000011635 - RADIUS Configuration Fails

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000011635
Applies ToRSA Authentication Manager 7.1
RSA Appliance 3.0.x
RADIUS
One or more RSA Authentication Manager 7.1 Replica servers have been attached.
IssueConfiguration of RADIUS on a Primary RSA Authentication Manager 7.1 server fails. The "<install directory>\install\logs\config\configureRADIUSTrace.log" file contains the following exception.

24 Apr 10:36:23.844 INFO - Command Output Property Keys (registerRadiusWithAM): {}
24 Apr 10:36:28.336 ERROR - Failed configuration command execution
com.rsa.installfwrk.config.exception.ConfigurationException: Failed configuration command execution
        at com.rsa.installfwrk.config.ConfigEngine.execute(ConfigEngine.java:223)
        at com.rsa.installfwrk.config.ConfigUtil.runConfig(ConfigUtil.java:53)
        at com.rsa.installfwrk.config.ConfigUtil.main(ConfigUtil.java:35)
Caused by: com.rsa.installfwrk.common.command.exception.CommandException: Error Running RADIUS Registration Command
        at com.rsa.installfwrk.thirdparty.radius.config.command.RegisterRadiusServerCmd.executeRemoteCommands(RegisterRadiusServerCmd.java:35)
        at com.rsa.installfwrk.common.command.RemoteCommandBase.execute(RemoteCommandBase.java:49)
        at com.rsa.installfwrk.config.ConfigEngine.execute(ConfigEngine.java:185)
        ... 2 more
Caused by: com.rsa.common.SystemException: com.rsa.authmgr.internal.admin.servermgt.ServerConfigGenerationException: problem generating server config file
        at com.rsa.authmgr.admin.radius.RegisterRadiusServerCommand$Executive.execute(RegisterRadiusServerCommand.java:219)
        at com.rsa.authmgr.admin.radius.RegisterRadiusServerCommand.performExecute(RegisterRadiusServerCommand.java:106)
        at com.rsa.command.LocalTarget.executeCommand(LocalTarget.java:107)
        at com.rsa.ims.command.LocalTransactionalCommandTarget.access$201(LocalTransactionalCommandTarget.java:62)
        at com.rsa.ims.command.LocalTransactionalCommandTarget$1.doInTransaction(LocalTransactionalCommandTarget.java:257)
        at org.springframework.transaction.support.TransactionTemplate.execute(TransactionTemplate.java:127)
        at com.rsa.ims.command.LocalTransactionalCommandTarget.executeCommand(LocalTransactionalCommandTarget.java:249)
        at com.rsa.command.CommandServerEngine$CommandExecutor.run(CommandServerEngine.java:570)
        at com.rsa.command.CommandServerEngine$CommandExecutor.run(CommandServerEngine.java:546)
        at com.rsa.ims.security.spi.SimpleSecurityContextImpl.doAs(SimpleSecurityContextImpl.java:114)
        at com.rsa.security.SecurityContext.doAs(SecurityContext.java:429)
        at com.rsa.command.CommandServerEngine.execute(CommandServerEngine.java:310)
        at com.rsa.command.CommandServerEngine.executeCommand(CommandServerEngine.java:250)
        at com.rsa.command.CommandServerEngine.executeCommand(CommandServerEngine.java:164)
        at com.rsa.command.CommandServerBean.executeCommand(CommandServerBean.java:205)
        at com.rsa.command.CommandServerBean.executeFrameworkManagedTx(CommandServerBean.java:167)
        at com.rsa.command.CommandServer_qt4u4w_EOImpl.executeFrameworkManagedTx(CommandServer_qt4u4w_EOImpl.java:136)
        at com.rsa.command.CommandServer_qt4u4w_EOImpl_WLSkel.invoke(Unknown Source)
        at weblogic.rmi.internal.BasicServerRef.invoke(BasicServerRef.java:589)
        at weblogic.rmi.cluster.ClusterableServerRef.invoke(ClusterableServerRef.java:224)
        at weblogic.rmi.internal.BasicServerRef$1.run(BasicServerRef.java:479)
        at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:363)
        at weblogic.security.service.SecurityManager.runAs(Unknown Source)
        at weblogic.rmi.internal.BasicServerRef.handleRequest(BasicServerRef.java:475)
       at weblogic.rmi.internal.BasicServerRef.access$300(BasicServerRef.java:59)
        at weblogic.rmi.internal.BasicServerRef$BasicExecuteRequest.run(BasicServerRef.java:1016)
        at weblogic.work.ExecuteThread.execute(ExecuteThread.java:200)
        at weblogic.work.ExecuteThread.run(ExecuteThread.java:172)
Caused by: com.rsa.authmgr.internal.admin.servermgt.ServerConfigGenerationException: problem generating server config file
        at com.rsa.authmgr.internal.admin.servermgt.impl.f.setServerData(f.java:221)
        at com.rsa.authmgr.internal.admin.servermgt.impl.f.a(f.java:133)
        at com.rsa.authmgr.internal.admin.servermgt.impl.b.generateServerConfig(b.java:138)
        at com.rsa.authmgr.internal.admin.radius.impl.RegisterRadiusServerAdministrationImpl.generateSdConfrec(RegisterRadiusServerAdministrationImpl.java:354)
        at com.rsa.authmgr.internal.admin.radius.impl.RegisterRadiusServerAdministrationImpl.buildResultDTO(RegisterRadiusServerAdministrationImpl.java:251)
        at com.rsa.authmgr.internal.admin.radius.impl.RegisterRadiusServerAdministrationImpl.registerRadiusServer(RegisterRadiusServerAdministrationImpl.java:192)
        at com.rsa.authmgr.admin.radius.RegisterRadiusServerCommand$Executive.execute(RegisterRadiusServerCommand.java:207)
        ... 27 more

RemoteCommand: Connecting to Local as <userID>
RemoteCommand: Successfully logged in to AM
Configuration failed
Exiting...
Resolution

Replica instance(s) may have been added or removed from your deployment, your contact lists must be updated to add or remove references to these instances. To update your manual and automatic contact lists, you must perform an automatic rebalance. This is done via the Security Console by following these directions.

Click Access > Authentication Agents > Authentication Manager Contact List > Automatic Rebalance.
Click Rebalance.

Once the reblanace has been completed restart the RADIUS configuration and this time it should complete the process successfully.

WorkaroundDatabase has recently been restored.
Legacy Article IDa58008

Attachments

    Outcomes