Bug ID 468021: UCS file from earlier version may not load into 11.5.0 or later image

Last Modified: Apr 11, 2024

Affected Product(s):
BIG-IP Install/Upgrade, LTM(all modules)

Known Affected Versions:
10.2.2, 10.2.4, 11.0.0, 11.6.0 HF1, 11.6.0 HF2, 11.6.0 HF3, 11.6.0 HF4, 11.6.0 HF5, 11.6.0 HF6, 11.6.0 HF7, 11.6.0 HF8, 11.5.1 HF1, 11.6.1 HF1, 11.5.1 HF2, 11.6.1 HF2, 11.5.1 HF3, 11.5.1 HF4, 11.6.2 HF1, 11.1.0, 11.2.0, 11.2.1, 11.3.0, 11.4.0, 11.4.1

Fixed In:
11.6.0, 11.5.2, 11.5.1 HF5

Opened: Jun 19, 2014

Severity: 3-Major

Related Article: K15974

Symptoms

When attempting to upgrade to 11.5.0 or later, from an earlier release, some .ucs files may cause the system to run out of memory, and the kernel to kill the process. You may also see an error: "UCS application failed; unknown cause."

Impact

It can be impossible to upgrade the software image to 11.5.0 or later because the config fixup exits in error.

Conditions

In the .ucs file, in bigip.conf, is a section like this: ltm profile client-ssl /Common/my-clientssl { ... defaults-from /Common/wom-default-clientssl ... } The problem happens because /Common/wom-default-clientssl and /Common/clientssl-insecure-compatible was not defined in a couple of our fixup scripts, resulting in infinite recursion in another fixup script.

Workaround

A workaround is to change instances of "wom-default-clientssl" and "clientssl-insecure-compatible" to "clientssl" in the configuration files in the UCS archive.

Fix Information

"wom-default-clientssl" and "clientssl-insecure-compatible" were added to two fixup scripts, and code to prevent infinite recursion was added to another script.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips