Symantec Privileged Access Management

 View Only
  • 1.  Checking for update failed. Reason: Permission dennied: connect

    Posted Aug 13, 2020 07:36 AM
    Hi Communuties, I have deploied a new Win OS 7 Virtual Machine, using VPN to connect to PAM, testing with Local Admin, non-admin, UAC is disabled, Firewall is disabled no anti-virus installed and right after insert the pam address (ip, hostname, fqdn, cache clear, Connect and WEB mode  etc) and hit Connect I get this error:

    Checking for update failed. Reason: Permission dennied: connect



    All works fine in Browser.

    I have a ticket in supported by was underring if it cloud be due my OS or something locally.

    See the logs from my client:

    2020-08-13 08:30:36 ERROR - Loading client structure failed by unknown reason     com.ca.client.updater.DefaultClientStructureListener [RMI TCP Connection(4)-127.0.0.1]2020-08-13 08:30:36 ERROR - Loading client structure failed by unknown reason     com.ca.client.updater.DefaultClientStructureListener [RMI TCP Connection(4)-127.0.0.1]java.net.SocketException: Permission denied: connect at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62) at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45) at java.lang.reflect.Constructor.newInstance(Constructor.java:423) at sun.net.www.protocol.http.HttpURLConnection$10.run(HttpURLConnection.java:1950) at sun.net.www.protocol.http.HttpURLConnection$10.run(HttpURLConnection.java:1945) at java.security.AccessController.doPrivileged(Native Method) at sun.net.www.protocol.http.HttpURLConnection.getChainedException(HttpURLConnection.java:1944) at sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1514) at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1498) at sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(HttpsURLConnectionImpl.java:268) at com.ca.client.updater.connectors.HttpServerConnector.requestClientStructure(Unknown Source) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:498) at sun.rmi.server.UnicastServerRef.dispatch(UnicastServerRef.java:357) at sun.rmi.transport.Transport$1.run(Transport.java:200) at sun.rmi.transport.Transport$1.run(Transport.java:197) at java.security.AccessController.doPrivileged(Native Method) at sun.rmi.transport.Transport.serviceCall(Transport.java:196) at sun.rmi.transport.tcp.TCPTransport.handleMessages(TCPTransport.java:573) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:834) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.lambda$run$0(TCPTransport.java:688) at java.security.AccessController.doPrivileged(Native Method) at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:687) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) at java.lang.Thread.run(Thread.java:748)Caused by: java.net.SocketException: Permission denied: connect at java.net.DualStackPlainSocketImpl.connect0(Native Method) at java.net.DualStackPlainSocketImpl.socketConnect(DualStackPlainSocketImpl.java:79) at java.net.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketImpl.java:350) at java.net.AbstractPlainSocketImpl.connectToAddress(AbstractPlainSocketImpl.java:206) at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:188) at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:172) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:607) at java.net.Socket.connect(Socket.java:556) at sun.net.NetworkClient.doConnect(NetworkClient.java:180) at sun.net.www.http.HttpClient.openServer(HttpClient.java:463) at sun.net.www.http.HttpClient.openServer(HttpClient.java:558) at sun.net.www.protocol.https.HttpsClient.<init>(HttpsClient.java:264) at sun.net.www.protocol.https.HttpsClient.New(HttpsClient.java:367) at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.getNewHttpClient(AbstractDelegateHttpsURLConnection.java:191) at sun.net.www.protocol.http.HttpURLConnection.plainConnect0(HttpURLConnection.java:1162) at sun.net.www.protocol.http.HttpURLConnection.plainConnect(HttpURLConnection.java:1056) at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:177) at sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1570) at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1498) at sun.net.www.protocol.http.HttpURLConnection.getHeaderFields(HttpURLConnection.java:3084) at sun.net.www.protocol.https.HttpsURLConnectionImpl.getHeaderFields(HttpsURLConnectionImpl.java:297) ... 