Initial commit

This commit is contained in:
Docker7530
2026-03-01 01:43:46 +08:00
commit c6125c117b
3840 changed files with 415340 additions and 0 deletions
@@ -0,0 +1,187 @@
# 信安附件校验问题
## 1 问题发现
### 时间
2023 年 1 月 3 日 10:00
### 截图
![](../../../../attachment/images-uuid/3610f4dd6fbc4c4c808b7702584f0a26.png)
![](../../../../attachment/images-uuid/e944f6973c7344609d1f6d4569e34385.png)
### 描述
BBOSS 平台请求 IBS 平台**前置校验接口**时出现**信安附件校验不通过**响应,更换附件后依旧报错。
## 2 问题排查
### 第一个问题点
根据请求的时间筛选服务器日志。
![](../../../../attachment/images-uuid/2fdbb271ec3e47cdb527025a8f922169.png)
> 背景:目前灰度环境网络策略不支持直接请求对方的 FTP 文件服务器,需在我们自己模拟的服务器上预传文件,供文件拉取接口进行校验。
通过日志首先定位到的问题是拉取动作的 fileName 和预先上传到自己服务器的**文件名不一致**。
与请求人沟通后发现目前文件名使用的是**随机流水号**的方式进行命名,此时导致我们无法预知文件名并提前放到自己服务器进行模拟拉取动作。
### 第二个问题点
在排查过程中发现,虽然没有拉取到,但也通过了文件的非空校验,位置如下:
![](../../../../attachment/images-uuid/2b820ac36f68480f8d4dddb61dd85279.png)
经排查发现**file**是在**拉取文件后**进行**实体转换存储到库中**并返回 FileInfo 实体。正常逻辑如果拿不到文件应该不执行此位置,返回上层接口为空。
定位库中存储的内容如下,发现是把整个的**响应错误页面**进行了存储,造成无法将 file 判断为空。
![](../../../../attachment/images-uuid/80df12d94b0b4f7586ef8e9bc29fd4bd.png)
## 3 问题解决
在从文件服务器拉取文件后进行一次文件**魔数校验**,如果校验出来不是正常的文件直接返回空,跳过校验。
> 在识别文件类型时,可以通过文件的后缀来识别的,如.xml、.doc。 使用后缀名识别文件类型不是特别准确。
>
> 另外一种识别文件名的方式是: 利用文件的头部信息中的标记,这个标记为魔数。
**获取魔数工具类**
```java
private static final int HEADER_LENGTH = 8;
private static String getUpperCaseHexString(byte[] file) {
StringBuilder sb = new StringBuilder();
for (int i = 0; i < HEADER_LENGTH; i++) {
int v = file[i] & 0xFF;
String hv = Integer.toHexString(v);
if (hv.length() < 2) {
sb.append(0);
}
sb.append(hv);
}
return sb.toString().toUpperCase(Locale.ENGLISH);
}
```
**具体实现逻辑**
```java
log.info("开始校验是否是非法文件");
List<String> defaultFileHeaderList = new ArrayList<>();
//XLS格式8位魔法数字
defaultFileHeaderList.add("D0CF11E0");
//XLSX格式8位魔法数字
defaultFileHeaderList.add("504B0304");
//获取信安附件文件类型-由文件名获得-fileName不为空,上方有初始化
String fileSuffix = fileName.substring(fileName.lastIndexOf(".") + 1);
log.info("由文件名获取得文件类型是{}", fileSuffix);
if (!ObjectUtils.isEmpty(bytes)) {
//获取实际附件请求头-由附件bytes得到-8位
String fileHead = getUpperCaseHexString(bytes);
log.info("由实际附件获取得文件16位校验码是{}", fileHead);
//如果实际文件和获取的文件8位校验码不相符则为非法文件。
if (defaultFileHeaderList.stream().noneMatch(fileHead::startsWith)) {
log.info("文件不合法,返回空,不进行信安附件校验");
return null;
} else if (!ObjectUtils.isEmpty(httpResponse) && !ObjectUtils.isEmpty(bytes)) {
//如果MongoDB找不到文件,从远程拉去的文件,保存到附件表
ByteArrayInputStream byteIn = new ByteArrayInputStream(bytes);
// 保存文件
FileInfoPO gridFSFile;
try {
gridFSFile = fileService.storageBackContent(byteIn, fileName);
} catch (Exception e) {
log.error("文件信息保存到数据库失败{}", e.getMessage(), e);
return null;
}
byteIn.close();
return gridFSFile;
}
}
```
## 4 修复后日志
### Excle 文件存在 (xls)
![](../../../../attachment/images-uuid/695329fdab6f405b8495c64bdd676d9a.png)
### Excle 文件存在 (xlsx)
![](../../../../attachment/images-uuid/8737c2d1c21446d981899f3551f32318.png)
### 文件存在 (DOC)
![](../../../../attachment/images-uuid/6fd3f50217344d63b6b566417defeab0.png)
### 文件存在 (PPT)
![](../../../../attachment/images-uuid/51d98e021ac94e82b1927bb600e34820.png)
### 文件存在 (PDF)
![](../../../../attachment/images-uuid/f3b8ed00351f4946a0b9f773afb605e9.png)
### 文件不存在
![](../../../../attachment/images-uuid/b4088004da8f4c30a446bc8a2353482b.png)
## 5 测试方法
### 请求
```
https://ibs-uops.cdn.10086.cn/sync/BBOSS/PreCheckServ
```
### Body
```json
{
"accessToken": "202302031110554c86f028d48f47cd9e994ae892377ca3-0019-1672801855",
"busType": "BBSS",
"content": {
"BusiType": "4",
"Domain": [
"20221227001.komect.com"
],
"ECID": "100A10020181218697",
"ECMail": "182123412342@qq.com",
"ECNumber": "18212341234",
"InfoSecurityTable": "testxinan.pdf",
"OrderType": "1",
"ProvID": "000",
"TransIdo": "2023010514351897f37e"
},
"cutOffDay": "20230105",
"domain": "CDNP",
"envFlag": "0",
"routeType": "00",
"routeValue": "995",
"sessionID": "30558d2c7eeb41b5969847066287285e",
"sign": "52571BEB0DCB9CA4CAB38E0831FF9A1F",
"signMethod": "md5",
"timeStamp": "20230105143529",
"transIDO": "30558d2c7eeb41b5969847066287285e",
"userPartyID": "BBSS9980",
"version": "1.0.0"
}
```
## 6 修复逻辑
执行 FTP 服务器拉取动作
​ 拉取后打散为 byte 数组类型
​ 对 byte 进行文件魔数校验
​ 如果不符合文件类型则判定为未拉取到文件,返回空不进行内容校验。
​ 如果符合为文件类型则进行后续的实体封装转换及校验。
@@ -0,0 +1,401 @@
# 山东公司自服务域名删除
问题域名分为自助配置和定制化
## ★自助配置
## 问题描述
山东公司自服务域名在 IBS 平台未删除成功,一直卡在删除中。
![](../../../../attachment/images-uuid/9d4e8c57f8ba4fa2b0c72794febf455e.png)
![](../../../../attachment/images-uuid/4bf04ed8a2d24094807a021b074b46db.png)
## 问题背景
有一批自服务域名删除卡在删除流程中,未删除成功。例如:
![](../../../../attachment/images-uuid/c1d1c3226d624fb69d0f6736fa9e0643.png)
这些域名的性质是:下发自研平面的自助域名,因此这些域名的删除指令是下发 OMC(理解为杭研运维平台),而这些域名一直卡在删除流程中的原因也是因为 OMC 侧的域名删除任务一直未完成,因此一直没有回调 IBS 侧删除域名。
## 解决思路
1. 先找 OMC 研发人员(或者自己登录 OMC 线上数据库)查看在 OMC 处删除任务未达 100% 的域名。
2. 将上述筛选出的域名给杭州运维,让他们查询域名删除指令下发失败的原因,有些原因运维侧可以直接操作,然而,当这些域名下发节点被卓望接管后,杭州运维无法直接操作,OMC 侧也不会自动回调 IBS,因此需要 IBS 研发人员手动回调接口删除域名,**注意**,IBS 研发人员手动回调接口前一定要**确保 OMC 上删除任务达 100%******或者******域名配置已在底层节点被删除**。
## 操作步骤
1. 找 OMC 研发人员(或者自己登录 OMC 线上数据库)查看在 OMC 处删除任务未达 100% 的域名。
OMC 研发人员:鲁涛(电话:18867113844
OMC 线上只读数据库:mysql 39.134.86.209、账号:sel_user、密码:oss_read(目前本地无法连接,可找杭州远程机器)
2. 查询 OMC 线上数据库中删除任务未达 100% 的域名的 SQL 为:
```sql
-- 每次替换target_name为需要查询的域名,所筛选的message_id即为OMC任务号,所筛选的process_rate即为OMC删除任务完成度。
SELECT target_name,
message_id,
process_rate,
message_id,
updated_time
FROM virtual_domain_config_record
WHERE message_id IN (SELECT message_id
FROM virtual_domain_config_record
WHERE process_rate != '100.00%'
AND target_name IN (
'www.rikechem.com',
'huanengqidong.com.cn',
'm.zodotire.cn',
'www.zodotire.cn',
'zodotire.cn',
'en.zodotire.cn',
'ru.zodotire.cn',
'm.ru.zodotire.cn'
))
ORDER BY process_rate ASC;
```
例图
![](../../../../attachment/images-uuid/1c7dd32c5a8f44089b872a2a0978e99b.png)
3. 将上述筛选出的域名给杭州运维,让他们查询域名删除指令下发失败的原因,当这些域名下发节点被卓望接管后,杭州运维无法直接操作,OMC 侧也不会自动回调 IBS,因此需要 IBS 研发人员手动回调接口删除域名。
杭州运维:王晓翠(电话:18867121747),张婷婷(电话:18867114281
4. 现网 omc 回调自助 ibs 域名接口:
```shell
其中,messageId写上述接口查询到的messageIdtargetName写需要删除的域名。
可通过IBS侧的数据库表pipe_config_entity通过targetName进行查询对messageIdtargetName进行确认
POST https://p.cdn.10086.cn/v1/pipe/config/callback
{
"messageId": "0805419591390990336",
"message": "ok",
"data": [
{
"targetName": "may21.lcfssh.cn",
"reqType": "SELF_DOMAIN_DELETE",
"percent": 1
}
]
}
```
## 解决示例
### 域名
sh.9ask.cn 现网环境查询为自助配置,调用自助接口。
![](../../../../attachment/images-uuid/a796eef73994454e94db469c7a9a12bb.png)
通过域名匹配 IBS 侧的数据库表 pipe_config_entity 获得两个关键值 messageIdtargetName
```java
messageId 0805419591390990336
targetName sh.9ask.cn
```
![](../../../../attachment/images-uuid/3d0d901fbfe0449896b47afe6ed6bfa9.png)
### 回调
```java
POST https://p.cdn.10086.cn/v1/pipe/config/callback
{
"messageId": "0805419591390990336",
"message": "ok",
"data": [
{
"targetName": "sh.9ask.cn",
"reqType": "SELF_DOMAIN_DELETE",
"percent": 1
}
]
}
```
### 验证
1. 系统中再次查询无法查询到。
2. domain_delete_record 表新增删除记录。
3. pipe_config_entity 表中记录清楚。
## ★定制化
## 问题描述
![](../../../../attachment/images-uuid/9744b8740e2045dbbfe205d42274d4e1.png)
## 解决思路
关于定制化域名排查定思路是一样的。
处理流程**区别**在于最后掉的**接口不一样**,以及**调用接口后**需要相关人员进行**审批**后完成删除。
```java
只需要替换targetName即可。
POST https://p.cdn.10086.cn/v1/custom/domain/synchronize
[
{
"targetName": "displayot-sc.a282.ottcn.com",
"nodeIdList": [],
"isCcsDomain": false,
"sourceHostList": [],
"deleted": true
}
]
```
## 确认审批人
```sql
select * from work_order where details like "%programot-sc.a282.ottcn.com%";
```
![](../../../../attachment/images-uuid/f8b41520a46741c4a36e14e0381919b2.png)
定位 type 为 DOMAIN_DELETEstatus 为 inprocess 获得相应的 code。(如上图中有两个审批人,可选择运维工程师的工单,如程志鹏,因为账号朱鹏昊可以直接登录)
在工单系统中查询到相应的工单。
![](../../../../attachment/images-uuid/9e4deeb10c49452c9194724fc7bbe55c.png)
此时定位到当前审批人,可通过朱鹏昊或者产品进行协调处理。
得到产品反馈后可在配置管理中进行再次校验是否存在。
![](../../../../attachment/images-uuid/3c576b7731464f16844093fda2cc90d5.png)
## 相关 SQL
```sql
-- 自助配置
select * from pipe_config_entity where target_name = 'sh.9ask.cn';
-- 查看删除记录
select delete_time from domain_delete_record where domain = 'www.ztjgdj.gov.cn';
-- 查看工单记录
select type,status,code,creator_info,create_time from work_order where details like "%programot-sc.a282.ottcn.com%";
```
## 备注
关于节点理解,一个域名在运维平台是下发多个节点的。
# 处理汇总
山东第一批(张英)
已删除 sh.9ask.cn
已删除 www.wfhmzx.com
已删除 fs.9ask.cn
已删除 www.0536mr.com
已删除 www.bsnews.cc
已删除 news.9ask.cn
已删除 card.9ask.cn
已删除 anli.9ask.cn
已删除 m.0536mr.com
已删除 www.wfhmmr.com
已删除 m.wfhmmr.com
已删除 www.9ask.cn
已删除 img.9ask.cn
已删除 lvsuo.9ask.cn
已删除 m.9ask.cn
已删除 zhuanti.9ask.cn
已删除 t.wfhmzx.com
已删除 lawyer.9ask.cn
已删除 rcshipin.cn
已删除 bj.9ask.cn
已删除 bsnews.cc
已删除 www.qzxkjx.com
已删除 qzxkjx.com
(于 2022-12-22 12:49:48 删除)www.ztjgdj.gov.cn
(于 2023-01-04 12:19:11 删除)www.tltowngas.com
(于 2022-12-22 12:49:46 删除)www.ynzxnews.cn
山东第二批(张英)
已删除 www.rikechem.com
已删除 m.zodotire.cn
已删除 www.zodotire.cn
已删除 zodotire.cn
已删除 en.zodotire.cn
已删除 ru.zodotire.cn
已删除 m.ru.zodotire.cn
已删除 huanengqidong.com.cn
(正哥 - 俞飞)
已经删除 video.jhzhjy.cn
(朱鹏昊)
咪咕视频 TV 版以下域名为 TV 过渡版本域名,现已无需使用,申请下线。烦请安排删除配置(定制化域名)
已经删除 displayot-sc.a282.ottcn.com (集团|集团运营经理|陈玲鸿)
已经删除 img.a282.ottcn.com (集团|集团运营经理|陈玲鸿)
已经删除 hlsmgspvod.a282.ottcn.com (集团|集团运营经理|陈玲鸿)
已经删除 hlsmgsplive.a282.ottcn.com (集团|集团运营经理|陈玲鸿)
已经删除 programot-sc.a282.ottcn.com (集团|集团运维工程师|杭研运维工程师)
已经删除 appot-sc.a282.ottcn.com (集团|集团运维工程师|杭研运维工程师)
已经删除 commonot-sc.a282.ottcn.com 2023-01-11 10:49:47
已经删除 vmsot-sc.a282.ottcn.com 2023-01-11 10:47:51
(鹏昊哥)
已经删除 www.aibolico.com
(朱鹏昊)
已经删除 worldcup.migu.cn
(石正)
已经删除 cfn.migufun.com
Pancake
已经删除 szgvision.com
(张英)
已经删除 www.huajie56.cn
已经删除 nj.nbjia.top
已经删除 www.jnxnds.cn
(鹏昊哥)
已经删除 www.dcztys.com
已经删除 dcztys.com
已经删除 www.czjyzx.gov.cn
已经删除 www.gxyoujiangbwb.gov.cn
已经删除 www.lsqx.com
已经删除 www.dbc-healthcare.com
已经删除 www.hanyubin.com
已经删除 www.30t.com
已经删除 hanjunxiandai.com
已经删除 www.inioc.cn
已经删除 www.hbdaqian.com
已经删除 www.qqhrhf.com
已经删除 www.weizhisihang.com
已经删除 www.diconchina.cn
已经删除 www.1mfh.com
已经删除 www.4000450360.com
已经删除 www.hnep.cn
已经删除 www.xiaozhu365.cn
已经删除 www.yizhuo99.com
已经删除 www.51ijw.com 陈静|18000006000
已经删除 www.bearinghrb.cn 陈静|18000006000
已经删除 www.elsjs.com 陈静|18000006000
已经删除 www.hewei168.cn 陈静|18000006000
已经删除 www.hljckt.com 陈静|18000006000
已经删除 www.hongtengguoji.com 陈静|18000006000
已经删除 www.hrbdrjm.com 陈静|18000006000
已经删除 www.lvshanchuan.cn 陈静|18000006000
已经删除 www.orginter.com 陈静|18000006000
已经删除 www.wzokok.com 陈静|18000006000
已经删除 www.zhonglv0451.com 陈静|18000006000
已经删除 shzy.hljcourt.gov.cn 陈静|18000006000
已经删除 www.h0451.com 陈静|18000006000
2023 年 2 月 15 日
sunflower💖
已经删除 www.linyiport.cn
已经删除 linyiport.cn
2023 年 2 月 20 日
运营
已经删除 www.wszxxw.com
已经删除 www.ynntyd.com
2023 年 2 月 22 日
张英
已经删除 pzf.lksp88.com2023-02-22 16:17:18
已经删除 lingzhi.lksp88.com2023-02-22 16:17:14
已经删除 sp.lksp88.com2023-02-22 16:17:06
已经删除 bzf8.lksp88.com2023-02-22 16:17:01
已经删除 www.sdhwchem.com2023-02-22 16:17:16
2023 年 2 月 24 日
已经删除 www.jxjaga.gov.cn
2023 年 3 月 1 日
林龙
两个公司的定制化域名需要删除,集团已删除配置
咪咕动漫
已经删除 res.migudm.fun
中移互联网
已经删除 *.wap.wxcs.cn
已经删除 *.wxcs.cn
已经删除 ac.wxcs.cn
已经删除 apps.wxcs.cn
已经删除 caiyun.mcloud.139.com
已经删除 circle.rcscdn.fetionpic.com
已经删除 dlrcs.fetion-portal.com
已经删除 download.fetiononline.com
已经删除 emshop.rcscdn.fetionpic.com
已经删除 h5static.cdn.fetiononline.com
已经删除 hfres.mmarket.com
已经删除 huodong.mcloud.139.com
已经删除 mcmm.mcloud.139.com
已经删除 odp.fr18.mmarket.com
已经删除 odpnj.fr18.mmarket.com
已经删除 open.fetiononline.com
已经删除 pa.rcscdn.fetionpic.com
已经删除 plugin.fetiononline.com
已经删除 portrait.rcscdn.fetionpic.com
已经删除 redbag.rcscdn.fetionpic.com
已经删除 rzzmportal.h5cmpassport.com
已经删除 tv.mcloud.139.com
已经删除 u.mcloud.139.com
2023 年 3 月 6 日
已经删除 www.cfygbhjt.com
已经删除 www.hlbryy.com
已经删除 www.tmtyq.gov.cn
已经删除 www.wlhtsjcy.gov.cn
已经删除 kyqq.wlhtsjcy.gov.cn
2023 年 3 月 23 日
www.yhbsjs.cn
2023 年 3 月 24 日
已经删除 www.baza.cn
已经删除 www.ylsy.edu.cn
已经删除 yjsc.ylsy.edu.cn
2023 年 3 月 30 日
域名
ydy.ldl.tcdnos.net
ydy.lcl.tcdnos.net
ydy.lbl.tcdnos.net
ydy.lal.tcdnos.net
ydy.ll.tcdnos.net
ydy.dnf.tcdnos.net
ydy.pe.tcdnos.net
ydy.hok.tcdnos.net
ydy.down.tcdnos.net
ydy.ldl.tcdnos.com
ydy.lcl.tcdnos.com
ydy.lbl.tcdnos.com
ydy.lal.tcdnos.com
ydy.ll.tcdnos.com
ydy.dnf.tcdnos.com
ydy.pe.tcdnos.com
ydy.hok.tcdnos.com
ydy.down.tcdnos.com
ydy.dlied.tcdnos.net
ydy.dlied.tcdnos.com
ydy.update.tcdnos.net
ydy.update.tcdnos.com
企业 域名状态 引入省份 分发省份 配置来源 分发平面 cname 是否合法
深圳市腾讯计算机系统有限公司 删除中 政企分公司 全国 定制化配置 自研平面 是
2023 年 4 月 4 日
ylcg.migufun.com
@@ -0,0 +1,74 @@
# 问题点 1
esop 企业来源展示为 cache+ 企业
![](../../../../attachment/images-uuid/691dbeaccdcc46679814a6ab4dc2cfb1.png)
# 问题复现
因为显示来源是从 WorkOrder 表中查询出来所以先排查了为什么存这个字段,然后进行处理。
登录账号:浙江省运营经理 B:18867114444
位置:直播控制台 - 域名管理
发送关停域名工单,相应的 Controller
```java
com.cmcc.cdn.platform.selfservice.controller.live.LiveOrderController#disableDomain
```
开发环境可以暂时先注释华为部分,并将下发 BPM 的开关进行关闭(BBOSS_ORDER_BPM_SWITCH
发现在保存工单时
```java
com.cmcc.cdn.platform.selfservice.service.live.impl.LiveRecordServiceImpl#generateWorkOrder
```
![](../../../../attachment/images-uuid/704a48e07dc94125961300011ab27a8c.png)
![](../../../../attachment/images-uuid/78a85f6717c74b7fad2ab39e1e7c950c.png)
在 WorkOrder 实体类中对 Source 有对应的默认值设置
![](../../../../attachment/images-uuid/3f009584dfd84fb08d5e74b64f69b570.png)
未修改前的逻辑会默认设置 Source 为 `WEB("cache+企业", null)`
修改后仅当空值是进行设置。
# 知识点
**@PrePersist 注解作用**
@PrePersist 的切点是在 entityManager.persist(entity) 的反射 invoke 方法执行前调用。可以理解为持久化对象前执行,因此就可以做些事情了,比如设置创建时间,设置对象删除状态等等。
# 问题点 2
![](../../../../attachment/images-uuid/0b496594273a40fe880c53916593804b.png)
当查出来显示为数据库的 Eum 值得时候为 BBOSS。测试认为应该显示 ESOP。
在与产品沟通后得知:
![](../../../../attachment/images-uuid/8e10bc0b7d294033aa69438e1223df1c.png)
![](../../../../attachment/images-uuid/d589ee5b293c40e09bcf9c586a0e3516.png)
**沟通重点**
BBOSS 那边承接 ESOP 工单、前端显示 ESOP。
**修改方案**
定位到返回前端前 Set 相应值得地方。
```java
com.cmcc.cdn.platform.selfservice.service.live.impl.LiveRecordServiceImpl#getDetailByWorkOrderId
```
![](../../../../attachment/images-uuid/15953dd68fea46608ee09e5948db8065.png)
![](../../../../attachment/images-uuid/68b7b20d49d54556ae628761ec1dad98.png)
将 Source 的值进行转换。
@@ -0,0 +1,115 @@
# 问题 1
ESOP 的定制化域名,在证书管理的域名部署界面一直处于部署中
![](../../../../attachment/images-uuid/4c577f253e244aba908c628f9d219f00.png)
在点击部署的时候会提示:**不是自助下发的域名**
此问题,在与良哥沟通后得知,目前 ESOP 的定制化域名下发 BPM,原下发 OMC。此为的部署不能代表部署成功或不成功,与产品沟通后进行备注。
![](../../../../attachment/images-uuid/fe08fe6f550d4db2ae24d6120ae33d56.png)
![](../../../../attachment/images-uuid/84939a5a08ff4a16a2c4879fb8d6a654.png)
# 问题 2
为什么这个定制化的域名在我们证书系统里显示的是”自助域名“?
