Last Modified: Feb 03, 2026
Affected Product(s):
BIG-IP TMOS
Known Affected Versions:
16.1.0, 16.1.1, 16.1.2, 16.1.2.1, 16.1.2.2, 16.1.3, 16.1.3.1, 16.1.3.2, 16.1.3.3, 16.1.3.4, 16.1.3.5, 16.1.4, 16.1.4.1, 16.1.4.2, 16.1.4.3, 16.1.5, 16.1.5.1, 16.1.5.2, 16.1.6, 16.1.6.1, 17.1.0, 17.1.0.1, 17.1.0.2, 17.1.0.3, 17.1.1, 17.1.1.1, 17.1.1.2, 17.1.1.3, 17.1.1.4, 17.1.2, 17.1.2.1, 17.1.2.2, 17.1.3, 17.1.3.1, 17.5.0, 17.5.1, 17.5.1.2, 17.5.1.3, 17.5.1.4
Opened: Nov 15, 2024 Severity: 3-Major
OAuth auto-discovery stops working after failover. Eventually an error occurs on the standby device "The system reached the maximum wait time for gossip worker to sync". In restjavad.log: [8100/shared/gossip GossipWorker] sendUpdateToLocalWorker failed update http://localhost:8100/tm/access/oidc/discover/TASKID: PUT failed: java.lang.IllegalArgumentException: Invalid generation. Need 2324, received 14414
Failure to sync between active and stand by devices.
A failover occurs while the OAuth auto discovery task is in SLEEP_AND_RUN_AGAIN state
To resolve gossip conflicts you can use any of below 3 workarounds. 1. Use the ha-sync/sslofix script 2. Run the following commands on both active and standby. Clear gossip cache. do it on both the device at this point of time: restcurl -X DELETE shared/gossip-conflicts Clear the sync cache: restcurl -X DELETE shared/resolver/device-groups/tm-shared-all-big-ips/devices Restart restjavad: bigstart restart restjavad Wait 60 seconds to make sure restjavad has had time to restart Rediscover/resync devices for gossip: restcurl -X POST -d '{}' tm/shared/bigip-failover-state 3. Update the lowest generation device storage with the latest generation info. a. Get the Task ID of OIDCDiscoveryTask restcurl -u admin: tm/access/oidc/discover/ | grep selfLink "selfLink": "https://localhost/mgmt/tm/access/oidc/discover/<Task ID>" "selfLink": "https://localhost/mgmt/tm/access/oidc/discover" b. Get current status of this task from rest storage of both active and standby Standby: restcurl /shared/storage?key=tm/access/oidc/discover/55feb1ad-52d8-4a83-b0b2-d0981e00c5be { "step": "SLEEP_AND_RUN_AGAIN", "providerName": "/Common/reist-provider", "id": "55feb1ad-52d8-4a83-b0b2-d0981e00c5be", "status": "STARTED", "startTime": "2024-11-13T03:02:43.201+0000", "ownerMachineId": "c601d4c6-5a24-4a94-b46e-c465512cab68", "generation": 2324, "lastUpdateMicros": 1731566304972999, "kind": "tm:access:oidc:discover:oidcdiscovertaskitemstate", "selfLink": "https://localhost/mgmt/tm/access/oidc/discover/55feb1ad-52d8-4a83-b0b2-d0981e00c5be" } Active: restcurl /shared/storage?key=tm/access/oidc/discover/55feb1ad-52d8-4a83-b0b2-d0981e00c5be { "step": "SLEEP_AND_RUN_AGAIN", "providerName": "/Common/reist-provider", "id": "55feb1ad-52d8-4a83-b0b2-d0981e00c5be", "status": "STARTED", "startTime": "2024-11-13T03:02:43.201+0000", "ownerMachineId": "c601d4c6-5a24-4a94-b46e-c465512cab68", "generation": 14574, "lastUpdateMicros": 1732093908449526, "kind": "tm:access:oidc:discover:oidcdiscovertaskitemstate", "selfLink": "https://localhost/mgmt/tm/access/oidc/discover/55feb1ad-52d8-4a83-b0b2-d0981e00c5be" } c. Send a HTTP POST to the out of date device (standby) that includes the output from the up to date device (active) as the post body. restcurl -X POST -u admin: /shared/storage -d '{ "step": "SLEEP_AND_RUN_AGAIN", > "providerName": "/Common/reist-provider", > "id": "55feb1ad-52d8-4a83-b0b2-d0981e00c5be", > "status": "STARTED", > "startTime": "2024-11-13T03:02:43.201+0000", > "ownerMachineId": "c601d4c6-5a24-4a94-b46e-c465512cab68", > "generation": 14574, > "lastUpdateMicros": 1732093908449526, > "kind": "tm:access:oidc:discover:oidcdiscovertaskitemstate", > "selfLink": "https://localhost/mgmt/tm/access/oidc/discover/55feb1ad-52d8-4a83-b0b2-d0981e00c5be"}' { "generation": 14573, "lastUpdateMicros": 1732093908449526, "kind": "tm:access:oidc:discover:oidcdiscovertaskitemstate", "selfLink": "https://localhost/mgmt/tm/access/oidc/discover/55feb1ad-52d8-4a83-b0b2-d0981e00c5be" } restcurl -u admin: https://localhost/mgmt/tm/access/oidc/discover/55feb1ad-52d8-4a83-b0b2-d0981e00c5be { "step": "SLEEP_AND_RUN_AGAIN", "providerName": "/Common/reist-provider", "id": "55feb1ad-52d8-4a83-b0b2-d0981e00c5be", "status": "STARTED", "startTime": "2024-11-13T03:02:43.201+0000", "ownerMachineId": "c601d4c6-5a24-4a94-b46e-c465512cab68", "generation": 14574, "lastUpdateMicros": 1732093908449526, "kind": "tm:access:oidc:discover:oidcdiscovertaskitemstate", "selfLink": "https://localhost/mgmt/tm/access/oidc/discover/55feb1ad-52d8-4a83-b0b2-d0981e00c5be" } d. The gossip conflict "GENERATION_MISSING" should be resolved and both the active and standby will have the same generation number for OIDCDiscoveryTask.
None