Agent 2.2 with OpenSSO
I have setup IIS agent 2.2 with OpenSSO 8. I occasionally get a blank page after login when I try to access the protected application. I see the following in the agent log. Any ideas on what might be wrong?
2010-10-06 14:14:48.079 Debug 2288:18ee7b8 all: Log::pSetLevelsFromString(): setting log level for module 0 to 5, old level 1.
2010-10-06 14:14:48.079 -1 2288:18ee7b8 all: =======================================
2010-10-06 14:14:48.079 -1 2288:18ee7b8 all: Version: 2.2-02
2010-10-06 14:14:48.079 -1 2288:18ee7b8 all: Build Date: Wed Nov 12 08:37:44 PST 2008
2010-10-06 14:14:48.079 -1 2288:18ee7b8 all: Build Machine: WOOKIE
2010-10-06 14:14:48.079 -1 2288:18ee7b8 all: =======================================
2010-10-06 14:14:48.079 Debug 2288:18ee7b8 all: Connection::initialize() calling NSS_Initialize() with directory = "D:/Sun/Access_Manager/Agents/2.2/iis6/cert" and prefix = ""
2010-10-06 14:14:48.079 Debug 2288:18ee7b8 all: Connection::initialize() Connection timeout wen receiving data = 0 milliseconds
2010-10-06 14:14:48.094MaxDebug 2288:18ee7b8 all: No value specified for key com.sun.am.policy.agents.config.remote.log.buffer.size, using default value.
2010-10-06 14:14:48.094MaxDebug 2288:18ee7b8 all: No value specified for key com.sun.am.auth.certificate.alias, using default value .
2010-10-06 14:14:48.094MaxDebug 2288:18ee7b8 all: No value specified for key com.sun.am.certdb.password, using default value .
2010-10-06 14:14:48.094MaxDebug 2288:18ee7b8 all: No value specified for key com.sun.am.certdb.password, using default value .
2010-10-06 14:14:48.094MaxDebug 2288:18ee7b8 all: No value specified for key com.sun.am.auth.certificate.alias, using default value .
2010-10-06 14:14:48.094 Info 2288:18ee7b8 PolicyAgent: load_agent_properties() : Property com.sun.am.cookie.secure is set to false.
2010-10-06 14:14:48.094 Warning 2288:18ee7b8 PolicyAgent: Invalid URL () for property (com.sun.am.policy.agents.config.errorpage.url) specified
2010-10-06 14:14:48.094 Warning 2288:18ee7b8 PolicyAgent: Setting error_page_url to null
2010-10-06 14:14:48.094MaxDebug 2288:18ee7b8 all: No value specified for key com.sun.am.policy.agents.config.deny_on_log_failure, using default value.
2010-10-06 14:14:48.094 Debug 2288:18ee7b8 PolicyAgent: parse_url(https://services.domain2.ca:443/amagent): Normalized URL: https://services.domain2.ca:443/amagent
2010-10-06 14:14:48.094 Info 2288:18ee7b8 PolicyAgent: load_agent_properties(): com.sun.am.policy.agents.config.agenturi.prefix : Value => https://services.domain2.ca:443/amagent
2010-10-06 14:14:48.094 Debug 2288:18ee7b8 PolicyAgent: parse_url(https://services.domain2.ca/opensso/UI/Login): Normalized URL: https://services.domain2.ca:443/opensso/UI/Login
2010-10-06 14:14:48.094 Info 2288:18ee7b8 PolicyAgent: calling parseIPAddresses(): not_enforced_ipstr: 127.0.0.1 10.226.10.92 10.226.10.52
2010-10-06 14:14:48.094 Info 2288:18ee7b8 PolicyAgent: parseIPAddresses(): add ipAddr: 127.0.0.1
2010-10-06 14:14:48.094 Info 2288:18ee7b8 PolicyAgent: parseIPAddresses(): add ipAddr: 10.226.10.92
2010-10-06 14:14:48.094 Info 2288:18ee7b8 PolicyAgent: parseIPAddresses(): add ipAddr: 10.226.10.52
2010-10-06 14:14:48.094 Info 2288:18ee7b8 PolicyAgent: parseIPAddresses(): exit.
2010-10-06 14:14:48.094 Debug 2288:18ee7b8 PolicyAgent: parse_url(https://services.domain2.ca:443/applicationmvc/* http://host.domain.com:80/applicationmvc/* https://services.domain2.ca/landingapp/*): Normalized URL: https://services.domain2.ca:443/applicationmvc/*
2010-10-06 14:14:48.094 Debug 2288:18ee7b8 PolicyAgent: parse_url(http://host.domain.com:80/applicationmvc/* https://services.domain2.ca/landingapp/*): Normalized URL: http://host.domain.com:80/applicationmvc/*
2010-10-06 14:14:48.094 Debug 2288:18ee7b8 PolicyAgent: parse_url(https://services.domain2.ca/landingapp/*): Normalized URL: https://services.domain2.ca:443/landingapp/*
2010-10-06 14:14:48.094MaxDebug 2288:18ee7b8 all: No value specified for key com.sun.am.policy.agents.config.ignore_policy_evaluation_if_notenforced, using default value.
2010-10-06 14:14:48.094MaxDebug 2288:18ee7b8 PolicyAgent: am_web_init(): Logout URL is .
2010-10-06 14:14:48.094MaxDebug 2288:18ee7b8 PolicyAgent: no cookies to be reset on logout.
2010-10-06 14:14:48.094MaxDebug 2288:18ee7b8 PolicyAgent: load_agent_properties(): cookie reset enabled property com.sun.am.policy.agents.config.cookie.reset.enable is false
2010-10-06 14:14:48.094MaxDebug 2288:18ee7b8 all: No value specified for key com.sun.am.ignore_server_check, using default value.
2010-10-06 14:14:48.094MaxDebug 2288:18ee7b8 all: No value specified for key com.sun.am.policy.agents.config.iis.Use_Basic_Auth, using default value.
2010-10-06 14:14:48.094 Info 2288:18ee7b8 PolicyAgent: Default priority => DEFAULT : Actual priority => HIGH
2010-10-06 14:14:48.094MaxDebug 2288:18ee7b8 all: No value specified for key com.sun.am.policy.agents.config.iis.owa_enabled, using default value.
2010-10-06 14:14:48.094MaxDebug 2288:18ee7b8 all: No value specified for key com.sun.am.policy.agents.config.iis.owa_enabled_change_protocol, using default value.
2010-10-06 14:14:48.094MaxDebug 2288:18ee7b8 all: No value specified for key com.sun.am.policy.agents.config.proxy.override_host_port, using default value.
2010-10-06 14:14:48.094MaxDebug 2288:18ee7b8 all: No value specified for key com.sun.am.policy.agents.config.no_child_thread_activation_delay, using default value.
2010-10-06 14:14:48.094MaxDebug 2288:18ee7b8 all: No value specified for key com.sun.am.auth.certificate.alias, using default value .
2010-10-06 14:14:48.094MaxDebug 2288:18ee7b8 all: No value specified for key com.sun.am.certdb.password, using default value .
2010-10-06 14:14:48.094MaxDebug 2288:18ee7b8 all: No value specified for key com.sun.am.certdb.password, using default value .
2010-10-06 14:14:48.094MaxDebug 2288:18ee7b8 all: No value specified for key com.sun.am.auth.certificate.alias, using default value .
2010-10-06 14:14:48.094MaxDebug 2288:18ee7b8 all: No value specified for key com.sun.am.auth.certificate.alias, using default value .
2010-10-06 14:14:48.094MaxDebug 2288:18ee7b8 all: No value specified for key com.sun.am.certdb.password, using default value .
2010-10-06 14:14:48.094MaxDebug 2288:18ee7b8 all: No value specified for key com.sun.am.certdb.password, using default value .
2010-10-06 14:14:48.094MaxDebug 2288:18ee7b8 all: No value specified for key com.sun.am.auth.certificate.alias, using default value .
2010-10-06 14:14:48.094MaxDebug 2288:18ee7b8 all: No value specified for key com.sun.am.ignore.naming_service, using default value.
2010-10-06 14:14:48.094MaxDebug 2288:18ee7b8 all: No value specified for key com.sun.am.ignore.preferred_naming_url, using default value.
2010-10-06 14:14:48.094MaxDebug 2288:18ee7b8 all: No value specified for key com.sun.am.sso.default_session.url, using default value .
2010-10-06 14:14:48.094MaxDebug 2288:18ee7b8 all: No value specified for key com.sun.am.sso.hash_bucket.size, using default value.
2010-10-06 14:14:48.094MaxDebug 2288:18ee7b8 all: No value specified for key com.sun.am.sso.hash_bucket.size, using default value.
2010-10-06 14:14:48.094 Info 2288:18ee7b8 AM_SSO_SERVICE: SSOTokenService::SSOTokenService(): SSOTokenService notification enabled, URL = https://services.domain2.ca:443/amagent/UpdateAgentCacheServlet?shortcircuit=false.