用省客户经历登录 18866330001- 工单管理/新建工单/新建域名配置需求
```java
/workorder/custom/save
{
"secInfoFileId": [
"xyfibw3lfxbh0ddlpgm6b60hc"
],
"type": "domain_request",
"requirement": "add",
"enterprise": "glistglp-9xuva4cdzosfnrgl",
"product": "网页加速",
"productId": "202301161626",
"provinces": [
"33"
],
"DomainIcpDetail": {
"loopDomain": [
{
"mainFlag": true,
"type": "ip",
"value": "172.21.16.71:80",
"_show": true
}
],
"speedList": [
{
"domain": "esop.dingzhi002.com",
"icpNumber": "京ICP备0500_komect.com_12号"
}
]
},
"speedDomainSelect": "",
"description": "",
"md5List": [],
"loopDomain": [
{
"mainFlag": true,
"type": "ip",
"value": "172.21.16.71:80",
"_show": true
}
],
"speedList": [
{
"domain": "esop.dingzhi002.com",
"icpNumber": "京ICP备0500_komect.com_12号"
}
]
}
```
当前办理: 集团|集团客户经理管理员|18877000000 进行审批
```java
/workorder/approvedecision
id=32018&option=ok&optionDetail=&type=domain_request&adaptPlain=%5B%5D&secondCheck=true
```
对于证书系统来说,自助域名和定制化域名的区分为来自平台的不同:
![](../../../../attachment/images-uuid/5d0734afb04d4a0da49b275c73724d61.png)
# 问题 3
cache+ 定制化域名创建后证书未绑定。
![](../../../../attachment/images-uuid/d9e989c5d8f440f1b22464de2413cb38.png)
这里的流程主要是创建工单 -OMC 审批 - 运维工程师配置。
OMC 相关信息(测试账号):
https://172.21.16.198:8443/#/
15771007643
Omctest@123
![](../../../../attachment/images-uuid/7d7f2e51af10431b9393e6645268d0fe.png)
![](../../../../attachment/images-uuid/9a88b9d01a664db585bacdc353ce6e37.png)
系统中需要的两个文件如下:
ar.txt
nb.txt
在看完整体流程后,发现 ibs 侧并未有证书绑定操作。
## 问题解决★
最后定位问题发现此种类型的工单需要在 OMC 测进行相关的证书绑定操作,位置为上图中的 `配置文件`​处增加一个 cert-ibs 选项即可。
相关测试用例附件可以在附件文件夹中获取
@@ -0,0 +1,101 @@
# cache+ 账户无法查看名下子帐号
## 截图
![](../../../../attachment/images-uuid/71442718510646a593b8df01f3059213.png)
## 排查思路
1、首先明确客户是可以看到账户管理界面的,说明有对应的权限。
2、定位到查询的位置
```java
com.cmcc.cdn.platform.selfservice.controller.EnterpriseSubAccountController#getSubUserInfoList
```
代码主体流程为 `获取用户id``企业信息` 主要涉及表 `user``enterprise_user`
然后通过 `enterprise_subuser``user` 表联查得到其名下所有的用户。将每个用户的 Children 设为空后进行返回。
整体流程并没有过滤。从库中查询的话是有 5 条数据,有一条是昨天新增的,首先考虑是数据引起的,因为没有日志暂时无法具体的定位,进行日志的补充。在最近的版本进行了上线,日志显示已经全部查询完成。但是还是栈内存溢出。
二次定位到有可能是 fastjson 序列化引起的。考虑到要保留原查询框架及实体,目前方案为拷贝对象到新的实体中,解除 Controller 中返回的。
```java
log.info("用户查询完成,开始拷贝对象");
ArrayList<UserForAccountManagement> userForAccountManagements = new ArrayList<>();
for (User user : users) {
UserForAccountManagement userForAccountManagement = new UserForAccountManagement();
BeanUtils.copyProperties(user, userForAccountManagement);
userForAccountManagements.add(userForAccountManagement);
}
```
## 问题排查记录
利用对象的计算工具进行监控:
```java
查询1当前页的所有人员ID为:[1682, 1675, 1648, 1641]
查询2所有人员ID为:[1682, 1675, 1648, 1641]
出表后内存占用318.4 MB
查询3从User表中取到的用户ID集合:[1682, 1675, 1648, 1641]
开始处理用户权限
用户查询完成,开始拷贝对象
转换后内存1.3 KB
return前对象内存占用1.5 KB
```
![](../../../../attachment/images-uuid/8ddca166ba03470cba30b8e4c399e2cb.png)
![](../../../../attachment/images-uuid/738c78d1562d4470a5808a430c80cd19.png)
### 工具
地址
[查看对象大小](https://blog.csdn.net/yetaodiao/article/details/127369667)
```java
System.out.println("转换后内存"+ RamUsageEstimator.humanSizeOf(userForAccountManagements));
```
```java
//坐标
<dependency>
<groupId>org.apache.lucene</groupId>
<artifactId>lucene-core</artifactId>
<version>4.0.0</version>
</dependency>
<dependency>
<groupId>org.apache.commons</groupId>
<artifactId>commons-lang3</artifactId>
<version>3.12.0</version>
</dependency>
```
指定项目 json 转换工具
```java
com.cmcc.cdn.platform.CustomWebAppConfigurer
```
## 前端沟通
NORMAL_ESOP_MANAGE(企业)
TYMH_YYZHGL
有这两个权限之一的有账户管理模块
1、对于集团业务管理员,是/businessManage/managerList 接口,它只需要看用户,不需要用户的查看,编辑,删除权限的东西,操作栏中的东西是一次就查完了。
1、对于企业客户接口/selfService/enterprisesubuser/getCpSubUserInfoList。页面操作是单独发起的。
@@ -0,0 +1,44 @@
# 问题资料
对方提供的日志
```
正在向ibs平台获取日志下载地址:IbsSubDownloadAddrReq(cpId=80041344, startTime=Wed Feb 01 00:00:00 CST 2023, endTime=Wed Feb 01 09:13:47 CST 2023, taskId=ucb5gk2n-tlfg2277vhs4gyxsFri Sep 23 22:13:22 CST 20220, append=0) [c.c.c.d.ibs.client.IbsSubClient:getDownloadAddr:116]
[2023-02-01 11:14:47.472] [ INFO] [TID:Ignored_Trace] [io-18080-exec-2] [reqId-969195d71c04e8748f12a-c72d6bb2-1] 请求地址:https://ibs-uops.cdn.10086.cn:443/action?commandType=subscribeDownload&version=1 [c.c.c.d.ibs.client.IbsSubClient:getDownloadAddr:117]
[2023-02-01 11:14:47.473] [ INFO] [TID:Ignored_Trace] [io-18080-exec-2] [reqId-969195d71c04e8748f12a-c72d6bb2-1] K1:dayun_cdn_key [c.c.c.d.ibs.utils.HeaderUtil:getAuthorization:55]
[2023-02-01 11:14:47.474] [ INFO] [TID:Ignored_Trace] [io-18080-exec-2] [reqId-969195d71c04e8748f12a-c72d6bb2-1] N1:333L+1j0zeAMYZ989US0uPa5A==353M/afFlUFfnVa+1IrxLyjrw==35 [c.c.c.d.ibs.utils.HeaderUtil:getAuthorization:60]
[2023-02-01 11:14:47.474] [ INFO] [TID:Ignored_Trace] [io-18080-exec-2] [reqId-969195d71c04e8748f12a-c72d6bb2-1] k2:f943d71a2337af92f07484812ab8fbb01f382dda92d86e3191e9095d35c3d24e [c.c.c.d.ibs.utils.HeaderUtil:getToken:73]
[2023-02-01 11:14:47.475] [DEBUG] [TID:Ignored_Trace] [io-18080-exec-2] [reqId-969195d71c04e8748f12a-c72d6bb2-1] uri:/action?commandType=subscribeDownload&version=1, body:{"cp_id":"80041344","start":"2023-02-01T00:00:00+08:00","end":"2023-02-01T09:13:47+08:00","task_id":"ucb5gk2n-tlfg2277vhs4gyxsFri Sep 23 22:13:22 CST 20220","append":"0"} [c.c.c.d.ibs.utils.HeaderUtil:getToken:79]
[2023-02-01 11:14:47.475] [DEBUG] [TID:Ignored_Trace] [io-18080-exec-2] [reqId-969195d71c04e8748f12a-c72d6bb2-1] token:61465B6C9567007719EEF3D9E2D426EC5357357C28B9E9D350F2247FDB5EAFD6 [c.c.c.d.ibs.utils.HeaderUtil:getToken:80]
[2023-02-01 11:14:47.476] [DEBUG] [TID:Ignored_Trace] [io-18080-exec-2] [reqId-969195d71c04e8748f12a-c72d6bb2-1] authorization:333L+1j0zeAMYZ989US0uPa5A==353M/afFlUFfnVa+1IrxLyjrw==35|63D9D927|61465B6C9567007719EEF3D9E2D426EC5357357C28B9E9D350F2247FDB5EAFD6 [c.c.c.d
```
# 目前现象
在 POSTMAN 进行请求后会报鉴权不通过的问题。
# 思路
1、定位到报错的位置
2、首先请求到了 oms 系统
3、但是因为日志较少定位到报错位置为
```java
com.cmcc.cdn.platform.filter.AuthorityCheckFilter#doFilterInternal
```
4、添加日志打包到灰度环境进行处理
5、定位到问题在下方位置
![](../../../../attachment/images-uuid/1736fc3807aa42e6849af6d77416849b.png)
此处的 authentications 是在 omsTenantAuthenticationDao 中全部查出来的。
后边又进行了 ACCessKey 的 get,会报空指针。
![](../../../../attachment/images-uuid/76dc0187fc804d74b6c226429e59966e.png)
最后定位到 `oms_tenant_authentication` 表有一条脏数据的 AccessKey 的值是空的,导致此处直接空指针。
@@ -0,0 +1,70 @@
# 工单无法删除
## 截图
![](../../../../attachment/images-uuid/891cc3810e024b93b805f1380032bbdb.png)
![](../../../../attachment/images-uuid/8349d62cb06c4b7ea584f03c353238b8.png)
## 问题原因
查看两个工单的域名为已经删除的域名,属于 catch+ 开发人员手动调接口删除。
但是因为客户之前走过两个错误类型的工单,导致当运维想要关闭工单的时候无法进行操做。
## 解决方案
1、首先确认最后运维工程师审批时需要修改的表。
2、代码中主要涉及表的修改位置为:
```java
com.cmcc.cdn.platform.selfservice.service.impl.AdaptWorkOrderServiceImpl#handle
(com.cmcc.cdn.platform.selfservice.entity.User, com.cmcc.cdn.platform.portal.domain.workorder.WorkOrder, com.cmcc.cdn.platform.portal.enums.WorkOrderEnums.Button, java.util.Map<java.lang.String,java.lang.Object>)
```
3、其中涉及表格
工程师记录:`config_change_work_order_additional`
工单表:`work_order`
catch 需求变更:`work_order_adaptconfig_change`
通过走正常流程对比,需要做如下改动:
1、修改 work_order 的 status 为 finished
2、删除 work_order 中对应的 approval_user_id
3、work_order_adaptconfig_change 表的 state 和 finish 字段修改为 END 和 1
## 本次处理数据为
`work_order`
324019 --> 005-20230111002 --> cfn.migufun.com
324017 --> 005-20230111001 --> metalive.migufun.com
`work_order_adaptconfig_change`
301
300
## SQL
```sql
update work_order set status = 'finished' where id = 324019 and code = '005-20230111002';
update work_order set status = 'finished' where id = 324017 and code = '005-20230111001';
UPDATE work_order SET approval_user_id = NULL where id = 324019 and code = '005-20230111002';
UPDATE work_order SET approval_user_id = NULL where id = 324017 and code = '005-20230111001';
update work_order_adaptconfig_change set state = 'END' where id = 301;
update work_order_adaptconfig_change set state = 'END' where id = 300;
update work_order_adaptconfig_change set finish = 1 where id = 301;
update work_order_adaptconfig_change set finish = 1 where id = 300;
```
@@ -0,0 +1,56 @@
# 上海移动域名管理界面出现不属于上海移动的域名
## 截图
![](../../../../attachment/images-uuid/98c1ef42f8124121980b62aef6b1554f.png)
## 排查思路
1. 确定用户账号(sh-admin 或者 zhouqh)和查询条件。
2. 根据查询条件跟踪查询逻辑。
```java
{
"pageNum": 1,
"pageSize": 10,
"domain": [],
"enterProvince": "上海",
"company": "",
"configureProvinces": "",
"enterSource": "",
"product": "",
"productState": "",
"domainType": "",
"state": "",
"domainPlain": "",
"isDisableDomain": "",
"isLegal": "",
"httpSelection": "",
"bbossOrder": "",
"createTimeOrder": "",
"updateTimeOrder": "asc",
"createdTime": ""
}
```
## 目前查询业务逻辑
省业务管理员和省运营经理点击查询**业务运维 - 配置管理**,查询条件为**所属省份**(如本次的上海),根据省获取省下的公司,再获取公司所属的域名。
而本次 `cdn.onepower.com.cn` 域名的中移上海信息通信科技有限公司属于上海,所以查出来了。
## 接口位置
```java
/configManage/list/getDomainData
com.cmcc.cdn.platform.selfservice.controller.ConfigManageController#getDomainData
```
## 重点条件过滤位置
```java
//2775行关于对引入省公司的条件
com.cmcc.cdn.platform.selfservice.service.impl.ConfigManageServiceImpl#domainWhere
```
![](../../../../attachment/images-uuid/79b97fb8be7c46689b09a42eb2b37c68.png)
@@ -0,0 +1,64 @@
# 信安文件报错
## 截图及文件
![](../../../../attachment/images-uuid/89c3f058e33d4608aa43ba91983f8649.png)
![](../../../../attachment/images-uuid/75b44a70f58c44aabb92e70734e5b977.png)
![](../../../../attachment/images-uuid/375aed4a44964c148f2113bde9b532df.png)
## 接口位置
```java
/configManage/updateSecurity
```
## 代码流程
```java
com.cmcc.cdn.platform.common.util.ExcelUtil#analysisExcelFile(java.io.InputStream, java.util.List<java.lang.String>)
//421行
com.cmcc.cdn.platform.common.util.ExcelUtil#checkExcelFormat
//357行
com.cmcc.cdn.platform.common.util.ExcelUtil#getCellValue
//369行
```
## 问题代码
```java
if(cell.getCellType() == CellType.NUMERIC){
cell.setCellType(CellType.STRING);
}
if(CellType.NUMERIC == cell.getCellType()){
cellValue = String.valueOf(cell.getNumericCellValue());
}else if(CellType.STRING == cell.getCellType()){
cellValue = String.valueOf(cell.getStringCellValue());
}else if(CellType.BOOLEAN == cell.getCellType()){
cellValue = String.valueOf(cell.getBooleanCellValue());
}else if(CellType.FORMULA == cell.getCellType()){
cellValue = String.valueOf(cell.getCellFormula());
}else if(CellType.BLANK == cell.getCellType()){
cellValue = "";
}else if(CellType.ERROR == cell.getCellType()){
cellValue = "非法字符";
}else {
cellValue = "未知类型";
}
```
## 处理完效果
![](../../../../attachment/images-uuid/5ee0d2934cb84598afa29b721bc78c0d.png)
![](../../../../attachment/images-uuid/db3bf7d7c5284b1a81affdba8362c771.png)
![](../../../../attachment/images-uuid/847f72f4ca904e57ad9753fcf2483a2f.png)
当天后续问题同上方情况。
![](../../../../attachment/images-uuid/f360eb83b2db4de9ab9c80e3dc8d659e.png)
@@ -0,0 +1,44 @@
# 中石油证书显示未使用
## 问题定位
1. 确认域名工单来源。
2. 试用单证书绑定是在 BPM 回调时会回传相关证书,关注点确认是否有回调。
## 域名工单
商机与试用订单号:NO.280A221228653419001 ——业务适配单(bpm_task
业务开通订单号:NO.280A230203681548001 ——通用运维工单(bpm_dns_task
![](../../../../attachment/images-uuid/322cf4f21bc84699b362a63c57065e65.png)
![](../../../../attachment/images-uuid/3bfce7dde5f34618b0ae737edc0dc0cd.png)
![](../../../../attachment/images-uuid/ce8efddeeb5545ec9382defe1a472970.png)
## 问题域名
card_uttoo_net
cdn_uttoo_net
cdn_upload_uttoo_net
mallcdn_uttoo_net
## 代码日志
商机试用工单号、工单号 testOrderNum、domain bind certificate, domain
## BPM 确认
与 BPM 沟通是否有下发绑定证书
![](../../../../attachment/images-uuid/339721c0efa14fcb963d087be13e5a19.png)
![](../../../../attachment/images-uuid/561cf37ef3694e6489863a9ed6eaba11.png)
![](../../../../attachment/images-uuid/5f6139c845c54a7587c8b9918b239559.png)
![](../../../../attachment/images-uuid/5f22fa7c2fe44e1f9c2d76033c0b72f3.png)
@@ -0,0 +1,42 @@
# 移动云修改域名请求报提交失败
## 1、问题描述
截图
![](../../../../attachment/images-uuid/a3eea9795bd84811aa5187f89dce3e1e.png)
![](../../../../attachment/images-uuid/9dba0213492f45d3bc7604833d5a2735.png)
提供日志
```
uri:/action?commandType=manageDomain&version=1, body:{"domains":[{"domain":"tv.snpane.cn","reg_id":"琼ICP备2022020328号-8","ex_domain":false,"ex_domain_list":[],"product_id":"5T8q+yIXrBkCbD+LH1WV9Q=="}],"sources":[{"primary":true,"type":"ip","back_addr":"198.44.165.207","back_protocol":0},{"primary":false,"type":"ip","back_addr":"118.99.26.111","back_protocol":0}],"protocol":1,"ipv6OnOff":true,"cp_id":"80019961","task_id":"1c9be71c16164a6698e01b6e003c58e7","add_type":0,"file_name":null,"cdn_type":"web","service_provider":"1","unique_id":"20230212200001--31e9-4b12-83ed-0fb3ded406eb"} [c.c.c.d.ibs.utils.HeaderUtil:getToken:79]
cdnmp-domain-manager-info.log.2023-02-21:[2023-02-21 16:56:41.699] [DEBUG] [TID:452899b3bfbe4116990ed039f051a5fc.46.16769698016703563] [io-18080-exec-4] [reqId-f980d87ecb4fa1ae94dae-bd22a5f8-4] token:548420C873F9C9F020BF73822D91EC0717BDD1B25C1043919CF401F4EB769BC3 [c.c.c.d.ibs.utils.HeaderUtil:getToken:80]
cdnmp-domain-manager-info.log.2023-02-21:[2023-02-21 16:56:41.700] [DEBUG] [TID:452899b3bfbe4116990ed039f051a5fc.46.16769698016703563] [io-18080-exec-4] [reqId-f980d87ecb4fa1ae94dae-bd22a5f8-4] authorization:3437363838343736383932373030|63F48749|548420C873F9C9F020BF73822D91EC0717BDD1B25C1043919CF401F4EB769BC3 [c.c.c.d.ibs.utils.HeaderUtil:getAuthorization:63]
cdnmp-domain-manager-info.log.2023-02-21:[2023-02-21 16:56:41.700] [ INFO] [TID:452899b3bfbe4116990ed039f051a5fc.46.16769698016703563] [io-18080-exec-4] [reqId-f980d87ecb4fa1ae94dae-bd22a5f8-4] ibs update domain, uri:https://p.cdn.10086.cn:443/action?commandType=manageDomain&version=1, req:IbsDomainReq(cpId=80019961, taskId=1c9be71c16164a6698e01b6e003c58e7, addType=0, fileName=null, domains=[IbsDomain(domain=tv.snpane.cn, regId=琼ICP备2022020328号-8, exDomain=false, exDomainList=[], productId=5T8q+yIXrBkCbD+LH1WV9Q==)], cdnType=web, serviceProvider=1, sources=[IbsDomainSource(backAddr=198.44.165.207, primary=true, type=ip, backProtocol=0), IbsDomainSource(backAddr=118.99.26.111, primary=false, type=ip, backProtocol=0)], protocol
```
![](../../../../attachment/images-uuid/3e20e2a517b349d9a9e0a395b30df182.png)
## 2、问题定位
![](../../../../attachment/images-uuid/f8f945daec7f40af8d1e8b925c56939a.png)
![](../../../../attachment/images-uuid/96cd4557ec6e4af081cd79a7a76e3446.png)
代码位置
com.cmcc.cdn.platform.selfservice.service.bpm.impl.YdyBpmManageServiceImpl#saveDomainStateRecords
![](../../../../attachment/images-uuid/5f91c9bda94d483d9324d4f718276985.png)
## 3、问题总结:
在进行实体的持久化时,**BpmLiveTaskPO**的**domainInfo**属性中有相应的**sources**字段。
表关系为:通过 bpm_live_task_domain_state_record 使**ydy_bpm_domain_state_record**与**bpm_live_task**进行关联。
查看 ydy_bpm_domain_state_record 表中的字段 sources 字段大小限制为 varchar(255) 。
调整 sources 大小后进行重试。
@@ -0,0 +1,19 @@
证书到期提醒
com.cmcc.cdn.cert.service.impl.CertificateConfigServiceImpl#deleteSubscribeExpiredLinks
控制邮件发送间隔:
CERT_EXPIRE_MONITOR_JOB
发送条件:
select * from certificate_info where id = 234;
表中的 expire_time 时间和 deleted
select * from contact_info where id = 9;
表中的 remind_time 控制发证书邮件的时间间隔
相关附件见同名文件夹
File diff suppressed because one or more lines are too long
@@ -0,0 +1,75 @@
```
www.scctcm.cn
www.sczgcyyp.com
www.emjiannan.com
已删除的域名在移动CDN信安管理系统查看还是未备案。
```
![](../../../../attachment/images-uuid/420b0075524f46d9a6d7741f8171ea4d.png)
13:50-13:55 提交的工单,工单号:BY1IhMBBgiw2CNN6AOwkziNdjpMwN1Rq0T3LvUCJZXFXGy04
```sql
-- 查看删除记录
select delete_time
from domain_delete_record
where domain = 'www.emjiannan.com';
```
回调接口
```
定制化
https://p.cdn.10086.cn/v1/custom/domain/synchronize
自助
/actionpm
```
参考日志
![](../../../../attachment/images-uuid/09451d56a31d4cd4b24f0d3fe5897909.png)
```
2023-02-23 at 13:55:34 CST [http-nio-8080-exec-9066] INFO com.cmcc.cdn.platform.selfservice.service.impl.PortalInformationTransServiceImpl 73 deleteUsers -
企业删除同步信安,userCdnList:
{"delete_user_info_list":[{"user_id_cdn":"KHZuYSIEc"}]}
```
/actionpm?commandType=pipeDomainCallBack&version=1
这个接口。在流程中有
com.cmcc.cdn.platform.selfservice.service.impl.PortalInformationServiceImpl#notifyDeleteInformation
的动作。其中看到有删除域名和删除企业。
这个是只有删除域名,才会触发信安系统去删除么?因为我筛选日志看 www.scctcm.cn 这个域名删除时间点有同步删除企业相关信息,但是没有同步删除域名的操作。
此表中没有。
![](../../../../attachment/images-uuid/21a16bf68f544ee1ab883945fa87b2bc.png)
删除时间
![](../../../../attachment/images-uuid/55cfe882d42945059a13ee6ea43628b3.png)
![](../../../../attachment/images-uuid/204eb7af9991444480c8b2421fc002b6.png)
![](../../../../attachment/images-uuid/8b8bd171cc164a19b4c4a46b6d4a724b.png)
![](../../../../attachment/images-uuid/34163031c35846b7b4181dc37bf29795.png)
处理步骤
1、在 big_cloud_information_domain 表中确认是否存在。如果不存在说明已经同步信安删除。
2、在 self_service_domain_config 表中确认是否存在。取人域名是否删除。
3、在 domain_delete_record 确认删除时间。
然后可以搜索删除日志。
信安返回的枚举值
com.cmcc.cdn.platform.selfservice.enums.InformationSecurityCodeEnum
@@ -0,0 +1,38 @@
# 问题入口
com.cmcc.cdn.platform.selfservice.controller.AdaptConfigChangeWorkController#submitWorkOrder
## 状态机生成
com.cmcc.cdn.platform.selfservice.service.impl.AdaptWorkOrderServiceImpl#createOrder
获取状态机
```java
WorkOrderStateMachine<ConfigChangeWorkOrderPO, ConfigChangeOrderEventEnum, ConfigChangeOrderStateEnum> machine =
GeneralMachineBuilder.createByMachineId(MachineName.ADAPT_CONFIG_CHANGE, order.getMachineId());
```
## 状态机启动
com.cmcc.cdn.platform.selfservice.statemachine.AbstractWorkOrderMachineRunConfig#handleOrderEvent
## 状态机事件组合 MAP
com.cmcc.cdn.platform.selfservice.statemachine.ConfigChangeMachineAdapter
## 此问题对应可触发事件
array[2] = new State(ConfigChangeOrderStateEnum.ESOP_CM_ZQ_PRV_CREATED, ConfigChangeOrderEventEnum.esop_prv_create, null);
## 监听位置获取下一审批人和通知人
com.cmcc.cdn.platform.selfservice.statemachine.ConfigChangeOrderHandler#esopGrpCreate
## 触发邮件位置
com.cmcc.cdn.platform.selfservice.statemachine.ConfigChangeOrderHandler#transitionEnd
# 问题总结
此问题的关键在于需求变更工单的下发 bpm 后保留了状态机的状态变化流程。当状态机状态发生变化的时候,会按照原流程进行邮件通知操作。6.7.0 版本全部下发 bpm 后进行统一优化。
@@ -0,0 +1,13 @@
# 不合法问题
![](../../../../attachment/images-uuid/916e7637665d4dd5a031293648e951a9.png)
zfcg.czj.ningde.gov.cn
客户上传的域名和工信部的不相符。
工信部地址
```url
https://beian.miit.gov.cn/#/Integrated/index
```
@@ -0,0 +1,39 @@
# 待办不显示
## 截图
![](../../../../attachment/images-uuid/25ed795a6bfd42128c156cb74c4dd120.png)
首先获取首页入口,这里主要是统计的一个咋们自己系统的工单数量和 BPM 的工单类型,怀疑是 bpm 接口请求失败。与 bpm 进行沟通:
正常的:
![](../../../../attachment/images-uuid/f7bbf5732a4342128c8d6cccadb51334.png)
错误的(但是这个是用户不对,不是 fangling 的):
![](../../../../attachment/images-uuid/3ed607ab58d04ce08e4e0dcbd649b14b.png)
后来看请求时当时 bpm 的访问策略改了,导致无法访问 bpm 的接口。下午 5 点更新后就可了。
## 相关代码位置
com.cmcc.cdn.platform.selfservice.controller.LoginController#loginSuccess
com.cmcc.cdn.platform.selfservice.order.WorkOrderServiceImpl#gainNum
可以尝试准备
curl https://bpm-uops.cdn.10086.cn/runtime/v1/ibs/getTaskList?username=fangling
# 第一次建单不成功(完成)
**bpm 访问策略问题**
![](../../../../attachment/images-uuid/5f837aa65a9b41c1a55f6fbada572087.png)
![](../../../../attachment/images-uuid/c75acff1c7a0482fa050a47fadf9939f.png)
**16:00 左右**
![](../../../../attachment/images-uuid/490c781bc8fb4dc6bed3b0210dbaf80b.png)
@@ -0,0 +1,43 @@
# 删除信安企业
curl http://117.136.191.91:7790/CDNISMS/QueryBeian?dns=
临沂市梵音美容服务有限公司 -ID:GZSnTfMXu (企业存在、无域名)
邹城市王小柯手机靓号通讯店 -ID:tqOZIIsfX (企业存在、无域名)
山东金湖水泥有限公司 -ID:UPQroXpWz (企业存在、无域名)
中国共产党临沂市河东区委员会学校 -ID:StPsrpDvU (企业存在、无域名)
上海海思 -IDFZNKSLZvX (企业存在、无域名)
厦门市金鸡亭中学 -ID:hDQDNePLu (企业存在、无域名)
欧菲斯办公伙伴控股有限公司 -ID:nWEhWtgqb (企业存在、无域名)
中粮可口可乐饮料(山东)有限公司 -ID:DRsnnZEhO (企业存在、无域名)
济南市莱芜第二中学 -ID:yRmuaMSvN (企业存在、无域名)
```
POST https://p.cdn.10086.cn/v1.0/delete_user_info
AccessKey:dayun_admin
Authorization:3432353935323732363039323836|601A69C8|E1C2A3786D8DA15213AD54C830F37D20A4672001DCE849831C2A58E9D670FABF
{
"delete_user_info_list": [
{
"user_id_cdn": "XXXXX"
}
]
}
```
![](../../../../attachment/images-uuid/985b09fe890d4f3b942a289b78971465.png)
```sql
select * from big_cloud_information_domain where user_id_cdn = 'yRmuaMSvN';
select * from information_user where user_id_cdn = 'yRmuaMSvN';
```
@@ -0,0 +1,39 @@
# 域名下发失败
![](../../../../attachment/images-uuid/5d9d79e77b5b4c34bd3489dfecbf6ce5.png)
www.hndzkc.com
![](../../../../attachment/images-uuid/6957a28d15184a38b5ea01d1feae6e09.png)
com.cmcc.cdn.platform.selfservice.domainobject.domainconfig.DomainTicketDeleteCallbackState#delete
流程:
![](../../../../attachment/images-uuid/a0da46b92ddd4f93ae8807183d0d5677.png)
分流
![](../../../../attachment/images-uuid/8395c4da804548b09dfdc88d83122cf4.png)
![](../../../../attachment/images-uuid/1f31af6a50054720b9d52da8ab1f35bc.png)
com.cmcc.cdn.platform.selfservice.service.impl.itcm.DnsDomainServiceImpl#deleteDnsConfigBeforeDomain
日志
![](../../../../attachment/images-uuid/6966f2c0437648578ec698168091add9.png)
# 关于请教调度问题
目前 ibs 和调度是深度结合的,调度有问题找我,或者找日志排查。当然首先得先确定 ibs 在调度的哪一步失败了。
代码里搜 schedule 都是,什么 dnsSchedulehttpSchedulefirstlevelSchedule
![](../../../../attachment/images-uuid/859d3ae9859049999853d451f6a1882a.png)
这个 itcmService 在另一个模块上,通过 http 请求的方式调用的,代码并不在 portal 程序里
集中调度的代码在 portal 程序里,平面调度代码从 portal 剥离出来了
这个调 itcmService,下发失败找 itcm(凯炜)。然后再找 omc,omc 再找调度底层。
@@ -0,0 +1,71 @@
# 域名校验不通过
![](../../../../attachment/images-uuid/735baffc95a44a98ba375f367333f1d4.png)
pull-flv-f96.douyincdn.com
pull-hls-f96.douyincdn.com
push-rtmp-l96.douyincdn.com
pull-hls-l96.douyincdn.com
pull-flv-l96.douyincdn.com
pull-rtmp-l96.douyincdn.com
pull-hls-l96-admin.douyincdn.com
## 002-20230201001
```
2023-03-08 at 10:44:49 CST [http-nio-8080-exec-3186] INFO com.cmcc.cdn.platform.selfservice.service.impl.PortalInformationServiceImpl 623 updateDomainInformation - 信安同步参数domain为:[{"domain":"pull-hls-l96-admin.douyincdn.com","enterpriseId":"v63l9zfa-1v85prmetsp1x45c","loopDomains":[{"mainFlag":true,"type":"domain","value":"live-vos-cn-east-3-dci.hwcloudlive.com:80"}],"provinceCode":["551","100","591","931","200","771","851","898","311","371","451","270","731","431","250","791","240","471","951","971","531","351","290","210","280","220","891","991","871","571","230"]}]
```
pull-hls-l96-admin.douyincdn.com
![](../../../../attachment/images-uuid/026176f791d3403fae4c3bd680b20d15.png)
![](../../../../attachment/images-uuid/c262909402814e4cb1d44159d3a811f3.png)
## 002-20230130001
pull-flv-f96.douyincdn.com
pull-hls-f96.douyincdn.com
push-rtmp-l96.douyincdn.com
pull-flv-l96.douyincdn.com
pull-hls-l96.douyincdn.com
pull-rtmp-l96.douyincdn.com
![](../../../../attachment/images-uuid/130bef04853541deb299ec692dbda4bd.png)
![](../../../../attachment/images-uuid/4c94d657ab804120ba982e049c7bb0ba.png)
![](../../../../attachment/images-uuid/3b147339dd134f709dd26d658c1ab3cc.png)
![](../../../../attachment/images-uuid/4e193c5f42dd43a7a135bbdf70f6bb43.png)
## 需求变更更单处理流程
com.cmcc.cdn.platform.selfservice.controller.NewWorkOrderController#approvedecision
com.cmcc.cdn.platform.selfservice.order.WorkOrderServiceImpl#decision
com.cmcc.cdn.platform.selfservice.order.DefaultWorkOrderOperator#handle(java.lang.Long, java.lang.Long, com.cmcc.cdn.platform.portal.enums.WorkOrderEnums.Button, java.lang.String, java.lang.String, java.lang.String)
com.cmcc.cdn.platform.selfservice.order.DefaultWorkOrderOperator#handle(com.cmcc.cdn.platform.selfservice.entity.User, com.cmcc.cdn.platform.portal.domain.workorder.WorkOrder, com.cmcc.cdn.platform.portal.enums.WorkOrderEnums.Button, java.util.Map<java.lang.String,java.lang.Object>)
