Failed to cleanup RADIUS data when restoring backup from Operations Console of RSA Authentication Manager 8.4.x

[#1]

Article Number

000038374

Applies To

RSA Product Set: SecurID 
RSA Product/Service Type: Authentication Manager 
RSA Version/Condition: 8.4 and above

Issue

Restoring a backup fails with the following error in the Advanced Status view in the Operations Console:
 

Starting RADIUS clean-up..
Stopping RADIUS server

Setting RADIUS to primary...
Failed to set RADIUS to primary.
Failed to set RADIUS to primary.
An error occurred that prevented the system from being restored. THe backup file that you selected to restore your system is /opt/rsa/am/backup/202001221139.RSAbackup
 

• Failed to clean-up RADIUS data.
• Please call customer support. For error details, check the 'Advanced Status VIew.'
   

Error:

Failed to clean-up RADIUS

Reviewing the ops-console.log from the Troubleshooting logs shows the following messages recorded:
 

@@@2020-01-22 11:42:50,673 ERROR [RestoreBackup] GUILog.traceException(587) | exception: com.rsa.common.DataNotFoundException: No configuration data found for scope 0000-Global-0000 and section auth_manager.remote.backup.copy.timeout.sec%

at com.rsa.ims.configuration.dal.sql.ConfigurationSqlImpl.getConfigData(ConfigurationSqlImpl.java:505)
at com.rsa.ims.web.operationsconsole.utils.DiskUtil.getRemoteBackupCopyTimeout(DiskUtil.java:516)
at com.rsa.ims.web.operationsconsole.utils.DiskUtil.runCommand(DiskUtil.java:487)
at com.rsa.ims.web.operationsconsole.utils.DiskUtil.copyLinuxFile(DiskUtil.java:459)
at com.rsa.ims.web.operationsconsole.utils.DiskUtil.copyFile(DiskUtil.java:441)
at com.rsa.ims.operationsconsole.admin.backup.tasks.SystemRestoreTask.performSystemRestore(SystemRestoreTask.java:162)
at com.rsa.ims.operationsconsole.admin.backup.tasks.SystemRestoreTask.execute(SystemRestoreTask.java:62)
at com.rsa.ims.operationsconsole.admin.taskmgr.TaskManager.executeTasks(TaskManager.java:42)
at com.rsa.ims.operationsconsole.admin.impl.OCManageBackupImpl$1RestoreBackupThread.run(OCManageBackupImpl.java:576)
at java.lang.Thread.run(Thread.java:748)

@@@2020-01-22 11:44:42,024 ERROR [RestoreBackup] GUILog.traceException(587) | exception: com.rsa.ims.operationsconsole.admin.taskmgr.TaskExecutionException: Failed to set RADIUS to primary.

at com.rsa.ims.operationsconsole.admin.backup.tasks.CleanupRadiusDataTask.setSBRToPrimary(CleanupRadiusDataTask.java:157)
at com.rsa.ims.operationsconsole.admin.backup.tasks.CleanupRadiusDataTask.performRadiusCleanUp(CleanupRadiusDataTask.java:135) at com.rsa.ims.operationsconsole.admin.backup.tasks.CleanupRadiusDataTask.execute(CleanupRadiusDataTask.java:66)
at com.rsa.ims.operationsconsole.admin.taskmgr.TaskManager.executeTasks(TaskManager.java:42)
at com.rsa.ims.operationsconsole.admin.impl.OCManageBackupImpl$1RestoreBackupThread.run(OCManageBackupImpl.java:576)

at java.lang.Thread.run(Thread.java:748)