2010-10-06 14:14:48.094MaxDebug 2288:18ee7b8 all: No value specified for key com.sun.am.sso.max_threads, using default value.
2010-10-06 14:14:48.094 Info 2288:191e560 ThreadPool: ::spin() : New Thread entered loop. Active threads = 0 : Work queue : 0.
2010-10-06 14:14:49.110 Debug 2288:18ee7b8 ThreadPool: ThreadPool::dispatch(): Calling PR_Lock() after this line thread_pool.cpp:186.
2010-10-06 14:14:49.110 Debug 2288:18ee7b8 ThreadPool: ThreadPool::dispatch(): Successfully dispatched the work.
2010-10-06 14:14:49.110 Debug 2288:191e560 ThreadPool: spin() : Thread awakened: activeThreads = 1 ; maxThreads = 11 ; workQueueSize = 1
2010-10-06 14:14:49.110 Info 2288:18ee7b8 AM_SSO_SERVICE: SSOTokenService::initialize(): dispatched hash table cleanup.
2010-10-06 14:14:49.110 Info 2288:18ee7b8 AM_SSO_SERVICE: SSOTokenService::initialize(): SSOTokenService cache initialized.
2010-10-06 14:14:49.110 Debug 2288:191e560 ThreadPool: ::spin() : Thread Function calling 0x1e1b650.
2010-10-06 14:14:49.110 Info 2288:18ee7b8 AM_SSO_SERVICE: SSOTokenService::SSOTokenService(): SSOTokenService created.
2010-10-06 14:14:49.110MaxDebug 2288:18ee7b8 PolicyEngine: Policy engine initalized.
2010-10-06 14:14:49.110MaxDebug 2288:18ee7b8 PolicyEngine: policy_engine.cpp:94 In createService
2010-10-06 14:14:49.110 Info 2288:18ee7b8 PolicyEngine: iPlanetAMWebAgentService creation attempted.
2010-10-06 14:14:49.110MaxDebug 2288:18ee7b8 ServiceEngine: No value specified for key com.sun.am.policy.am.hash_bucket.size, using default value.
2010-10-06 14:14:49.110MaxDebug 2288:18ee7b8 ServiceEngine: No value specified for key com.sun.am.auth.certificate.alias, using default value .
2010-10-06 14:14:49.110MaxDebug 2288:18ee7b8 ServiceEngine: No value specified for key com.sun.am.certdb.password, using default value .
2010-10-06 14:14:49.110MaxDebug 2288:18ee7b8 ServiceEngine: No value specified for key com.sun.am.certdb.password, using default value .
2010-10-06 14:14:49.110MaxDebug 2288:18ee7b8 ServiceEngine: No value specified for key com.sun.am.auth.certificate.alias, using default value .
2010-10-06 14:14:49.110MaxDebug 2288:18ee7b8 ServiceEngine: No value specified for key com.sun.am.certdb.password, using default value .
2010-10-06 14:14:49.110MaxDebug 2288:18ee7b8 ServiceEngine: No value specified for key com.sun.am.auth.org.name, using default value .
2010-10-06 14:14:49.110MaxDebug 2288:18ee7b8 ServiceEngine: No value specified for key com.sun.am.auth.certificate.alias, using default value .
2010-10-06 14:14:49.110MaxDebug 2288:18ee7b8 ServiceEngine: No value specified for key com.sun.am.certdb.password, using default value .
2010-10-06 14:14:49.110MaxDebug 2288:18ee7b8 ServiceEngine: No value specified for key com.sun.am.certdb.password, using default value .
2010-10-06 14:14:49.110MaxDebug 2288:18ee7b8 ServiceEngine: No value specified for key com.sun.am.auth.certificate.alias, using default value .
2010-10-06 14:14:49.110MaxDebug 2288:18ee7b8 ServiceEngine: No value specified for key com.sun.am.ignore.naming_service, using default value.
2010-10-06 14:14:49.110MaxDebug 2288:18ee7b8 ServiceEngine: No value specified for key com.sun.am.ignore.preferred_naming_url, using default value.
2010-10-06 14:14:49.110MaxDebug 2288:18ee7b8 ServiceEngine: No value specified for key com.sun.am.ordinal, using default value.
2010-10-06 14:14:49.110MaxDebug 2288:18ee7b8 ServiceEngine: No value specified for key com.sun.am.policy.am.userid.param.type, using default value Session.
