Hello!
I have installed & Primary Setup RSA SecurID appliance ver. 3.0.4.10 successfully. When I logged into https://rsaapliance.domain.local:7072/operation-console its gives me message as
Error 404-not Found
From RFC 2068 Hypertext Transfer Protocol - HTTP/1.1
10.4.5.404 not Found
And how can I upgrade appliance to the latest version?
Yuri,
Take a look at the /usr/local/RSASecurity/RSAAuthenticationManager/imsoc/logs/ops-console.log. Do you see the following error?
Cannot access HTTP invoker remote service at [https://<FQDN_of_the_RSA_SecurID_appliance>:7072/operations-console/dispatcher/HttpInvokerRemoteFileTransfer]; nested exception is java.io.StreamCorruptedException: invalid stream header
Caused by:
java.io.StreamCorruptedException: invalid stream header
Also review the /usr/local/RSASecurity/RSAAuthenticationManager/imsoc/servers/AdminServer/logs/AdminServer.log for the following error:
java.lang.RuntimeException: Unable to initialize embedded database
If you are seeing these messages, the only way to recover is to factory reset your RSA SecurID appliance and import a recent backup. RSA customer support can provide more information.
* * *
As far as upgrading your appliances to Authentication Manager 8.1, you do have options. Depending on the hardware you have, you can upgrade the software you have currently to 8.1. Older hardware cannot be upgraded. You can check your version from an SSH session by typing the following command:
omreport chassis info
The entry for chassis model will give you the information you need. Only PowerEdge R210 and PowerEdge R710 models can be upgraded.
If you cannot upgrade your hardware, you can purchase new hardware from RSA or your vendor that runs Authentication Manager 8.1 or, alternatively, download and install Authentication Manager 8.1 on either VMware or Hyper-V virtual servers. The RSA Authentication Manager 8.1.x Migration Resources page provides information on how to upgrade. Please note that if your maintenance agreement is current, there is no charge to you for the new software or for a license upgrade to the new 8.1 format (unless, of course, you want to increase the number of active users allowed in your deployment).
Your current appliance is running at SP4, so you can follow standard steps to migrate to the newer software.
Given the error you are reporting, it may make more sense to stand up a new Authentication Manager 8.1 server and import a backup of your current system to it, rather than rebuilding a server you are planning to move from anyway.
Regards,
Erica
I can not review any logs because the server does not have directory "imsoc"
I checked the version by typing the following command:
omreport chassis info
Chassis Model PowerEdge R210
Yuri,
This is how I found the ops-console.log and AdminServer.log on my lab system:
login as: emcsrv
emcsrv@cs-appliance3-01.na.rsa.net's password: <enter OS user password>
Last login: Fri Apr 8 09:23:18 2016 from 10.96.48.168
-bash-3.00$ sudo su - rsaadmin
Password: <enter OS user password>
-bash-3.00$ cd /usr/local/RSASecurity/RSAAuthenticationManager/imsoc/logs
-bash-3.00$ ls -al ops-console.log
-rwxrwxrwx 1 rsaadmin rsaadmin 1859472 Aug 27 2015 ops-console.log
-bash-3.00$ cd /usr/local/RSASecurity/RSAAuthenticationManager/server/logs
-bash-3.00$ ls -al AdminServer.log
-rw------- 1 rsaadmin rsaadmin 4440040 Apr 8 11:00 AdminServer.log
If you don't see the files that way, what happens if you cd to /usr/local/RSASecurity/RSAAuthenticationManager and run this command?
find . -name <filename> -print
As I mentioned the R210 can be upgraded from 3.0 to 8.1, if you want to stay with the hardware option. If you want to move to virtual servers, you can do that too. Please review the RSA Authentication Manager 8.1 Migration Overview for some general information on the migration. The RSA Authentication Manager 8.1 Migration Resources page has links for all of the Authentication Manager 8.1 documentation, links to request a trial license, to download software, the SP1 service pack and recent patches, as well as some helpful videos that go through the migration step by step.
Regards,
Erica.
Hi I have facing the same issue. While login to https://<FQDN>/sc the internet explorer shows the 404 Not Found Error. I have try to execute your solution
I could not find the folder structure you mentioned above.
Here is the my console snapshot :
Erica,
Thank you for your help!
I found the log files
The ops-console.log log file is empty
The AdminServer.log mistake is not specified
NMap tool showed me that the operation-console ports are closed 7071, 7072
Yury,
From an SSH session, try running /etc/init.d/iptables stop then try again.
Also, cd to /usr/local/RSASecurity/AuthenticationManager/server and run the following command: ./rsaam status all and posting the output.
Regards,
Erica
Erica,
I executed command iptables stop, nothing changed
Error 404--Not Found |
From RFC 2068 Hypertext Transfer Protocol -- HTTP/1.1:10.4.5 404 Not FoundThe server has not found anything matching the Request-URI. No indication is given of whether the condition is temporary or permanent. If the server does not wish to make this information available to the client, the status code 403 (Forbidden) can be used instead. The 410 (Gone) status code SHOULD be used if the server knows, through some internally configurable mechanism, that an old resource is permanently unavailable and has no forwarding address. |
All services in status RUNNING, exept RSA Authentication Manager Radius
Hello Yury,
You should only be using Internet Explorer when trying to access the admin pages. Chrome and Firefox will complain about the ssl security being weak and unsecure. That's a side effect of using 7.1.4 ( no longer supported as I'm sure you are aware )
Radius will show as stopped until you configure it in the security console so that's normal.