Caused by: java.util.concurrent.TimeoutException

at java.util.concurrent.FutureTask.get(FutureTask.java:205)

at com.rsa.ims.externalprocess.util.process.ProcessBuilderUtil.waitForProcess(ProcessBuilderUtil.java:221)

at com.rsa.ims.externalprocess.util.process.ProcessBuilderUtil.checkProcessResults(ProcessBuilderUtil.java:196)
at com.rsa.ims.externalprocess.util.process.ProcessBuilderUtil.executeOSCommand(ProcessBuilderUtil.java:80)
at com.rsa.ims.externalprocess.util.process.ConfigurationServiceCaller.executeConfigureProcess(ConfigurationServiceCaller.java:162)
at com.rsa.ims.externalprocess.util.process.ConfigurationServiceCaller.runConfigureGoal(ConfigurationServiceCaller.java:85)
at com.rsa.ims.externalprocess.util.process.ConfigurationServiceCaller.runConfigureGoal(ConfigurationServiceCaller.java:47)
at com.rsa.ims.web.operationsconsole.utils.RadiusUtils.executeConfigGoal(RadiusUtils.java:174)
at com.rsa.ims.operationsconsole.admin.backup.tasks.CleanupRadiusDataTask.setSBRToPrimary(CleanupRadiusDataTask.java:153)
... 5 more

@@@2020-01-22 11:44:42,099 ERROR [RestoreBackup] GUILog.traceException(587) | exception: com.rsa.ims.operationsconsole.admin.taskmgr.TaskExecutionException: Failed to clean up RADIUS.

at com.rsa.ims.operationsconsole.admin.backup.tasks.CleanupRadiusDataTask.execute(CleanupRadiusDataTask.java:73)
at com.rsa.ims.operationsconsole.admin.taskmgr.TaskManager.executeTasks(TaskManager.java:42)
at com.rsa.ims.operationsconsole.admin.impl.OCManageBackupImpl$1RestoreBackupThread.run(OCManageBackupImpl.java:576)
at java.lang.Thread.run(Thread.java:748) Caused by: com.rsa.ims.operationsconsole.admin.taskmgr.TaskExecutionException: Failed to set RADIUS to primary.
at com.rsa.ims.operationsconsole.admin.backup.tasks.CleanupRadiusDataTask.setSBRToPrimary(CleanupRadiusDataTask.java:157)
at com.rsa.ims.operationsconsole.admin.backup.tasks.CleanupRadiusDataTask.performRadiusCleanUp(CleanupRadiusDataTask.java:135)
at com.rsa.ims.operationsconsole.admin.backup.tasks.CleanupRadiusDataTask.execute(CleanupRadiusDataTask.java:66)
... 3 more

Cause

The root cause of this issue is currently unknown.

Workaround

To resolve the issue, run the RADIUS reconfiguration utility following the below steps.

1. Log in to the primary Authentication Manager server using SSH, vSphere, or direct connection.

login as: rsaadmin
Using keyboard-interactive authentication.
Password: <enter operating system password>
Last login: Wed Jan 22 17:25:01 2020 from jumphost.vcloud.local
RSA Authentication Manager Installation Directory: /opt/rsa/am

2. Go to /opt/rsa/am/server:

rsaadmin@am84p:~> cd /opt/rsa/am/server

3. Stop the RADIUS service with the command ./rsaserv stop radius:

rsaadmin@am84p:/opt/rsa/am/server> ./rsaserv stop radius
Stopping RSA RADIUS Server: **
RSA RADIUS Server                                          [SHUTDOWN]

4. Go to /opt/rsa/am/config:

rsaadmin@am84p:/opt/rsa/am/server> cd ../config

5. Run the command ./config.sh RadiusOCConfig.configure. When prompted, enter the password for rsaadmin:

rsaadmin@am84p:/opt/rsa/am/config> ./config.sh RadiusOCConfig.configure
.
.
.
password for rsaadmin: <enter operating system password> 

6. Navigate back to /opt/rsa/am/server.

rsaadmin@am84p:/opt/rsa/am/config> cd ../server

7. Start the all the service with the command ./rsaserv restart all:

rsaadmin@am84p:/opt/rsa/am/server> ./rsaserv restart all

8. Once the services have restarted, login to the Operations Console.
9. Attempt to restore the backup, which should now be successful.