AEM 6.1 to 6.3 in place upgrade issue | Community
Skip to main content
D
Dineshkumar_L
Level 3
July 16, 2018
Solved

AEM 6.1 to 6.3 in place upgrade issue

  • July 16, 2018
  • 5 replies
  • 3224 views

Hi All,

I am upgrading AEM 6.1 to 6.3 and encountered some issue along the way.

Content migration process:

java -Xmx4096m -jar cq-publish-p4503.jar -v -x crx2oak -xargs -- --load-profile segment-no-ds

Upgrade command:

java -Xmx4096m -XX:MaxPermSize=2048m -jar aem6-author-p4502.jar -Dsling.run.modes=author,crx3,crx3tar

Below is the log error:

15.07.2018 10:11:59.948 *INFO*  [com.adobe.granite.quickstart.base.impl.upgrade.UpgradeUtil] UpgradeUtil.java:769  Writing installer state
15.07.2018 10:17:43.711 *ERROR* [FelixStartLevel] com.adobe.cq.upgradesexecutor.Activator OSGI installer finished and the upgrade task condition was not satisfied. Executing installed upgrade tasks but most likely one of the mandatory upgrade tasks was not executed. Please check the log file.
15.07.2018 10:18:47.272 *ERROR* [FelixStartLevel] com.day.cq.compat.codeupgrade.impl.cq62.Cq62FormsContentUpgrade Exception in updating ACL
javax.jcr.AccessDeniedException: Access denied.
at org.apache.jackrabbit.oak.spi.security.authorization.accesscontrol.AbstractAccessControlManager.checkPermissions(AbstractAccessControlManager.java:200)
at org.apache.jackrabbit.oak.spi.security.authorization.accesscontrol.AbstractAccessControlManager.getTree(AbstractAccessControlManager.java:167)
at org.apache.jackrabbit.oak.spi.security.authorization.cug.impl.CugAccessControlManager.getCugPolicy(CugAccessControlManager.java:239)
at org.apache.jackrabbit.oak.spi.security.authorization.cug.impl.CugAccessControlManager.getApplicablePolicies(CugAccessControlManager.java:137)
at org.apache.jackrabbit.oak.security.authorization.composite.CompositeAccessControlManager.getApplicablePolicies(CompositeAccessControlManager.java:99)
at org.apache.jackrabbit.oak.jcr.delegate.AccessControlManagerDelegator$7.perform(AccessControlManagerDelegator.java:121)
at org.apache.jackrabbit.oak.jcr.delegate.AccessControlManagerDelegator$7.perform(AccessControlManagerDelegator.java:117)
at org.apache.jackrabbit.oak.jcr.delegate.SessionDelegate.perform(SessionDelegate.java:208)
at org.apache.jackrabbit.oak.jcr.delegate.AccessControlManagerDelegator.getApplicablePolicies(AccessControlManagerDelegator.java:117)
at org.apache.jackrabbit.oak.jcr.delegate.JackrabbitAccessControlManagerDelegator.getApplicablePolicies(JackrabbitAccessControlManagerDelegator.java:147)
at org.apache.jackrabbit.commons.jackrabbit.authorization.AccessControlUtils.getAccessControlList(AccessControlUtils.java:128)
at com.day.cq.compat.codeupgrade.impl.cq62.Cq62FormsContentUpgrade.reorderACLs(Cq62FormsContentUpgrade.java:118)
at com.day.cq.compat.codeupgrade.impl.cq62.Cq62FormsContentUpgrade.doUpgrade(Cq62FormsContentUpgrade.java:102)
at com.day.cq.compat.codeupgrade.impl.AbstractCodeUpgradeTask.run(AbstractCodeUpgradeTask.java:64)
at com.adobe.cq.upgradesexecutor.Activator.runUpgradeTasks(Activator.java:350)
at com.adobe.cq.upgradesexecutor.Activator.finishUpgradeExecution(Activator.java:220)
at com.adobe.cq.upgradesexecutor.Activator.start(Activator.java:170)
at org.apache.felix.framework.util.SecureAction.startActivator(SecureAction.java:697)
at org.apache.felix.framework.Felix.activateBundle(Felix.java:2227)
at org.apache.felix.framework.Felix.startBundle(Felix.java:2145)
at org.apache.felix.framework.Felix.setActiveStartLevel(Felix.java:1372)
at org.apache.felix.framework.FrameworkStartLevelImpl.run(FrameworkStartLevelImpl.java:308)
