Z"}
 
2023-12-08T00:45:19-05:00-ecm-{"log":"java.lang.NullPointerException: Cannot get property 'authType' on null object\n","stream":"stdout","time":"2023-12-08T05:45:18.24388804Z"}
 
 
 
 
 
 
 

Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.