2010-10-06 14:14:49.110MaxDebug 2288:18ee7b8 ServiceEngine: Service::Service() Profile Attribute=emplid
2010-10-06 14:14:49.110MaxDebug 2288:18ee7b8 ServiceEngine: Service::Service() Profile Attribute=entrydn
2010-10-06 14:14:49.110MaxDebug 2288:18ee7b8 ServiceEngine: Service::Service() Profile Attribute=uid
2010-10-06 14:14:49.110MaxDebug 2288:18ee7b8 ServiceEngine: No value specified for key com.sun.am.policy.agents.config.attribute.multi_value_separator, using default value |.
2010-10-06 14:14:49.110 Info 2288:18ee7b8 ServiceEngine: Service() notification enabled, URL = https://services.domain2.ca:443/amagent/UpdateAgentCacheServlet?shortcircuit=false
2010-10-06 14:14:49.110MaxDebug 2288:18ee7b8 PolicyAgent: FqdnHandler::FqdnHandler() fqdnMap size => 2
2010-10-06 14:14:49.110MaxDebug 2288:18ee7b8 PolicyAgent: FqdnHandler::FqdnHandler() Fqdn Default => services.domain2.ca
2010-10-06 14:14:49.110 Debug 2288:18ee7b8 PolicyAgent: FqdnHandler::FqdnHandler() [10.226.45.177] => {services.domain2.ca}
2010-10-06 14:14:49.110 Debug 2288:18ee7b8 PolicyAgent: FqdnHandler::FqdnHandler() [hosttest.domain.com] => {services.domain2.ca}
2010-10-06 14:14:49.110 Debug 2288:18ee7b8 PolicyAgent: am_web_init: Using cookie prefix HTTP_.
2010-10-06 14:14:49.110 Debug 2288:18ee7b8 PolicyAgent: am_web_init: Using cookie max-age 300.
2010-10-06 14:14:49.110 Debug 2288:18ee7b8 PolicyAgent: get_request_url(): requestProtocolType = off
2010-10-06 14:14:49.110 Debug 2288:18ee7b8 PolicyAgent: get_request_url(): HEADER_Host = hosttest.domain.com
2010-10-06 14:14:49.110 Debug 2288:18ee7b8 PolicyAgent: get_request_url(): SERVER_PORT = 80
2010-10-06 14:14:49.110 Debug 2288:18ee7b8 PolicyAgent: get_request_url(): URL = /myapplicationLife/Home.aspx
2010-10-06 14:14:49.110 Debug 2288:18ee7b8 PolicyAgent: get_request_url(): PATH_INFO = /myapplicationLife/Home.aspx
2010-10-06 14:14:49.110 Debug 2288:18ee7b8 PolicyAgent: get_request_url(): SCRIPT_NAME = /myapplicationLife/Home.aspx
2010-10-06 14:14:49.110 Debug 2288:18ee7b8 PolicyAgent: get_request_url(): Reconstructed path info =
2010-10-06 14:14:49.110 Debug 2288:18ee7b8 PolicyAgent: get_request_url(): Constructed request url = http://hosttest.domain.com:80/myapplicationLife/Home.aspx
2010-10-06 14:14:49.110MaxDebug 2288:18ee7b8 PolicyAgent: am_web_is_notification(), https://services.domain2.ca:443/myapplicationLife/Home.aspx is not notification url https://services.domain2.ca:443/amagent/UpdateAgentCacheServlet?shortcircuit=false.
2010-10-06 14:14:49.110 Debug 2288:18ee7b8 PolicyAgent: HttpExtensionProc(): requestMethod = GET
2010-10-06 14:14:49.110 Debug 2288:18ee7b8 PolicyAgent: HttpExtensionProc(): SSO token found in cookie header.
