Symptoms

  1. API method pem.syncNameServers.xml fails for domain domain.tld with error:

    [root@core ~]# cat pem.syncNameServers.xml
<?xml version="1.0"?>
<methodCall>
  <methodName>pem.syncNameServers</methodName>
  <params>
    <param>
      <value>
        <struct>
          <member>
            <name>domain_name</name>
            <value><string>domain.tld</string></value>
          </member>
        </struct>
      </value>
    </param>
  </params>
</methodCall>

    Server response:

            <?xml version="1.0" encoding="UTF-8"?><methodResponse><params><param><value><struct><member><name>module_id</name><value><string>DnsZoneMutator</string></value></member><member><name>error_message</name><value><string>Could not persist APS entity "http://parallels.com/aps/types/pa/dns/zone/1.0"</string></value></member><member><name>error_code</name><value><i4>1</i4></value></member><member><name>extype_id</name><value><i4>1</i4></value></member><member><name>properties</name><value><struct><member><name>domain_name</name><value><string>domain.tld</string></value></member></struct></value></member><member><name>status</name><value><i4>-1</i4></value></member></struct></value></param></params>

  2. Not possible to add new DNS record for affected domain. From /var/log/pa/core.log the following error appears at the same time:

    Feb 15 15:43:46.899 : DBG [UI:58c7ee38:4497742:1518727426389 p:-default-threadpool;-w:-Idle:873 pau]: c.p.p.c.ServiceInvoker DnsZoneMutator invocation failedjavax.ejb.EJBTransactionRolledbackException: Could not persist APS entity "http://aps-standard.org/types/dns/record/1.0"
...
Caused by: com.parallels.pa.service.aps.exception.APSInvocationException: com.parallels.pa.service.aps.exception.APSInvocationException: Unable to refer the resource  '2393f810-0a4a-46ef-a8d1-d1dceba88848' out of limits.

  3. Switch DNS hosting to External/Internal from PCP/RCP/CCP for affected domain finishes with error:

    An unforeseen error occurred

  4. APS resource of DNS zone is linked to Account, for example to Account wuth ID 1000001:

    [root@core ~]# curl -k -E /usr/local/pem/APS/certificates/poa.pem 'https://localhost:6308/aps/2/resources/2393f810-0a4a-46ef-a8d1-d1dceba88848/account' -X GET
[
        {
                "aps":
                {
                    "type": "http://parallels.com/aps/types/pa/account/1.2",
                    "id": "8ca87777-8b49-4b69-8402-e14828e8cc23",
                    "status": "aps:ready",
                ...
                },
                ...
                "companyName": "Neverhood Inc.",
                "id": 1000001,
                "type": "CLIENT"
        }
]

  5. There are 2 APS resources for Account with ID 1000001:

    [root@core ~]# curl -k -E /usr/local/pem/APS/certificates/poa.pem 'https://localhost:6308/aps/2/resources?implementing(http://parallels.com/aps/types/pa/account/1.2),eq(id,1000001)' -X GET

[
        {
                "aps":
                {
                    "type": "http://parallels.com/aps/types/pa/account/1.2",
                    "id": "742e4ebc-17d4-4009-a2a4-3ae653f1d9bd",
                    "status": "aps:ready",
                    "revision": 2,
                    "modified": "2017-10-30T12:37:54Z"
                },
                ...
                "companyName": "Neverhood Inc."
                ...
                "id": 1000001,
                "locked": false,
                "personal": false,
                "techContact":
                ...
                "type": "CLIENT"
                },

    And second with same id but different properties:

    {
        "aps":
        {
                "type": "http://parallels.com/aps/types/pa/account/1.2",
                "id": "8ca87777-8b49-4b69-8402-e14828e8cc23",
                "status": "aps:ready",
                "revision": 2,
                "modified": "2017-10-30T12:37:59Z"
        },
        ...
        "companyName": "Neverhood Inc.",
        "id": 1000001,
        "type": "CLIENT"
}
  6. Domain subscription was transfered from one account to another.

Cause

The cause of the error is a discrepancy between the domain and Account owner value in domain's APS resource. The root cause behind such discrepancy has not been revealed yet.

Resolution

Contact Odin Technical Support to apply a workaround.

Internal content

Link on internal Article