at java.lang.Thread.run(Thread.java:748)
15.07.2018 10:18:47.272 *ERROR* [FelixStartLevel] com.day.cq.compat.codeupgrade.impl.cq62.Cq62FormsContentUpgrade Exception in Cq62FormsContentUpgrade.run()
javax.jcr.AccessDeniedException: Access denied.
at org.apache.jackrabbit.oak.spi.security.authorization.accesscontrol.AbstractAccessControlManager.checkPermissions(AbstractAccessControlManager.java:200)
at org.apache.jackrabbit.oak.spi.security.authorization.accesscontrol.AbstractAccessControlManager.getTree(AbstractAccessControlManager.java:167)
at org.apache.jackrabbit.oak.spi.security.authorization.cug.impl.CugAccessControlManager.getCugPolicy(CugAccessControlManager.java:239)
at org.apache.jackrabbit.oak.spi.security.authorization.cug.impl.CugAccessControlManager.getApplicablePolicies(CugAccessControlManager.java:137)
at org.apache.jackrabbit.oak.security.authorization.composite.CompositeAccessControlManager.getApplicablePolicies(CompositeAccessControlManager.java:99)
at org.apache.jackrabbit.oak.jcr.delegate.AccessControlManagerDelegator$7.perform(AccessControlManagerDelegator.java:121)
at org.apache.jackrabbit.oak.jcr.delegate.AccessControlManagerDelegator$7.perform(AccessControlManagerDelegator.java:117)
at org.apache.jackrabbit.oak.jcr.delegate.SessionDelegate.perform(SessionDelegate.java:208)
at org.apache.jackrabbit.oak.jcr.delegate.AccessControlManagerDelegator.getApplicablePolicies(AccessControlManagerDelegator.java:117)
at org.apache.jackrabbit.oak.jcr.delegate.JackrabbitAccessControlManagerDelegator.getApplicablePolicies(JackrabbitAccessControlManagerDelegator.java:147)
at org.apache.jackrabbit.commons.jackrabbit.authorization.AccessControlUtils.getAccessControlList(AccessControlUtils.java:128)
at com.day.cq.compat.codeupgrade.impl.cq62.Cq62FormsContentUpgrade.reorderACLs(Cq62FormsContentUpgrade.java:118)
at com.day.cq.compat.codeupgrade.impl.cq62.Cq62FormsContentUpgrade.doUpgrade(Cq62FormsContentUpgrade.java:102)
at com.day.cq.compat.codeupgrade.impl.AbstractCodeUpgradeTask.run(AbstractCodeUpgradeTask.java:64)
at com.adobe.cq.upgradesexecutor.Activator.runUpgradeTasks(Activator.java:350)
at com.adobe.cq.upgradesexecutor.Activator.finishUpgradeExecution(Activator.java:220)
at com.adobe.cq.upgradesexecutor.Activator.start(Activator.java:170)
at org.apache.felix.framework.util.SecureAction.startActivator(SecureAction.java:697)
at org.apache.felix.framework.Felix.activateBundle(Felix.java:2227)
at org.apache.felix.framework.Felix.startBundle(Felix.java:2145)
at org.apache.felix.framework.Felix.setActiveStartLevel(Felix.java:1372)
at org.apache.felix.framework.FrameworkStartLevelImpl.run(FrameworkStartLevelImpl.java:308)
at java.lang.Thread.run(Thread.java:748)
15.07.2018 10:18:48.340 *ERROR* [FelixStartLevel] com.adobe.cq.upgradesexecutor.Activator Missing pacakges health check failed:
15.07.2018 10:18:48.340 *ERROR* [FelixStartLevel] com.adobe.cq.upgradesexecutor.Activator Bundle com.ebmpapst.ebmpapst-bundle:1.0.0.SNAPSHOT is in the following state: Installed
15.07.2018 10:18:48.340 *ERROR* [FelixStartLevel] com.adobe.cq.upgradesexecutor.Activator Bundle com.adobe.acs.acs-aem-commons-bundle:2.12.0 is in the following state: Installed
15.07.2018 10:18:48.340 *ERROR* [FelixStartLevel] com.adobe.cq.upgradesexecutor.Activator The following imported required packages are unsatisfied: 
15.07.2018 10:18:48.340 *ERROR* [FelixStartLevel] com.adobe.cq.upgradesexecutor.Activator (&(osgi.wiring.package=com.day.cq.dam.commons.process)(version>=1.1.0)(!(version>=2.0.0))) from bundle com.day.cq.dam.cq-dam-commons. The exported package exists and exported by com.day.cq.dam.cq-dam-commons but it's out of the importing range.
