000036626 - Unable to access additional features on the replica RSA Authentication Manager Operations Console which requires the Operations Console administrator to provide additional credentials

Document created by RSA Customer Support Employee on Sep 17, 2018
Version 1Show Document
  • View in full screen mode

Article Content

Article Number000036626
Applies ToRSA Product Set:  SecurID
RSA Product/Service Type:  RSA Authentication Manager
RSA Version/Condition:  8.x
Issue
  1. Unable to access additional features on the replica Authentication Manager Operations Console which requires the Operations Console administrator to provide Additional Credentials.  The following error is seen:

Unable to verify credentials and/or process the request at this time. Please try again later.

User-added image


  1. The Security Console and Operations Console are accessible for the RSA Authentication Manager replica instance/
  2. The credentials provided at the replica Operations Console are valid and it is confirmed that the user is in the internal database and assigned the super administrator role
  3. The Replication Status Report on the replica shows the status as Normal.
  4. The Replication Status Report on the primary shows a status of Internal Replication Error.
  5. The following error is logged in the opt/rsa/am/server/logs/ops-console.log:


Caused by: javax.naming.CommunicationException [Root exception is java.net.ConnectException: t3s://<Hostname>:7002: Destination unreachable; nested exception is:
java.net.ConnectException: Connection refused; No available router to destination]


  1. Running netstat as root from the SSH session of the replica Authentication Manager instance shows port 7002 is reachable and established:


am82r1:~ # netstat -anp | grep 7002
tcp        0      0 192.168.2.31:43588      192.168.2.30:7002       ESTABLISHED 16692/java
tcp        0      0 192.168.2.31:49512      192.168.2.30:7002       ESTABLISHED 16692/java


  1. Upon review of services on both the primary and replica, several services on the RSA Authentication Manager replica instance are shutdown:

  • On the primary:


rsaadmin@am81p:/opt/rsa/am/server> ./rsaserv status all
RSA Database Server                                         [RUNNING]
RSA Administration Server with Operations Console           [RUNNING]
RSA RADIUS Server Operations Console                        [RUNNING]
RSA Runtime Server                                          [RUNNING]
RSA RADIUS Server                                           [RUNNING]
RSA Console Server                                          [
RUNNING]
RSA Replication (Primary)                                   [RUNNING]


  • On the replica:


rsaadmin@am81r1:/opt/rsa/am/server> ./rsaserv status all
RSA Database Server                                        [RUNNING]
RSA Administration Server with Operations Console          [RUNNING]
RSA RADIUS Server Operations Console                       [SHUTDOWN]
RSA Runtime Server                                         [SHUTDOWN]
RSA RADIUS Server                                          [SHUTDOWN]

RSA Console Server                                         [RUNNING]
RSA Replication (Replica)                                  [RUNNING]
CauseThe error is happening because these critical services on the RSA Authentication Manager Replica instance are shutdown. 
ResolutionA restart of the RSA Authentication Manager services on the replica instance should resolve the issue.

rsaadmin@am81r1:/opt/rsa/am/server> ./rsaserv status all

For more information, please review 000012810 - How to stop, start and restart RSA Authentication Manager 8.x services at the command line.

Attachments

    Outcomes