When running the RSA SecurID Authentication Agent for PAM's acetest utility, getting error: Cannot Do AceInitialize for communication with ACE/Server
Originally Published: 2015-12-23
Article Number
Applies To
RSA Product/Service Type: Authentication Agent for PAM
Issue
[root@rh 64bit]# ./acetest Cannot Do AceInitialize for communication with ACE/Server. [root@rh 64bit]# ./acestatus Error can't connect to ACE/Server
Tasks
Resolution
[root@rh 64bit]# strace ./acetest ........ stat("/var/ace/sdconf.rec", 0x7fffd238fd10) = -1 ENOENT (No such file or directory) open("/etc/localtime", O_RDONLY) = 3 fstat(3, {st_mode=S_IFREG|0644, st_size=3519, ...}) = 0 fstat(3, {st_mode=S_IFREG|0644, st_size=3519, ...}) = 0 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb4587b1000 read(3, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\4\0\0\0\4\0\0\0\0"..., 4096) = 3519 lseek(3, -2252, SEEK_CUR) = 1267 read(3, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\5\0\0\0\5\0\0\0\0"..., 4096) = 2252 close(3) = 0 munmap(0x7fb4587b1000, 4096) = 0 socket(PF_FILE, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 3 connect(3, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0 sendto(3, "<11>Dec 22 19:21:13 acetest: ACE"..., 93, MSG_NOSIGNAL, NULL, 0) = 93 fstat(1, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 0), ...}) = 0 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb4587b1000 write(1, "Cannot Do AceInitialize for com"..., 60Cannot Do AceInitialize for communication with ACE/Server. ) = 60
In this particular case, the agent cannot communicate with the authentication server because the acetest utility cannot locate the sdconf.rec file in /var/ace.
To resolve the issue, generate a new sdconf.rec on the Authentication Manager server (Access > Authentication Agents > Generate Configuration File > Generate Config File) and place it on the box with the PAM agent in the directory listed in the error output generated after running the strace then rerun acetest..
Related Articles
RSA Authentication API Developer's Guide 1.38KNumber of Views Configure the SMTP(s) Mail Service 155Number of Views Startup fails with Initialization Status error message 'Found invalid object(s) in the database' after migration or patchi… 961Number of Views RSA SecurID Software Token Administrator's Guide 539Number of Views How to manipulate imported RSA SecurID Software Token(s) on an iPhone or iPad device 723Number of Views
Trending Articles
RSA Authentication Manager Upgrade Process RSA Release Notes for RSA Authentication Manager 8.8 RSA RADIUS Server service failed to start in the RSA Authentication Manager 8.1 Operations Console Microsoft Entra ID External MFA - Relying Party Configuration Using OIDC - RSA Ready Implementation Guide RSA Release Notes: Cloud Access Service and RSA Authenticators
Don't see what you're looking for?