com.cmcc.cdn.platform.selfservice.service.impl.AdaptWorkOrderServiceImpl#handle(com.cmcc.cdn.platform.selfservice.entity.User, com.cmcc.cdn.platform.portal.domain.workorder.WorkOrder, com.cmcc.cdn.platform.portal.enums.WorkOrderEnums.Button, java.util.Map<java.lang.String,java.lang.Object>)
com.cmcc.cdn.platform.selfservice.statemachine.GeneralMachineBuilder.DefaultWorkOrderStateMachine#handleOrderEvent
com.cmcc.cdn.platform.selfservice.statemachine.ConfigChangeOrderHandler#workOrderFinish 968 行)
com.cmcc.cdn.platform.selfservice.service.impl.PortalInformationServiceImpl#updateDomainInformationForDomainPlain (报错点)
附件见同名文件夹
@@ -0,0 +1,81 @@
# 确认域名删除
## 问题重点
cache+ 企业自助域名的删除中,同步信安删除的整个流程是在 omc 回调的时候进行的,通过发送到 MQ 然后进行消费处理,这里的一个问题点是,MQ 的消息不一定只会被 116、117 进行消费,是会被 4 台服务器进行分配的。所以看日志要看全。
com.cmcc.cdn.platform.selfservice.rabbitmq.RabbitMQConfig
MQ 日志表现:
```
[org.springframework.amqp.rabbit.RabbitListenerEndpointContainer#16-1]
```
![](../../../../attachment/images-uuid/15e14bbcb6da41ecaa848ecc425dd052.png)
![](../../../../attachment/images-uuid/2c1794189e514c9f860d1a9849079746.png)
![](../../../../attachment/images-uuid/b900c5a5e50143c497d078e99183a11d.png)
![](../../../../attachment/images-uuid/224efff6bd394ee6a40bea765a63b3e2.png)
com.cmcc.cdn.platform.selfservice.pipeline.service.impl.PipeConfigServiceImpl#dealWithCallBackData
**发送队列位置**
com.cmcc.cdn.platform.selfservice.pipeline.service.impl.PipeConfigServiceImpl#pipeWithThread
## 问题
看下下面这些 IBS 中保留的数据关联 ID 是哪个,稍后保留现有 ID 的,让后把其他相同的数据做删除同步处理下
kght.ynkmkg.gov.cn -- 关联用户 -- 云南省昆明空港经济区管理委员会
en.ynkmkg.gov.cn -- 关联用户 -- 云南省昆明空港经济区管理委员会
ynkmkg.gov.cn -- 关联用户 -- 云南省昆明空港经济区管理委员会
www.ynkmkg.gov.cn -- 关联用户 -- 云南省昆明空港经济区管理委员会
## 日志
kght.ynkmkg.gov.cn
2023-01-28 at 11:21:09
域名信安同步请求:{"delete_domain_info_list":[{"domain_id_cdnsys":"pCjvQBvgO_zrZhnj"}]}
en.ynkmkg.gov.cn
2023-01-28 at 12:51:31
域名信安同步请求:{"delete_domain_info_list":[{"domain_id_cdnsys":"pCjvQBvgO_YkwOuv"}]}
ynkmkg.gov.cn
2023-01-28 at 12:51:24
域名信安同步请求:{"delete_domain_info_list":[{"domain_id_cdnsys":"pCjvQBvgO_pkXiid"}]}
www.ynkmkg.gov.cn
2023-01-28 at 12:51:35
企业信安同步请求:{"delete_user_info_list":[{"user_id_cdn":"pCjvQBvgO"}]}
{ "unit_name" : " 云南省昆明空港经济区管理委员会 ", "user_id_cdn" : "KGsSMiVWY" }
{ "unit_name" : " 云南省昆明空港经济区管理委员会 ", "user_id_cdn" : "xmPMqCsOD" }
{ "unit_name" : " 云南省昆明空港经济区管理委员会 ", "user_id_cdn" : "AmJHpOkhK" }
## 截图
![](../../../../attachment/images-uuid/16e2f8821909481a870d3d84a67cce82.png)
![](../../../../attachment/images-uuid/8acd65ef41b0436f96cf7ed94b1b0370.png)
![](../../../../attachment/images-uuid/e8c5e688d35d4d93a82cbd211e2c430c.png)
![](../../../../attachment/images-uuid/0f9e7aaa8277414880315611e224747b.png)
@@ -0,0 +1,25 @@
西南信息校验不通过。客户反馈,有过历史修改,但是同步信安的结果是相同的。
![](../../../../attachment/images-uuid/0044a952f6fb46c2895f7e39098a1a9c.png)
域名:zfcg.czj.ningde.gov.cn 工单号:004-20230303001
![](../../../../attachment/images-uuid/14939685138a446a84fd6d2055a39fb5.png)
排查思路。
1、为什么配置管理的信息,和工单页面的不相符。
2、看两次同步西南信息的同步日志是否有相关信息。
3、如果上床西南表,会在 fileinfo 表中有记录,需要通过时间去查一下表的存储情况。
工单大致流程
![](../../../../attachment/images-uuid/08d71ac7652d43538a1806b91ddcc917.png)
获得真实西南信息的位置
![](../../../../attachment/images-uuid/ecb24f78b70246f29c3e7e63f41cd5bc.png)
com.cmcc.cdn.platform.selfservice.service.CacheWorkOrderServiceImpl#workOrderIcpCheckUpdate
@@ -0,0 +1,184 @@
# 问题
分发的话保留与 IBS 相同 ID 的数据,然后把其他的删除掉,没业务的话直接同步下删除
有创建
{ "unit_name" : " 山东利尔康医疗科技股份有限公司 ", "user_id_cdn" : "yNBIpqwCS" }
{ "unit_name" : " 山东利尔康医疗科技股份有限公司 ", "user_id_cdn" : "SveotJzDM" }
有创建
{ "unit_name" : " 山东利尔康医疗科技股份有限公司 ", "user_id_cdn" : "svHofOknC" }
有创建
{ "unit_name" : " 山东利尔康医疗科技股份有限公司 ", "user_id_cdn" : "PvymdhItM" }
有创建
{ "unit_name" : " 山东利尔康医疗科技股份有限公司 ", "user_id_cdn" : "mHwctZzyZ" }
有创建
{ "unit_name" : " 山东利尔康医疗科技股份有限公司 ", "user_id_cdn" : "MYGBvPuld" }
有创建
{ "unit_name" : " 山东利尔康医疗科技股份有限公司 ", "user_id_cdn" : "MiadCSJRC" }
有创建
{ "unit_name" : " 山东利尔康医疗科技股份有限公司 ", "user_id_cdn" : "OveleKUqh" }
有创建
{ "unit_name" : " 鲁 ICP 备 11011332 号 -1", "user_id_cdn" : "dpXUVAEnu" }
{ "unit_name" : " 鲁 ICP 备 11011332 号 -1", "user_id_cdn" : "WeGkAUDLQ" }
有创建
{ "unit_name" : " 鲁 ICP 备 11011332 号 -1", "user_id_cdn" : "UWjWIjSPw" }
有创建
{ "unit_name" : " 鲁 ICP 备 11011332 号 -1", "user_id_cdn" : "LOXWYNUKx" }
有创建
{ "unit_name" : " 鲁 ICP 备 11011332 号 -1", "user_id_cdn" : "jLpuCkZOV" }
有创建
{ "unit_name" : " 鲁 ICP 备 11011332 号 -1", "user_id_cdn" : "ZGorJxpKO" }
有创建
{ "unit_name" : " 鲁 ICP 备 11011332 号 -1", "user_id_cdn" : "POFandsTD" }
## 问题域名
bpm.lierkang.com
www.lierkang.com
wx.lierkang.com
lierkang.com
zs.lierkang.com
## 工单截图
![](../../../../attachment/images-uuid/3ae9d29f28074128a6146b6ef2474c68.png)
## 信安系统提供的日志
```
有对应工单★
ObjectId(62a2ec0f92b4a3abcbd6be6a),2022-06-10 15:00:31,1,,"{""add_user_info_list"":[{"
"unit_name"":""山东利尔康医疗科技股份有限公司"",""officer_mobile"":""13705341861"",""deleted"":false,""officer_employee"":""潘芳"",""unit_nature"":4,""prov_id_list"":[""531""],""officer_email"":"""",""domain_info"":[{"
"user_id_cdn"":""yNBIpqwCS"",""domain"":""zs.lierkang.com"",""domain_id_cdnsys"":""yNBIpqwCS_ivKkxR"",""source_list"":[""zs.lierkang.com""],""distribute_prov"":[""531""],""deleted"":false,""top_domain"":""com"",""reg_id"":""鲁ICP备11011332号-1""},{""user_id_cdn"":""yNBIpqwCS"",""domain"":""lierkang.com"",""domain_id_cdnsys"":""yNBIpqwCS_LAlmGP"",""source_list"":[""lierkang.com""],""distribute_prov"":[""531""],""deleted"":false,""top_domain"":""com"",""reg_id"":""鲁ICP备11011332号-1""},{""user_id_cdn"":""yNBIpqwCS"",""domain"":""wx.lierkang.com"",""domain_id_cdnsys"":""yNBIpqwCS_zpFgvg"",""source_list"":[""wx.lierkang.com""],""distribute_prov"":[""531""],""deleted"":false,""top_domain"":""com"",""reg_id"":""鲁ICP备11011332号-1""},{""user_id_cdn"":""yNBIpqwCS"",""domain"":""www.lierkang.com"",""domain_id_cdnsys"":""yNBIpqwCS_cOSIXK"",""source_list"":[""www.lierkang.com""],""distribute_prov"":[""531""],""deleted"":false,""top_domain"":""com"",""reg_id"":""鲁ICP备11011332号-1""}],""id_number"":""91371400167306079Y"",""add"":""山东省德州市经济技术开发区利尔康路1号"",""id_type"":999,""officer_id_type"":2,""user_id_cdn"":""yNBIpqwCS"",""officer_id_no"":""371425198010272526"",""officer_tel"":""""},{"
"unit_name"":""鲁ICP备11011332号-1"",""officer_mobile"":""13705341861"",""deleted"":false,""officer_employee"":""潘芳"",""unit_nature"":4,""prov_id_list"":[""531""],""officer_email"":"""",""domain_info"":[{"
"user_id_cdn"":""dpXUVAEnu"",""domain"":""bpm.lierkang.com"",""domain_id_cdnsys"":""dpXUVAEnu_RWeurC"",""source_list"":[""bpm.lierkang.com""],""distribute_prov"":[""531""],""deleted"":false,""top_domain"":""com"",""reg_id"":""鲁ICP备11011332号-1""}],""id_number"":""91371400167306079Y"",""add"":""山东省德州市经济技术开发区利尔康路1号"",""id_type"":999,""officer_id_type"":2,""user_id_cdn"":""dpXUVAEnu"",""officer_id_no"":""371425198010272526"",""officer_tel"":""""},]}"
有对应工单★
ObjectId(62a2eeb792b4a3abcbd6be8e),2022-06-10 15:11:51,1,,"{""add_user_info_list"":[{"
"unit_name"":""山东利尔康医疗科技股份有限公司"",""officer_mobile"":""13705341861"",""deleted"":false,""officer_employee"":""潘芳"",""unit_nature"":4,""prov_id_list"":[""531""],""officer_email"":"""",""domain_info"":[{"
"user_id_cdn"":""SveotJzDM"",""domain"":""zs.lierkang.com"",""domain_id_cdnsys"":""SveotJzDM_axtNhp"",""source_list"":[""zs.lierkang.com""],""distribute_prov"":[""531""],""deleted"":false,""top_domain"":""com"",""reg_id"":""鲁ICP备11011332号-1""},{""user_id_cdn"":""SveotJzDM"",""domain"":""lierkang.com"",""domain_id_cdnsys"":""SveotJzDM_CaFoaX"",""source_list"":[""lierkang.com""],""distribute_prov"":[""531""],""deleted"":false,""top_domain"":""com"",""reg_id"":""鲁ICP备11011332号-1""},{""user_id_cdn"":""SveotJzDM"",""domain"":""wx.lierkang.com"",""domain_id_cdnsys"":""SveotJzDM_iZhCXc"",""source_list"":[""wx.lierkang.com""],""distribute_prov"":[""531""],""deleted"":false,""top_domain"":""com"",""reg_id"":""鲁ICP备11011332号-1""},{""user_id_cdn"":""SveotJzDM"",""domain"":""www.lierkang.com"",""domain_id_cdnsys"":""SveotJzDM_lmLboQ"",""source_list"":[""www.lierkang.com""],""distribute_prov"":[""531""],""deleted"":false,""top_domain"":""com"",""reg_id"":""鲁ICP备11011332号-1""}],""id_number"":""91371400167306079Y"",""add"":""山东省德州市经济技术开发区利尔康路1号"",""id_type"":999,""officer_id_type"":2,""user_id_cdn"":""SveotJzDM"",""officer_id_no"":""371425198010272526"",""officer_tel"":""""},{"
"unit_name"":""鲁ICP备11011332号-1"",""officer_mobile"":""13705341861"",""deleted"":false,""officer_employee"":""潘芳"",""unit_nature"":4,""prov_id_list"":[""531""],""officer_email"":"""",""domain_info"":[{"
"user_id_cdn"":""WeGkAUDLQ"",""domain"":""bpm.lierkang.com"",""domain_id_cdnsys"":""WeGkAUDLQ_lBBvpD"",""source_list"":[""bpm.lierkang.com""],""distribute_prov"":[""531""],""deleted"":false,""top_domain"":""com"",""reg_id"":""鲁ICP备11011332号-1""}],""id_number"":""91371400167306079Y"",""add"":""山东省德州市经济技术开发区利尔康路1号"",""id_type"":999,""officer_id_type"":2,""user_id_cdn"":""WeGkAUDLQ"",""officer_id_no"":""371425198010272526"",""officer_tel"":""""}]}"
有对应工单★
ObjectId(62a3032392b4a3abcbd6bef2),2022-06-10 16:38:59,1,,"{""add_user_info_list"":[{"
"unit_name"":""山东利尔康医疗科技股份有限公司"",""officer_mobile"":""13705341861"",""deleted"":false,""officer_employee"":""潘芳"",""unit_nature"":4,""prov_id_list"":[""531""],""officer_email"":"""",""domain_info"":[{"
"user_id_cdn"":""mHwctZzyZ"",""domain"":""zs.lierkang.com"",""domain_id_cdnsys"":""mHwctZzyZ_BQsKHh"",""source_list"":[""zs.lierkang.com""],""distribute_prov"":[""531""],""deleted"":false,""top_domain"":""com"",""reg_id"":""鲁ICP备11011332号-1""},{""user_id_cdn"":""mHwctZzyZ"",""domain"":""lierkang.com"",""domain_id_cdnsys"":""mHwctZzyZ_qOpXfN"",""source_list"":[""lierkang.com""],""distribute_prov"":[""531""],""deleted"":false,""top_domain"":""com"",""reg_id"":""鲁ICP备11011332号-1""},{""user_id_cdn"":""mHwctZzyZ"",""domain"":""wx.lierkang.com"",""domain_id_cdnsys"":""mHwctZzyZ_nncXuR"",""source_list"":[""wx.lierkang.com""],""distribute_prov"":[""531""],""deleted"":false,""top_domain"":""com"",""reg_id"":""鲁ICP备11011332号-1""},{""user_id_cdn"":""mHwctZzyZ"",""domain"":""www.lierkang.com"",""domain_id_cdnsys"":""mHwctZzyZ_zHtCMM"",""source_list"":[""www.lierkang.com""],""distribute_prov"":[""531""],""deleted"":false,""top_domain"":""com"",""reg_id"":""鲁ICP备11011332号-1""}],""id_number"":""91371400167306079Y"",""add"":""山东省德州市经济技术开发区利尔康路1号"",""id_type"":999,""officer_id_type"":2,""user_id_cdn"":""mHwctZzyZ"",""officer_id_no"":""371425198010272526"",""officer_tel"":""""},{"
"unit_name"":""鲁ICP备11011332号-1"",""officer_mobile"":""13705341861"",""deleted"":false,""officer_employee"":""潘芳"",""unit_nature"":4,""prov_id_list"":[""531""],""officer_email"":"""",""domain_info"":[{"
"user_id_cdn"":""jLpuCkZOV"",""domain"":""bpm.lierkang.com"",""domain_id_cdnsys"":""jLpuCkZOV_JBPGJk"",""source_list"":[""bpm.lierkang.com""],""distribute_prov"":[""531""],""deleted"":false,""top_domain"":""com"",""reg_id"":""鲁ICP备11011332号-1""}],""id_number"":""91371400167306079Y"",""add"":""山东省德州市经济技术开发区利尔康路1号"",""id_type"":999,""officer_id_type"":2,""user_id_cdn"":""jLpuCkZOV"",""officer_id_no"":""371425198010272526"",""officer_tel"":""""}]}"
有对应工单★
ObjectId(62a6aa3e92b4a3abcbd6c09e),2022-06-13 11:08:46,1,,"{""add_user_info_list"":[{"
"unit_name"":""山东利尔康医疗科技股份有限公司"",""officer_mobile"":""13705341861"",""deleted"":false,""officer_employee"":""潘芳"",""unit_nature"":4,""prov_id_list"":[""531""],""officer_email"":"""",""domain_info"":[{"
"user_id_cdn"":""MiadCSJRC"",""domain"":""zs.lierkang.com"",""domain_id_cdnsys"":""MiadCSJRC_IXkwcC"",""source_list"":[""zs.lierkang.com""],""distribute_prov"":[""531""],""deleted"":false,""top_domain"":""com"",""reg_id"":""鲁ICP备11011332号-1""},{""user_id_cdn"":""MiadCSJRC"",""domain"":""lierkang.com"",""domain_id_cdnsys"":""MiadCSJRC_bFIuzi"",""source_list"":[""lierkang.com""],""distribute_prov"":[""531""],""deleted"":false,""top_domain"":""com"",""reg_id"":""鲁ICP备11011332号-1""},{""user_id_cdn"":""MiadCSJRC"",""domain"":""wx.lierkang.com"",""domain_id_cdnsys"":""MiadCSJRC_GVQFjH"",""source_list"":[""wx.lierkang.com""],""distribute_prov"":[""531""],""deleted"":false,""top_domain"":""com"",""reg_id"":""鲁ICP备11011332号-1""},{""user_id_cdn"":""MiadCSJRC"",""domain"":""www.lierkang.com"",""domain_id_cdnsys"":""MiadCSJRC_VBGWII"",""source_list"":[""www.lierkang.com""],""distribute_prov"":[""531""],""deleted"":false,""top_domain"":""com"",""reg_id"":""鲁ICP备11011332号-1""}],""id_number"":""91371400167306079Y"",""add"":""山东省德州市经济技术开发区利尔康路1号"",""id_type"":999,""officer_id_type"":2,""user_id_cdn"":""MiadCSJRC"",""officer_id_no"":""371425198010272526"",""officer_tel"":""""},{"
"unit_name"":""鲁ICP备11011332号-1"",""officer_mobile"":""13705341861"",""deleted"":false,""officer_employee"":""潘芳"",""unit_nature"":4,""prov_id_list"":[""531""],""officer_email"":"""",""domain_info"":[{"
"user_id_cdn"":""POFandsTD"",""domain"":""bpm.lierkang.com"",""domain_id_cdnsys"":""POFandsTD_dunFyO"",""source_list"":[""bpm.lierkang.com""],""distribute_prov"":[""531""],""deleted"":false,""top_domain"":""com"",""reg_id"":""鲁ICP备11011332号-1""}],""id_number"":""91371400167306079Y"",""add"":""山东省德州市经济技术开发区利尔康路1号"",""id_type"":999,""officer_id_type"":2,""user_id_cdn"":""POFandsTD"",""officer_id_no"":""371425198010272526"",""officer_tel"":""""}]}"
ObjectId(62a2ef6092b4a3abcbd6bea9),2022-06-10 15:14:40,1,,"{""add_user_info_list"":[{"
"unit_name"":""山东利尔康医疗科技股份有限公司"",""officer_mobile"":""13705341861"",""deleted"":false,""officer_employee"":""潘芳"",""unit_nature"":4,""prov_id_list"":[""531""],""officer_email"":"""",""domain_info"":[{"
"user_id_cdn"":""svHofOknC"",""domain"":""zs.lierkang.com"",""domain_id_cdnsys"":""svHofOknC_alWipR"",""source_list"":[""zs.lierkang.com""],""distribute_prov"":[""531""],""deleted"":false,""top_domain"":""com"",""reg_id"":""鲁ICP备11011332号-1""},{""user_id_cdn"":""svHofOknC"",""domain"":""lierkang.com"",""domain_id_cdnsys"":""svHofOknC_VtMxIj"",""source_list"":[""lierkang.com""],""distribute_prov"":[""531""],""deleted"":false,""top_domain"":""com"",""reg_id"":""鲁ICP备11011332号-1""},{""user_id_cdn"":""svHofOknC"",""domain"":""wx.lierkang.com"",""domain_id_cdnsys"":""svHofOknC_ofQyYh"",""source_list"":[""wx.lierkang.com""],""distribute_prov"":[""531""],""deleted"":false,""top_domain"":""com"",""reg_id"":""鲁ICP备11011332号-1""},{""user_id_cdn"":""svHofOknC"",""domain"":""www.lierkang.com"",""domain_id_cdnsys"":""svHofOknC_COJYBd"",""source_list"":[""www.lierkang.com""],""distribute_prov"":[""531""],""deleted"":false,""top_domain"":""com"",""reg_id"":""鲁ICP备11011332号-1""}],""id_number"":""91371400167306079Y"",""add"":""山东省德州市经济技术开发区利尔康路1号"",""id_type"":999,""officer_id_type"":2,""user_id_cdn"":""svHofOknC"",""officer_id_no"":""371425198010272526"",""officer_tel"":""""},{"
"unit_name"":""鲁ICP备11011332号-1"",""officer_mobile"":""13705341861"",""deleted"":false,""officer_employee"":""潘芳"",""unit_nature"":4,""prov_id_list"":[""531""],""officer_email"":"""",""domain_info"":[{"
"user_id_cdn"":""UWjWIjSPw"",""domain"":""bpm.lierkang.com"",""domain_id_cdnsys"":""UWjWIjSPw_JDjpAo"",""source_list"":[""bpm.lierkang.com""],""distribute_prov"":[""531""],""deleted"":false,""top_domain"":""com"",""reg_id"":""鲁ICP备11011332号-1""}],""id_number"":""91371400167306079Y"",""add"":""山东省德州市经济技术开发区利尔康路1号"",""id_type"":999,""officer_id_type"":2,""user_id_cdn"":""UWjWIjSPw"",""officer_id_no"":""371425198010272526"",""officer_tel"":""""}]}"
ObjectId(62a2f01492b4a3abcbd6bec4),2022-06-10 15:17:40,1,,"{""add_user_info_list"":[{"
"unit_name"":""山东利尔康医疗科技股份有限公司"",""officer_mobile"":""13705341861"",""deleted"":false,""officer_employee"":""潘芳"",""unit_nature"":4,""prov_id_list"":[""531""],""officer_email"":"""",""domain_info"":[{"
"user_id_cdn"":""PvymdhItM"",""domain"":""zs.lierkang.com"",""domain_id_cdnsys"":""PvymdhItM_XvLjqE"",""source_list"":[""zs.lierkang.com""],""distribute_prov"":[""531""],""deleted"":false,""top_domain"":""com"",""reg_id"":""鲁ICP备11011332号-1""},{""user_id_cdn"":""PvymdhItM"",""domain"":""lierkang.com"",""domain_id_cdnsys"":""PvymdhItM_yHcClO"",""source_list"":[""lierkang.com""],""distribute_prov"":[""531""],""deleted"":false,""top_domain"":""com"",""reg_id"":""鲁ICP备11011332号-1""},{""user_id_cdn"":""PvymdhItM"",""domain"":""wx.lierkang.com"",""domain_id_cdnsys"":""PvymdhItM_ckwHdP"",""source_list"":[""wx.lierkang.com""],""distribute_prov"":[""531""],""deleted"":false,""top_domain"":""com"",""reg_id"":""鲁ICP备11011332号-1""},{""user_id_cdn"":""PvymdhItM"",""domain"":""www.lierkang.com"",""domain_id_cdnsys"":""PvymdhItM_RuynYK"",""source_list"":[""www.lierkang.com""],""distribute_prov"":[""531""],""deleted"":false,""top_domain"":""com"",""reg_id"":""鲁ICP备11011332号-1""}],""id_number"":""91371400167306079Y"",""add"":""山东省德州市经济技术开发区利尔康路1号"",""id_type"":999,""officer_id_type"":2,""user_id_cdn"":""PvymdhItM"",""officer_id_no"":""371425198010272526"",""officer_tel"":""""},{"
"unit_name"":""鲁ICP备11011332号-1"",""officer_mobile"":""13705341861"",""deleted"":false,""officer_employee"":""潘芳"",""unit_nature"":4,""prov_id_list"":[""531""],""officer_email"":"""",""domain_info"":[{"
"user_id_cdn"":""LOXWYNUKx"",""domain"":""bpm.lierkang.com"",""domain_id_cdnsys"":""LOXWYNUKx_OdpWZC"",""source_list"":[""bpm.lierkang.com""],""distribute_prov"":[""531""],""deleted"":false,""top_domain"":""com"",""reg_id"":""鲁ICP备11011332号-1""}],""id_number"":""91371400167306079Y"",""add"":""山东省德州市经济技术开发区利尔康路1号"",""id_type"":999,""officer_id_type"":2,""user_id_cdn"":""LOXWYNUKx"",""officer_id_no"":""371425198010272526"",""officer_tel"":""""}]}"
ObjectId(62a3037b92b4a3abcbd6bf0d),2022-06-10 16:40:27,1,,"{""add_user_info_list"":[{"
"unit_name"":""山东利尔康医疗科技股份有限公司"",""officer_mobile"":""13705341861"",""deleted"":false,""officer_employee"":""潘芳"",""unit_nature"":4,""prov_id_list"":[""531""],""officer_email"":"""",""domain_info"":[{"
"user_id_cdn"":""MYGBvPuld"",""domain"":""zs.lierkang.com"",""domain_id_cdnsys"":""MYGBvPuld_rzvCIb"",""source_list"":[""zs.lierkang.com""],""distribute_prov"":[""531""],""deleted"":false,""top_domain"":""com"",""reg_id"":""鲁ICP备11011332号-1""},{""user_id_cdn"":""MYGBvPuld"",""domain"":""lierkang.com"",""domain_id_cdnsys"":""MYGBvPuld_pIdGBR"",""source_list"":[""lierkang.com""],""distribute_prov"":[""531""],""deleted"":false,""top_domain"":""com"",""reg_id"":""鲁ICP备11011332号-1""},{""user_id_cdn"":""MYGBvPuld"",""domain"":""wx.lierkang.com"",""domain_id_cdnsys"":""MYGBvPuld_enFeSU"",""source_list"":[""wx.lierkang.com""],""distribute_prov"":[""531""],""deleted"":false,""top_domain"":""com"",""reg_id"":""鲁ICP备11011332号-1""},{""user_id_cdn"":""MYGBvPuld"",""domain"":""www.lierkang.com"",""domain_id_cdnsys"":""MYGBvPuld_kBbocK"",""source_list"":[""www.lierkang.com""],""distribute_prov"":[""531""],""deleted"":false,""top_domain"":""com"",""reg_id"":""鲁ICP备11011332号-1""}],""id_number"":""91371400167306079Y"",""add"":""山东省德州市经济技术开发区利尔康路1号"",""id_type"":999,""officer_id_type"":2,""user_id_cdn"":""MYGBvPuld"",""officer_id_no"":""371425198010272526"",""officer_tel"":""""},{"
"unit_name"":""鲁ICP备11011332号-1"",""officer_mobile"":""13705341861"",""deleted"":false,""officer_employee"":""潘芳"",""unit_nature"":4,""prov_id_list"":[""531""],""officer_email"":"""",""domain_info"":[{"
"user_id_cdn"":""ZGorJxpKO"",""domain"":""bpm.lierkang.com"",""domain_id_cdnsys"":""ZGorJxpKO_fPNftS"",""source_list"":[""bpm.lierkang.com""],""distribute_prov"":[""531""],""deleted"":false,""top_domain"":""com"",""reg_id"":""鲁ICP备11011332号-1""}],""id_number"":""91371400167306079Y"",""add"":""山东省德州市经济技术开发区利尔康路1号"",""id_type"":999,""officer_id_type"":2,""user_id_cdn"":""ZGorJxpKO"",""officer_id_no"":""371425198010272526"",""officer_tel"":""""}]}"
ObjectId(62a6ab8192b4a3abcbd6c0bb),2022-06-13 11:14:09,1,,"{""add_user_info_list"":[{"
"unit_name"":""山东利尔康医疗科技股份有限公司"",""officer_mobile"":""13705341861"",""deleted"":false,""officer_employee"":""潘芳"",""unit_nature"":4,""prov_id_list"":[""531""],""officer_email"":"""",""domain_info"":[{"
"user_id_cdn"":""OveleKUqh"",""domain"":""zs.lierkang.com"",""domain_id_cdnsys"":""OveleKUqh_TyMbsB"",""source_list"":[""zs.lierkang.com""],""distribute_prov"":[""531""],""deleted"":false,""top_domain"":""com"",""reg_id"":""鲁ICP备11011332号-1""},{""user_id_cdn"":""OveleKUqh"",""domain"":""bpm.lierkang.com"",""domain_id_cdnsys"":""OveleKUqh_dYaDjT"",""source_list"":[""bpm.lierkang.com""],""distribute_prov"":[""531""],""deleted"":false,""top_domain"":""com"",""reg_id"":""鲁ICP备11011332号-1""},{""user_id_cdn"":""OveleKUqh"",""domain"":""lierkang.com"",""domain_id_cdnsys"":""OveleKUqh_jmxNPy"",""source_list"":[""lierkang.com""],""distribute_prov"":[""531""],""deleted"":false,""top_domain"":""com"",""reg_id"":""鲁ICP备11011332号-1""},{""user_id_cdn"":""OveleKUqh"",""domain"":""wx.lierkang.com"",""domain_id_cdnsys"":""OveleKUqh_vxWvOh"",""source_list"":[""wx.lierkang.com""],""distribute_prov"":[""531""],""deleted"":false,""top_domain"":""com"",""reg_id"":""鲁ICP备11011332号-1""},{""user_id_cdn"":""OveleKUqh"",""domain"":""www.lierkang.com"",""domain_id_cdnsys"":""OveleKUqh_XaZSfu"",""source_list"":[""www.lierkang.com""],""distribute_prov"":[""531""],""deleted"":false,""top_domain"":""com"",""reg_id"":""鲁ICP备11011332号-1""}],""id_number"":""91371400167306079Y"",""add"":""山东省德州市经济技术开发区利尔康路1号"",""id_type"":999,""officer_id_type"":2,""user_id_cdn"":""OveleKUqh"",""officer_id_no"":""371425198010272526"",""officer_tel"":""""}]}"
```
## 问题解决流程:
1、知道对应信安信息在系统中产生的时间,基本就是域名的创建时间,或者信安系统可以提供日志。
2、查看工单是否完毕,或者异常结束,或者有相应的删除工单,看对应时间是否有同步删除的动作。
3、需要确认两张表(information_user、big_cloud_information_domain)中是否还存在相关信息。前者是信安信息表,后者是域名表。这两张表可以确认信安信息是否还存在我们系统里。
4、如果两张表都没有了,信安信息是冗余的,可以调用删除接口进行删除操作。
# 备注
后边处理类似问题可以先定位 user_id_cdn 和域名之间的关系,比如这个问题就是因为客户删除的错误的信息
![](../../../../attachment/images-uuid/2e20dfd797ec42c7841de75db4d4997e.png)
附件见同名文件夹
@@ -0,0 +1,5 @@
![](../../../../attachment/images-uuid/170a1eeddf2746518f7085fdcc881cd4.png)
![](../../../../attachment/images-uuid/772c23c6d4924389a97681158aa1c824.png)
![](../../../../attachment/images-uuid/4c3ffce79f9645bcbece85ad1819d0e4.png)
@@ -0,0 +1,47 @@
# 截图
![](../../../../attachment/images-uuid/1d8555bcb5234c1a81cb167d0757d684.png)
![](../../../../attachment/images-uuid/2bd9288429f14be684c161dbcd854175.png)
# 配查思路
1. 通过报错信息进行查验。
```java
PHONE_TENANT_ERROR(411, "手机号或租户错误,请重试"),
```
2. 定位报错代码位置
```java
if(SendAuthCodeType.LOGIN.getId().equals(type.getId()) || SendAuthCodeType.RESET_PASSWORD.getId().equals(type.getId())) {
User user = userService.getUserByPhoneAndTenantId(phone, tenantId);
if (ObjectUtils.isEmpty(user)) {
return ResultType.PHONE_TENANT_ERROR;
}
}
```
3. 因为对应账号不存在手机号
4. 排查创建用户时是否携带响应的手机号信息。
```java
//创建业务管理员和客户经理管理员 2.手机号和邮箱无需同步到iam 3.邮箱只能作为邮件,无法登录
if (isNeedUniqueRoleByRole(role)) {
//是否需要校验权限
iamInfoVO.setIsCheckRole("true");
} else {
//非业务管理员或者客户经理管理员则手机号和邮箱为必填项
if (org.apache.commons.lang3.StringUtils.isBlank(addUserToIamVO.getEmail())
|| org.apache.commons.lang3.StringUtils.isBlank(addUserToIamVO.getMobile())) {
throw new PlatformException(org.apache.commons.lang3.StringUtils.isBlank(addUserToIamVO.getEmail())
? "邮箱为必填项,请重新输入" : "手机号为必填项,请重新输入");
