java.lang.RuntimeException: java.security.GeneralSecurityException: org.bouncycastle.crypto.InvalidCipherTextException: pad block corrupted

[sathwikr076]

Hi,

We have added new search head to the cluster and when we try to do some db query we are getting the above error. We tested using individual search heads and it was running fine in other two search heads. The problem here is we are using DB connect 3 in cluster environment, which is not recommended by splunk. Please let us know if anyone have any idea about this.

Thanks,
Sathwik.

[sathwikr076 · Accepted solution]

identity.dat file is not updated properly on to the Sh3 that we added in the cluster and that was causing that problem. It was continuously contacting the database and after few failed attempts causing the account to be locked and making the database not available to other search heads as well. So when we made identity.dat file same as other search heads, the issue got resolved.

Thanks.