2010-10-06 14:14:49.110 Debug 2288:18ee7b8 PolicyAgent: HttpExtensionProc(): SSO token = AQIC5wM2LY4SfcyYx+wf/9JKLz1KP7GqoqKy62euCX9NCPM=@AAJTSQACMDE=#
2010-10-06 14:14:49.110 Debug 2288:18ee7b8 PolicyAgent: HttpExtensionProc(): requestClientIP = 10.226.45.41
2010-10-06 14:14:49.110 Debug 2288:18ee7b8 PolicyAgent: HttpExtensionProc(): status after am_map_create = success (0)
2010-10-06 14:14:49.110MaxDebug 2288:18ee7b8 PolicyAgent: am_web_is_access_allowed(): processing url https://services.domain2.ca:443/myapplicationLife/Home.aspx
2010-10-06 14:14:49.110 Debug 2288:18ee7b8 PolicyAgent: am_web_is_access_allowed(): client_ip 10.226.45.41 not found in client ip not enforced list
2010-10-06 14:14:49.110MaxDebug 2288:18ee7b8 AM_POLICY_SERVICE: am_policy_compare_urls(): compare usePatterns=false returned 3
2010-10-06 14:14:49.110 Debug 2288:18ee7b8 PolicyAgent: Matching https://services.domain2.ca:443/myapplicationLife/Home.aspx with access_denied_url https://services.domain2.ca/applicationmvc/Account/DOBVerify.aspx: FALSE
2010-10-06 14:14:49.110MaxDebug 2288:18ee7b8 AM_POLICY_SERVICE: am_policy_compare_urls(): compare usePatterns=true returned 3
2010-10-06 14:14:49.110MaxDebug 2288:18ee7b8 AM_POLICY_SERVICE: am_policy_compare_urls(): compare usePatterns=true returned 3
2010-10-06 14:14:49.110MaxDebug 2288:18ee7b8 AM_POLICY_SERVICE: am_policy_compare_urls(): compare usePatterns=true returned 3
2010-10-06 14:14:49.110MaxDebug 2288:18ee7b8 AM_POLICY_SERVICE: am_policy_compare_urls(): compare usePatterns=true returned 3
2010-10-06 14:14:49.110 Debug 2288:18ee7b8 PolicyAgent: in_not_enforced_list: enforcing access control for https://services.domain2.ca:443/myapplicationLife/Home.aspx
2010-10-06 14:14:49.110 Debug 2288:18ee7b8 PolicyAgent: set_host_ip_in_env_map: map_insert: client_ip=10.226.45.41
2010-10-06 14:14:49.110MaxDebug 2288:18ee7b8 ServiceEngine: No value specified for key com.sun.am.policy.am.max_threads, using default value.
2010-10-06 14:14:49.110 Info 2288:1920b18 ThreadPool: ::spin() : New Thread entered loop. Active threads = 0 : Work queue : 0.
2010-10-06 14:14:50.126 Debug 2288:18ee7b8 ThreadPool: ThreadPool::dispatch(): Calling PR_Lock() after this line thread_pool.cpp:186.
2010-10-06 14:14:50.126 Debug 2288:18ee7b8 ThreadPool: ThreadPool::dispatch(): Successfully dispatched the work.
2010-10-06 14:14:50.126MaxDebug 2288:18ee7b8 ServiceEngine: Service communication with server started.
2010-10-06 14:14:50.126 Debug 2288:1920b18 ThreadPool: spin() : Thread awakened: activeThreads = 1 ; maxThreads = 10 ; workQueueSize = 1
2010-10-06 14:14:50.126MaxDebug 2288:18ee7b8 ServiceEngine: No value specified for key com.sun.am.policy.am.org.name, using default value /.
2010-10-06 14:14:50.126 Debug 2288:1920b18 ThreadPool: ::spin() : Thread Function calling 0x1f413b8.
2010-10-06 14:14:50.126MaxDebug 2288:18ee7b8 ServiceEngine: No value specified for key com.sun.am.policy.am.auth_module, using default value Application.
2010-10-06 14:14:50.126MaxDebug 2288:18ee7b8 AuthService: Number of servers in service:1, 'https://services.domain2.ca/opensso/authservice'.
2010-10-06 14:14:50.126 Debug 2288:18ee7b8 AuthService: BaseService::doRequest(): Using server: https://services.domain2.ca/opensso/authservice.
2010-10-06 14:14:50.126MaxDebug 2288:18ee7b8 AuthService: <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<RequestSet vers="1.0" svcid="auth" reqid="0">
<Request><![CDATA[<?xml version="1.0" encoding="UTF-8"?><AuthContext version="1.0">
<Request authIdentifier="0"><NewAuthContext orgName="/"/></Request></AuthContext>]]></Request>
</RequestSet>
2010-10-06 14:14:50.126MaxDebug 2288:18ee7b8 AuthService: BaseService::sendRequest Request line: POST /opensso/authservice HTTP/1.0
2010-10-06 14:14:50.126 Info 2288:18ee7b8 all: Successfully completed SSL handshake.
2010-10-06 14:14:50.126 Debug 2288:18ee7b8 AuthService: BaseService::sendRequest Cookie and Headers =Host: services.domain2.ca
2010-10-06 14:14:50.126 Debug 2288:18ee7b8 AuthService: BaseService::sendRequest Content-Length =Content-Length: 296
2010-10-06 14:14:50.126 Debug 2288:18ee7b8 AuthService: BaseService::sendRequest Header Suffix =Accept: text/xml
Content-Type: text/xml; charset=UTF-8
2010-10-06 14:14:50.126MaxDebug 2288:18ee7b8 AuthService: BaseService::sendRequest(): Total chunks: 9.