}
//非业务管理员和客户经理管理员同步邮箱手机号
iamInfoVO.setEmail(addUserToIamVO.getEmail());
iamInfoVO.setMobile(addUserToIamVO.getMobile());
}
```
5. 定位到问题用户创建不会携带相应的手机号。
@@ -0,0 +1,9 @@
# 问题描述
存在 esop 定制化域名未删除,下一审批人审批时会有如下提示
![](../../../../attachment/images-uuid/ac446deaf4ef4f6d8cfbc390907fde6f.png)
从报错来看是 omc_custom_domain 的 ccs_domain_flag 为 false,或者存在两条数据一个为 false 一个为 true。
通过回调接口回调后表中为 false 的数据消失。请领导再次提交。
@@ -0,0 +1,5 @@
补充确实信息即可
省业务管理员可以改
![](../../../../attachment/images-uuid/5cd08d4f9c90449f9c159ff6ba617177.png)
@@ -0,0 +1,97 @@
# 问题起因
BPM 工单号: 046-202303080005
![](../../../../attachment/images-uuid/7a045e8e347147239c1dc4ef6c6e789a.png)
poc-s.test.hihonor.com
poc.test.hihonor.com
poc-a.test.hihonor.com
![](../../../../attachment/images-uuid/85cd3dbc32474cbd90d28862e0d1ad29.png)
![](../../../../attachment/images-uuid/07daa4012b0e44c9b8bb30a9a5727829.png)
![](../../../../attachment/images-uuid/2440beebe12c4a31b83f563efbaf9aba.png)
# 问题描述
BPM 在验收反馈的时候报错:域名校验未通过
关注代码位置:
```java
if (!"true".equalsIgnoreCase(skipFlag) &&
!DomainValidationEnum.VALIDATIONSUCCESS.getCode().equals(testOrderInfo.getCheckDomain())) {
throw new PlatformException("域名校验未通过");
}
```
根据异常抛出位置应关注 skipFlag 的值,下方位置决定了他的值:
```java
boolean isLiveProduct = ProductsBBossEnum.LIVESTREAM.getCode().toString().equals(testOrderInfo.getTestType().get(0));
//直播域名在验收反馈前就已经配置好了,但是校验的标志位未置为配置成功。先调验证方法,如果配置成功则重置标志位
if(isLiveProduct){
verificationStatus(testOrderInfo.getOrderNum(), TestOrderResultEnum.OK.getCode().toString());
}
//验收反馈时,直播域名配置已经入库,预先校验时要校验域名配置
String skipFlag = isLiveProduct ? "false" : "true";
```
问题方法:com.cmcc.cdn.platform.selfservice.service.impl.TestOrderServiceImpl#verificationStatus
下方代码导致未将配置设置未配置已完成:
```java
//试用工单中的试用域名在企业账号下是否完全包含
if (!((testDomain2.size() == domainList.size()
&& testDomain2.containsAll(domainList)) || domainList.containsAll(testDomain2))) {
testDomain2.removeAll(domainList);
for (String domain : testDomain2) {
sb.append(domain).append("");
}
resultResponse.put("success", false);
resultResponse.put("message", "域名配置未完成:" + sb.substring(0, sb.length() - 1));
log.info("----域名配置未完成:{}----", sb.substring(0, sb.length() - 1));
flag = false;
}
```
```java
if (flag) {
resultResponse.put("success", true);
resultResponse.put("message", "域名配置成功");
testOrderInfo.setCheckDomain(DomainValidationEnum.VALIDATIONSUCCESS.getCode());
} else {
testOrderInfo.setCheckDomain(DomainValidationEnum.VALIDATIONFAIL.getCode());
}
```
下方代码块儿为 domainList 的来源
```java
DataProcess<List<ProductDomainInfoVO>> dataProcess = productTrialService.getProductAndConfigedDomains(preOrderInfo.getEcId());
if (ls != null) {
ls = ls.stream().filter(d -> DomainTicketStateEnum.EFFICIENT.equals(d.getState())).collect(Collectors.toList());
for (EpProductChargeMode ep : op.get()) {
ProductDomainInfoVO vo = new ProductDomainInfoVO();
vo.setState(ep.getProductState());
vo.setProductId(ep.getProductId());
vo.setDomains(ls.stream().filter(d -> ep.getProductId().equals(d.getProduct().getId())).map(d->
new DomainVO(d.getDomain(), d.getProvinces().stream().map(p -> p.getCode()).collect(Collectors.toList()))
).collect(Collectors.toList()));
result.add(vo);
}
}
```
这时候定位到这 3 个域名已经进行了停用,域名状态时停用中。所以域名均被过滤。造成无法通过校验。(DomainTicketStateEnum
# 备注
BPM 在进行验收反馈的时候会有一个域名状态校验步骤。
@@ -0,0 +1,264 @@
# 问题截图
![](../../../../attachment/images-uuid/b33c4053bc564950811e6bebe3f35c7d.png)
![](../../../../attachment/images-uuid/5a102f8f049a405da81e9dc093d3a3f3.png)
![](../../../../attachment/images-uuid/84ec0004ea0a42338f7140a5fc61029c.png)
# 问题梳理
首先 ProvIdList 是根据企业的 enterProvince 来的,所以之前的辽宁同步为了福建。是因为两家公司提的单子。
# 相关代码
修改根据企业名称查到的所有企业的企业信息
com.cmcc.cdn.platform.selfservice.service.impl.PortalInformationServiceImpl#notifyUpdateUsers
创建信息
com.cmcc.cdn.platform.selfservice.service.impl.PortalInformationServiceImpl#createOrUpdateInfo
更新信安信息接口
com.cmcc.cdn.platform.selfservice.controller.InformationSecurityController#updateInfomationUser
修改信安信息
/configManage/updateSecurity
# 问题定位
关于 4 月 3 日反馈企业信安信息归属省份发生变化问题。
21 年是中国移动通信集团辽宁有限公司(cache+ 企业 CPID80603226)走了(F0OrzgPXUOW70xqYcache+ 域名配置工单其单位名称“市场监督管理局”。
23 年是中国移动通信集团福建有限公司(cache+ 企业 CPID81399324)走了(004-20230403001cache+ 域名配置工单其中包含单位名称“市场监督管理局”因已存在同名称走了修改。
因单位名称相同 IBS 系统判定为“企业为修改信安信息”操作,进行同步修改企业信息操作。导致将市场监督管理局(user_id_cdn:GdwouKtKU)的省份信息同步修改为福建。
![](../../../../attachment/images-uuid/60e6ddeb95e44524a39f8aa4ee9b7bd4.png)
# 信安系统提供的日志
```json
ObjectId(603f3c104215e35886acf502),2021-03-03 15:34:40,1,,"{""add_user_info_list"":[{""unit_name"":""市场监督管理局"",""officer_mobile"":""18842983648"",""deleted"":false,""officer_employee"":""杜志"",""unit_nature"":2,""prov_id_list"":[""240""],""officer_email"":"""",""domain_info"":[{""user_id_cdn"":""GdwouKtKU"",""domain"":""scjg.hld.gov.cn"",""domain_id_cdnsys"":""GdwouKtKU_xOBSWe"",""source_list"":[""scjg.hld.gov.cn""],""distribute_prov"":[""240""],""deleted"":false,""top_domain"":""gov.cn"",""reg_id"":""辽ICP备09004425号-1""}],""id_number"":""11211400MB1897542D"",""add"":""辽宁省葫芦岛市龙港区龙湾大街27号"",""id_type"":3,""officer_id_type"":2,""zip_code"":125000,""user_id_cdn"":""GdwouKtKU"",""officer_id_no"":""21142219850509209X"",""officer_tel"":""""}]}"
ObjectId(642a2d6929cd93dc8e8da0e3),2023-04-03 09:35:37,2,,"{""update_user_info_list"":[{""unit_name"":""商务局"",""officer_mobile"":""13599325120"",""deleted"":false,""officer_employee"":""王瑜平"",""unit_nature"":2,""prov_id_list"":[""591""],""officer_email"":""lydsjj0597@163.com"",""user_id_cdn"":""DmnmCohRM"",""id_number"":""11350800MB1803112G"",""add"":""龙岩大道1号市行政办公中心328"",""id_type"":3,""officer_id_type"":2,""officer_id_no"":""350822199110091015"",""officer_tel"":""0597-3212890""},{""unit_name"":""教育局"",""officer_mobile"":""13599325120"",""deleted"":false,""officer_employee"":""王瑜平"",""unit_nature"":2,""prov_id_list"":[""591""],""officer_email"":""lydsjj0597@163.com"",""user_id_cdn"":""PDzpPZnds"",""id_number"":""11350800MB1803112G"",""add"":""龙岩大道1号市行政办公中心328"",""id_type"":3,""officer_id_type"":2,""officer_id_no"":""350822199110091015"",""officer_tel"":""0597-3212890""},{""unit_name"":""市场监督管理局"",""officer_mobile"":""13599325120"",""deleted"":false,""officer_employee"":""王瑜平"",""unit_nature"":2,""prov_id_list"":[""591""],""officer_email"":""lydsjj0597@163.com"",""user_id_cdn"":""GdwouKtKU"",""id_number"":""11350800MB1803112G"",""add"":""龙岩大道1号市行政办公中心328"",""id_type"":3,""officer_id_type"":2,""officer_id_no"":""350822199110091015"",""officer_tel"":""0597-3212890""},{""unit_name"":""发改委"",""officer_mobile"":""13599325120"",""deleted"":false,""officer_employee"":""王瑜平"",""unit_nature"":2,""prov_id_list"":[""591""],""officer_email"":""lydsjj0597@163.com"",""user_id_cdn"":""qPAKmHMBf"",""id_number"":""11350800MB1803112G"",""add"":""龙岩大道1号市行政办公中心328"",""id_type"":3,""officer_id_type"":2,""officer_id_no"":""350822199110091015"",""officer_tel"":""0597-3212890""},{""unit_name"":""人防办"",""officer_mobile"":""13599325120"",""deleted"":false,""officer_employee"":""王瑜平"",""unit_nature"":2,""prov_id_list"":[""591""],""officer_email"":""lydsjj0597@163.com"",""user_id_cdn"":""irkxIbatT"",""id_number"":""11350800MB1803112G"",""add"":""龙岩大道1号市行政办公中心328"",""id_type"":3,""officer_id_type"":2,""officer_id_no"":""350822199110091015"",""officer_tel"":""0597-3212890""},{""unit_name"":""财政局"",""officer_mobile"":""13599325120"",""deleted"":false,""officer_employee"":""王瑜平"",""unit_nature"":2,""prov_id_list"":[""591""],""officer_email"":""lydsjj0597@163.com"",""user_id_cdn"":""APLHVhGCt"",""id_number"":""11350800MB1803112G"",""add"":""龙岩大道1号市行政办公中心328"",""id_type"":3,""officer_id_type"":2,""officer_id_no"":""350822199110091015"",""officer_tel"":""0597-3212890""},{""unit_name"":""林业局"",""officer_mobile"":""13599325120"",""deleted"":false,""officer_employee"":""王瑜平"",""unit_nature"":2,""prov_id_list"":[""591""],""officer_email"":""lydsjj0597@163.com"",""user_id_cdn"":""PbwXUFutQ"",""id_number"":""11350800MB1803112G"",""add"":""龙岩大道1号市行政办公中心328"",""id_type"":3,""officer_id_type"":2,""officer_id_no"":""350822199110091015"",""officer_tel"":""0597-3212890""},{""unit_name"":""交通运输局"",""officer_mobile"":""13599325120"",""deleted"":false,""officer_employee"":""王瑜平"",""unit_nature"":2,""prov_id_list"":[""591""],""officer_email"":""lydsjj0597@163.com"",""user_id_cdn"":""qhAcHyZuT"",""id_number"":""11350800MB1803112G"",""add"":""龙岩大道1号市行政办公中心328"",""id_type"":3,""officer_id_type"":2,""officer_id_no"":""350822199110091015"",""officer_tel"":""0597-3212890""}]}"
```
# 问题解决方案
1、企业名称在信安是作为唯一键使用,但我们系统无法控制用户信安表中数据的唯一性以及客户是新增还是修改的目的。这个问题可以后续优化信安表中对“单位名称(必填)”列进行提示提醒客户名称规范到省市区。
2、数据修复:
获取 21 年辽宁信安报文,将辽宁信息修改回去。
删除 23 年福建新增的域名信安信息。
最后福建重新提交新虚名信息提醒客户单位名称精确到省市区。
3、让客户提交信安补录工单(单位名称需要精确到省市区)
第一步:将原企业信安信息进行修正,调用企业信安修改接口。
```json
https://p.cdn.10086.cn/v1.0/update_user_info
POST
{
"update_user_info_list":[
{
"unit_name":"市场监督管理局",
"officer_mobile":"18842983648",
"deleted":false,
"officer_employee":"杜志",
"unit_nature":2,
"prov_id_list":[
"240"
],
"officer_email":"",
"user_id_cdn":"GdwouKtKU",
"id_number":"11211400MB1897542D",
"add":"辽宁省葫芦岛市龙港区龙湾大街27号",
"id_type":3,
"officer_id_type":2,
"zip_code":125000,
"officer_id_no":"21142219850509209X",
"officer_tel":""
}
]
}
```
第二步:删除福建同步在 GdwouKtKU 下的域名
通过 big_cloud_information_domain 查询域名 domain_id_cdn_sys 为:GdwouKtKU_ebGOFS
```json
https://p.cdn.10086.cn/v1.0/delete_domain_info
POST
{
"delete_domain_info_list": [
{
"domain_id_cdnsys": "GdwouKtKU_ebGOFS"
}
]
}
```
第三步:由运营人员通知中国移动通信集团福建有限公司(企业来源:cache+ 企业 CPID81399324)提交域名(scjgj.longyan.gov.cn)的信安补录工单(提醒单位名称问题)
注:
信安系统新增和修改是每天定时(晚上 23 点)上报,所以第一步和第二步间隔 1 日。
每 1 分钟会扫描上报一次删除,上报后需要等工信部反馈结果后,信安系统才会删除本地数据,删除与新增间隔一天。第三步需确认第二步信安信息是否已经删除。
当天删除动作后无法新增信安信息。
# 其他
客户发起的企业信安信息同步修改报文:
```json
{
"update_user_info_list":[
{
"add":"龙岩大道1号市行政办公中心328",
"deleted":false,
"id_number":"11350800MB1803112G",
"id_type":3,
"officer_email":"lydsjj0597@163.com",
"officer_employee":"王瑜平",
"officer_id_no":"350822199110091015",
"officer_id_type":2,
"officer_mobile":"13599325120",
"officer_tel":"0597-3212890",
"prov_id_list":[
"591"
],
"unit_name":"商务局",
"unit_nature":2,
"user_id_cdn":"DmnmCohRM"
},
{
"add":"龙岩大道1号市行政办公中心328",
"deleted":false,
"id_number":"11350800MB1803112G",
"id_type":3,
"officer_email":"lydsjj0597@163.com",
"officer_employee":"王瑜平",
"officer_id_no":"350822199110091015",
"officer_id_type":2,
"officer_mobile":"13599325120",
"officer_tel":"0597-3212890",
"prov_id_list":[
"591"
],
"unit_name":"教育局",
"unit_nature":2,
"user_id_cdn":"PDzpPZnds"
},
{
"add":"龙岩大道1号市行政办公中心328",
"deleted":false,
"id_number":"11350800MB1803112G",
"id_type":3,
"officer_email":"lydsjj0597@163.com",
"officer_employee":"王瑜平",
"officer_id_no":"350822199110091015",
"officer_id_type":2,
"officer_mobile":"13599325120",
"officer_tel":"0597-3212890",
"prov_id_list":[
"591"
],
"unit_name":"市场监督管理局",
"unit_nature":2,
"user_id_cdn":"GdwouKtKU"
},
{
"add":"龙岩大道1号市行政办公中心328",
"deleted":false,
"id_number":"11350800MB1803112G",
"id_type":3,
"officer_email":"lydsjj0597@163.com",
"officer_employee":"王瑜平",
"officer_id_no":"350822199110091015",
"officer_id_type":2,
"officer_mobile":"13599325120",
"officer_tel":"0597-3212890",
"prov_id_list":[
"591"
],
"unit_name":"发改委",
"unit_nature":2,
"user_id_cdn":"qPAKmHMBf"
},
{
"add":"龙岩大道1号市行政办公中心328",
"deleted":false,
"id_number":"11350800MB1803112G",
"id_type":3,
"officer_email":"lydsjj0597@163.com",
"officer_employee":"王瑜平",
"officer_id_no":"350822199110091015",
"officer_id_type":2,
"officer_mobile":"13599325120",
"officer_tel":"0597-3212890",
"prov_id_list":[
"591"
],
"unit_name":"人防办",
"unit_nature":2,
"user_id_cdn":"irkxIbatT"
},
{
"add":"龙岩大道1号市行政办公中心328",
"deleted":false,
"id_number":"11350800MB1803112G",
"id_type":3,
"officer_email":"lydsjj0597@163.com",
"officer_employee":"王瑜平",
"officer_id_no":"350822199110091015",
"officer_id_type":2,
"officer_mobile":"13599325120",
"officer_tel":"0597-3212890",
"prov_id_list":[
"591"
],
"unit_name":"财政局",
"unit_nature":2,
"user_id_cdn":"APLHVhGCt"
},
{
"add":"龙岩大道1号市行政办公中心328",
"deleted":false,
"id_number":"11350800MB1803112G",
"id_type":3,
"officer_email":"lydsjj0597@163.com",
"officer_employee":"王瑜平",
"officer_id_no":"350822199110091015",
"officer_id_type":2,
"officer_mobile":"13599325120",
"officer_tel":"0597-3212890",
"prov_id_list":[
"591"
],
"unit_name":"林业局",
"unit_nature":2,
"user_id_cdn":"PbwXUFutQ"
},
{
"add":"龙岩大道1号市行政办公中心328",
"deleted":false,
"id_number":"11350800MB1803112G",
"id_type":3,
"officer_email":"lydsjj0597@163.com",
"officer_employee":"王瑜平",
"officer_id_no":"350822199110091015",
"officer_id_type":2,
"officer_mobile":"13599325120",
"officer_tel":"0597-3212890",
"prov_id_list":[
"591"
],
"unit_name":"交通运输局",
"unit_nature":2,
"user_id_cdn":"qhAcHyZuT"
}
]
}
```
![](../../../../attachment/images-uuid/2663ef90668a442181dbdfbc0a15e521.png)
@@ -0,0 +1,86 @@
# 问题截图
![](../../../../attachment/images-uuid/ec199b5434a146d8b70272f372fa8757.png)
![](../../../../attachment/images-uuid/aafd672aae1340b29a9bf5363654a4b0.png)
# 数据库信息统计
## IBS 系统 user 表:
第一次开户: feng.shi@legendata.net 15358165074 石烽 13962108439cmcc
第二次开户: 13962108439@139.com 13962108439cmcc 石峰 cmcc
## IAM 的 user 表:
第一次开户:2022-08-22 16:28:33,feng.shi@legendata.net,13962108439cmcc,6567b552ad87e4470eca7859a2a8f0f8c8702759
## IBS 系统 enterprise_info 表:
2022-08-22 08:28:30,200A9992007369685 feng.shi@legendata.net,石烽,13962108439,v23xcyrt-id8cxo0dhlpkqu9a,81928567
2023-04-06 03:14:03,250A51238635004 13962108439@139.com,石峰,13962108439,lta1q52b-t07etgiqfgxq90bt,81041147
## 企业信息
v23xcyrt-id8cxo0dhlpkqu9a,上海众传信息科技有限公司 200A9992007369685
lta1q52b-t07etgiqfgxq90bt,上海众传信息科技有限公司(园区) 250A51238635004 问题单
## 工单号
试商用工单:250A230309395479001
## 发到 IAM 请求参数
{
"role":" 企业 ",
"phone":"13962108439",
"source":"IBS",
"userName":"13962108439cmcc",
"department":" 企业 ",
"email":"13962108439@139.com",
"tenant":" 企业 "
}
## 其他
private String epConfig = EnterpriseConfigEnum.NOTCONFIG.getCode();//企业配置状态
com.cmcc.cdn.platform.selfservice.enums.EnterpriseConfigEnum
com.cmcc.cdn.platform.selfservice.service.impl.EnterpriseServiceImpl#checkMobileAndEmail
# 复现
![](../../../../attachment/images-uuid/09d5834edcda42fdbe26221eb43e4ecc.png)
![](../../../../attachment/images-uuid/f5bb9b54d08f4166891a9f3bcc75406c.png)
# 关键代码
```java
com.cmcc.cdn.platform.selfservice.service.impl.EnterpriseServiceImpl#checkMobileAndEmail
```
# 问题总结
目前根本问题是客户在第一次开户之后进行了手机号和邮箱的修改,当客户进行第二次开户的时候,我们通过了第一次的手机号邮箱的校验,这时候在 iam 系统是无法通过用户唯一的校验的,导致客户出现用户已存在的报错。
临时的解决方案,需客户提供一个系统中不存在的手机号,通过更改试用单的联系方式二次触发。
需要处理的表:preorder_infoec_number)、userphone)、enterprise_infocontact_phone、mobile_encrypt
> contact_phone 的加密方式可参考:
>
> com.cmcc.cdn.platform.common.encryption.DESUtils#encrypt(java.lang.String, java.lang.String)
但是也要在 user 表中有相应的匹配,因为在 iam 通过后会更新 user 表中的信息。代码如下
```java
json = JSONObject.parseObject(json.getString("data"));
json.put("url", json.getString("url"));
json.put("verCode", json.getString("verCode"));
User user = userService.findByMobileAndRoleNotInAdmin(vo.getContactPhone());
user.setUserCode(json.getString("userCode"));
user.setUserAccount(vo.getContactPhone() + "cmcc"); // 登录名
userRepository.save(user);
```
@@ -0,0 +1,25 @@
# 截图
![](../../../../attachment/images-uuid/13d39644a13c4b1db4ec3d1e00b7cf2e.png)
![](../../../../attachment/images-uuid/1a9831c6b40542358fc17015318f6e99.png)
![](../../../../attachment/images-uuid/03b0608dc9ba463da5396deb737700cf.png)
# 问题日志
```java
Data truncation: Data too long for column 'descrip' at row 1
2023-04-12 at 15:20:36 CST [http-nio-8080-exec-4689] ERROR
com.cmcc.cdn.platform.selfservice.order.PreSaleWorkOrderServiceImpl 143 createPreSalesWorkOrder -
could not execute statement; SQL [n/a];
nested exception is org.hibernate.exception.DataException:
could not execute statement org.springframework.dao.DataIntegrityViolationException: could not execute statement; SQL [n/a];
nested exception is org.hibernate.exception.DataException: could not execute statement
```
![](../../../../attachment/images-uuid/5ba827368d8e45d3941c89ee252e3849.png)
# 问题解决
扩容字数据库字段长度
@@ -0,0 +1,7 @@
![](../../../../attachment/images-uuid/5276ae07fd264e3e84dd0fdba14c5c45.png)
有个试用工单 311A220329500164001,省里想把工单作废,问在试用工单回退功能,域名信息会同步从信安删除吗
![](../../../../attachment/images-uuid/dfcdf2de36184e5289c52bf8f890b76c.png)
![](../../../../attachment/images-uuid/1112e3d4b8314460bdff0e2677a40c3d.png)
@@ -0,0 +1,31 @@
# 问题截图
![](../../../../attachment/images-uuid/9e0ff870e9984910b8d11f84deb8cc76.png)
![](../../../../attachment/images-uuid/a13edb9f20d74e7e91f0b5fb3a59f822.png)
![](../../../../attachment/images-uuid/4509e1e3b3f14378b3bc6cf3aed180d9.png)
# 问题分析
1、首先附件中回源域名不可填写汉字。
2、如果要填写 IPV6 域名需要携带 [] 括号
3、目前主站的回源域名必须要填写,因为如果不填写的话,在域名信息校验的时候客户虽然写的是 ip 的校验,但是代码会判断为域名校验,这时候造成了校验失败。
主要判断逻辑:
```java
if (LoopDomainTypeEnum.IP.getDesc().equalsIgnoreCase(batchDomain.getLoopType())
&& StringUtils.isNotBlank(batchDomain.getLoopType()) && StringUtils.isNotBlank(batchDomain.getLoopDomain())){
```
关于那个附件的问题。我认为是我们代码的问题。因客户为【直播回源类型】为 ip,他【回源域名或 IP】就未填写。
在我们校验中是根据这个三个来判断是进 ip 校验还是域名校验。因为客户未填写【回源域名或 IP】被系统认定为进域名校验,但此时客户需要的是 ip 校验。
# 注:
主站会有信安同步动作。
![](../../../../attachment/images-uuid/723b279719e0494da260e7478df713b7.png)
@@ -0,0 +1,50 @@
![](../../../../attachment/images-uuid/93b0d9c208e14b27aa2ca2afa53af4fe.jpg)
```
2023-04-25 at 16:05:19 CST [pool-3991-thread-1] INFO com.cmcc.cdn.platform.selfservice.service.impl.EmailServiceImplThread 347 run - htmlContent:<!DOCTYPE html><html lang="en"><head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>
您好:
</p>
<p id="cdn-autoid-1">
<span> <span>中国广电湖南网络股份有限公司</span>企业的商机与试用工单(工单号: <span>731A230322650299001</span>)自动反馈失败(反馈信息: <span>配置完成,获取修改密码链接失败:参数不能为空或参数错误</span>),请人工介入审批工单,重新触发。</span>
</p>
</body></html>
```
![](../../../../attachment/images-uuid/703faed841744013b94f081767220f7c.png)
```json
{
"code":"731A230322650299001",
"plains":[
""""
],
"planeEvaluationInfo":[
{
"capacity":"可满足",
"estimatedCompletionDate":1682611200000,
"plainName":"华为平面",
"resultOfEstimate":"可支持"
}
],
"resultOfPolicy":"1"
}
```
问题原因是在 iam 侧进行了手机号校验,但是校验无 192 手机段,导致校验未通过
主要问题代码:
ibs:获取修改密码登录链接与验证码
com.cmcc.cdn.platform.api.service.impl.ProductTrialServiceImpl#getPassWordurlAndVerCode
```java
com.cmcc.cdn.platform.api.service.impl.ProductTrialServiceImpl 756 sendRequest - 获取修改密码链接与验证码url:https://p11.cdn.10086.cn/api/create/user
```
preorder_infoec_number)、userphone)、enterprise_infocontact_phone、mobile_encrypt
@@ -0,0 +1,48 @@
# 截图
![](../../../../attachment/images-uuid/958d9d44e8cc4a769c5da14f85e1f833.png)
1、首先从门户看了两张工单的存在情况——不存在。
~~000A230426304793001 2023-04-26 16:13:23ibs 未收到相关请求日志)已处理~~
311A230418707965001 2023-04-26 14:24:542023-04-19 09:21:37 创单,bpm 已阶段反馈未验收反馈)
~~250A230414841792001(存在重复域名)~~
```java
2023-04-26 at 14:24:59 CST DEBUG org.apache.http.impl.conn.PoolingHttpClientConnectionManager 351 releaseConnection - Connection released: [id: 234][route: {tls}->http://10.26.1.1:3128->https://p.cdn.10086.cn:443][total available: 0; route allocated: 0 of 2; total allocated: 0 of 20]
2023-04-26 at 14:24:59 CST INFO com.cmcc.cdn.platform.common.util.HttpUtil 413 doPost - Status:502
```
`2023-04-26 at 14:24:59 CST INFO com.cmcc.cdn.platform.common.util.HttpUtil 413 doPost - Status:502`
`2023-04-26 at 15:29:57 CST INFO com.cmcc.cdn.platform.common.util.HttpUtil 413 doPost - Status:502`
`2023-04-26 at 15:30:26 CST INFO com.cmcc.cdn.platform.common.util.HttpUtil 413 doPost - Status:200`
`2023-04-26 at 16:13:28 CST INFO com.cmcc.cdn.platform.common.util.HttpUtil 413 doPost - Status:502`
2、查询最近 3 天的 portal 的日志未发现请求。
3、查询 BSS 项目日志返现有接收过 BBOSS 的请求,但是 doPost - Status:502
客户今天再次重试正常收单。
![](../../../../attachment/images-uuid/efb6a46f512b4cb892321aff3c8da833.jpg)
## 311A230418707965001 问题
1、确认 bboss 工单状态,保证这边可以回调
@BBOSS 王孟园 您好,311A230418707965001 关于这个试用变更单目前平台于 04 月 19 日 09:20:31 收单并正常处理。但由于新提域名较多,导致接口响应超时。需要辛苦您确认一下 BBOSS 侧工单状态,后台调整为正常发单状态,然后我们人工介入回调补充流程。
2、回调处理人变化接口
生成请求位置:
com.cmcc.cdn.platform.selfservice.service.impl.BBossAndDssInteractiveServiceImpl#syncBbossOrderHandleUserInfo
3、阶段反馈接口回调
未回调 BBOSS。
@@ -0,0 +1,41 @@
# 截图
![](../../../../attachment/images-uuid/6e3cfc5f3e5e4429b52741aae29a0db1.png)
![](../../../../attachment/images-uuid/58f09675ffd64d1c9a9bf5b13534d289.png)
![](../../../../attachment/images-uuid/853f9bb369b14af8b21a551a93ae29a6.png)
![](../../../../attachment/images-uuid/42e59290702c47f787b4049bba3ddc57.png)
![](../../../../attachment/images-uuid/427d3dccf13a4eb687607135e8f5e7c5.png)
![](../../../../attachment/images-uuid/69b940a982fb446f8cca2ab4f1736b31.png)
工单号:51A230329808031001
![](../../../../attachment/images-uuid/0da5bba1b0724e9183d205c64304d5ee.png)
![](../../../../attachment/images-uuid/469e469745364524abddeea2370dc040.png)
关于信安问题:
1、最开始为了处理客户的开户问题。先将大写转换为了小写,进行开户处理。
2、二次收到客户的反馈,提示客户需上传小写附件即可,就不会收到提示,因为代码中会从 information_self_domain 查询是否存在。但是只有上传成功的才会到这个表中。
3、客户操作收到如下提示
![](../../../../attachment/images-uuid/44e7731351044cdca6df8059de5604cb.png)
是因为此代码中校验了 test_order_domain 和信安表中的包含关系,此时一个大写,一个小写,判定不包含。报错。
com.cmcc.cdn.platform.selfservice.service.impl.PortalInformationServiceImpl#validateSecurityFile
4、与客户沟通后将目前系统中的信息改为小写。然后手动回调验收反馈接口。
关于验收反馈接口,因为回调 bboss 出现异常但吞掉了异常,导致 bpm 结单,但是我们这边未处理完成
此问题 8 号再进行操作,操作时确认好操作时间和回调接口。
2023-05-09 15:44:39 进行回调,回调成功。
@@ -0,0 +1,18 @@
# 截图
![](../../../../attachment/images-uuid/79f51d0227a3401f8dbf683bc529513d.png)
urlhttps://p11.cdn.10086.cn/api/user/4d04ef5f-5efb-4918-bc4e-b532f5966a05
![](../../../../attachment/images-uuid/45ac239133554bb48e6c7527577e3fdf.png)
![](../../../../attachment/images-uuid/081d4f8a900d4326b4817ebde56ce67a.png)
![](../../../../attachment/images-uuid/9ad1ed7a646149f1aede981a151c9dc4.png)
方法入口:
```java
com.cmcc.cdn.platform.selfservice.service.impl.TestOrderServiceImpl#testOrder(java.lang.String, java.lang.String, java.lang.String, java.lang.String, java.lang.String, java.lang.String, com.cmcc.cdn.platform.selfservice.entity.User, java.util.List<com.cmcc.cdn.platform.selfservice.pojo.SelfFile>, java.lang.Integer, java.util.List<com.cmcc.cdn.platform.selfservice.pojo.TestOrderPlanes>, java.lang.Integer)
com.cmcc.cdn.platform.selfservice.service.impl.TestOrderServiceImpl#handleTestOrderWithSubmitOperate(java.lang.String, java.lang.String, java.lang.String, java.lang.String, java.lang.String, java.lang.String, com.cmcc.cdn.platform.selfservice.entity.User, java.util.List<com.cmcc.cdn.platform.selfservice.pojo.SelfFile>, java.lang.Integer, java.util.List<com.cmcc.cdn.platform.selfservice.pojo.TestOrderPlanes>, java.lang.Integer)
```
@@ -0,0 +1,12 @@
![](../../../../attachment/images-uuid/743281c95c5a41199b544fdcfc1fc740.png)
![](../../../../attachment/images-uuid/7433c62f3c1f481aa863dcfde96038e6.png)
网宿科技股份有限公司需求变更工单,工单号:046-202304100007
(类型:业务适配变更流程——工单号:046-202304100007)
000A220928069398001
v1-cold.douyinvod.com
com.cmcc.cdn.platform.selfservice.service.impl.AdaptWorkOrderServiceImpl#esopBpmFeedBackApprove
@@ -0,0 +1,95 @@
## 截图
![](../../../../attachment/images-uuid/7ab0ad403d0f482aa3969bf2b23da4ff.png)
## 说明
东莞证券股份有限公司
testmallcdn.dgzq.com.cn,客户反馈进入进入工单的时候显示信安信息上传失败,退出后重新点进去就回复上传成功了, 这是信安那边的问题吗?
