Inconsistent or failed DNS name resolution by RSA SecurID Access Identity Router
2 years ago
Originally Published: 2019-03-29
Article Number
000041758
Applies To
RSA Product Set: SecurID Access Cloud Authentication Service
Issue
  • Name resolution by Identity Router is failing inconsistently. 
  • Running nslookup fails when not specifying nameserver, but may succeed if a particular nameserver is specified.
  • If the Identity Router is configured to communicate with Authentication Manager there may be errors in the symplified.log similar to:
Unable to resolve the Host:<AM_FULLY_QUALIFIED_HOSTNAME>, ignoring it

Note: An IDR to Authentication Manager test may also fail under these conditions.
Cause
The Identity Router is configured to utilize multiple DNS nameservers and at least one nameserver cannot resolve a required hostname (for example, Authentication Manager).
 
Resolution
Either remove any DNS namerserver(s) that cannot resolve required hostnames OR ensure that required hostnames are added to all configured DNS nameservers.
Don't see what you're looking for?