2010-10-06 14:14:50.126MaxDebug 2288:18ee7b8 AuthService: BaseService::sendRequest(): Sent 9 chunks.
2010-10-06 14:14:50.391 Debug 2288:18ee7b8 AuthService: HTTP Status = 200 (OK)
2010-10-06 14:14:50.391MaxDebug 2288:18ee7b8 AuthService: Http::Response::readAndParse(): Reading headers.
2010-10-06 14:14:50.391MaxDebug 2288:18ee7b8 AuthService: Date: Wed, 06 Oct 2010 18:14:50 GMT
2010-10-06 14:14:50.391MaxDebug 2288:18ee7b8 AuthService: set-cookie: JSESSIONID=B0833A971A1CEB46FF22825B154CEA97; Path=/opensso
2010-10-06 14:14:50.391MaxDebug 2288:18ee7b8 AuthService: set-cookie: amlbcookie=01; Domain=.domain2.ca; Path=/
2010-10-06 14:14:50.391MaxDebug 2288:18ee7b8 AuthService: set-cookie: amlbcookie=01; Domain=.domain.com; Path=/
2010-10-06 14:14:50.391MaxDebug 2288:18ee7b8 AuthService: Connection: close
2010-10-06 14:14:50.391MaxDebug 2288:18ee7b8 AuthService: Content-Type: text/plain
2010-10-06 14:14:50.391 Debug 2288:18ee7b8 AuthService: Http::Response::readAndParse(): No content length in response.
2010-10-06 14:14:50.391MaxDebug 2288:18ee7b8 all: Connection::waitForReply(): returns with status success.
2010-10-06 14:14:50.391MaxDebug 2288:18ee7b8 AuthService: Http::Response::readAndParse(): Completed processing the response with status: success
2010-10-06 14:14:50.391MaxDebug 2288:18ee7b8 AuthService: <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<ResponseSet vers="1.0" svcid="auth" reqid="0">
<Response><![CDATA[<?xml version="1.0" encoding="UTF-8"?>
<AuthContext version="1.0"><Response authIdentifier="AQIC5wM2LY4SfczArJpBFrSCg2eHw/b2mrG39uCvmA+bzdI=@AAJTSQACMDE=#"><LoginStatus status="in_progress"></LoginStatus></Response></AuthContext>]]></Response>
</ResponseSet>
2010-10-06 14:14:50.391MaxDebug 2288:18ee7b8 AuthService: <?xml version="1.0" encoding="UTF-8"?>
<AuthContext version="1.0"><Response authIdentifier="AQIC5wM2LY4SfczArJpBFrSCg2eHw/b2mrG39uCvmA+bzdI=@AAJTSQACMDE=#"><LoginStatus status="in_progress"></LoginStatus></Response></AuthContext>
2010-10-06 14:14:50.391 Debug 2288:18ee7b8 AuthService: AuthService::processLoginStatus() Login is in progress.
2010-10-06 14:14:50.391 Info 2288:18ee7b8 AuthService: AuthService::processLoginStatus() Auth Identifier =AQIC5wM2LY4SfczArJpBFrSCg2eHw/b2mrG39uCvmA+bzdI=@AAJTSQACMDE=#
2010-10-06 14:14:50.391 Debug 2288:18ee7b8 AuthService: BaseService::doRequest(): Using server: https://services.domain2.ca/opensso/authservice.
2010-10-06 14:14:50.391MaxDebug 2288:18ee7b8 AuthService: <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<RequestSet vers="1.0" svcid="auth" reqid="1">
<Request><![CDATA[<?xml version="1.0" encoding="UTF-8"?><AuthContext version="1.0">
<Request authIdentifier="AQIC5wM2LY4SfczArJpBFrSCg2eHw/b2mrG39uCvmA+bzdI=@AAJTSQACMDE=#"><Login><IndexTypeNamePair indexType="moduleInstance"><IndexName>Application</IndexName></IndexTypeNamePair></Login></Request></AuthContext>]]></Request>
</RequestSet>
2010-10-06 14:14:50.391MaxDebug 2288:18ee7b8 AuthService: BaseService::sendRequest Request line: POST /opensso/authservice HTTP/1.0
2010-10-06 14:14:50.407 Info 2288:18ee7b8 all: Successfully completed SSL handshake.