## 场景
is_icp_check_completed
icp 是否校验完成)
初始值为 false 在经过第一次校验后改为 true
is_icp_check_success
icp 校验是否通过)
初始值为 false 如果 is_icp_check_completed 为 true 了。 则改为 true
通过位置 1:页面显示 上传失败
通过位置 2:两种情况:1、如果前边校验未通过了 不改 页面显示上传失败
2、如果校验通过了 页面显示校验 通过
![](../../../../attachment/images-uuid/6d539a23719846a0bfb15fdb8928fee2.png)
## 代码位置
消费者位置
```java
com.cmcc.cdn.platform.selfservice.rabbitmq.consumer.BatchDomainIcpUpdateConsumer#handle
```
工单详情页
```java
com.cmcc.cdn.platform.selfservice.order.WorkOrderController#detail
```
页面显示控制位置
```java
com.cmcc.cdn.platform.selfservice.pojo.HistoryLogVO#create(com.cmcc.cdn.platform.selfservice.entity.DomainHistoryPO, com.cmcc.cdn.platform.selfservice.entity.ConfigureDomainOrderPO)
```
| CheckCompleted | CheckSuccess | 结果 | 修改按钮 |
| --- | --- | --- | --- |
| null | null | 准备校验 | |
| true | null | 校验成功 | 有 |
| true | true | 上传成功 | 无 |
| false | null | 校验失败 | |
| true | false | 上传失败 | 有 |
## 域名配置记录工单
/workorder/custom/save
```json
{
"product": "视音频点播加速",
"productId": "7895",
"provinces": [
"11"
],
"speedDomainSelect": "",
"description": "",
"secInfoFileId": [
"97pkomdgxtaruh0k94appnouj"
],
"md5List": [],
"loopDomain": [
{
"mainFlag": true,
"type": "domain",
"value": "testtaxi1.com:80",
"_show": true
}
],
"speedList": [
{
"domain": "tianzhuo9.komect.com",
"icpNumber": "京ICP备0500_komect.com_12号"
}
],
"enterprise": "gjuhsj20-c5x3new1oc1nel2t",
"requirement": "add",
"type": "domain_request"
}
```
@@ -0,0 +1,11 @@
域名 www.saftpac.com IBS 上已经删除了,但信安系统还存在,这个是不是也是信安那边的问题,我记得之前说过信安会每隔段时间就会有这种问题 等着信安处理就可以呢
![](../../../../attachment/images-uuid/6ad5f577de234abc8f7f732a4debc143.png)
域名【www.saftpac.com】关联用户是【青岛赛夫特包装有限公司】,21 年 4 月 21 日 IBS 一共进行了两次【青岛赛夫特包装有限公司】用户的新增同步(用户 user_id_cdn 分别为【YTWYacJul】和【pBmPssqaW】),均携带了域名【www.saftpac.com】,23 年 6 月 7 日 IBS 系统对用户 user_id_cdn 为【pBmPssqaW】的信息发起了删除同步,信安系统已经将该信息删除,目前系统中还留存一个用户 user_id_cdn 为【YTWYacJul】的信息。
![](../../../../attachment/images-uuid/e006afc64d294668b06ba811a0ba1642.png)
我们库中已经不存在 YTWYacJul 这个 user_id_cdn,您那边能确认下这个主体下还有其他域名吗?如果没有我再发起同步删除。
@张英@王聪 已发起同步删除企业信安信息请求(YTWYacJul)
@@ -0,0 +1,46 @@
![](../../../../attachment/images-uuid/6ab7ca5f6cc44b7b8dca1069421fedd3.png)
```java
could not execute statement;
SQL [n/a];
nested exception is org.hibernate.exception.DataException:
could not execute statement org.springframework.dao.DataIntegrityViolationException:
could not execute statement;
SQL [n/a];
nested exception is org.hibernate.exception.DataException:
could not execute statement
```
311A230320690679001
www.hbhk.com.cn(不是非法的)
这个要明天去了再沟通下,有几个疑问的点,客户这个是一个适用单过来的把吧单号 311A230320690679001
但是这个只有一个信安附件。域名是 www.hbhk.com.cn。
但是我现在在域名列表后边的查看页面是可以下载到其他域名的附件的。
然后你说客户合并单元格上传,这个是不是补录的时候客户想这么操作你制止了?而不是一开始他是合并的吧。
6 月 13 日傍晚 16:40 信安补录工单失败。
失败原因字段过长
```log
96699pay.hbhk.com.cnauc.hbhk.com.cnauctest.hbhk.com.cnbestwishes.hbhk.com.cnbid.hbhk.com.cnbidtest.hbhk.com.cncellphoneapp.hbhk.com.cnchange.hbhk.com.cncsr.hbhk.com.cndxfk.hbhk.com.cnecms.hbhk.com.cnfeedback.hbhk.com.cnfile.hbhk.com.cn
```
代码位置
```java
com.cmcc.cdn.platform.selfservice.service.impl.BigCloudBasicInfoServiceImpl.createInformationWorkOrder(BigCloudBasicInfoServiceImpl.java:2656) ~[cdn-service-1.0.0-SNAPSHOT.jar!/:?]
```
我们处理补录工单问题,你让客户提单留痕,然后需要客户在域名管理界面再次修改刷新合法值。
稍后处理完工单问题同步你。
调整字段
```sql
alter table work_order_information_security
modify column domain varchar(5000);
```
@@ -0,0 +1,35 @@
![](../../../../attachment/images-uuid/669ce859e61949c08e9426614a9d94b5.png)
![](../../../../attachment/images-uuid/4686ac4a33b346bd904bf2dee304f3db.png)
![](../../../../attachment/images-uuid/37b7cab006504b128372e1b0a401284f.png)
这个筛选框**不是取的枚举值**,前端是根据/api/platform/productId/info 接口返回的数据提取的。
大概就是首先根据用户权限拿到他能看到的企业,最后过滤只要 BSS 的。
然后根据 self\_service\_domain\_config、enterprise\_info、productid\_info 三张表联查得到数据,返回一个以平面为维度的数据组。
![](../../../../attachment/images-uuid/c420b49f3a3841ee88905b331b05a423.png)
**也就是这个【平面下有数据】并且这个用户有企业权限前端就能取到。**
代码中是通过 ServicePlatformEnum 的值去【selfServiceDomainConfigDao 表】检索。但是【域名表】存的是 DomainPlainEnum 的值。现在这几个平面正常是因为原来两个枚举值的**编号**相同,其中不同的自研平面是判定的时候不知道为啥用了正确的枚举。
![](../../../../attachment/images-uuid/291a315d137547209c52502a30a7b267.png)
![](../../../../attachment/images-uuid/78fa3f741b694d80bab59afee922b291.png)
解决后
![](../../../../attachment/images-uuid/53c52132ba4a4ad88f3d051d25b1448a.png)
```sql
SELECT e.ec_id,e.source,e.deleted,e.enterprise_ctf_enum,s.domain, s.domain_plain, e.enterprise_name, e.enterprise_cp_id, p.product_id, e.enterprise_id
FROM self_service_domain_config s
LEFT JOIN enterprise_info e
ON s.tenant_id = e.enterprise_id
LEFT JOIN productid_info p
ON e.ec_id = p.ec_id
WHERE s.domain_plain like '%4%';
```
@@ -0,0 +1,31 @@
![](../../../../attachment/images-uuid/7962a9a38a9340bcbd6ec1f76200497b.png)
```sql
select oi.order_state,ti.order_state
from testorder_info ti
left join order_info oi on ti.order_num = oi.pre_order_num
where oi.order_state = 3
order by oi.created_time desc;
```
通过过滤发现是**业务开通单**的状态不一致
![](../../../../attachment/images-uuid/3355f9b4037a44ae89ee2fd4a4f87de0.png)
开通状态通知 接口 (接收商机关闭/归档通知工单)
```java
/sync/BBOSS/SyncProvResultServ
```
查看日志发现归档日志,通用运维回传日志均正常。
最后查询日志时间线发现是通用运维回传接口的执行时间过长,在通用运维执行过程中,通知了 BBOSS,BBOSS 短时间进行归档将状态值填充为 5,但通用运维接口还未执行完成,最后被覆盖为 3。导致出现偶现性问题。
后期排查问题,如发现是短时间内的未知操作要考虑操作并行混乱改值的问题。
17:38:46 通用运维回传
17:39:00 接收归档 14s 归档
17:39:08 通用运维回传结束时间 22s
@@ -0,0 +1,33 @@
编号:001-20230630001 类型:域名配置需求企业名称:深圳华为云计算技术有限公司(企业来源:ESOPCPID83570350
![](../../../../attachment/images-uuid/7a5ac5206ca94f9195436f5257c58ff2.png)
```shell
curl http://117.136.191.91:7790/CDNISMS/QueryBeian?dns=kulumaoyi44.cn
curl http://117.136.191.91:7790/CDNISMS/QueryBeian?dns=cjbhw.kulumaoyi44.cn
```
select *
from batch_self_domain where batch_id = '001-20230630001';
![](../../../../attachment/images-uuid/bb7f0e2335ab4f9ead7efbac0a01ce2a.png)
![](../../../../attachment/images-uuid/0a0899ff6b534b038f94d6a27ce5eaf2.png)
那这儿直接 false
![](../../../../attachment/images-uuid/bcf3c33396f34306b29be82437e3b892.png)
直接结束执行了。然后同逻辑。
![](../../../../attachment/images-uuid/31a070561905481cb5ac71e8db653d51.png)
这个里边才是改上传成功未 true 的地方。所以没走。还是那个默认的 false
而这个域名就是报错的子线程。
2023-06-30 at 15:14:28 CST [SimpleAsyncTaskExecutor-410962] INFO com.cmcc.cdn.platform.selfservice.service.impl.DomainICPServiceImpl 321 sendRequest - 备案号查询请求,url:http://117.136.191.91:7790/CDNISMS/QueryBeian?dns=cjbhw.kulumaoyi44.cn
![](../../../../attachment/images-uuid/347f718043284507872118c38cb194a7.png)
![](../../../../attachment/images-uuid/7966db3ce8794996a1889bb46c926427.png)
@@ -0,0 +1,37 @@
![](../../../../attachment/images-uuid/36e8ed84d91c4be4ad6af0f48ad9a4e6.jpg)
![](../../../../attachment/images-uuid/8baa9723c0a94e0a8401f3727d94a8ee.jpg)
![](../../../../attachment/images-uuid/ddb076e5d0d845499cfb77d1db18c6f4.png)
各位好,华为新主体(深圳华为云计算技术有限公司)主体已更换,后续请华为侧更换鉴权信息,通过新主体和新订购进行数据和域名对应关系的反查。
华为云主体信息:
id:ilk0n3t9-
pigohlpyl7ck36zz;key:rMRWfFUmoluPJppp
新订购:
三网点播 60000016129
网内点播 60000016110
网内直播 60000016128
![](../../../../attachment/images-uuid/0efe56a8bf714f66a66ef53e2d97eb4e.png)
@罗龙刚 - 大数据开发 2023-06-30 at 15:46:02 CST INFO
com.cmcc.cdn.platform.transfer.service.impl.IBSServiceImpl 483 queryProductIdFlowResult - 请求参数,url:
http://10.26.1.32:8081/statistic/bss/mul/flow
{"dimensions":["time","flowType"],"distributionPlanes":["1"],"endTime":"2023-06-20T13:00:59+08:00","flowTypes":["all"],"prodMapToEcProv":{"60000016128":"000"},"productIds":["60000016128"],"provinces":["all"],"sources":["1"],"startTime":"2023-06-20T12:00:00+08:00"}
华为反向查询接口
辛苦看下这个接口返回的数据为啥都是 0.0
这个是昨晚刚刚割接的华为新主体下的订购,20 号的是没数据的
![](../../../../attachment/images-uuid/67edeb5ba8124e7a9cb2b4e1bec1cafc.png)
接口,请求参数
```java
com.cmcc.cdn.platform.selfservice.controller.ProductIdChargeInfoController#productIdChargeInfoQuery
https://p.cdn.10086.cn/action?commandType=productIdChargeInfoQuery&version=1&start=2023-06-30T01:00:00%2B08:00&end=2023-06-30T02:00:59%2B08:00&province_agg=1&product_id_agg=1&product_ids=60000016128
```
@@ -0,0 +1,27 @@
## 问题描述
cache+ 域名配置工单上传域名不合法,但是客户下载信安附件显示是合法的。
1、客户创建域名工单是不对的。
2、客户随后走了域名配置记录工单。
3、客户页面下载显示正常。
工单入口
/configManage/update/config
com.cmcc.cdn.platform.selfservice.controller.ConfigManageController#update(javax.servlet.http.HttpServletRequest, javax.servlet.http.HttpServletResponse, java.lang.Boolean, com.cmcc.cdn.platform.selfservice.pojo.SelfServiceDomainConfigVO, org.springframework.validation.BindingResult)
域名配置记录工单处理信安的位置
com.cmcc.cdn.platform.selfservice.service.impl.ConfigManageServiceImpl#updateConfig
同步信安位置
com.cmcc.cdn.platform.selfservice.service.impl.BigCloudBasicInfoServiceImpl#updateInformationDomainInfo
这个位置会从域名表取 icp 的备案号,需要确认下域名表的 icp 备案号哪里来的
为什么有的有信安信息,有的没有。
@@ -0,0 +1,69 @@
![](../../../../attachment/images-uuid/306b546968a3475dad50f9a38173cf73.png)
fcservice\='cdn-portal' and message like '%http-nio-8080-exec-2666%'
2023-07-17 12:05:28
2023-07-17 12:05:40
```json
{
"data":[
{
"host_name":"39.134.108.182",
"node_name":"云南节点3-网站/视频",
"result_text":"请求已发送,未响应"
},
{
"host_name":"117.136.194.99",
"node_name":"北京回源收敛-01(BJ-02)",
"result_text":"请求失败"
},
{
"host_name":"117.136.194.96",
"node_name":"北京回源收敛-01(BJ-02)",
"result_text":"请求失败"
},
{
"host_name":"117.136.194.97",
"node_name":"北京回源收敛-01(BJ-02)",
"result_text":"请求失败"
},
{
"host_name":"117.136.194.100",
"node_name":"北京回源收敛-01(BJ-02)",
"result_text":"请求失败"
},
{
"host_name":"117.136.194.101",
"node_name":"北京回源收敛-01(BJ-02)",
"result_text":"请求失败"
},
{
"host_name":"117.136.194.95",
"node_name":"北京回源收敛-01(BJ-02)",
"result_text":"请求失败"
}
],
"error_code":0,
"error_msg":"success",
"index":1,
"page_num":1,
"page_size":10,
"task_id":"ad968341cd2347abbae27cf43f80ad88",
"total_num":7,
"url":"https://res.coc.10086.cn/res/cdn/coc1-online/fixedPath/coc1/asiad/"
}
```
![](../../../../attachment/images-uuid/4b3ee47a3f7f4623bcd08dd08469c2df.png)
![](../../../../attachment/images-uuid/560c50d6f48747cb9f2ebd5d6149e4d5.png)
![](../../../../attachment/images-uuid/79f01fc6ad4949fc8f7399825e512411.png)
![](../../../../attachment/images-uuid/4febf94e066c4884a87029d5f1a72667.png)
![](../../../../attachment/images-uuid/5cb15e2aee6249b297433463fbcbee56.png)
@@ -0,0 +1,110 @@
```text
mzj.fuxin.gov.cn
nyncj.fushun.gov.cn
www.dlrtvu.edu.cn
czj.dl.gov.cn
gxj.fuxin.gov.cn
slj.fuxin.gov.cn
yjgl.fuxin.gov.cn
fpb.fuxin.gov.cn
czj.fuxin.gov.cn
zjj.fuxin.gov.cn
sthj.fuxin.gov.cn
whly.fuxin.gov.cn
sjj.fuxin.gov.cn
wsjsw.dandong.gov.cn
gjj.yingkou.gov.cn
fushun.gov.cn
ykbyqfy.chinacourt.org
www.yingkou.jcy.gov.cn
www.kjj.dl.gov.cn
zx.yingkou.gov.cn
fssi.fushun.gov.cn
www.tiexi.gov.cn
wjw.anshan.gov.cn
www.cysyc.com
wlgdj.liaoyang.gov.cn
kjj.shenyang.gov.cn
sthjj.shenyang.gov.cn
jw.shenyang.gov.cn
tjj.shenyang.gov.cn
sfj.shenyang.gov.cn
czj.shenyang.gov.cn
rfb.shenyang.gov.cn
cyzy.chinacourt.org
ftz.shenyang.gov.cn
gxj.hld.gov.cn
yjj.shenyang.gov.cn
sthj.hld.gov.cn
www.jpxww.com
xfj.jz.gov.cn
www.bxmhw.com
wlgdj.jz.gov.cn
fgw.anshan.gov.cn
gxj.anshan.gov.cn
credit.anshan.gov.cn
kjj.jz.gov.cn
sfj.jz.gov.cn
gzw.anshan.gov.cn
```
背景 21 年前的工单,目前无法查看入库日志。
客响反馈 47 个域名(引入时间 2021 年前)在域名列表显示非法。
其中 12 个未查询到备案信息。
35 个确认备案信息正常,与我们信安库(big_cloud_information_domain)中一致。
运维执行结果
![](../../../../attachment/images-uuid/2b04f3c3c19845c2a44d656be8315217.png)
26 日中午后发现客户修改部分域名
![](../../../../attachment/images-uuid/235f27bcf0404d7cac5514ed9aa4e8d4.jpg)
```sql
-- 域名表
select domain, legal,created_time,state
from self_service_domain_config
where domain in ('mzj.fuxin.gov.cn', 'nyncj.fushun.gov.cn', 'www.dlrtvu.edu.cn', 'czj.dl.gov.cn', 'gxj.fuxin.gov.cn',
'slj.fuxin.gov.cn', 'yjgl.fuxin.gov.cn', 'fpb.fuxin.gov.cn', 'czj.fuxin.gov.cn', 'zjj.fuxin.gov.cn',
'sthj.fuxin.gov.cn', 'whly.fuxin.gov.cn', 'sjj.fuxin.gov.cn', 'wsjsw.dandong.gov.cn',
'gjj.yingkou.gov.cn', 'fushun.gov.cn', 'ykbyqfy.chinacourt.org', 'www.yingkou.jcy.gov.cn',
'www.kjj.dl.gov.cn', 'zx.yingkou.gov.cn', 'fssi.fushun.gov.cn', 'www.tiexi.gov.cn',
'wjw.anshan.gov.cn', 'www.cysyc.com', 'wlgdj.liaoyang.gov.cn', 'kjj.shenyang.gov.cn',
'sthjj.shenyang.gov.cn', 'jw.shenyang.gov.cn', 'tjj.shenyang.gov.cn', 'sfj.shenyang.gov.cn',
'czj.shenyang.gov.cn', 'rfb.shenyang.gov.cn', 'cyzy.chinacourt.org', 'ftz.shenyang.gov.cn',
'gxj.hld.gov.cn', 'yjj.shenyang.gov.cn', 'sthj.hld.gov.cn', 'www.jpxww.com', 'xfj.jz.gov.cn',
'www.bxmhw.com', 'wlgdj.jz.gov.cn', 'fgw.anshan.gov.cn', 'gxj.anshan.gov.cn', 'credit.anshan.gov.cn',
'kjj.jz.gov.cn', 'sfj.jz.gov.cn', 'gzw.anshan.gov.cn')
and legal = false order by created_time;
-- 删除记录表
select *
from domain_delete_record where domain in ('mzj.fuxin.gov.cn', 'nyncj.fushun.gov.cn', 'www.dlrtvu.edu.cn', 'czj.dl.gov.cn', 'gxj.fuxin.gov.cn',
'slj.fuxin.gov.cn', 'yjgl.fuxin.gov.cn', 'fpb.fuxin.gov.cn', 'czj.fuxin.gov.cn', 'zjj.fuxin.gov.cn',
'sthj.fuxin.gov.cn', 'whly.fuxin.gov.cn', 'sjj.fuxin.gov.cn', 'wsjsw.dandong.gov.cn',
'gjj.yingkou.gov.cn', 'fushun.gov.cn', 'ykbyqfy.chinacourt.org', 'www.yingkou.jcy.gov.cn',
'www.kjj.dl.gov.cn', 'zx.yingkou.gov.cn', 'fssi.fushun.gov.cn', 'www.tiexi.gov.cn',
'wjw.anshan.gov.cn', 'www.cysyc.com', 'wlgdj.liaoyang.gov.cn', 'kjj.shenyang.gov.cn',
'sthjj.shenyang.gov.cn', 'jw.shenyang.gov.cn', 'tjj.shenyang.gov.cn', 'sfj.shenyang.gov.cn',
'czj.shenyang.gov.cn', 'rfb.shenyang.gov.cn', 'cyzy.chinacourt.org', 'ftz.shenyang.gov.cn',
'gxj.hld.gov.cn', 'yjj.shenyang.gov.cn', 'sthj.hld.gov.cn', 'www.jpxww.com', 'xfj.jz.gov.cn',
'www.bxmhw.com', 'wlgdj.jz.gov.cn', 'fgw.anshan.gov.cn', 'gxj.anshan.gov.cn', 'credit.anshan.gov.cn',
'kjj.jz.gov.cn', 'sfj.jz.gov.cn', 'gzw.anshan.gov.cn');
-- 信安表
select domain,reg_id,updated_time
from big_cloud_information_domain
where domain in ('mzj.fuxin.gov.cn', 'nyncj.fushun.gov.cn', 'www.dlrtvu.edu.cn', 'czj.dl.gov.cn', 'gxj.fuxin.gov.cn',
'slj.fuxin.gov.cn', 'yjgl.fuxin.gov.cn', 'fpb.fuxin.gov.cn', 'czj.fuxin.gov.cn', 'zjj.fuxin.gov.cn',
'sthj.fuxin.gov.cn', 'whly.fuxin.gov.cn', 'sjj.fuxin.gov.cn', 'wsjsw.dandong.gov.cn',
'gjj.yingkou.gov.cn', 'fushun.gov.cn', 'ykbyqfy.chinacourt.org', 'www.yingkou.jcy.gov.cn',
'www.kjj.dl.gov.cn', 'zx.yingkou.gov.cn', 'fssi.fushun.gov.cn', 'www.tiexi.gov.cn',
'wjw.anshan.gov.cn', 'www.cysyc.com', 'wlgdj.liaoyang.gov.cn', 'kjj.shenyang.gov.cn',
'sthjj.shenyang.gov.cn', 'jw.shenyang.gov.cn', 'tjj.shenyang.gov.cn', 'sfj.shenyang.gov.cn',
'czj.shenyang.gov.cn', 'rfb.shenyang.gov.cn', 'cyzy.chinacourt.org', 'ftz.shenyang.gov.cn',
'gxj.hld.gov.cn', 'yjj.shenyang.gov.cn', 'sthj.hld.gov.cn', 'www.jpxww.com', 'xfj.jz.gov.cn',
'www.bxmhw.com', 'wlgdj.jz.gov.cn', 'fgw.anshan.gov.cn', 'gxj.anshan.gov.cn', 'credit.anshan.gov.cn',
'kjj.jz.gov.cn', 'sfj.jz.gov.cn', 'gzw.anshan.gov.cn');
```
@@ -0,0 +1,25 @@
![](../../../../attachment/images-uuid/27fa53042eb44762a6431f04b0c727e0.png)
客户 100 个域名补录,未捕捉到异常信息。
提示客户单次 70 个域名。
![](../../../../attachment/images-uuid/a5478b044e0f47ab945e6300e9f5e53c.png)
www.educgo.com
![](../../../../attachment/images-uuid/85f37b83f8094fd1936ba704f97410ec.png)
为信安接口信息解析异常,但是未查询到补录工单的异常。
```json
{
"_status":"ERR",
"_error":{
"message":"The server could not verify that you are authorized to access the URL requested. You either supplied the wrong credentials (e.g. a bad password), or your browser doesn't understand how to supply the credentials required.",
"code":401
}
}
```
提示客户重试,并重新采集问题触发时间。
@@ -0,0 +1,27 @@
005-20230719001cache+ 需求变更工单)
BPM 单号:046-202307190034
flvtsgpullmgsplive.miguvideo.com
flvtsgpullmgvrlive.miguvideo.com
flvpugctsgpull.miguvideo.com
testflvpugctsgpull.miguvideo.com
rtmppugctsgpull.miguvideo.com
testrtmppugctsgpull.miguvideo.com
004-20230602005cache+ 域名配置)
BPM 单号:046-202306020011
flvlive.aikan.miguvideo.com
ibs 工单号:005-20230720001 对应 bpm 工单号: 046-202307200003
问题单号虚确认是否是一个:bpm 046021-202307200003
问题已由 BPM 处理
@@ -0,0 +1,92 @@
# 0804- 信安问题
# 问题背景
你好,麻烦看下这个归属问题,找集团那边问过了,
这个不是归属我们江苏的,是归属集团名下的,麻烦看下 ibs 同步信安数据的时候,是不是有字段问题啊,老归属到江苏这边来,
2 号的时候归属到集团那边了,3 号发的信安巡检表,又归属到江苏来了
![](../../../../attachment/images-uuid/02d93ce6615640d0b18e8363fd0b36cc.png)
![](../../../../attachment/images-uuid/25d2865d58b147519e11f39fe3e86e39.png)
# 重要信息
咪咕视讯科技有限公司
![](../../../../attachment/images-uuid/9cea6bb615724d4987dfd6d741f667c2.png)
![](../../../../attachment/images-uuid/81c5ee919237497c9d6a2955b387668e.png)
![](../../../../attachment/images-uuid/5ff02adbc7b1415ab26f25cb4957881f.png)
![](../../../../attachment/images-uuid/b01c3436856a4597a37672438218e8b1.png)
![](../../../../attachment/images-uuid/1836b13a680c48e28781474a04a87b60.png)
![](../../../../attachment/images-uuid/8481d103a89b40b7a055dc58e8e5d710.jpg)
![](../../../../attachment/images-uuid/069fae7d0f864fc3abe634f2f4aa6c9e.png)
故障描述:江苏运营人员反应这批域名存在归属问题,经过和集团核对,域名应归属集团。但在信安系统中显示为江苏省。信安系统侧反馈为 ibs 同步信息。
影响范围:江苏企业收到信安系统部分域名异常提示。
经排查,
存在集团侧 cache+ 企业 - 咪咕视讯 -80007940
存在江苏侧 esop 企业 - 咪咕互娱娱乐有限公司 -81084680
1、江苏 esop 企业在 001-20230803001 域名配置需求工单。其信安同步附件公司名称为“咪咕视讯科技有限公司”。(2023-08-03 07:25:56
同步信安日志
3、集团 cache+ 企业存在 004-20230803002 cache+ 域名配置工单。其信安同步附件公司名称为“咪咕视讯科技有限公司”。(2023-08-03 06:40:54
3、对应信安同步记录
4、当信安同步时目前 ibs 侧逻辑为:
com.cmcc.cdn.platform.selfservice.service.impl.PortalInformationServiceImplcreateOrUpdateInfo 通过 uintname(信安附件企业名称)在 information\_user 企业信安表中进行查询。如果存在并且不是删除标记则进行企业信安信息修改同步更新。此时,两企业信安表中名称同为“咪咕视讯科技有限公司”。系统认为是更新操作,每次修改变更为当前提单企业所属省份。com.cmcc.cdn.platform.selfservice.service.impl.PortalInformationServiceImplupdateUserInfo
问题:
江苏运营人员反馈域名存在归属问题,经过和集团核对,域名应归属集团。
存在集团 -cache+ 企业 - 咪咕视讯 -80007940
存在江苏 -esop 企业 - 咪咕互娱娱乐有限公司 -81084680
两企业在同步信安时信安附件名称均为“咪咕视讯科技有限公司”
临时解决办法:
1、提示江苏侧新增域名的信安附件中企业名称应和 Ibs 注册企业名称保持一致,使后续提单域名不互相影响
2、通知被通报域名归属方修改信安信息,解决通报问题。
最终解决办法:
需产品采集背景后,是否增加企业名称一致性校验需求,排期修复。
集团 -cache+ 企业 - 咪咕视讯 -80007940
江苏 -esop 企业 - 咪咕互娱娱乐有限公司 -81084680
1、提示江苏侧新增域名的信安附件中企业名称应和 Ibs 注册企业名称保持一致。
2、通知被通报域名归属放修改信安信息,解决通报问题。
3、产品后续版本采集背景后,增加企业名称一致性校验需求。
# 问题复现
## 两个类型工单。
这个是浙江省运营经理先走 cache+ 的。
![](../../../../attachment/images-uuid/792cbe85d2a44f52a5acfed866cd80fa.png)
![](../../../../attachment/images-uuid/bc6bb3e86b2449858a79f7d3e587bc48.png)
这个是北京的政企客户经理用相同名称“测试省份覆盖问题”的信安表走工单
![](../../../../attachment/images-uuid/90381d29c1bc469d99f83677fa8bf514.png)
![](../../../../attachment/images-uuid/1e56dcc5a1c543a9b07eefe8228fb94d.png)
信安表
![](../../../../attachment/images-uuid/3f943ed0165640589004bbf1875f438c.png)
## 同种工单
@@ -0,0 +1,11 @@
![](../../../../attachment/images-uuid/f25260ddb202478eb4c675268979775e.png)
com.cmcc.cdn.platform.selfservice.manager.EnterpriseInfoManager#queryEnterpriseInfoByDomain
信安补录工单
![](../../../../attachment/images-uuid/3a5f7c2930dd4f72a66e4cd50652d4c5.png)
![](../../../../attachment/images-uuid/bfb84a6a9e3c457c8038957b5bfc8310.png)
![](../../../../attachment/images-uuid/1dbf0bac9b064855b2de8a192769e7be.png)
@@ -0,0 +1,5 @@
有正在流程中的工单
002-20230530001
bpm 线下关单
@@ -0,0 +1,252 @@
```json
{
"add_domain_info_list":[
{
"deleted":false,
"distribute_prov":[
"10000"
],
"domain":"pugctsgpush.miguvideo.com",
"domain_id_cdnsys":"gWqBHZDGT_PtnFlV",
"reg_id":"沪ICP备15019882号-4",
"source_list":[
"pugctsgpush.miguvideo.com"
],
"top_domain":"com",
"user_id_cdn":"gWqBHZDGT"
},
{
"deleted":false,
"distribute_prov":[
"10000"
],
"domain":"rtmppugctsgpull.miguvideo.com",
"domain_id_cdnsys":"gWqBHZDGT_WWCcaT",
"reg_id":"沪ICP备15019882号-5",
"source_list":[
"rtmppugctsgpull.miguvideo.com"
],
"top_domain":"com",
"user_id_cdn":"gWqBHZDGT"
},
{
"deleted":false,
"distribute_prov":[
"10000"
],
"domain":"flvpugctsgpull.miguvideo.com",
"domain_id_cdnsys":"gWqBHZDGT_nkMSHS",
"reg_id":"沪ICP备15019882号-6",
"source_list":[
"flvpugctsgpull.miguvideo.com"
],
"top_domain":"com",
"user_id_cdn":"gWqBHZDGT"
},
{
"deleted":false,
"distribute_prov":[
"10000"
],
"domain":"testpugctsgpush.miguvideo.com",
"domain_id_cdnsys":"gWqBHZDGT_kbYXaj",
"reg_id":"沪ICP备15019882号-7",
"source_list":[
"testpugctsgpush.miguvideo.com"
],
"top_domain":"com",
"user_id_cdn":"gWqBHZDGT"
},
{
"deleted":false,
"distribute_prov":[
"10000"
],
"domain":"testrtmppugctsgpull.miguvideo.com",
"domain_id_cdnsys":"gWqBHZDGT_PWFuKN",
"reg_id":"沪ICP备15019882号-8",
"source_list":[
"testrtmppugctsgpull.miguvideo.com"
],
"top_domain":"com",
"user_id_cdn":"gWqBHZDGT"
},
{
"deleted":false,
"distribute_prov":[
"10000"
],
"domain":"testflvpugctsgpull.miguvideo.com",
"domain_id_cdnsys":"gWqBHZDGT_aoArRn",
"reg_id":"沪ICP备15019882号-9",
"source_list":[
"testflvpugctsgpull.miguvideo.com"
],
"top_domain":"com",
"user_id_cdn":"gWqBHZDGT"
},
{
"deleted":false,
"distribute_prov":[
"10000"
],
"domain":"pugcdelivtsgpush1.miguvideo.com",
"domain_id_cdnsys":"gWqBHZDGT_ZnklTA",
"reg_id":"沪ICP备15019882号-10",
"source_list":[
"pugcdelivtsgpush1.miguvideo.com"
],
"top_domain":"com",
"user_id_cdn":"gWqBHZDGT"
},
{
"deleted":false,
"distribute_prov":[
"10000"
],
"domain":"pugcdelivtsgpush2.miguvideo.com",
"domain_id_cdnsys":"gWqBHZDGT_fttJxm",
"reg_id":"沪ICP备15019882号-11",
"source_list":[
"pugcdelivtsgpush2.miguvideo.com"
],
"top_domain":"com",
"user_id_cdn":"gWqBHZDGT"
},
{
"deleted":false,
"distribute_prov":[
"10000"
],
"domain":"rtmppugcdelivtsgpull.miguvideo.com",
"domain_id_cdnsys":"gWqBHZDGT_GKDMEy",
"reg_id":"沪ICP备15019882号-12",
"source_list":[
"rtmppugcdelivtsgpull.miguvideo.com"
],
"top_domain":"com",
"user_id_cdn":"gWqBHZDGT"
},
{
"deleted":false,
"distribute_prov":[
"10000"
],
"domain":"flvpugcdelivtsgpullmgsplive.miguvideo.com",
"domain_id_cdnsys":"gWqBHZDGT_YmCcHO",
"reg_id":"沪ICP备15019882号-4",
"source_list":[
"flvpugcdelivtsgpullmgsplive.miguvideo.com"
],
"top_domain":"com",
"user_id_cdn":"gWqBHZDGT"
},
{
"deleted":false,
"distribute_prov":[
"10000"
],
"domain":"testpugcdelivtsgpush1.miguvideo.com",
"domain_id_cdnsys":"gWqBHZDGT_WmoweL",
"reg_id":"沪ICP备15019882号-5",
"source_list":[
"testpugcdelivtsgpush1.miguvideo.com"
],
"top_domain":"com",
"user_id_cdn":"gWqBHZDGT"
},
{
"deleted":false,
"distribute_prov":[
"10000"
],
"domain":"testpugcdelivtsgpush2.miguvideo.com",
"domain_id_cdnsys":"gWqBHZDGT_kDNAGu",
"reg_id":"沪ICP备15019882号-6",
"source_list":[
"testpugcdelivtsgpush2.miguvideo.com"