15.07.2018 10:18:48.340 *ERROR* [FelixStartLevel] com.adobe.cq.upgradesexecutor.Activator (&(osgi.wiring.package=com.day.cq.workflow.exec)(version>=0.0.0)(!(version>=1.0.0))) from bundle com.day.cq.workflow.cq-workflow-api. The exported package exists and exported by com.day.cq.workflow.cq-workflow-api but it's out of the importing range.
15.07.2018 10:18:48.340 *ERROR* [FelixStartLevel] com.adobe.cq.upgradesexecutor.Activator (&(osgi.wiring.package=com.day.cq.widget)(version>=5.5.0)(!(version>=6.0.0))) from bundle com.day.cq.cq-widgets. The exported package exists and exported by com.day.cq.cq-widgets but it's out of the importing range.
15.07.2018 10:18:48.340 *ERROR* [FelixStartLevel] com.adobe.cq.upgradesexecutor.Activator (&(osgi.wiring.package=com.day.cq.mailer)(version>=5.8.0)(!(version>=6.0.0))) from bundle com.day.cq.cq-mailer. The exported package exists and exported by com.day.cq.cq-mailer but it's out of the importing range.
15.07.2018 10:18:48.340 *ERROR* [FelixStartLevel] com.adobe.cq.upgradesexecutor.Activator (&(osgi.wiring.package=com.day.cq.workflow)(version>=0.0.0)(!(version>=1.0.0))) from bundle com.day.cq.workflow.cq-workflow-api. The exported package exists and exported by com.day.cq.workflow.cq-workflow-api but it's out of the importing range.
15.07.2018 10:18:48.340 *ERROR* [FelixStartLevel] com.adobe.cq.upgradesexecutor.Activator (&(osgi.wiring.package=com.day.jcr.vault.fs.config)(version>=2.4.0)(!(version>=3.0.0)))
15.07.2018 10:18:48.340 *ERROR* [FelixStartLevel] com.adobe.cq.upgradesexecutor.Activator (&(osgi.wiring.package=com.day.cq.security)(version>=0.0.0)(!(version>=1.0.0))) from bundle com.day.cq.cq-security-api. The exported package exists and exported by com.day.cq.cq-security-api but it's out of the importing range.
15.07.2018 10:18:48.340 *ERROR* [FelixStartLevel] com.adobe.cq.upgradesexecutor.Activator (&(osgi.wiring.package=com.day.cq.commons)(version>=5.7.0)(!(version>=6.0.0))) from bundle com.day.cq.cq-commons. The exported package exists and exported by com.day.cq.cq-commons but it's out of the importing range.
15.07.2018 10:18:48.340 *ERROR* [FelixStartLevel] com.adobe.cq.upgradesexecutor.Activator (&(osgi.wiring.package=com.day.cq.commons.jcr)(version>=5.7.0)(!(version>=6.0.0))) from bundle com.day.cq.cq-commons. The exported package exists and exported by com.day.cq.cq-commons but it's out of the importing range.
15.07.2018 10:18:48.340 *ERROR* [FelixStartLevel] com.adobe.cq.upgradesexecutor.Activator (&(osgi.wiring.package=com.day.cq.workflow.collection)(version>=0.0.0)(!(version>=1.0.0))) from bundle com.day.cq.workflow.cq-workflow-api. The exported package exists and exported by com.day.cq.workflow.cq-workflow-api but it's out of the importing range.
15.07.2018 10:18:48.340 *ERROR* [FelixStartLevel] com.adobe.cq.upgradesexecutor.Activator (&(osgi.wiring.package=com.day.cq.workflow.model)(version>=0.0.0)(!(version>=1.0.0))) from bundle com.day.cq.workflow.cq-workflow-api. The exported package exists and exported by com.day.cq.workflow.cq-workflow-api but it's out of the importing range.
15.07.2018 10:18:48.340 *ERROR* [FelixStartLevel] com.adobe.cq.upgradesexecutor.Activator (&(osgi.wiring.package=org.apache.jackrabbit.oak.commons)(version>=1.0.0)(!(version>=2.0.0))) from bundle org.apache.jackrabbit.oak-commons. The exported package exists and exported by org.apache.jackrabbit.oak-commons but it's out of the importing range.