2010-10-06 14:14:50.407 Debug 2288:18ee7b8 AuthService: BaseService::sendRequest Cookie and Headers =Host: services.domain2.ca
Cookie: JSESSIONID=B0833A971A1CEB46FF22825B154CEA97;amlbcookie=01;amlbcookie=01
2010-10-06 14:14:50.407 Debug 2288:18ee7b8 AuthService: BaseService::sendRequest Content-Length =Content-Length: 443
2010-10-06 14:14:50.407 Debug 2288:18ee7b8 AuthService: BaseService::sendRequest Header Suffix =Accept: text/xml
Content-Type: text/xml; charset=UTF-8
2010-10-06 14:14:50.407MaxDebug 2288:18ee7b8 AuthService: BaseService::sendRequest(): Total chunks: 14.
2010-10-06 14:14:50.407MaxDebug 2288:18ee7b8 AuthService: BaseService::sendRequest(): Sent 14 chunks.
2010-10-06 14:14:50.673 Debug 2288:18ee7b8 AuthService: HTTP Status = 200 (OK)
2010-10-06 14:14:50.673MaxDebug 2288:18ee7b8 AuthService: Http::Response::readAndParse(): Reading headers.
2010-10-06 14:14:50.673MaxDebug 2288:18ee7b8 AuthService: Date: Wed, 06 Oct 2010 18:14:50 GMT
2010-10-06 14:14:50.673MaxDebug 2288:18ee7b8 AuthService: Connection: close
2010-10-06 14:14:50.673MaxDebug 2288:18ee7b8 AuthService: Content-Type: text/plain
2010-10-06 14:14:50.673 Debug 2288:18ee7b8 AuthService: Http::Response::readAndParse(): No content length in response.
2010-10-06 14:14:50.673MaxDebug 2288:18ee7b8 all: Connection::waitForReply(): returns with status success.
2010-10-06 14:14:50.673MaxDebug 2288:18ee7b8 AuthService: Http::Response::readAndParse(): Completed processing the response with status: success
2010-10-06 14:14:50.673MaxDebug 2288:18ee7b8 AuthService: <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<ResponseSet vers="1.0" svcid="auth" reqid="1">
<Response><![CDATA[<?xml version="1.0" encoding="UTF-8"?>
<AuthContext version="1.0"><Response authIdentifier="AQIC5wM2LY4SfczArJpBFrSCg2eHw/b2mrG39uCvmA+bzdI=@AAJTSQACMDE=#"><GetRequirements><Callbacks length="2"><NameCallback><Prompt>Enter application name.</Prompt></NameCallback><PasswordCallback echoPassword="true"><Prompt>Enter secret string.</Prompt></PasswordCallback></Callbacks></GetRequirements></Response></AuthContext>]]></Response>
</ResponseSet>
2010-10-06 14:14:50.673MaxDebug 2288:18ee7b8 AuthService: <?xml version="1.0" encoding="UTF-8"?>
<AuthContext version="1.0"><Response authIdentifier="AQIC5wM2LY4SfczArJpBFrSCg2eHw/b2mrG39uCvmA+bzdI=@AAJTSQACMDE=#"><GetRequirements><Callbacks length="2"><NameCallback><Prompt>Enter application name.</Prompt></NameCallback><PasswordCallback echoPassword="true"><Prompt>Enter secret string.</Prompt></PasswordCallback></Callbacks></GetRequirements></Response></AuthContext>
2010-10-06 14:14:50.673 Debug 2288:18ee7b8 ServiceEngine: Service::do_agent_auth_login(): Setting password callback.
2010-10-06 14:14:50.673 Debug 2288:18ee7b8 ServiceEngine: Service::do_agent_auth_login(): Setting name callback to 'UrlAccessAgent'.
2010-10-06 14:14:50.673 Debug 2288:18ee7b8 AuthService: BaseService::doRequest(): Using server: https://services.domain2.ca/opensso/authservice.
2010-10-06 14:14:50.673MaxDebug 2288:18ee7b8 AuthService: <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<RequestSet vers="1.0" svcid="auth" reqid="2">
<Request><![CDATA[<?xml version="1.0" encoding="UTF-8"?><AuthContext version="1.0">
<Request authIdentifier="AQIC5wM2LY4SfczArJpBFrSCg2eHw/b2mrG39uCvmA+bzdI=@AAJTSQACMDE=#"><SubmitRequirements><Callbacks length="2"><NameCallback><Prompt>Enter application name.</Prompt><Value>UrlAccessAgent</Value></NameCallback><PasswordCallback echoPassword="true"><Prompt>Enter secret string.</Prompt><Value><secure data></Value></PasswordCallback></Callbacks></SubmitRequirements></Request></AuthContext>]]></Request>
</RequestSet>
2010-10-06 14:14:50.673MaxDebug 2288:18ee7b8 AuthService: BaseService::sendRequest Request line: POST /opensso/authservice HTTP/1.0
2010-10-06 14:14:50.673 Info 2288:18ee7b8 all: Successfully completed SSL handshake.