],
"top_domain":"com",
"user_id_cdn":"gWqBHZDGT"
},
{
"deleted":false,
"distribute_prov":[
"10000"
],
"domain":"testrtmppugcdelivtsgpull.miguvideo.com",
"domain_id_cdnsys":"gWqBHZDGT_semJiN",
"reg_id":"沪ICP备15019882号-7",
"source_list":[
"testrtmppugcdelivtsgpull.miguvideo.com"
],
"top_domain":"com",
"user_id_cdn":"gWqBHZDGT"
},
{
"deleted":false,
"distribute_prov":[
"10000"
],
"domain":"testflvpugcdelivtsgpull.miguvideo.com",
"domain_id_cdnsys":"gWqBHZDGT_eXqVCf",
"reg_id":"沪ICP备15019882号-8",
"source_list":[
"testflvpugcdelivtsgpull.miguvideo.com"
],
"top_domain":"com",
"user_id_cdn":"gWqBHZDGT"
},
{
"deleted":false,
"distribute_prov":[
"10000"
],
"domain":"rtctsgpush1.miguvideo.com",
"domain_id_cdnsys":"gWqBHZDGT_elQNly",
"reg_id":"沪ICP备15019882号-9",
"source_list":[
"rtctsgpush1.miguvideo.com"
],
"top_domain":"com",
"user_id_cdn":"gWqBHZDGT"
},
{
"deleted":false,
"distribute_prov":[
"10000"
],
"domain":"rtctsgpush2.miguvideo.com",
"domain_id_cdnsys":"gWqBHZDGT_BcoRYq",
"reg_id":"沪ICP备15019882号-10",
"source_list":[
"rtctsgpush2.miguvideo.com"
],
"top_domain":"com",
"user_id_cdn":"gWqBHZDGT"
},
{
"deleted":false,
"distribute_prov":[
"10000"
],
"domain":"flvtsgpullmgvrlive.miguvideo.com",
"domain_id_cdnsys":"gWqBHZDGT_XTKkvz",
"reg_id":"沪ICP备15019882号-11",
"source_list":[
"flvtsgpullmgvrlive.miguvideo.com"
],
"top_domain":"com",
"user_id_cdn":"gWqBHZDGT"
}
]
}
```
com.cmcc.cdn.platform.selfservice.order.WorkOrderServiceImpl#decision
com.cmcc.cdn.platform.selfservice.statemachine.CacheWorkOrderHandler#itConfig
![](../../../../attachment/images-uuid/3c633a39118c4cd8bd6220a4c2f9dd83.png)
com.cmcc.cdn.platform.selfservice.statemachine.CacheWorkOrderHandler#setDomainDeployFailed
@@ -0,0 +1,54 @@
```json
{
"accessToken":"20230831100001348acb8b13c24ca499f677cf35ad2cd8-0019-1690855201",
"busType":"BBSS",
"content":{
"BackFlag":"0",
"BusiInfo":"551A230804929572001_50004010084_20230810164031.xlsx",
"BusinessLimit":"1",
"CustManager":"徐培",
"CustManagerNumber":"13956574726",
"ECContact":"徐培",
"ECID":"551A5516307650",
"ECMail":"13956574726@139.com",
"ECName":"宣城市蓝天学校",
"ECNumber":"13956574726",
"Income":"1",
"InfoSecurity":"551A230804929572001_50004010081_20230810164031.doc",
"InfoSecurityTable":"551A230804929572001_50004010083_20230810164031.xlsx",
"OrderNum":"551A230804929572001",
"ProdType":"2",
"ProductID":"65510073499",
"ProvID":"551",
"Summit":"1",
"TestContent":[
{
"DevReq":"www.xclt.com",
"TestType":"1"
}
],
"TestDuration":"10",
"TimeLength":"12"
},
"cutOffDay":"20230810",
"domain":"CDNP",
"envFlag":"1",
"routeType":"00",
"routeValue":"995",
"sessionID":"74b24a1801584ce3b2365c8945c1b0d5",
"sign":"54AB94CCCBC4519165F54C8D71193408",
"signMethod":"md5",
"timeStamp":"20230810164031",
"transIDO":"74b24a1801584ce3b2365c8945c1b0d5",
"userPartyID":"BBSS9980",
"version":"1.0.0"
}
```
com.cmcc.cdn.platform.selfservice.service.impl.BssEnterpriseServiceImpl#updateCompanyInfo
```java
//增加空指针校验
if (!StringUtils.isEmpty(email)
|| (!ObjectUtils.isEmpty(user) && user.getEmail().equals(email))) {
```
@@ -0,0 +1,7 @@
配置项预留
com.cmcc.cdn.platform.selfservice.quartz.jobs.DomainIcpCheckJob#execute
定时任务位置
![](../../../../attachment/images-uuid/03c26f27d1f84cabac473539379d0f99.png)
@@ -0,0 +1,33 @@
工单 005-20230705002 无法打开
![](../../../../attachment/images-uuid/2fcd709ae96c47599be04727eedea9cd.png)
复现查询逻辑报错
有脏数据
![](../../../../attachment/images-uuid/7ed4a629aa2a4cd497376360a88074dc.png)
导致脏数据的位置
![](../../../../attachment/images-uuid/2ae33f6fba1d45ad87c64be608e1ddda.png)
相关 sql,删除中间表
```sql
SELECT api.*
from order_plain_info api
LEFT JOIN adapt_work_order_domain_plain_info awodpi
ON api.id = awodpi.order_plain_info_id
LEFT JOIN adapt_work_order_domain_info awodi
ON awodpi.adapt_work_order_domain_info_id = awodi.id
where awodi.domain = 'live.hcs.cmvideo.cn'
AND awodi.config_change_work_order_id = 517
AND api.plain = 0;
delete
from adapt_work_order_domain_plain_info
where adapt_work_order_domain_info_id = 245;
```
com.cmcc.cdn.platform.selfservice.service.impl.AdaptWorkOrderServiceImpl#saveAdaptWorkOrderDomainInfo
@@ -0,0 +1,36 @@
cache+ 第三方互联网业务 共计 512
其中 集团 5
优刻得科技股份有限公司 迂姗姗 -22- 集团运营经理
上海蓝云网络科技有限公司 迂姗姗
中国电信股份有限公司上海企业信息化运营中心 迂姗姗
三网域名测试企业 迂姗姗
央视测试 1 谭茁 -22- 集团运营经理
(0, " 中国移动自有业务 ")
(1, " 第三方互联网业务 ")
(2, " 省内自有业务 ")
省的更改为中国移动自有业务或者省内自有业务后企业客户可提单
集团更改为中国移动自有业务或者省内自有业务后企业客户可提单。
企业信息如果是省的,会不会有集团运营经理。
```sql
select ei.enterprise_name, ei.enter_province,ei.enterprise_type, u.name, r.name
from enterprise_info ei
left join enterprise_manager_table emt on ei.id = emt.enterprise_info_id
left join user u on emt.user_id = u.id
left join role r on u.role_id = r.id
where ei.source = 'WEB'
and ei.enter_province != '集团'
order by r.name desc ;
```
@@ -0,0 +1,64 @@
2023-10-08 03:21:30 [ibs-portal:sh-lgcmcc06.shlg.cmcdn.net:8080,,,,] [http-nio-8080-exec-21331] INFO com.cmcc.cdn.platform.selfservice.service.impl.BigCloudBasicInfoServiceImpl 973 lambda$repeatXinan$0 -
【请求信安接口】param:{"add_domain_info_list":[{"distribute_prov":["10000"],"domain":"hlsdmzymgsplive.miguvideo.com","domain_id_cdnsys":"gWqBHZDGT_hViVOe","introduce_prov":"000","reg_id":" 沪 ICP 备 15019882 号 -4","source_list":["bk.live.harvest.miguvideo.com"],"top_domain":"com","user_id_cdn":"gWqBHZDGT"},{"distribute_prov":["10000"],"domain":"hlsztemgsplive.a208.ottcn.com","domain_id_cdnsys":"UtUIDrwCG_frpPYk","introduce_prov":"000","reg_id":" 津 ICP 备 12004891 号 -2","source_list":["cache.4th.live.cmvideo.cn"],"top_domain":"com","user_id_cdn":"UtUIDrwCG"},{"distribute_prov":["10000"],"domain":"hlszymgsplive.a208.ottcn.com","domain_id_cdnsys":"UtUIDrwCG_vjfmRw","introduce_prov":"000","reg_id":" 津 ICP 备 12004891 号 -2","source_list":["cache.4th.live.cmvideo.cn"],"top_domain":"com","user_id_cdn":"UtUIDrwCG"}]},
返回结果:{resp=
{"sync_success_num": 0, "code": 1009, "chk_fail_dict_l": [
{"code": 1008, "domain": "hlsdmzymgsplive.miguvideo.com", "domain_id_cdnsys": "gWqBHZDGT_hViVOe"},
{"code": 1008, "domain": "hlsztemgsplive.a208.ottcn.com", "domain_id_cdnsys": "UtUIDrwCG_frpPYk"},
{"code": 1008, "domain": "hlszymgsplive.a208.ottcn.com", "domain_id_cdnsys": "UtUIDrwCG_vjfmRw"}]},
status=200}
hlsztetrialmgsplive.a208.ottcn.com
hlszytrialmgsplive.a208.ottcn.com
hlsztetrialmgsplive.miguvideo.com
hlszytrialmgsplive.miguvideo.com
【请求信安接口】param:
{"add_domain_info_list":[{"distribute_prov":["10000"],"domain":"hlsdmzymgsplive.miguvideo.com","domain_id_cdnsys":"gWqBHZDGT_zGfbKE","introduce_prov":"000","reg_id":" 沪 ICP 备 15019882 号 -4","source_list":["bk.live.harvest.miguvideo.com"],"top_domain":"com","user_id_cdn":"gWqBHZDGT"},{"distribute_prov":["10000"],"domain":"hlsztemgsplive.a208.ottcn.com","domain_id_cdnsys":"UtUIDrwCG_kbitoU","introduce_prov":"000","reg_id":" 津 ICP 备 12004891 号 -2","source_list":["cache.4th.live.cmvideo.cn"],"top_domain":"com","user_id_cdn":"UtUIDrwCG"},{"distribute_prov":["10000"],"domain":"hlszymgsplive.a208.ottcn.com","domain_id_cdnsys":"UtUIDrwCG_ZWYsBJ","introduce_prov":"000","reg_id":" 津 ICP 备 12004891 号 -2","source_list":["cache.4th.live.cmvideo.cn"],"top_domain":"com","user_id_cdn":"UtUIDrwCG"}]}
,
返回结果:{resp={"sync_success_num": 0, "code": 1009, "chk_fail_dict_l": [{"code": 1008, "domain": "hlsdmzymgsplive.miguvideo.com", "domain_id_cdnsys": "gWqBHZDGT_zGfbKE"}, {"code": 1008, "domain": "hlsztemgsplive.a208.ottcn.com", "domain_id_cdnsys": "UtUIDrwCG_kbitoU"}, {"code": 1008, "domain": "hlszymgsplive.a208.ottcn.com", "domain_id_cdnsys": "UtUIDrwCG_ZWYsBJ"}]}, status=200}
UtUIDrwCG_JtsSWn
gWqBHZDGT_OByNVW hlsdmzymgsplive.miguvideo.com
UtUIDrwCG_JtsSWn hlsztemgsplive.a208.ottcn.com
UtUIDrwCG_dYBoWK hlszymgsplive.a208.ottcn.com
gWqBHZDGT_OByNVW hlsdmzymgsplive.miguvideo.com
UtUIDrwCG_JtsSWn hlsztemgsplive.a208.ottcn.com
UtUIDrwCG_dYBoWK hlszymgsplive.a208.ottcn.com
2023-05-26 17:37 A 工单手动关单 未同步删除信安
2023-10-08 11:21 B 新工单创单失败 信安重复
2023-10-08 11:38 B 工单关单信安删除
2023-10-08 11:40 A 重提
2023-10-08 03:39:28 信安成功
2023-10-08 03:39:41 bpm 失败
2023-10-08 03:40:18 信安重复
2023-10-10 10:14 C 工单提 信安重复
gWqBHZDGT_uKVUzM hlsztetrialmgsplive.miguvideo.com
gWqBHZDGT_cHLWJi hlszytrialmgsplive.miguvideo.com
UtUIDrwCG_aBqwdK hlsztetrialmgsplive.a208.ottcn.com
UtUIDrwCG_Jdiuwb hlszytrialmgsplive.a208.ottcn.com
同步信安信息失败
hlsdmzymgsplive.miguvideo.com : 同一个用户信息下域名不能重复
hlsztemgsplive.a208.ottcn.com : 同一个用户信息下域名不能重复
hlszymgsplive.a208.ottcn.com : 同一个用户信息下域名不能重复
hlsztetrialmgsplive.a208.ottcn.com
hlszytrialmgsplive.a208.ottcn.com
hlsztetrialmgsplive.miguvideo.com
hlszytrialmgsplive.miguvideo.com
@@ -0,0 +1,9 @@
![](../../../../attachment/images-uuid/ab091f6198e5438fb218ffbb3843bc30.png)
![](../../../../attachment/images-uuid/7f956b4d7d294c18805f442249546c0a.png)
www.aholjgg.com
库中:皖 ICP 备 2023014125 号 -1
皖 ICP 备 2023014125 号 -1
@@ -0,0 +1,11 @@
上海梦曼网络科技有限公司
storedl3.heytapdownload.cdn.mmancloud.com
![](../../../../attachment/images-uuid/14e66d13c26b415aa0131095287ed990.png)
![](../../../../attachment/images-uuid/59c6f24693484981bca7f250d1fbbb3e.png)
![](../../../../attachment/images-uuid/31d7b0c21458423791191c47cd56199b.png)
![](../../../../attachment/images-uuid/2fe022ce32444109badfbcca3b73901c.png)
@@ -0,0 +1,11 @@
fs.zhenjiang365.cn
![](../../../../attachment/images-uuid/e708c5428b7c4790b94279602b258635.png)
验收反馈为 0
![](../../../../attachment/images-uuid/5a33dcac258346c1ab68e3b6b0fc83c9.png)
![](../../../../attachment/images-uuid/c7b240ca37014ffbbdb98989a03b97d4.png)
![](../../../../attachment/images-uuid/ea9e4bca1c6f485cae67c3e901445bdd.png)
@@ -0,0 +1,19 @@
# 08- 客响:信安问题
![](../../../../attachment/images-uuid/1c8c474fa762407aa61479eaf329b389.png)
param:{"delete_user_info_list":[{"user_id_cdn":"alXszHJIa"}]}
r11.cdn.35.com
r12.cdn.35.com
![](../../../../attachment/images-uuid/9af4b8103208455b9b886669364710e2.png)
![](../../../../attachment/images-uuid/020af4a208c24eb5a1747e85c65fc4c3.png)
![](../../../../attachment/images-uuid/604e2449d1f840d899b8668b31016c48.png)
![](../../../../attachment/images-uuid/424a7ee1dbe14717b0f1e70b5765ed22.png)
ySllqM83vkm2fgTA
@@ -0,0 +1,58 @@
# 14- 客响:信安问题
河南公司今天反馈
valipl10.cp31.ott.cibntv.net
这个域名被信安系统检索到 未录入 CDN 子网域名
![](../../../../attachment/images-uuid/0fcb42749704494e870b90eb62d1b615.png)
但是系统里面没有 只有一个阿里的工单出现过这个域名
![](../../../../attachment/images-uuid/8dbe5fc05eb94384877059ed56fb676f.png)
去年发的配置 是有备案信息的,不然 OMC 无法下发​
![](../../../../attachment/images-uuid/c22e68defd4f446fa1eb8a0c9d21c801.png)
之前爱奇艺提交工单失败的时候我好像反馈过
为啥通报到河南了呢
![](../../../../attachment/images-uuid/eb233382282949a6bed9bce1e1d42385.png)
```json
{ "_id" : ObjectId("64e42740385baec41fcffc70"),
"sync_time" : "2023-08-22 11:10:56",
"sync_status" : 0,
"interface_type" : 7,
"sync_user_name" : "IBS",
"chk_err_msg" : "",
"success_num" : 0,
"recv_data" : { "delete_domain_info_list" : [ { "domain_id_cdnsys" : "GPqNpVMyj_aIvEme" } ] } }
> db.user_info.find({"user_id_cdn" : "GPqNpVMyj"})
{ "_id" : ObjectId("6361dd98cf1797afcf2c23b2"),
"sync_time" : "2022-11-02 11:01:44",
"sync_status" : 0,
"interface_type" : 6,
"sync_user_name" : "IBS",
"chk_err_msg" : "",
"success_num" : 0,
"recv_data" : { "update_domain_info_list" : [ { "user_id_cdn" : "GPqNpVMyj", "domain" : "valipl10.cp31.ott.cibntv.net", "domain_id_cdnsys" : "GPqNpVMyj_aIvEme", "source_list" : [ "valipl-vip.cp31.ott.cibntv.net.upstream.myalicdn.com" ], "distribute_prov" : [ "551", "100", "591", "931", "200", "771", "851", "898", "311", "371", "451", "270", "731", "431", "250", "791", "240", "471", "951", "971", "531", "351", "290", "210", "280", "220", "891", "991", "871", "571", "230" ], "deleted" : false, "top_domain" : "net", "reg_id" : "京ICP备12001949号-1" } ] } }
{ "_id" : ObjectId("5fdc685b7d084b1849ed67da"), "unit_name" : "阿里云计算有限公司", "officer_dict" : { "tel" : "b47759505455a0b176568fc1a61b1da98279b29d104271267a3655ddd4900a5d", "name" : "张忻楠", "id_number" : "a643af42c6ba70a03764bf301723684dbd8866cb0c56324ea29726c0b1c40831", "user_id_type" : 2, "user_id_cdn" : "GPqNpVMyj", "mobile" : "1a50eb20b06cace1a0ec0ddcad503f00634a1af72ee9d314ef7d027efe8d07fc", "email" : "b47759505455a0b176568fc1a61b1da98279b29d104271267a3655ddd4900a5d" }, "sync_time" : "2022-01-14 15:10:27", "id_number" : "c0f78482afbed5a4b5505eca07ad471120a3e2b061e676f1529f7536c59984e5", "unit_nature" : 999, "user_info_id" : 64868,
"prov_id_list" : [ "996" ], "report_status" : 4, "user_id_cdn" : "GPqNpVMyj", "user_nature" : 1, "add" : "浙江省杭州市西湖区转塘科技经济区块12号", "create_time" : "2020-12-18 16:29:15", "id_type" : 999, "client_id" : "APrqo8Q8iLF5FslDRR5IfS0zXuADVH4UGYahA4kc", "customer_id" : "1d5cf0d4410b11eb", "child_node_status" : 0 }
```
![](../../../../attachment/images-uuid/7d01fef90c43405f8481b52414a44e61.png)
![](../../../../attachment/images-uuid/1f85f16b1a724290a2e245a6f45a6038.png)
@@ -0,0 +1,17 @@
![](../../../../attachment/images-uuid/2fc5b786af984b1589837f46f09bd2ff.png)
250A221214909453001
pchbm-video.hanfenghao.com pchbm2.hanfenghao.com 卓 有个问题提交商机与试用订单号:NO.250A221214909453001 我看到也提交信安表了 但是 ibs 配置管理怎么没有信安信息呢
![](../../../../attachment/images-uuid/1966343e06694a878260118e2b9ed8f0.png)
![](../../../../attachment/images-uuid/424c0d5cb9c94d56b825b91e73a37044.png)
徐州格蓝信息科技有限公司 m.jb51.net www.jb51.net 这俩也是以问题
徐州格蓝信息科技有限公司 250A230915459488001_001
![](../../../../attachment/images-uuid/8b95fd220ab64919abb7355bb0534455.png)
![](../../../../attachment/images-uuid/300ae3446f954f808b65bdc1f31ae87f.png)
@@ -0,0 +1,5 @@
004-20231130005
![](../../../../attachment/images-uuid/5d59295c465a422596f3d7845a55b8ff.png)
![](../../../../attachment/images-uuid/c5f804d32df14660abeb11501d6a5bee.png)
@@ -0,0 +1,17 @@
050-202312070026
JCCSbd5m9l5JoXco
![](../../../../attachment/images-uuid/7259bc88a6cc443e9a6411d3cfbca46a.png)
050-202312070027
wEw7kWJqFyoep1kQ
![](../../../../attachment/images-uuid/886c40c385224ebabe8a11b831f4f5bc.png)
050-202312070028
i2C6pdTRbxVy8lJc
![](../../../../attachment/images-uuid/2dd4bf8db9b94eadb0b5bdcb49b8bac1.png)
@@ -0,0 +1,106 @@
```json
{
"accessSystem":"IBS",
"account":"CDN-IBS",
"data":{
"tyywrwlcdx":{
"cdn_type":"liveStream",
"code":"FSciyjN8hEPQIneV",
"create_time":"2023-12-11 02:00:22",
"domains":[
"cdnal.nbpt.cn"
],
"nameOfClient":"北京通和实益电信科学技术研究所有限公司",
"operMail":"chenhao1@bj.chinamobile.com",
"operTel":"13811350451",
"operUser":"IBS平台",
"plains":[
"1"
],
"pro_content":"域名操作(域名停用), liveStream, 域名列表: cdnal.nbpt.cn",
"pro_title":"域名操作(域名停用)",
"taskTime":1702303200000,
"task_first_class":"2",
"task_second_class":"3",
"triggerMode":"autoTrigger",
"user_id":"912"
}
},
"flowKey":"tyywrwlc"
}
```
![](../../../../attachment/images-uuid/1f86915de4c6401d8960f9e8b6b2ac95.png)
问题流程
TestOrderCloseDomainJob
com.cmcc.cdn.platform.selfservice.service.impl.TestOrderServiceImpl#shutdownTestOrderDomains
com.cmcc.cdn.platform.selfservice.service.live.impl.LiveConfigServiceImpl#disableDomain
com.cmcc.cdn.platform.selfservice.service.live.impl.LiveConfigServiceImpl#saveCustomerManagerQueryWorkAuthority
`liveConfigService.disableDomain(domain,null);`
cdnal.nbpt.cn
codeFSciyjN8hEPQIneV
instId: 050-202312110003
```json
{"error_code":0,"error_msg":"success","instId":"050-202312110003"}
```
```json
{
"account":"chenlinghong",
"code":"FSciyjN8hEPQIneV",
"feedback_time":"2023-12-11 10:50:52",
"plain_info":[
{
"plain_name":"华为平面",
"result":"处理成功"
}
],
"result":"处理成功"
}
```
cdnalvideo.nbpt.cn
cdnalimg.nbpt.cn
cdn.nbpt.cn
cdnvideo.nbpt.cn
cdnimg.nbpt.cn
cdnal.nbpt.cn, cdnalvideo.nbpt.cn, cdnalimg.nbpt.cn, cdn.nbpt.cn, cdnvideo.nbpt.cn, cdnimg.nbpt.cn
WorkOrder
`bpm_dns_task`
`self_service_domain_config` 9
`live_record_order`
`live_record_order_history`
`history_log`
```java
@PostConstruct
public void init() {
goodsMap.put(Constants.AwardType.DESC.getCode(), descGoods);
goodsMap.put(Constants.AwardType.RedeemCodeGoods.getCode(), redeemCodeGoods);
goodsMap.put(Constants.AwardType.CouponGoods.getCode(), couponGoods);
goodsMap.put(Constants.AwardType.PhysicalGoods.getCode(), physicalGoods);
}
```
@@ -0,0 +1,57 @@
# 修复位置
![](../../../../attachment/images-uuid/89a5297305704ff3918c88d7f0617aef.png)
![](../../../../attachment/images-uuid/0683aea6e45c4f0f84e43b836881ad86.png)
# 修复后验证
![](../../../../attachment/images-uuid/e651bd2a575c4a599b2e840253feb46e.png)
![](../../../../attachment/images-uuid/1f7018b6b5cc48758326fb896f947a97.png)
![](../../../../attachment/images-uuid/5e7469e3bc054f19bf5cfd4da0eaf48b.png)
# 自测
20231220110516.komect.com
企业名称:直播播流测试
用户:2458 17031466378
## 拉流回源配置
![](../../../../attachment/images-paste/image-20231220111200559.png)
![](../../../../attachment/images-paste/image-20231220111536976.png)
## Referer 防盗链
![](../../../../attachment/images-paste/image-20231220112354730.png)
![](../../../../attachment/images-paste/image-20231220112724757.png)
![](../../../../attachment/images-paste/image-20231220112757732.png)
## Key 防盗链
![](../../../../attachment/images-paste/image-20231220112901049.png)
![](../../../../attachment/images-paste/image-20231220112925433.png)
## IP 黑白名单
![](../../../../attachment/images-paste/image-20231220113015047.png)
![](../../../../attachment/images-paste/image-20231220113037589.png)
## 证书绑定
![](../../../../attachment/images-paste/image-20231220113530608.png)
![](../../../../attachment/images-paste/image-20231220113550370.png)
# 其它
PULLDOMAIN_TAB:次配置项控制直播控制台配置页面显示几个配置项
@@ -0,0 +1,71 @@
## 问题日志
```
2023-12-20 10:09:58 [ibs-portal:chiqingguo57.cmp11428.openpf:8088,,,,] [http-nio-8088-exec-5] ERROR com.cmcc.cdn.platform.common.aop.DaoMonitorAspect 73 around - DaoMonitorAspect err, methodName:LiveStreamDomainConfigDao.findBySelfDomainId org.springframework.dao.IncorrectResultSizeDataAccessException: query did not return a unique result: 2; nested exception is javax.persistence.NonUniqueResultException: query did not return a unique result: 2
```
vctest1116.nest4.com
38248
![](../../../../attachment/images-paste/image-20231220181922130.png)
## 问题代码
![](../../../../attachment/images-paste/image-20231220182131885.png)
## 数据准备
1、视音频点播 迁移到 超低时延直播
已开通
视音频
ECName-1703067873
2463
DevReq767351356.komect.com
ECName-1703068113
超低时延直播
![](../../../../attachment/images-paste/image-20231220183454675.png)
![](../../../../attachment/images-paste/image-20231220183846635.png)
![](../../../../attachment/images-paste/image-20231220183925069.png)
## 问题复现
当第一次点播迁移到直播时 live_stream_domain_config 库中存在的域名未进行处理。导致再从点播迁移到直播是会二次增加域名。在上方查询位置出现问题。
![](../../../../attachment/images-paste/image-20231220185724374.png)
超低时延直播
ECName-1703071519(迁移)
DevReq844828682.komect.com
视音频点播加速
ECName-1703071189
DevReq362123365.komect.com
DevReq844828682.komect.com
超低时延直播
ECName-1703071684
DevReq462767594.komect.com
![](../../../../attachment/images-paste/image-20231220193319435.png)
![](../../../../attachment/images-paste/image-20231220193206209.png)
![](../../../../attachment/images-paste/image-20231220193629407.png)
@@ -0,0 +1,30 @@
## 模拟流量超出
可在大数据的 t_cdn_trial_dataflow_record 表中增加记录
![](../../../../attachment/images-paste/image-20231220123019266.png)
通过控制定时任务触发流量到期的定时任务
如果着急可以直接改定时任务的下次下发时间
```sql
select *
from qrtz_triggers where JOB_NAME like '%TestOrderFlowMonitorJob%';
```
![](../../../../attachment/images-paste/image-20231220123123738.png)
![](../../../../attachment/images-paste/image-20231220123038878.png)
## 最终 bug 修复
![](../../../../attachment/images-paste/image-20231220123159533.png)
## 修复位置
![](../../../../attachment/images-paste/image-20231220123327155.png)
```java
com.cmcc.cdn.platform.selfservice.service.impl.BusinessOrderFirstOpenServiceImpl#changeTestOrderStatus
```
@@ -0,0 +1,43 @@
# 截图
![](../../../../attachment/images-uuid/06bce51350c14fec967e417cace89388.png)
![](../../../../attachment/images-paste/image-20231221102242592.png)
# 问题域名
```
oms.juyouapp6.com
a110.51diandian.cc
p5.a.yximgs.com
lvbdcdnct.inter.71edge.com
lvbdcdncnc.inter.71edge.com
lvbdcdncmn3.inter.71edge.com
lvbdcdncmn.inter.71edge.com
bdcdncmn3.inter.71edge.com
bdcdncmn2.inter.71edge.com
live-hw2.cdn.ixunke.cn
hpl.edgeorgn.com
```
# 数据准备
```sql
select distribute_prov,
domain,
domain_id_cdn_sys,
reg_id,
source_list,
top_domain,
user_id_cdn,
introduce_prov
from big_cloud_information_domain
where domain in ('oms.juyouapp6.com', 'a110.51diandian.cc', 'p5.a.yximgs.com', 'lvbdcdnct.inter.71edge.com',
'lvbdcdncnc.inter.71edge.com', 'lvbdcdncmn3.inter.71edge.com', 'lvbdcdncmn.inter.71edge.com',
'bdcdncmn3.inter.71edge.com', 'bdcdncmn2.inter.71edge.com', 'live-hw2.cdn.ixunke.cn',
'hpl.edgeorgn.com');
```
![](../../../../attachment/images-paste/image-20231221162240594.png)
![](../../../../attachment/images-paste/image-20231221162346930.png)
@@ -0,0 +1,49 @@
# 归属问题
![](../../../../attachment/images-paste/image-20231222104119320.png)
![](../../../../attachment/images-uuid/017c429a384545d29033c844e0a4b783.png)
![](../../../../attachment/images-uuid/6275b4bcf04b4bd0b8aaa3186ad0d712.png)
@田卓storedl3.heytapdownload.cdn.mmancloud.com,上海梦曼网络科技有限公司,这个企业应该是北京引入的,但是在信安系统上显示的是安徽,我看工单(商机与试用订单号:NO.100A210508648736001)上面也没有引入省份的信息,辛苦查看下
2023-10-19T08:42:14 江苏运怡物联网有限公司 (所属省份安徽)发起域名配置需求工单,信安附件为【上海梦曼网络科技有限公司】。
因系统存在此企业信安信息,所以发起了企业更新同步信安操作。同步中将省份归属修改为安徽。
在第二步骤中相当于信安信息校验和同步。目前系统逻辑,如果企业信息存在则进行企业信息修改操作,然后进行域名信安信息的新增同步。
蒋伟在 2023-10-20 08:47 触发工单终止操作。此时 iBS 只会针对域名维度进行同步删除回退。
![](../../../../attachment/images-uuid/b2d0a80fc3d84ec8a52eeef8eb24c771.png)
![](../../../../attachment/images-uuid/c44b4635972349b192cfdb37dc979780.png)
# 工单回退问题
还有一个信安问题,编号:001-20230916001 安徽省经济和信息化委员会 wmconvention.com 工单已驳回,客户反馈信安信息还存在
![](../../../../attachment/images-uuid/a1eeeb33b2a642b191aa8790ea867643.png)
![](../../../../attachment/images-paste/image-20231222114119693.png)
退回后终止工单:/workorder/approvedecision
![](../../../../attachment/images-paste/image-20231222143933904.png)
退回接口:/api/bpm/bpmDrawBack
目前 IBS 在退回接口中无信安同步功能。
![](../../../../attachment/images-paste/image-20231222152036418.png)
![](../../../../attachment/images-paste/image-20231222161416523.png)