15.07.2018 10:18:48.340 *ERROR* [FelixStartLevel] com.adobe.cq.upgradesexecutor.Activator (&(osgi.wiring.package=io.sightly.java.api)(version>=3.0.0)(!(version>=4.0.0)))
15.07.2018 10:18:48.340 *ERROR* [FelixStartLevel] com.adobe.cq.upgradesexecutor.Activator (&(osgi.wiring.package=org.apache.sling.event.jobs)(version>=1.4.0)(!(version>=2.0.0))) from bundle org.apache.sling.event. The exported package exists and exported by org.apache.sling.event but it's out of the importing range.
15.07.2018 10:18:48.340 *ERROR* [FelixStartLevel] com.adobe.cq.upgradesexecutor.Activator (&(osgi.wiring.package=com.day.cq.wcm.workflow.process)(version>=5.7.0)(!(version>=6.0.0))) from bundle com.day.cq.wcm.cq-wcm-workflow. The exported package exists and exported by com.day.cq.wcm.cq-wcm-workflow but it's out of the importing range.
15.07.2018 10:18:48.340 *ERROR* [FelixStartLevel] com.adobe.cq.upgradesexecutor.Activator (&(osgi.wiring.package=com.day.cq.workflow.exec.filter)(version>=0.0.0)(!(version>=1.0.0))) from bundle com.day.cq.workflow.cq-workflow-api. The exported package exists and exported by com.day.cq.workflow.cq-workflow-api but it's out of the importing range.
15.07.2018 10:18:48.340 *ERROR* [FelixStartLevel] com.adobe.cq.upgradesexecutor.Activator (&(osgi.wiring.package=com.day.cq.replication)(version>=5.15.0)(!(version>=6.0.0))) from bundle com.day.cq.cq-replication. The exported package exists and exported by com.day.cq.cq-replication but it's out of the importing range.
15.07.2018 10:18:48.340 *ERROR* [FelixStartLevel] com.adobe.cq.upgradesexecutor.Activator (&(osgi.wiring.package=org.apache.sling.event)(version>=2.4.0)(!(version>=3.0.0)))
15.07.2018 10:18:48.340 *ERROR* [FelixStartLevel] com.adobe.cq.upgradesexecutor.Activator (&(osgi.wiring.package=com.day.cq.replication)(version>=5.18.0)(!(version>=6.0.0))) from bundle com.day.cq.cq-replication. The exported package exists and exported by com.day.cq.cq-replication but it's out of the importing range.
15.07.2018 10:18:48.340 *ERROR* [FelixStartLevel] com.adobe.cq.upgradesexecutor.Activator (&(osgi.wiring.package=com.day.jcr.vault.fs.filter)(version>=2.4.0)(!(version>=3.0.0)))
15.07.2018 10:18:48.340 *ERROR* [FelixStartLevel] com.adobe.cq.upgradesexecutor.Activator (&(osgi.wiring.package=com.day.jcr.vault.packaging)(version>=2.4.0)(!(version>=3.0.0)))
15.07.2018 10:18:48.340 *ERROR* [FelixStartLevel] com.adobe.cq.upgradesexecutor.Activator (&(osgi.wiring.package=com.day.cq.workflow.metadata)(version>=0.0.0)(!(version>=1.0.0))) from bundle com.day.cq.workflow.cq-workflow-api. The exported package exists and exported by com.day.cq.workflow.cq-workflow-api but it's out of the importing range.
15.07.2018 10:18:48.340 *ERROR* [FelixStartLevel] com.adobe.cq.upgradesexecutor.Activator (&(osgi.wiring.package=com.day.jcr.vault.fs.api)(version>=2.4.0)(!(version>=3.0.0)))
15.07.2018 10:18:48.340 *ERROR* [FelixStartLevel] com.adobe.cq.upgradesexecutor.Activator (&(osgi.wiring.package=com.day.jcr.vault.util)(version>=2.4.0)(!(version>=3.0.0)))
15.07.2018 10:18:48.340 *ERROR* [FelixStartLevel] com.adobe.cq.upgradesexecutor.Activator (&(osgi.wiring.package=com.day.jcr.vault.fs.io)(version>=2.4.0)(!(version>=3.0.0)))
15.07.2018 10:18:48.340 *ERROR* [FelixStartLevel] com.adobe.cq.upgradesexecutor.Activator (&(osgi.wiring.package=com.day.cq.workflow.collection.util)(version>=0.0.0)(!(version>=1.0.0))) from bundle com.day.cq.workflow.cq-workflow-api. The exported package exists and exported by com.day.cq.workflow.cq-workflow-api but it's out of the importing range.

