000031066 - Export failed to complete when using the RSA Authentication Manager 6.1 RADIUS Export Utility

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support on Jul 13, 2018
Version 3Show Document
  • View in full screen mode

Article Content

Article Number000031066
Applies ToRSA Product Set: SecurID
RSA Product/Service Type: Authentication Manager
RSA Version/Condition: 6.1
Platform: Windows/Linux
IssueThe RSA Authentication Manager 6.1 RADIUS Export Utility installs successfully, but exporting the RADIUS data fails with the following error:

[FAILED] Export failed to complete
Unable to export RADIUS clients:null
[FIX]Please make sure RADIUS server is running
CauseThe RSA Authentication Manager 6.1 RADIUS Export Utility is not able to connect to the primary RADIUS server due the reasons below:
  • The RADIUS services may not be running on the primary server.
  • An incorrect primary server IP address is getting passed on to the RADIUS Export Utility.

To resolve the issue,first make sure that the RSA RADIUS Server service is running.

On a Windows Authentication Manager 6.1 server

  1. From the Start Menu select All Programs > RSA Security > RSA Authentication Manager Control Panel > Start & Stop RSA Auth Mgr Services.
  2. Confirm the RSA RADIUS Server has a status of Running.
  3. If the status of RSA RADIUS Server is not running, click on the Start RADIUS button. If the Start RADIUS button is greyed out, uncheck the option to start and stop RADIUS server together with authentication engine first then click Start RADIUS.  Once RADIUS is started, close the Control Panel.

On a Unix Authentication Manager 6.1 server

  1. Logon to the primary Authentication Manager server, either through SSH or a direct console connection.
  2. Change to the root user.

sudo su -

  1. Run the following command to start the RADIUS daemon:

/etc/init.d/sbrd start

  1. If the RSA RADIUS Server is already started, or exporting the data is still failing with the same error after restarting it, then an incorrect IP address is getting passed to the RADIUS Export Utility. To fix this, edit the exportRadiusData.bat file to force the correct primary server IP address using the below steps:

    1. Run the patchRemoteAdmin.bat and install the RSA Authentication Manager 6.x RADIUS Export Utility.
    2. Open the folder <AM_INSTALL_DIR>\prog\radius\Admin on the same server where the RSA Authentication Manager 6.1 RADIUS Export Utility is installed, where <AM_INSTALL_DIR> is the path defined as the installation directory of the RSA Authentication Manager Remote Database Administration client when running the patchRemoteAdmin.bat (for example, C:\Program Files\RSA Security\RSA Authentication Manager\prog\radius\Admin).
    3. Open exportRadiusData.bat using any text editor ( tat is, Notepad, Wordpad, preferably Notepad++).
    4. Replace the %* in the very last line with <primary_server_ip_ddress> %2 %3. That is, if the correct IP address for the primary server is, then it should look like the example below:

  • Before editing

start /min jre\bin\java -Dfile.encoding=UTF-8 -Dsun.jnu.encoding=UTF-8 -cp
com.rsa.authmgr.internal.radius.migration.ace61.ExportACE61RADIUSSwingApp %*

  • After editing

start /min jre\bin\java -Dfile.encoding=UTF-8 -Dsun.jnu.encoding=UTF-8 -cp
com.rsa.authmgr.internal.radius.migration.ace61.ExportACE61RADIUSSwingApp %2 %3

  1. Save and close the file.
  2. If logged directly onto the primary server, from the Start Menu select All Programs RSA Security > RSA Authentication Manager Host Mode. If you are using Remote Administration, from the Start Menu select All Programs RSA Security > RSA Authentication Manager Remote Mode and authenticate with a passcode, tokencode or a fixed password.
  3. Try exporting again by selecting RADIUS > Manage RADIUS Server > Generate Package.