18 more2020-08-13 08:30:36 TRACE - Selection of proxy for URI: socket://localhost:49384     com.ca.client.proxy.a [RMI TCP Connection(4)-127.0.0.1]2020-08-13 08:30:36 TRACE - Loopback     com.ca.client.proxy.a [RMI TCP Connection(4)-127.0.0.1]2020-08-13 08:30:36 TRACE - Returned proxies [DIRECT] for URI socket://localhost:49384     com.ca.client.proxy.a [RMI TCP Connection(4)-127.0.0.1]2020-08-13 08:30:36 TRACE - Selection of proxy for URI: socket://localhost:49384     com.ca.client.proxy.a [RMI TCP Connection(5)-127.0.0.1]2020-08-13 08:30:36 TRACE - Loopback     com.ca.client.proxy.a [RMI TCP Connection(5)-127.0.0.1]2020-08-13 08:30:36 TRACE - Returned proxies [DIRECT] for URI socket://localhost:49384     com.ca.client.proxy.a [RMI TCP Connection(5)-127.0.0.1]2020-08-13 08:30:36 TRACE - Selection of proxy for URI: socket://localhost:49384     com.ca.client.proxy.a [RMI TCP Connection(6)-127.0.0.1]2020-08-13 08:30:36 TRACE - Loopback     com.ca.client.proxy.a [RMI TCP Connection(6)-127.0.0.1]2020-08-13 08:30:36 TRACE - Returned proxies [DIRECT] for URI socket://localhost:49384     com.ca.client.proxy.a [RMI TCP Connection(6)-127.0.0.1]2020-08-13 08:30:36 TRACE - Selection of proxy for URI: socket://localhost:49384     com.ca.client.proxy.a [RMI TCP Connection(7)-127.0.0.1]2020-08-13 08:30:36 TRACE - Loopback     com.ca.client.proxy.a [RMI TCP Connection(7)-127.0.0.1]2020-08-13 08:30:36 TRACE - Returned proxies [DIRECT] for URI socket://localhost:49384     com.ca.client.proxy.a [RMI TCP Connection(7)-127.0.0.1]2020-08-13 08:30:36 TRACE - Selection of proxy for URI: socket://localhost:49384     com.ca.client.proxy.a [RMI TCP Connection(8)-127.0.0.1]2020-08-13 08:30:36 TRACE - Loopback     com.ca.client.proxy.a [RMI TCP Connection(8)-127.0.0.1]2020-08-13 08:30:36 TRACE - Returned proxies [DIRECT] for URI socket://localhost:49384     com.ca.client.proxy.a [RMI TCP Connection(8)-127.0.0.1]2020-08-13 08:30:36 INFO  - Displaying error message: Checking for update failed. Reason: Permission denied: connect     com.ca.client.ui.LauncherXsuiteDialog [RMI TCP Connection(5)-127.0.0.1]2020-08-13 08:34:53 INFO  - Hide Launcher dialog     com.ca.client.ui.LauncherXsuiteDialog [AWT-EventQueue-0]2020-08-13 08:34:53 INFO  - Stopping instance     com.ca.client.updater.Instance [AWT-EventQueue-0]2020-08-13 08:34:53 DEBUG - Waited 0 ms while updater was busy     com.ca.client.updater.ClientUpdaterImpl [RMI TCP Connection(2)-127.0.0.1]2020-08-13 08:34:53 DEBUG - Unmanaging instance     com.ca.client.updater.InstanceManager [RMI TCP Connection(2)-127.0.0.1]2020-08-13 08:34:53 DEBUG - Active instances count - 0     com.ca.client.updater.InstanceManager [RMI TCP Connection(2)-127.0.0.1]2020-08-13 08:34:53 INFO  - Stopping instance manager. Closing RMI server     com.ca.client.updater.InstanceManager [RMI TCP Connection(2)-127.0.0.1]2020-08-13 08:34:53 INFO  - Unlocking installation folder     com.ca.client.updater.v [RMI TCP Connection(2)-127.0.0.1]2020-08-13 08:34:53 INFO  - Correct application closing. All instances are closed     com.ca.client.updater.InstanceManager [RMI TCP Connection(2)-127.0.0.1]

    ------------------------------
    Security Analyst
    DXC Technology
    ------------------------------


  • 2.  RE: Checking for update failed. Reason: Permission dennied: connect

    Broadcom Employee
    Posted Aug 14, 2020 09:09 AM
    Hi 

    Please, check if

    1. If PAM Client registered in their Software Distribution Catalog for silent installation to Domain member windows machines?

    If yes, you may use the procedure from this Article 124793

    2. Are you using Program McAfee anti-virus? If yes please, try this another Article 115185

    If another Antivirus in use you may also use as reference to check if this is blocking

    Thanks


  • 3.  RE: Checking for update failed. Reason: Permission dennied: connect

    Posted Aug 14, 2020 02:55 PM

    Thanks Valdo, nothing related to my case. I will upgrade my OS to see how it goes.

     

    Higor