Any pointers to resolve the above failed task?

Thanks!

Dinesh kumar L.

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by Dineshkumar_L

Hi All,

Thanks for all your pointers. By raising a daycare support ticket, we got this issue resolved.

By giving jcr:all access rights to the path /content for everyone group the issue got resolved.

PS: Add the permissions only via crx/de in case of AEM6.1 under the "Access control" tab as highlighted below. If we give full access via the useradmin console, the access permissions are not applying properly.

Post upgrade, we can remove the full access given to the everyone group.

Thanks,

Dinesh kumar L

5 replies

smacdonald2008
smacdonald2008
Level 10
July 16, 2018

AFter talking to our team on this - they suggested this:

Might be OS level permissions to …/crx-quickstart/launchpad foler

Can you please check the permissions.

K
Adobe Employee
KunwarsalujaAdobe Employee
Adobe Employee
July 16, 2018

DNashKL​ Check the path '/content/forms/af' and check the rep:policy nodes under it as one of the users or permissions might be missing here. Compare it with OOTB AEM instance and make adjustments

D
Dineshkumar_LAuthor
Level 3
July 17, 2018

Hi Smacdonald,

Thanks for the pointers. Please find the below OS level permissions:

Regards,

Dinesh kumar L.

D
Dineshkumar_LAuthor
Level 3
July 17, 2018

Hi Kunwar,

Thanks for the check points. I am not seeing any abnormal differences in the rep:policy. Below are the snaps for your reference:

In AEM 6.1 + SP2 + CFP16 Vanilla instance:

In our AEM instance - Which is again AEM 61 + SP2 + CFP16 + few hot fixes:

There are no deny rep:policies.

Thanks,

Dinesh kumar L. 

D
Dineshkumar_LAuthorAccepted solution
Level 3
August 3, 2018

Hi All,

Thanks for all your pointers. By raising a daycare support ticket, we got this issue resolved.

By giving jcr:all access rights to the path /content for everyone group the issue got resolved.

PS: Add the permissions only via crx/de in case of AEM6.1 under the "Access control" tab as highlighted below. If we give full access via the useradmin console, the access permissions are not applying properly.

Post upgrade, we can remove the full access given to the everyone group.

Thanks,

Dinesh kumar L

Terms & ConditionsAccessibility statement

Loading footer...