How to fix Replica RADIUS configuration failure on Authentication Manager 7.1
2 years ago
Originally Published: 2009-08-10
Article Number
000062332
Applies To
Authentication Manager 7.1
RSA Radius Server 7.1
SBR Radius 7.1

RSA Authentication Manager 7.1 Radius


Sun Solaris 10
Redhat Linux Advanced Server 4.0
RedHat Linux 4.0
Issue
Fixing/configuring SecurID authentication on the Replica RADIUS Server
Replica RADIUS does not authenticate
Replication between RADIUS Servers does not seem to be working
The Replica RADIUS Server is missing from the Primary's Security Console

from the RADIUS Replica logs :

SecurID authentication method disabled because 'sdconf.rec' file not present


from the RADIUS Replica logs :

RadManagedServerUpdate::ProcessPackage CCM error: disabled replica server '<replica.domain.com>'


from the RADIUS Replica logs :

CRadManagedServerUpdate::DownloadPackage exceeded iterations limit while communicating with CCM <replica.domain.com>


from <RSA_AM_HOME>/install/logs/config/config.out:

readSecrets PropDir: /opt/RSASecurity/RSAAuthenticationManager/utils/etc
Action: start
Using service/script 'Steel-Belted Radius'/'sbrd'
Starting RADIUS Service...
Error return value from start operation: -1
Checking XUI Connection...
Retrying (timer 7949 ms)
Checking XUI Connection...
Done.
XUI Host rdc-ragnar.sr.se:1813
License: 1605 0000 1100 0097 6431 2154
WARN: License requires Server Restart
Successfully provisoned RSA license to SBR server
RSA License Configuration: SUCCESS
RADIUS Server Cert Generation: SUCCESS
RADIUS Server Cert Install: SUCCESS
readSecrets PropDir: /opt/RSASecurity/RSAAuthenticationManager/utils/etc
RemoteCommand: Properties dir: /opt/RSASecurity/RSAAuthenticationManager/utils/etc
RemoteCommand: Connecting to Remote AM at 't3s://primary.domain.com:7002/' as uegunfly
Remote IMSCommandProxy: [CmdClient_5cz6o94o / ******]
RemoteCommand: Successfully logged in to AM
Configuration failed
Exiting...
********************** End *********************

 


from config_trace.log:

ERROR - Main Thread - config.ConfigUtil - Failed configuration command execution
com.rsa.installfwrk.config.exception.ConfigurationException: Failed configuration command execution

.

.

Caused by: com.rsa.installfwrk.common.command.exception.CommandException: Error Running RADIUS Registration Command
at com.rsa.installfwrk.thirdparty.radius.config.command.RegisterRadiusServerCmd.executeRemoteCommands(RegisterRadiusServerCmd.java:35)

.

Caused by: com.rsa.command.exception.DataNotFoundException: Agent with host ID: d0c7ba6ace86198602164eb5864070e0 not found.
.

.

ERROR - Main Thread - config.ConfigUtil - Configuration Failed


Error in Operations Console (OC) :

When attempting to configure the RADIUS instance from the OC an error is displayed : "An unknown system error occurred"

The RADIUS configuration is subsequently not displayed.


Error in radiusoc/servers/Adminservers/logs/imsTrace : "Unable to set the activation state to true for the application 'radius-operations-console'.


Error in server/logs/imsTrace.log : "could not create/get an XUI connection"


Resolution
- from the Security Console of the Primary, delete the Replica RADIUS server (if present)
- from the Operations Console of the Primary, delete the Replica RADIUS Server (if present)
 
- Then on the Replica server:
 
sudo su - <rsaadmin>

cd  <RSA_AM_HOME>/server/      (where <RSA_AM_HOME> is the location of the installed RSA Authentication Manager 7.1 software e.g. /usr/local/RSASecurity/RSAAuthenticationManager)

./rsaam stop radius

./rsaam stop radiusoc (might be missing but keep going)

exit

sudo su - root

cd  <RSA_AM_HOME>/config/

 ./configUtil.sh unconfigure radius

(on the Primary Security Console ---> Access ---> Authentication Agents  ---> Authentication Manager Contact List ---> Automatic Rebalance)

./configUtil.sh    configure radius

exit
sudo su - <rsaadmin>

 cd  <RSA_AM_HOME>/server/

./rsaam start radius
./rsaam start radiusoc
 

- Access Primary Security Console and navigate to RADIUS ---> RADIUS Servers ---> select the Replica, and enable it for replication, then click 'save', and click 'Force Replication to All'
 
Optional steps (on the Replica) :
 # sbrsetuptool -s (== turn off silent mode)
sudo su - rsaadmin
cd <RSA_AM_HOME>/radius
./sbrsetuptool -path /usr/local/RSASecurity/RSAAuthenticationManager/radius -identity REPLICA -s
 # --- and/or ---
./sbrsetuptool -radpath <Directory-of-replica.ccmpkg-file> -identity REPLICA -primary <$PrimaryHostname $PrimaryIPAddress $PrimarySecret> -s

Notes
Note: do NOT use this procedure with SP2
Note: do NOT use this procedure on any system at all, it has subsequently been identified as flawed. 

Related Articles

Trending Articles

Don't see what you're looking for?