![](../../../../attachment/images-paste/image-20231222161734761.png)
![](../../../../attachment/images-paste/image-20231222162311492.png)
![](../../../../attachment/images-paste/image-20231222164731385.png)
![](../../../../attachment/images-uuid/0daa4f69be284b4aab9807e2a0182a2b.png)
@@ -0,0 +1,12 @@
## 下载接口
```
/configManage/getSecurity
?domain=www.test2310311039.com.15.cdnhwcqir15.com
```
## 修改接口
```
/configManage/updateSecurity
```
@@ -0,0 +1,63 @@
## 问题详情
001-20231227002
![](../../../../attachment/images-uuid/852fb10872a242089f180d627b65bf51.png)
![](../../../../attachment/images-uuid/2b7dd719af6c4039a942cc13a29b81b4.png)
![](../../../../attachment/images-uuid/1deeda17fd494302ae6c0188e298bde1.png)
![](../../../../attachment/images-uuid/0a991166a0934d209910599f1e91aed0.png)
## 顶级域名问题
![image-20231229105920182](../../../../attachment/images-paste/image-20231229105920182.png)
com.cmcc.cdn.platform.selfservice.service.impl.PortalInformationServiceImpl#createDomainInfo
com.cmcc.cdn.platform.selfservice.service.impl.PortalInformationServiceImpl#getTopDomain
## 信安修复
### 生成随机数
gPUcTP
yJmjcg
SrYYyO
aRgUEb
YWBXNR
### 字段说明
domain_id_cdnsys:为深圳华为云计算技术有限公司现有 user_id_cdn 拼接新生成的 6 位随机数。
深圳华为云计算技术有限公司 user_id_cdnDtsPgBHHY
domain:冲突域名
source_list:信安附件中的回源
reg_id:信安附件中的备案号
top_domain:取信安最后一列真实域名的顶级域名
user_id_cdn:圳华为云计算技术有限公司现有 user_id_cdn
distribute_prov:参考现有逻辑查询为全国
```sql
SELECT p.code
FROM self_service_domain_config s
LEFT JOIN domain_config_province dp ON s.id = dp.domain_id
LEFT JOIN province p ON dp.province_id = p.id
WHERE domain = ?1;
```
introduce_prov:引入省份为企业省份政企分公司 996
cp_domain:真实域名
@@ -0,0 +1,7 @@
来源:前端
![](../../../../attachment/images-paste/image-20240103111009088.png)
![](../../../../attachment/images-uuid/4b2b8d51bc874c85b365aba63cf94a9f.png)
![](../../../../attachment/images-uuid/53e61a4ea2e8485dac4829bc3f855923.png)
@@ -0,0 +1,44 @@
来源:运营
www.fdjkqzxx.com
自主配置域名还在删除中编号:ZdB14OkZUFerVl6a 辛苦查看下
李哥,有个管道话问题,平时接触管道话少也不知道哪个群找你合适,单独咨询下。pm9d09ca3aee914adeae52023ddb69bbef
这个任务没回调是为啥呀。
```
2024-01-02 10:19:59 [ibs-portal:sh-lgcmcc05.shlg.cmcdn.net:8080,,,,] [org.springframework.amqp.rabbit.RabbitListenerEndpointContainer#15-2] INFO com.cmcc.cdn.platform.selfservice.service.impl.BigCloudBasicInfoServiceImpl 973 lambda$repeatXinan$0 - 【请求信安接口】param:{"delete_user_info_list":[{"user_id_cdn":"QjnMymJpP"}]}, 返回结果:{resp={"_status": "ERR", "_error": {"message": "The server could not verify that you are authorized to access the URL requested. You either supplied the wrong credentials (e.g. a bad password), or your browser doesn't understand how to supply the credentials required.", "code": 401}}, status=401}
```
```
{
    "delete_user_info_list":[
        {
            "user_id_cdn":"QjnMymJpP"
        }
    ]
}
```
```
{"_status": "ERR", "_error": {"message": "The server could not verify that you are authorized to access the URL requested. You either supplied the wrong credentials (e.g. a bad password), or your browser doesn't understand how to supply the credentials required.", "code": 401}}, status=401}
```
![](../../../../attachment/images-paste/image-20240103104306955.png)
嗯,前期写了故障恢复接口。。调/admincontro/taskprocessalarm/handle/xxxxxxxxxxxxxxxxxxxx
具体参数 xxxxxxxxxxx 看逻辑代码和数据库吧
第一种方案需要超管权限。
第二种方案在确认配管已经回调的情况下:走这个接口
https://p.cdn.10086.cn/actionpm?commandType=pipeDomainCallBack&version=1
异常处理表
select *
from sys_task_process_alarm;
@@ -0,0 +1,5 @@
来源:测试
![](../../../../attachment/images-paste/image-20240103154332214.png)
代码中最外层包裹了验收成功。
@@ -0,0 +1,93 @@
来源:测试
![](../../../../attachment/images-uuid/2fad07c59b10419b90043bb76c48fe21.png)
![](../../../../attachment/images-uuid/739fa77a5f124f189e1128060e8cd362.png)
产品查询接口
/workorder/filter/product
www.baosheng03.com
## 问题一
测试环境发现客户经理提交域名配置需求工单失败:定位为空指针异常,无对应试用单。
## 问题二
同时测试问为什么试用产品可以提单
## 问题流程
1、背景为这个产品是非首次开通引入,但是驳回了。
![](../../../../attachment/images-uuid/836da2af4a7a43c48953bc4d92f37d6a.jpg)
2、非首次开通收到工单的时候 ep_product_chargemode 的 product_state 存储为 3 试用中(验收反馈才会变为 4 开通)。同时会向 product_trial 及其关联表 product_trial_domain 存储域名。
3、当非首次开通退回时未处理 ep_product_chargemode 和 product_trial_domain
4、导致域名配置需求工单在企业对应产品筛查列表中筛查出响应的产品
com.cmcc.cdn.platform.selfservice.controller.NewWorkOrderController#filterProduct
![](../../../../attachment/images-uuid/8d6b13bb5da144629bb05cd895ede635.jpg)
![](../../../../attachment/images-paste/image-20240104094707432.png)
![](../../../../attachment/images-paste/image-20240117165402960.png)
![](../../../../attachment/images-paste/image-20240117170754983.png)
主要日志
```
2024-01-17 09:38:52 [ibs-portal:chiqingguo57.cmp11428.openpf:8088,,,,] [http-nio-8088-exec-9] WARN org.hibernate.engine.jdbc.spi.SqlExceptionHelper 137 logExceptions - SQL Error: 1048, SQLState: 23000
2024-01-17 09:38:52 [ibs-portal:chiqingguo57.cmp11428.openpf:8088,,,,] [http-nio-8088-exec-9] ERROR org.hibernate.engine.jdbc.spi.SqlExceptionHelper 142 logExceptions - Column 'pre_task_id' cannot be null
2024-01-17 09:38:52 [ibs-portal:chiqingguo57.cmp11428.openpf:8088,,,,] [http-nio-8088-exec-9] ERROR com.cmcc.cdn.platform.selfservice.pojo.TaskProcessTaskPack 78 excTaskAndAlarm - could not execute statement; SQL [n/a]; constraint [null]; nested exception is org.hibernate.exception.ConstraintViolationException: could not execute statement org.springframework.dao.DataIntegrityViolationException: could not execute statement; SQL [n/a]; constraint [null]; nested exception is org.hibernate.exception.ConstraintViolationException: could not execute statement
    at org.springframework.orm.jpa.vendor.HibernateJpaDialect.convertHibernateAccessException(HibernateJpaDialect.java:276) ~[spring-orm-5.3.28.jar!/:5.3.28]
    at org.springframework.orm.jpa.vendor.HibernateJpaDialect.translateExceptionIfPossible(HibernateJpaDialect.java:233) ~[spring-orm-5.3.28.jar!/:5.3.28]
```
问题根源在于入库,后边解决问题,遇到数据库异常要观察表结构。
测试库:
![](../../../../attachment/images-paste/image-20240118102616657.png)
生产库:
![](../../../../attachment/images-paste/image-20240118102644364.png)
更改字段是否为空 sql 语句
```sql
ALTER TABLE sys_task_process MODIFY pre_task_id YOUR_DATA_TYPE NULL;
```
## 验证点
1、非首次开通,建单后 ep_charge 表不新增数据,域名配置需求工单列表查不到产品与订购,企业管理页面查不到新产品
2、阶段反馈后,下发商用话单正常
3、阶段反馈后,域名管理界面 计费时间显示为当前时间
4、验收反馈后,域名管理界面 计费时间刷新为 bpm 反馈时间
5、验收反馈后,域名配置需求工单列表能够查到新产品与订购,ep_charge 表有新数据,企业管理页面产品状态正常
6、新建域名配置需求工单,客户经理管理员审批后,下发话单正常,话单时间为 bpm 反馈时间,域名管理界面 计费时间为 bpm 反馈时间
非首次开通之前那个问题我也跑了跑。
流程交互上没问题我感觉。我看了看你改的基本上是这两个场景吧。
open_time 小于 5 分钟直接验收 ep_product_chargemode 入库。
大于 5 分钟的未来时间需要通过到时间 BBossOrderJob 执行后 ep_product_chargemode 入库。
@@ -0,0 +1,7 @@
来源:测试
# 是不是只有已生效的域名才能需求变更
这个下拉列表历史逻辑就是没有已停用的。
com.cmcc.cdn.platform.selfservice.service.impl.BssManageServiceImpl#getEffectAdaptDomainInfo
@@ -0,0 +1,11 @@
来源:测试
![](../../../../attachment/images-uuid/2b5cbb2d0dd745d3b33cd15124802f43.png)
![](../../../../attachment/images-paste/image-20240103111953221.png)
最终原因是因为因为验收的时候省份信息字段作用域过大,导致省份信息重复设置值。
com.cmcc.cdn.platform.selfservice.service.impl.AdaptWorkOrderServiceImpl#esopBpmFeedBackApprove
![](../../../../attachment/images-paste/image-20240103154058701.png)
@@ -0,0 +1,53 @@
来源:运营
## 中国移动通信集团辽宁有限公司
pm921dd06557ee485f95e866b3a9e2e7d2
```
'www.dalianxg.jcy.gov.cn', 'www.dalianzs.jcy.gov.cn', 'www.daliancxd.jcy.gov.cn', 'www.daliancj.jcy.gov.cn',
'www.lnwafangdian.jcy.gov.cn', 'www.lnchanghai.jcy.gov.cn', 'www.lnzhuanghe.jcy.gov.cn', 'www.dlzh.gov.cn',
'www.dldj.gov.cn', 'www.dalian.jcy.gov.cn', 'www.dlxg.gov.cn', 'www.zhiyuntech.cn', 'anshengmall.com',
'm-wifi.9451.com', 'www.djtu.edu.cn', 'www.dlpbb.com', 'www.9451.com', 'www.dlzgh.org', 'netcgroup.com',
'www.dlgyy.com', 'wap.dltv.cn', 'megaunity.com', 'www.dltv.cn', 'xfj.dl.gov.cn'
```
自主配置域名还在删除流程中(1 月 2 号申请的),统一处理下吧
```
2024-01-02 03:59:58 [ibs-portal:sh-ibs01.shlg.cmcdn.net:8080,,,,] [org.springframework.amqp.rabbit.RabbitListenerEndpointContainer#15-2] INFO com.cmcc.cdn.platform.selfservice.service.impl.PortalInformationTransServiceImpl 73 deleteUsers - 企业删除同步信安,userCdnList:{"delete_user_info_list":[{"user_id_cdn":"SbrEFFMtb"}]}
```
```
2024-01-02 04:00:02 [ibs-portal:sh-ibs01.shlg.cmcdn.net:8080,,,,] [org.springframework.amqp.rabbit.RabbitListenerEndpointContainer#15-2] INFO com.cmcc.cdn.platform.common.util.HttpUtil 342 doHttpRequest2 - url:https://117.136.191.90:5151/v1.0/delete_user_info, method:post, 返回的状态码为:401
2024-01-02 04:00:02 [ibs-portal:sh-ibs01.shlg.cmcdn.net:8080,,,,] [org.springframework.amqp.rabbit.RabbitListenerEndpointContainer#15-2] INFO com.cmcc.cdn.platform.common.util.HttpUtil 348 doHttpRequest2 - url:https://117.136.191.90:5151/v1.0/delete_user_info, method:post, 返回的请求体:{"_status": "ERR", "_error": {"message": "The server could not verify that you are authorized to access the URL requested.  You either supplied the wrong credentials (e.g. a bad password), or your browser doesn't understand how to supply the credentials required.", "code": 401}}
2024-01-02 04:00:02 [ibs-portal:sh-ibs01.shlg.cmcdn.net:8080,,,,] [org.springframework.amqp.rabbit.RabbitListenerEndpointContainer#15-2] INFO com.cmcc.cdn.platform.selfservice.service.impl.BigCloudBasicInfoServiceImpl 973 lambda$repeatXinan$0 - 【请求信安接口】param:{"delete_user_info_list":[{"user_id_cdn":"SbrEFFMtb"}]}, 返回结果:{resp={"_status": "ERR", "_error": {"message": "The server could not verify that you are authorized to access the URL requested.  You either supplied the wrong credentials (e.g. a bad password), or your browser doesn't understand how to supply the credentials required.", "code": 401}}, status=401}
2024-01-02 04:00:02 [ibs-portal:sh-ibs01.shlg.cmcdn.net:8080,,,,] [org.springframework.amqp.rabbit.RabbitListenerEndpointContainer#15-2] INFO com.cmcc.cdn.platform.selfservice.service.impl.BigCloudBasicInfoServiceImpl 1389 deletedInformationUser - informatiuonTokenResponse:"{\"_status\": \"ERR\", \"_error\": {\"message\": \"The server could not verify that you are authorized to access the URL requested.  You either supplied the wrong credentials (e.g. a bad password), or your browser doesn't understand how to supply the credentials required.\", \"code\": 401}}"
```
## 四川省公司也反馈了 基本都在 1- 今天
![](../../../../attachment/images-uuid/8c13b731db644fc0a2c0e089c5bbce44.png)
![](../../../../attachment/images-paste/image-20240104141447344.png)
![](../../../../attachment/images-paste/image-20240104150114930.png)
注意回调请求体
![](../../../../attachment/images-paste/image-20240104192908884.png)
## 凯炜信息
![](../../../../attachment/images-uuid/08b9ff74a21f41ad904ee86d239c18ca.png)
![](../../../../attachment/images-uuid/6d3c551863cb47309894dcf67a7ee0fe.png)
![](../../../../attachment/images-uuid/f0b37d7bbacd4b2ca7586cbc922644f1.png)
![](../../../../attachment/images-paste/image-20240104232926532.png)
这个问题,目前是先进行了回调。但是根本问题,如果有时间的话还是要再看看。至少找到问题的根本。
@@ -0,0 +1,21 @@
来源:测试
试用域名
通过 TestOrderFlowMonitorJob 触发试用流量耗尽
改 testorder_info
表的 flow_consume_mark_time 时间为 2 天前
通过 TestOrderFlowMonitorJob 再触发停用,回调停用
再点删除,再通用运维回调会下发注销话单。
![](../../../../attachment/images-uuid/822c9f7591e84e65afb8cb762c4380f1.png)
代码位置
com.cmcc.cdn.platform.selfservice.service.impl.BssManageServiceImpl#deleteForDomain
com.cmcc.cdn.platform.selfservice.service.impl.TestOrderServiceImpl#endTestOrderAutomatic(java.lang.String)
@@ -0,0 +1,23 @@
来源:测试
![](../../../../attachment/images-uuid/115b8c1ebdc34b17b88a292aa1beaf12.png)
![](../../../../attachment/images-uuid/3505d86f092541c49105ab005799d61e.png)
![](../../../../attachment/images-paste/image-20240104193019871.png)
```
{
    "ibs_code": "002-20240104007",
    "result": "退回不受理",
    "message": "message"
}
```
这个可以这样子你明天自己走下流程,如果符合我说的场景。你可以和产品提一下。
这个应该需要产品和 bpm 再次确认好。
com.cmcc.cdn.platform.selfservice.entity.workorder.ConfigChangeWorkOrderPO#canModify
![](../../../../attachment/images-paste/image-20240104193157075.png)
@@ -0,0 +1,42 @@
来源:测试
# 问题
域名配置需求工单,在提单的时候如果是单个域名,是合法的。但是如果是批量域名,域名列表显示的非法的。
最终排查位置:com.cmcc.cdn.platform.selfservice.order.DomainOrderService#updateCheckedIcpInfo
因为当用域名获取信安信息后 Map 中是真域名对应的备案号。
但是后边直接用这个 Map 去查库了,导致更新的是真实域名的备案号。
进行了 Map 的更新。
![](../../../../attachment/images-paste/image-20240109211326572.png)
```java
if (WorkOrderEnums.Type.domain_request.name().equals(order.getType())) {
// 因map中生成的为【真实域名,真实域名对应的备案号】,需替换为【假域名,真实域名对应的备案号】格式刷库
for (BatchSelfDomainPO batchSelfPo : ls) {
String cpDomain = batchSelfPo.getCpDomain();
String domain = batchSelfPo.getDomain();
if (StringUtils.isNotEmpty(cpDomain)) {
map.put(domain, map.get(cpDomain));
map.remove(cpDomain);
}
}
selfServiceDomainConfigService.updateLegalByMap(map);
}
@Override
public void updateLegalByMap(Map<String, String> map) {
for (Map.Entry<String, String> stringStringEntry : map.entrySet()) {
SelfServiceDomainConfigPO po = selfServiceDomainConfigDao.findByDomain(stringStringEntry.getKey()).orElse(null);
if (Objects.nonNull(po)) {
po.setLegal(StringUtils.isNotEmpty(po.getIcp()) ? po.getIcp().equals(stringStringEntry.getValue()) : false);
// po.setIcp(stringStringEntry.getValue());
selfServiceDomainConfigDao.save(po);
}
}
}
```
@@ -0,0 +1,11 @@
来源:运营
# 问题
scjdglj.chongyang.gov.cn
编号:5d4fBTb0Sn4u1aRZ
![](../../../../attachment/images-uuid/ed01513f63f745b981aa7caf0d289a67.png)
![](../../../../attachment/images-paste/image-20240111172305959.png)
@@ -0,0 +1,73 @@
来源:春良
# 问题
519 个域名
27 个域名多平面
6 个域名有删除记录
驳回(004-20230529001
hlsztetrialmgsplive.a208.ottcn.com
hlsztetrialmgsplive.miguvideo.com
hlszytrialmgsplive.a208.ottcn.com
hlszytrialmgsplive.miguvideo.com
驳回(004-20230526003:同工单还有一个 hlsdmzymgsplive.miguvideo.com
hlsztemgsplive.a208.ottcn.com
hlszymgsplive.a208.ottcn.com
良哥,这个活儿能再具体点吗比如说哪个是多平面然后下发了单平面?我筛了一下,就是 519 个域名,excle 里 27 个域名多平面,其中 6 个域名有删除记录
但是这 6 个域名是两个驳回单删除的。驳回(004-20230529001)驳回(004-20230526003)。
看驳回是后台关的{"ibs_code":"004-20230526003","message":" 因业务调整,后台关闭工单 ","result":" 退回不受理 "}
select *
from work_order
where corp_name = ' 咪咕视讯 '
and source = 'WEB'
and type = 'DOMAIN_DELETE'
order by id desc;
2024-01-09 09:42:21(oyGshWXJfC0a4AMp)
2023-01-11 09:20:34(2EBhLBFO5GdXthEQ)
2023-01-11 09:19:55(JrtqT4RPHlSbExHs)
2023-01-11 02:49:41(xTHPoXpAUQvhBRdl) 运维系统
2023-01-11 02:47:47(LGn5eCjMYM29Rg8L) 运维系统
select *
from domain_delete_record
where domain in ('yxhdpic.itv.cmvideo.cn',
'appot-sc.a282.ottcn.com',
'programot-sc.a282.ottcn.com',
'commonot-sc.a282.ottcn.com',
'vmsot-sc.a282.ottcn.com');
分辨不出来哪个是有问题的。
最近的一个删除来说 oyGshWXJfC0a4AMp,对应的域名配置的就是自研(杭研),是那种 20 年的老单子引入的。删除下发的就是一个平面 0。
对就是这个。这就是 2024-01-09 09:42:21 删除的。我看了引入,然后删除下发通用运维,通用运维回传,删除记录。
@@ -0,0 +1,36 @@
来源:客响
此问题是总结来的,今天调整笔记结构放在问题处理中。
```sql
#
NO.000A230428371002001
ID60000013334
2023-04-30 00:00:00
1
UPDATE `productid_info` SET `develop_stage` = 3, `business_start_time` = '2023-04-30 00:00:00' WHERE `id` = 126;
2
UPDATE `order_process` SET `updated_time` = now(), `status` = 1 WHERE `id` = 2446;
3
UPDATE `order_info` SET `updated_time` = now(), `result` = '开通成功', `order_state` = 3 WHERE `id` = 1448;
# portal机器执行
curl -ksS -X POST -H 'Content-type: application/json' -d '{"ecId":"000AE0002022020820525230","productType":"2","orderNum":"000A221208088579001","billMethod":"3","productId":"60000013334"}' 'https://p.cdn.10086.cn/portal/bss/businessorder'
#bboss bss机器执行
curl -ksS -X POST -H 'Content-type: application/json' -d '{"accessToken":"20230524084725eb94a679d44a4173b89faa0f428d82c4-0330-1682297245","busType":"BBSS","content":{"BackFlag":"0","DevelopStage":"3","OrderNum":"000A230428371002001","ProductID":"60000013334","StartDate":"20230430000000"},"domain":"BBSS","envFlag":"1","routeType":"00","routeValue":"998","sessionID":"632b81fc20c14f05ba52b10332e7f8","sign":"ECBBD5DCB2DF714595D5185D6460073F","signMethod":"md5","timeStamp":"20230505090814","transIDO":"632b81fc20c14f05ba52b10332e7f8","version":"1.0.0"}' 'https://bss.cmcdn.cdn.10086.cn/sync/BBOSS/BusiProvResultServ'
UPDATE `bbossorder_info` SET `develop_stage` = 3, `remark` = '处理成功', `result_rsp` = '00', `start_time` = '2023-04-30 00:00:00', `order_state` = 3 WHERE `id` = 126;
4
INSERT INTO `order_info_history_record`(`created_time`, `deleted`, `updated_time`, `handle_action`, `next_operator`, `operation_user_mobile`, `operation_user_name`, `operator_user_email`, `operator_user_role`, `order_id`, `pre_order_explain`, `predict_test_end_time`, `remark`, `result`, `test_actu_time`, `test_end_date`, `test_start_time`, `turn_on_time`, `complete_time`, `modify_date`, `reason`) VALUES (now(), b'0', now(), 2, NULL, '13693662092', '朱鹏昊', 'zhupenghao@cmhi.chinamobile.com', '集团集团运营经理', 1448, NULL, NULL, '处理成功', '开通成功', NULL, NULL, NULL, '2023-04-30 00:00:00', NULL, NULL, NULL);
```
File diff suppressed because one or more lines are too long
@@ -0,0 +1,15 @@
来源:产品
~~业务变更工单~~
~~业务暂停工单~~
~~业务恢复工单~~
~~试用暂停工单~~
~~试用恢复工单~~
业务注销工单
~~商机关闭工单~~
@@ -0,0 +1,61 @@
来源:客响
```
'www.sdfyhg.com',
'en.sdfyhg.com',
'dyljfy.sdcourt.gov.cn',
'www.sdhbjg.cn',
'zbdl.sljl.cn',
'cjgyz.com.cn',
'ticket.kzbwg.cn',
'bpm.shengrunqc.com',
'jinxiangrencai.com',
'm.yuqiaofu.com',
'smtp.qftemb.com',
'pop.qftemb.com',
'lmsrs.qfzyyxx.com',
'imap.anlitaigroup.com',
'smtp.anlitaigroup.com',
'm.hylj.cc',
'hylj.cc',
'www.zhuowengroup.com',
'zhuowengroup.com',
'ys.sdfyhg.com',
'www.ydzry.com',
'mail.sanyanggroup.com',
'www.laiwu.gov.cn',
'jw.laiwu.gov.cn',
'laiwu.gov.cn',
'www.gangcheng.gov.cn',
'en.sanlityre.com',
'm.en.sanlityre.com',
'laiwubus.com',
'www.airpower.cn',
'www.sdhuijin.com',
'www.lwytjx.com',
'www.sdgude.com'
pm8cabcec13bf1415baa720f92ec0d8b3b,5
pmbb2bc0bc3d0043b6b99c39afa14c3983,12
pme6abd2141c624607a825f3f0b64f3ccb,11
pmee14b784ec6b463bbf7cc40d5d6105e8,5
'pm8cabcec13bf1415baa720f92ec0d8b3b',
'pmbb2bc0bc3d0043b6b99c39afa14c3983',
'pme6abd2141c624607a825f3f0b64f3ccb',
'pmee14b784ec6b463bbf7cc40d5d6105e8'
pm8cabcec13bf1415baa720f92ec0d8b3b,5
pmbb2bc0bc3d0043b6b99c39afa14c3983,12
pme6abd2141c624607a825f3f0b64f3ccb,11
pmee14b784ec6b463bbf7cc40d5d6105e8,5
pmee14b784ec6b463bbf7cc40d5d6105e8 2024-01-11 15:20:02 {'success': True, 'messageId': 'pmee14b784ec6b463bbf7cc40d5d6105e8', 'message': 'OK', 'status': 0}
pmbb2bc0bc3d0043b6b99c39afa14c3983 2023-12-31 09:50:01 {'success': True, 'messageId': 'pmbb2bc0bc3d0043b6b99c39afa14c3983', 'message': 'OK', 'status': 0}
pm8cabcec13bf1415baa720f92ec0d8b3b 2023-12-26 11:30:01 {'success': True, 'messageId': 'pm8cabcec13bf1415baa720f92ec0d8b3b', 'message': 'OK', 'status': 0}
pme6abd2141c624607a825f3f0b64f3ccb 2024-01-15 10:10:02 {'success': True, 'messageId': 'pme6abd2141c624607a825f3f0b64f3ccb', 'message': 'OK', 'status': 0}
```
有删除前备份
File diff suppressed because one or more lines are too long
@@ -0,0 +1,37 @@
来源:鹏豪
## 获得商用客户
```sql
select DISTINCT(bi.id),
bi.order_num as '开通单号',
ei.enterprise_name as '企业名称',
ei.enterprise_cp_id as '企业CP_ID',
pi.business_type as '产品类型',
pi.product_id as '订购ID',
pi.business_start_time as '开通时间',
ei.enterprise_id as 'tId'
# ,
# ssdc.domain,
# ssdc.domain_plain
from bbossorder_info bi
left join productid_info pi on bi.product_id = pi.product_id
left join enterprise_info ei on pi.ec_id = ei.ec_id
left join ep_product_chargemode epc on ei.enterprise_id = epc.enterprise_id
# LEFT JOIN self_service_domain_config ssdc ON ei.enterprise_id = ssdc.tenant_id
where pi.cancel_status = 1
and ei.source = 'BSS'
and epc.product_state = 4
order by pi.business_start_time;
```
## 获得公司对应的平面信息
```sql
SELECT tenant_id, GROUP_CONCAT(domain) AS domains
FROM self_service_domain_config
WHERE tenant_id IN ('yloiy4ms-x7sldjk9gdnt2cib', 'migbq85b-3njr7ylfi1jantml', 'liyk5qv3-3frd1daqmgu0sfld',
'2gc5ewux-bpel3akyqelz96lm', 'xhrsfafr-d23mmlopgfouekx2', 'p7xvifuo-2bx1te6ywrw294ua')
GROUP BY tenant_id;
```
@@ -0,0 +1,27 @@
来源:测试
# 问题背景
![](../../../../attachment/images-paste/image-20240122134752202.png)
![](../../../../attachment/images-paste/image-20240122134824006.png)
ECName-1704869213
20240122141229.komect.com
域名表 无 A 域名 live 表有 A 域名但是为 true 删除
# 问题代码
![](../../../../attachment/images-paste/image-20240123144355544.png)
如果用了 Collections.singletonList(po) 后边不能再对集合进行增删改查
![](../../../../attachment/images-paste/image-20240123145139205.png)
查询条件过滤已经逻辑删除的
关键代码位置
com.cmcc.cdn.platform.selfservice.service.live.impl.LiveConfigServiceImpl#initLiveDomains
@@ -0,0 +1,17 @@
来源:生产
```log
2024-01-24 at 14:24:46 CST [http-nio-8080-exec-38154] INFO com.cmcc.cdn.platform.selfservice.xinan.XinAnApiService 293 postRequest - 获取信安备案号信息参数, url: http://117.136.191.91:7790/CDNISMS/QueryBeian?dns=, requestConfig: [expectContinueEnabled=false, proxy=null, localAddress=null, cookieSpec=null, redirectsEnabled=true, relativeRedirectsAllowed=true, maxRedirects=50, circularRedirectsAllowed=false, authenticationEnabled=true, targetPreferredAuthSchemes=null, proxyPreferredAuthSchemes=null, connectionRequestTimeout=20000, connectTimeout=20000, socketTimeout=30000, contentCompressionEnabled=true, normalizeUri=true], requestParamMap: ["res.longyujoy.com"]
2024-01-24 at 14:25:16 CST [http-nio-8080-exec-38154] WARN com.cmcc.cmhi.bb.utils.http.HttpUtils 189 post - HttpUtil.post socket timeouturl: http://117.136.191.91:7790/CDNISMS/QueryBeian?dns=, params: null, json: ["res.longyujoy.com"], contentType: application/json; charset=UTF-8, headers: null, requestConfig: [expectContinueEnabled=false, proxy=null, localAddress=null, cookieSpec=null, redirectsEnabled=true, relativeRedirectsAllowed=true, maxRedirects=50, circularRedirectsAllowed=false, authenticationEnabled=true, targetPreferredAuthSchemes=null, proxyPreferredAuthSchemes=null, connectionRequestTimeout=20000, connectTimeout=20000, socketTimeout=30000, contentCompressionEnabled=true, normalizeUri=true] java.net.SocketTimeoutException: Read timed out
```
![](../../../../attachment/images-paste/image-20240125180538256.png)
![](../../../../attachment/images-paste/image-20240125180549961.png)
```
请教个问题客户实际要用的域名为 res.longyujoy.com,但我提交试用流程的时候,验证提示 res.longyujoy.com 未备案(实际主体域名 longyujoy.com 已备案),我把流程和信安表里面都改为 longyujoy.com,流程才验证通过,那需求表里面也要同步改成 longyujoy.com 吗?如改动需求表中域名,会对客户业务产生影响吗?