If you stopped the firewall and you still cannot get to the admin pages, that means the local firewall ( iptables ) is not the issue. Do you use a web proxy in your browser, or have a firewall in between your workstation and the AM server? If so make sure the required ports are open between the two. If I had to guess based on what you've noted, I think a firewall is present and blocking ports.
On a side note, I can see you are asking about upgrading to 8.1. There is no upgrade per say, you will need to re-image the appliance with the 8.1 iso file, which can be downloaded from your downloads page here at RSA. This will wipe the drive clean, and install AM 8.1 base.
One important question I have for you would be, are you currently using 7.1.4 in production and wish to get to the latest version via migration/upgrade?
Christopher,
Of course I use Internet Explorer to access the admin pages.
I am do not have a firewall in between my workstation and the AM server.
Moreover, I connected directly to the workstation and server,
but it remains unchanged, the administrator page is not available.
Under what conditions can I get the update to version 8.1 if I have PowerEdge R210?
Can I get an update for free and suitable if I have a license available
Yes if you are licensed you can re-image that R210 with the 8.1 iso. You will need to update your license over at https://knowledge.rsasecurity.com to version 8.1
Can you ping the IP address from your workstation?
Also what happens if you try hitting by IP vs hostname?
https://192.168.1.2:7004/console-ims
or
https://192.168.1.2/7072/operations-console
If you try hitting the security console vai IP you should get the main page, if that works then this means DNS has not been setup for the fqdn of the appliance. You can either setup DNS for it, or edit your workstation local hosts file and add an entry for it then try again.
Christopher,
I can ping the IP address and hostname from my workstation, DNS has been setup for the fqdn of the appliance!
https://192.168.1.2:7004/console-ims page not found
https://192.168.1.2/7072/operations-console Error 404--Not Found
I can not get to the page https://knowledge.rsasecurity.com
Your logon information is incorrect. Correct your logon information and try again, or contact the help desk or your administrator.
With its password I can only get to the page community.rsa.com
to help prevent issues when testing, be sure to note
each link I see posted above has a small syntax error
example:
https://192.168.1.2/7072/operations-console
this one above has to be like this
https://192.168.1.2:7072/operations-console
or
https://machine.full.name.com:7072/operations-console
and for this link below the IP will not work for login it must be the FQDN on this page
https://192.168.1.2:7004/console-ims
https://machine.full.name.com:7004/console-ims
only the ops console link will allow the IP address, the security console and self service console
has to be FQDN
----------------------
in summary, lets say my RSA server is rsabox.com and 1.2.3.4
version 7.1 -->ip addresses only work where specified<--
https://rsabox.com:7004/console-ims = security console
https://rsabox.com:7004/console-selfservice = self service console
https://rsabox.com:7072/operations-console = ops console
https://1.2.3.4:7072/operations-console = ops console
version 8.1 we have the same links but we added 3 shortcuts off port 443
->ip addresses only work where specified<--
https://rsabox.com/oc = operations console
https://1.2.3.4/oc = ops console
https://rsabox.com/ssc = self service console
https://rsabox.com/sc = security console
https://rsabox.com:7004/console-ims = security console
https://rsabox.com:7004/console-selfservice = self service console
https://rsabox.com:7072/operations-console = ops console
https://1.2.3.4:7072/operations-console = ops console
Yuri,
This is how I found the ops-console.log and AdminServer.log on my lab system:
login as: emcsrv
emcsrv@cs-appliance3-01.na.rsa.net's password: <enter OS user password>
Last login: Fri Apr 8 09:23:18 2016 from 10.96.48.168
-bash-3.00$ sudo su - rsaadmin
Password: <enter OS user password>
-bash-3.00$ cd /usr/local/RSASecurity/RSAAuthenticationManager/imsoc/logs
-bash-3.00$ ls -al ops-console.log
-rwxrwxrwx 1 rsaadmin rsaadmin 1859472 Aug 27 2015 ops-console.log
-bash-3.00$ cd /usr/local/RSASecurity/RSAAuthenticationManager/server/logs
-bash-3.00$ ls -al AdminServer.log
-rw------- 1 rsaadmin rsaadmin 4440040 Apr 8 11:00 AdminServer.log
If you don't see the files that way, what happens if you cd to /usr/local/RSASecurity/RSAAuthenticationManager and run this command?
find . -name <filename> -print
As I mentioned the R210 can be upgraded from 3.0 to 8.1, if you want to stay with the hardware option. If you want to move to virtual servers, you can do that too. Please review the RSA Authentication Manager 8.1 Migration Overview for some general information on the migration. The RSA Authentication Manager 8.1 Migration Resources page has links for all of the Authentication Manager 8.1 documentation, links to request a trial license, to download software, the SP1 service pack and recent patches, as well as some helpful videos that go through the migration step by step.
Regards,
Erica.