Symantec Privileged Access Management

 View Only
  • 1.  Proxy_ssh connection error

    Broadcom Employee
    Posted Oct 17, 2015 06:29 AM

    Hi

     

    Customer is using PIM 12.9, when trying to connect to one of the servers with root account over proxy_ssh he gets error " [client_errors.undefined] "

    Reinstalling the product didn't help.

    This happens only on one server, other ones are working fine.

     

    here is the support.sh file

    ftp://supportftp.ca.com/0931457/00220125/files_from_customer/support_PEBSAPP2.201510121349EET.tar.Z

     

    Any suggestions?

    Thanks



  • 2.  Re: Proxy_ssh connection error

    Posted Oct 17, 2015 01:50 PM

    HI

    i am the customer who open that issue

    al  i had noticed on this log :

    the successful connection was like that:

    2015-10-12 15:50:39.300 | DEBUG | 1759892-58 | com.ca.ppm.proxymanager.jms.JMSComm               :97    | Send PROXY_GET_ACCESS_BY_TICKET request to the server

    2015-10-12 15:50:39.485 | DEBUG | 1759892-58 | com.ca.ppm.proxymanager.webservices.ProxySessionsWS:98    | PROXY_GET_ACCESS_BY_TICKET Message received from ENTM in: 185 milliseconds

    2015-10-12 15:50:39.623 | DEBUG | 1759892-58 | com.ca.ppm.proxymanager.webservices.ProxySessionsWS:114   | Processing onSessionLogin request session Id: 46a14292-3b96-4879-8681-17fa53267e58; session details: {"proxyType":"SSH" "result":"success" "numericID":"8295" "recordingFile":"/var/log/samproxy/46a14292-3b96-4879-8681-17fa53267e58_out"}

     

    -> we can see that it was send by  its type , and id and recording file path

     

    while the failure one is just like that:

    2015-10-12 15:57:55.286 | DEBUG | 1759892-89 | com.ca.ppm.proxymanager.jms.JMSComm               :97    | Send PROXY_GET_ACCESS_BY_TICKET request to the server

    2015-10-12 15:57:55.444 | DEBUG | 1759892-89 | com.ca.ppm.proxymanager.webservices.ProxySessionsWS:98    | PROXY_GET_ACCESS_BY_TICKET Message received from ENTM in: 159 milliseconds

    2015-10-12 16:05:43.437 | DEBUG | 759892-100 | com.ca.ppm.proxymanager.webservices.ProxySessionsWS:44    | Processing getAccDetails request session ID: add9e1cf-f2e1-4e95-9ee4-58f1aae9ac57

    2015-10-12 16:05:43.439 | DEBUG | 759892-100 | com.ca.ppm.proxymanager.jms.JMSComm               :97    | Send PROXY_GET_ACCESS_BY_TICKET request to the server

    2015-10-12 16:05:43.603 | DEBUG | 759892-100 | com.ca.ppm.proxymanager.webservices.ProxySessionsWS:98    | PROXY_GET_ACCESS_BY_TICKET Message received from ENTM in: 164 milliseconds

     

    nothing is being sent by the server.

     

    waiting your comments



  • 3.  Re: Proxy_ssh connection error
    Best Answer

    Posted Oct 20, 2015 06:34 PM

    it was conflict of the naming convention between the suffix of the endpoint server and what is in the hosts file on the ENTM (and proxy) server , once the two are the same , it works fine.

    the thing that were misleading here that the msg appear on the connection  screen " [client_errors.undefined] "

    and also the output in the proxyserver.log about those connection with error ,,, just nothing with no details as the parts i put above.


    thanks , it is solved now