```
![](../../../../attachment/images-paste/image-20240127160145843.png)
@@ -0,0 +1,46 @@
---
日期: 2024-01-29 21:19
来源: 张平
---
# 问题详情
202401291521 回退未删除企业信息
# 处理过程
现开户信息
19213331667@qq.com
testZL0126
19213331667
问题主要原因是调用 com.cmcc.cdn.platform.selfservice.controller.bpm.BpmController#bpmDrawBack 业务退回接口,当执行 com.cmcc.cdn.platform.selfservice.service.impl.TestOrderServiceImpl#testOrderRevoke 方法进行企业信息回退时被 com.cmcc.cdn.platform.selfservice.service.impl.TestOrderServiceImpl#checkParam(com.cmcc.cdn.platform.selfservice.entity.bboss.TestOrderInfo, java.lang.Long, java.lang.String, java.util.List<java.lang.String>) 方法校验报错。
报错内容是在 bss_order_file_temp 存在 md5 为‘fcnixsomrza2ceg23xjsplzfo’的一个附件,关联的 file_info 记录名称为 test240109.xls。
但是不知道 test240109.xls 这个附件是怎么引入的。
工单详情页也展示了这个 test240109.xls 记录,但是创单请求没有这个附件。
![](../../../../attachment/images-paste/image-20240129212045104.png)
# 代码位置
![](../../../../attachment/images-paste/image-20240129212053623.png)
# 总结
# 问题日志
com.cmcc.cdn.platform.selfservice.controller.OrderController#testOrder(com.cmcc.cdn.platform.selfservice.pojo.bboss.TestOrderFeedbackVO)
```
2024-01-29 07:29:10 [ibs-portal:chiqingguo57.cmp11428.openpf:8088,,,,] [http-nio-8088-exec-5] INFO com.cmcc.cdn.platform.common.OperationLog 87 info - [operation] 试用工单, [loc] 413 com.cmcc.cdn.platform.selfservice.controller.OrderController testOrder, [src] 18866220002cmcc, [msg] orderNum:202401291521, result:{success=true}
```
/order/security/upload
![](../../../../attachment/images-uuid/12a6e184e3504d6ca4f073b9ca8f717a.jpg)
@@ -0,0 +1,22 @@
---
日期: 2024-01-29 21:58
来源: BBOSS
---
# 问题详情
# 处理过程
# 代码位置
# 总结
信安答复网络问题
# 问题日志
```
2024-01-24 at 14:24:46 CST [http-nio-8080-exec-38154] INFO com.cmcc.cdn.platform.selfservice.xinan.XinAnApiService 293 postRequest - 获取信安备案号信息参数, url: http://117.136.191.91:7790/CDNISMS/QueryBeian?dns=, requestConfig: [expectContinueEnabled=false, proxy=null, localAddress=null, cookieSpec=null, redirectsEnabled=true, relativeRedirectsAllowed=true, maxRedirects=50, circularRedirectsAllowed=false, authenticationEnabled=true, targetPreferredAuthSchemes=null, proxyPreferredAuthSchemes=null, connectionRequestTimeout=20000, connectTimeout=20000, socketTimeout=30000, contentCompressionEnabled=true, normalizeUri=true], requestParamMap: ["res.longyujoy.com"]
2024-01-24 at 14:25:16 CST [http-nio-8080-exec-38154] WARN com.cmcc.cmhi.bb.utils.http.HttpUtils 189 post - HttpUtil.post socket timeouturl: http://117.136.191.91:7790/CDNISMS/QueryBeian?dns=, params: null, json: ["res.longyujoy.com"], contentType: application/json; charset=UTF-8, headers: null, requestConfig: [expectContinueEnabled=false, proxy=null, localAddress=null, cookieSpec=null, redirectsEnabled=true, relativeRedirectsAllowed=true, maxRedirects=50, circularRedirectsAllowed=false, authenticationEnabled=true, targetPreferredAuthSchemes=null, proxyPreferredAuthSchemes=null, connectionRequestTimeout=20000, connectTimeout=20000, socketTimeout=30000, contentCompressionEnabled=true, normalizeUri=true] java.net.SocketTimeoutException: Read timed out
```
@@ -0,0 +1,79 @@
---
日期: 2024-01-30 12:29
来源: 联调
---
# 问题详情
![](../../../../attachment/images-uuid/288fffe8b76e4e76a22276dacbdb498b.jpg)
![](../../../../attachment/images-uuid/4b8b5688343d418bbf2002ec8e6982d7.png)
# 处理过程
先考虑了 feign 日志。
![](../../../../attachment/images-uuid/6dff7becbc5244e18cf9cb9548a2cbc7.png)
![](../../../../attachment/images-paste/image-20240130123420932.png)
BPM 开放后
![](../../../../attachment/images-uuid/4c6703df0e474f93a0a902dbbefc6c73.png)
# 代码位置
com.cmcc.cdn.platform.selfservice.service.bpm.impl.BpmManageServiceImpl#closeBpmOrder
修改前备份
```java
/* 6.17.0版本需求:esop来源现网验收去掉只能选择验收通过的限制
* 因联调过程中发现,域名配置需求工单业务结束回滚后,无法修改重提下发BPM。暂时启用客户经理直接关单重提方案。
* 但业务结束回滚后关单此处BPM异常。故此处注释异常抛出,通过任务表记录状态,优化需求更新后再启用校验。
*/
BaseResponse response = null;
try {
BpmService bpmService = bpmManageTrancService.getBpmService();
response = bpmService.closeBpmOrder(closeOrderRequest);
} catch (Exception e) {
log.error("通知bpm关单失败: {}", e.getMessage(), e);
bpmTaskPO.setErrorMsg("通知bpm关单失败");
// throw new PlatformException("通知bpm关单失败");
}
log.info("close order response:{}", JSONObject.toJSONString(response));
if (ObjectUtils.isEmpty(response)) {
log.error("bpm关单响应为空");
bpmTaskPO.setErrorMsg("bpm关单响应为空");
}
if (!ObjectUtils.isEmpty(response) && 0 != response.getError_code()) {
log.error("bpm关单响应异常: {}", response.getError_msg());
bpmTaskPO.setErrorMsg("bpm关单响应异常");
// throw new PlatformException("BPM侧关单失败");
} else {
bpmTaskPO.setTaskState(BpmTaskStateEnum.SUCCESS.name());
bpmTaskPO.setErrorMsg("通知bpm关单成功");
}
bpmTaskDao.save(bpmTaskPO);
```
![](../../../../attachment/images-paste/image-20240130123600024.png)
![](../../../../attachment/images-paste/image-20240130123636689.png)
# 总结
直接 curl 发起关停重试
```shell
curl --location 'https://stgbpm-uops.cdn.10086.cn/runtime/v1/cdn/business/change/adaptation/closeOrder' \
--header 'AccessKey: Mlvb2EWP' \
--header 'Authorization: Bearer eyJhbGciOiJIUzUxMiJ9.eyJzdWIiOiJpYnNmcm9tenciLCJleHAiOjE3MDY2NjYzOTIsImlhdCI6MTcwNjU3OTk5Mn0.-eXR8-W0iyFXhYx7riDSyCTfTcC3MN5JMpto0Ww7IbFok2OwMatIlphw08prba_uTZciyRmjNDLZXNZn9j-moQ' \
--header 'Content-Type: application/json' \
--data '{"message":"手动终止","ibs_code":"001-20240130001","user_id":"840"}' \
--insecure
```
这次问题主要是因为个人观察响应结构疏忽,后边个人对响应结构的判断也要更加严谨。
# 问题日志
@@ -0,0 +1,107 @@
---
日期: 2024-01-31 09:19
来源: 客响
---
# 问题详情
![](../../../../attachment/images-paste/image-20240131092006635.png)
![](../../../../attachment/images-uuid/f3106f769cd2465fb8c781c31a30cbc4.png)
![](../../../../attachment/images-uuid/490617ec569e4459863a31eda4e47777.png)
# 处理过程
```
select *
from pipe_config_entity
where target_name in ('bucket-pc.51yuejiao.com',
'bucket01.51yuejiao.com',
'bucket02.51yuejiao.com');
select *
from sys_task_process_alarm
where tag like '%pm61a90a9469bd4ed6beec1a029b95ce7c%';
# pma1d0424b3fc94be6aecf0fbde8cda0b7
# pm04d1f194579f483fbb20edf442588dac
# pm61a90a9469bd4ed6beec1a029b95ce7c
select *
from work_order
where type = 'DOMAIN_DELETE'
and details like '%自助%'
and status = 'config'
and corp_name like '%辽宁%';
select *
from pipe_config_entity
where target_name in ('mw.shenyang.gov.cn',
'nyncj.shenyang.gov.cn',
'sjj.shenyang.gov.cn',
'sfj.shenyang.gov.cn',
'www.tiexi.gov.cn',
'www.sysic.cn',
'www.kangping.gov.cn',
'www.sydpf.cn',
'www.syast.org.cn',
'bucket-pc.51yuejiao.com',
'bucket01.51yuejiao.com',
'bucket02.51yuejiao.com',
'dfz.shenyang.gov.cn',
'www.23383838.com',
'www.sybws.com');
```
![](../../../../attachment/images-paste/image-20240131092331357.png)
# 代码位置
# 总结
```
'mw.shenyang.gov.cn',
'nyncj.shenyang.gov.cn',
'sjj.shenyang.gov.cn',
'sfj.shenyang.gov.cn',
'www.tiexi.gov.cn',
'www.sysic.cn',
'www.kangping.gov.cn',
'www.sydpf.cn',
'www.syast.org.cn',
'bucket-pc.51yuejiao.com',
'bucket01.51yuejiao.com',
'bucket02.51yuejiao.com',
'dfz.shenyang.gov.cn',
'www.23383838.com',
'www.sybws.com'
pm04d1f194579f483fbb20edf442588dac
pm04d1f194579f483fbb20edf442588dac
pm04d1f194579f483fbb20edf442588dac
pm04d1f194579f483fbb20edf442588dac
pma1d0424b3fc94be6aecf0fbde8cda0b7
pma1d0424b3fc94be6aecf0fbde8cda0b7
pma1d0424b3fc94be6aecf0fbde8cda0b7
pma1d0424b3fc94be6aecf0fbde8cda0b7
pma1d0424b3fc94be6aecf0fbde8cda0b7
pma1d0424b3fc94be6aecf0fbde8cda0b7
pma1d0424b3fc94be6aecf0fbde8cda0b7
pma1d0424b3fc94be6aecf0fbde8cda0b7
pma1d0424b3fc94be6aecf0fbde8cda0b7
pm61a90a9469bd4ed6beec1a029b95ce7c
pm61a90a9469bd4ed6beec1a029b95ce7c
pma1d0424b3fc94be6aecf0fbde8cda0b7(已处理)
pm04d1f194579f483fbb20edf442588dac
pm61a90a9469bd4ed6beec1a029b95ce7c
```
![](../../../../attachment/images-paste/image-20240131125518041.png)
# 问题日志
@@ -0,0 +1,105 @@
---
日期: 2024-02-02 20:47
来源: 客响
---
# 问题详情
![](../../../../attachment/images-paste/image-20240202205027283.png)
![](../../../../attachment/images-uuid/00a1a309f22e46baa83f2b14c4c27cc6.png)
"domain_id_cdnsys" : "YzWGrmLvU_125940"
"name" : "heze.la"
单位名称:菏泽日报社
# 处理过程
1、首先排查工单删除记录
![](../../../../attachment/images-uuid/07931ba56ef94e8cb86a867ea7957beb.png)
时间是 2024-01-17 at 15:49:54
![](../../../../attachment/images-paste/image-20240202205136751.png)
这会不会是个那种泛域名进来的。我去工单里搜罗下。只能再看看这个了。稍等。
有查询到 *.heze.la 的删除记录是 2023-07-28 at 23 点配管回调后。
但是信安的删除逻辑和日志看,如果是泛域名会通过 xinan_generic_exact_domain 找到对应的精确域名同步所以当时的日志显示 *.heze.la 回调同步信安删除的是 test.heze.la, domainIdCdnSys:YzWGrmLvU_pIZVIN 这个。
信安说 2020-12-18 15 我们同步了 heze.la,从工单记录没有定位到为啥会同步这个东西。
![](../../../../attachment/images-uuid/942b19c8ff824d819c77ab1024de7051.png)
# 代码位置
```
com.cmcc.cdn.platform.selfservice.service.impl.PortalInformationServiceImpl#notifyDeleteInformation
```
# 总结
![](../../../../attachment/images-paste/image-20240205142916028.png)
![](../../../../attachment/images-paste/image-20240205142929244.png)
![](../../../../attachment/images-paste/image-20240205143019448.png)
![](../../../../attachment/images-paste/image-20240205143359112.png)
![](../../../../attachment/images-paste/image-20240205143546829.png)
# 问题日志
```log
2024-01-17 at 15:49:53 CST [http-nio-8080-exec-875] INFO  com.cmcc.cdn.platform.selfservice.controller.pm.PmPipeCallbackController 47 addBpmContents - 蓝鲸配管 管道配置回调报文,request:{"data":[{"percent":1.0,"process":false,"reqType":"SELF_DOMAIN_DELETE","targetName":"wx.heze.la"},{"percent":1.0,"process":false,"reqType":"SELF_DOMAIN_DELETE","targetName":"dcwth.com"},{"percent":1.0,"process":false,"reqType":"SELF_DOMAIN_DELETE","targetName":"www.dcwth.com"},{"percent":1.0,"process":false,"reqType":"SELF_DOMAIN_DELETE","targetName":"fuwu.heze.la"},{"percent":1.0,"process":false,"reqType":"SELF_DOMAIN_DELETE","targetName":"www.heze.la"}],"messageId":"pm9470470e01b146fb89aba1bd349f7e69"}
2024-01-17 at 15:49:53 CST [http-nio-8080-exec-875] INFO  com.cmcc.cdn.platform.common.util.log.MonitorJsonLogUtil 110 jsonLogRemote - {"fromServer":"ibs-portal","monitorType":"apiQps","role":"","timeConsuming":41,"method":"/actionpm","guid":0,"businessType":"monitorTime"}
2024-01-17 at 15:49:53 CST [org.springframework.amqp.rabbit.RabbitListenerEndpointContainer#15-1] INFO  com.cmcc.cdn.platform.selfservice.service.taskprocess.TaskProcessHandleServiceImpl 61 handleEvent2 - start handle type:DOMAIN_B_PIPE, taskid:pm9470470e01b146fb89aba1bd349f7e69_exc
2024-01-17 at 15:49:53 CST [org.springframework.amqp.rabbit.RabbitListenerEndpointContainer#15-1] INFO  com.cmcc.cdn.platform.selfservice.rabbitmq.consumer.PipeCallBackDomainRecordConsumer 86 handleMessageId - [管道化任务回调]--->处理回调域名,messageId:pm9470470e01b146fb89aba1bd349f7e69
2024-01-17 at 15:49:53 CST [http-nio-8080-exec-846] INFO  com.cmcc.cdn.platform.selfservice.controller.pm.PmPipeCallbackController 47 addBpmContents - 蓝鲸配管 管道配置回调报文,request:{"data":[{"percent":1.0,"process":false,"reqType":"SELF_DOMAIN_DELETE","targetName":"imap.dijadechem.com"}],"messageId":"pma7f865f79e7d4ea8b99543b5374709d0"}
2024-01-17 at 15:49:53 CST [http-nio-8080-exec-846] INFO  com.cmcc.cdn.platform.common.util.log.MonitorJsonLogUtil 110 jsonLogRemote - {"fromServer":"ibs-portal","monitorType":"apiQps","role":"","timeConsuming":40,"method":"/actionpm","guid":0,"businessType":"monitorTime"}
2024-01-17 at 15:49:53 CST [org.springframework.amqp.rabbit.RabbitListenerEndpointContainer#15-1] INFO  com.cmcc.cdn.platform.selfservice.rabbitmq.consumer.PipeCallBackDomainRecordConsumer 127 handleMessageId - [管道化任务回调]--->messageId:pm9470470e01b146fb89aba1bd349f7e69单域名请求的处理
2024-01-17 at 15:49:53 CST [org.springframework.amqp.rabbit.RabbitListenerEndpointContainer#15-1] INFO  com.cmcc.cdn.platform.selfservice.rabbitmq.consumer.PipeCallBackDomainRecordConsumer 149 pipeLineCallback - [管道化任务回调]--->messageId:pm9470470e01b146fb89aba1bd349f7e69,targetName:wx.heze.la,percent:1.0,reqType:SELF_DOMAIN_DELETE
2024-01-17 at 15:49:53 CST [SimpleAsyncTaskExecutor-40] INFO  com.cmcc.cdn.platform.selfservice.trace.DomainTraceLog 39 printDomainTraceLog - 1705506593768|域名删除|144781|wx.heze.la|回调操作|DELETE|orderNum is deleteOrderId,删除域名
2024-01-17 at 15:49:53 CST [org.springframework.amqp.rabbit.RabbitListenerEndpointContainer#15-1] INFO  com.cmcc.cdn.platform.selfservice.service.impl.PortalInformationTransServiceImpl 46 deleteDomain - domain:wx.heze.la, domainIdCdnSys:YzWGrmLvU_pRsLfz
2024-01-17 at 15:49:54 CST [org.springframework.amqp.rabbit.RabbitListenerEndpointContainer#15-1] INFO  com.cmcc.cdn.platform.selfservice.service.impl.PortalInformationTransServiceImpl 52 deleteDomain - 域名删除同步信安,domainIdCdnSys:{"delete_domain_info_list":[{"domain_id_cdnsys":"YzWGrmLvU_pRsLfz"}]}
2024-01-17 at 15:49:54 CST [org.springframework.amqp.rabbit.RabbitListenerEndpointContainer#15-1] INFO  com.cmcc.cdn.platform.selfservice.service.impl.BigCloudBasicInfoServiceImpl 1261 getToken - 【请求信安获取认证接口】从redis获取Authorization成功,Authorization:Bearer 16rhAMLv1KAzwkN5RwKupgfilNC67V
2024-01-17 at 15:49:54 CST [org.springframework.amqp.rabbit.RabbitListenerEndpointContainer#15-1] INFO  com.cmcc.cdn.platform.selfservice.service.impl.BigCloudBasicInfoServiceImpl 1527 deletedInformationDomainInfo - {"delete_domain_info_list":[{"domain_id_cdnsys":"YzWGrmLvU_pRsLfz"}]}
2024-01-17 at 15:49:54 CST [org.springframework.amqp.rabbit.RabbitListenerEndpointContainer#15-1] INFO  com.cmcc.cdn.platform.selfservice.service.impl.BigCloudBasicInfoServiceImpl 969 lambda$repeatXinan$0 - 【请求信安接口】同步请求, param:{"delete_domain_info_list":[{"domain_id_cdnsys":"YzWGrmLvU_pRsLfz"}]}
2024-01-17 at 15:49:56 CST [org.springframework.amqp.rabbit.RabbitListenerEndpointContainer#15-1] INFO  com.cmcc.cdn.platform.common.util.HttpUtil 342 doHttpRequest2 - url:https://117.136.191.90:5151/v1.0/delete_domain_info, method:post, 返回的状态码为:200
2024-01-17 at 15:49:56 CST [org.springframework.amqp.rabbit.RabbitListenerEndpointContainer#15-1] INFO  com.cmcc.cdn.platform.common.util.HttpUtil 348 doHttpRequest2 - url:https://117.136.191.90:5151/v1.0/delete_domain_info, method:post, 返回的请求体:{"sync_success_num": 1, "code": 0, "chk_fail_dict_l": []}
2024-01-17 at 15:49:56 CST [org.springframework.amqp.rabbit.RabbitListenerEndpointContainer#15-1] INFO  com.cmcc.cdn.platform.common.util.log.MonitorJsonLogUtil 110 jsonLogRemote - {"fromServer":"ibs-portal","monitorType":"httpQps","role":"","timeConsuming":2254,"method":"https://117.136.191.90:5151/v1.0/delete_domain_info","guid":0,"enterpriseId":"","businessType":"monitorTime"}
2024-01-17 at 15:49:56 CST [org.springframework.amqp.rabbit.RabbitListenerEndpointContainer#15-1] INFO  com.cmcc.cdn.platform.selfservice.service.impl.BigCloudBasicInfoServiceImpl 973 lambda$repeatXinan$0 - 【请求信安接口】param:{"delete_domain_info_list":[{"domain_id_cdnsys":"YzWGrmLvU_pRsLfz"}]}, 返回结果:{resp={"sync_success_num": 1, "code": 0, "chk_fail_dict_l": []}, status=200}
2024-01-17 at 15:49:56 CST [org.springframework.amqp.rabbit.RabbitListenerEndpointContainer#15-1] INFO  com.cmcc.cdn.platform.selfservice.service.impl.BigCloudBasicInfoServiceImpl 1536 deletedInformationDomainInfo - informatiuonTokenResponse:"{\"sync_success_num\": 1, \"code\": 0, \"chk_fail_dict_l\": []}"
2024-01-17 at 15:49:56 CST [org.springframework.amqp.rabbit.RabbitListenerEndpointContainer#15-1] INFO  com.cmcc.cdn.platform.selfservice.service.impl.BigCloudBasicInfoServiceImpl 1538 deletedInformationDomainInfo - informatiuonTokenResponse:{"chk_fail_dict_l":[],"code":0,"sync_success_num":"1"}
2024-01-17 at 15:49:56 CST [org.springframework.amqp.rabbit.RabbitListenerEndpointContainer#15-1] INFO  com.cmcc.cdn.platform.selfservice.service.impl.LogSubscribeServiceImpl 4543 updateLogSubscribe - updateLogSubscribe start,deleteDomain:wx.heze.la enterpriseId:2imlh6oy-8daggd4bfcqyt4mb
2024-01-17 at 15:49:56 CST [org.springframework.amqp.rabbit.RabbitListenerEndpointContainer#15-1] INFO  com.cmcc.cdn.platform.selfservice.service.impl.LogSubscribeServiceImpl 4567 updateLogSubscribe - updateLogSubscribe end...
2024-01-17 at 15:49:56 CST [org.springframework.amqp.rabbit.RabbitListenerEndpointContainer#15-1] INFO  com.cmcc.cdn.platform.selfservice.service.impl.DomainDeleteTrancServiceImpl 588 deleteDomainFromIbs - 域名 wx.heze.la 被删除
```

Some files were not shown because too many files have changed in this diff Show More