2010-10-06 14:14:50.673 Debug 2288:18ee7b8 AuthService: BaseService::sendRequest Cookie and Headers =Host: services.domain2.ca
Cookie: JSESSIONID=B0833A971A1CEB46FF22825B154CEA97;amlbcookie=01;amlbcookie=01
2010-10-06 14:14:50.673 Debug 2288:18ee7b8 AuthService: BaseService::sendRequest Content-Length =Content-Length: 618
2010-10-06 14:14:50.673 Debug 2288:18ee7b8 AuthService: BaseService::sendRequest Header Suffix =Accept: text/xml
Content-Type: text/xml; charset=UTF-8
2010-10-06 14:14:50.673MaxDebug 2288:18ee7b8 AuthService: BaseService::sendRequest(): Total chunks: 30.
2010-10-06 14:14:50.673MaxDebug 2288:18ee7b8 AuthService: BaseService::sendRequest(): Sent 30 chunks.
2010-10-06 14:14:50.798 Debug 2288:18ee7b8 AuthService: HTTP Status = 502 (Proxy Error)
2010-10-06 14:14:50.798MaxDebug 2288:18ee7b8 AuthService: Http::Response::readAndParse(): Reading headers.
2010-10-06 14:14:50.798MaxDebug 2288:18ee7b8 AuthService: Date: Wed, 06 Oct 2010 18:14:46 GMT
2010-10-06 14:14:50.798MaxDebug 2288:18ee7b8 AuthService: Connection: close
2010-10-06 14:14:50.798MaxDebug 2288:18ee7b8 AuthService: Content-Type: text/html; charset=iso-8859-1
2010-10-06 14:14:50.798MaxDebug 2288:18ee7b8 AuthService: Http::Response::readAndParse(): Reading body content of length: 70904979434504610
2010-10-06 14:14:50.798MaxDebug 2288:18ee7b8 all: Connection::waitForReply(): returns with status success.
2010-10-06 14:14:50.798MaxDebug 2288:18ee7b8 AuthService: Http::Response::readAndParse(): Completed processing the response with status: success
2010-10-06 14:14:50.798MaxDebug 2288:18ee7b8 AuthService: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>502 Proxy Error</title>
</head><body>
<h1>Proxy Error</h1>
<p>The proxy server received an invalid response from an upstream server.
The proxy server could not handle the request <em>POST /opensso/authservice</em>.<p>
Reason: <strong>Error reading from remote server</strong></p></p>
</body></html>
2010-10-06 14:14:50.798 Warning 2288:18ee7b8 AuthService: BaseService::doHttpPost() failed, HTTP error = 502
2010-10-06 14:14:50.798 Error 2288:18ee7b8 PolicyEngine: am_policy_evaluate: InternalException in AuthService::submitRequirements() with error message:Error sending client submitted requirements to server. and code:21
2010-10-06 14:14:50.798 Warning 2288:18ee7b8 PolicyAgent: am_web_is_access_allowed()(https://services.domain2.ca:443/myapplicationLife/Home.aspx, GET) denying access: status = HTTP error
2010-10-06 14:14:50.798 Debug 2288:18ee7b8 PolicyAgent: am_web_is_access_allowed(): Successfully logged to remote server for GET action by user unknown user to resource https://services.domain2.ca:443/myapplicationLife/Home.aspx.
2010-10-06 14:14:50.798 Info 2288:18ee7b8 PolicyAgent: am_web_is_access_allowed()(https://services.domain2.ca:443/myapplicationLife/Home.aspx, GET) returning status: HTTP error.
2010-10-06 14:14:50.798 Debug 2288:18ee7b8 PolicyAgent: HttpExtensionProc(): status after am_web_is_access_allowed = HTTP error (21)
2010-10-06 14:14:50.798 Error 2288:18ee7b8 PolicyAgent: HttpExtensionProc(): status: HTTP error (21)
Two things:
1. You can configure an error page in the agent so when you get an error you get to see the error page instead of a blank page.
2. It appears to be a problem with your proxy server. Does the agent or opensso go through a proxy server or a reverse proxy server? It looks like it is causing a problem and not the agent or opensso themselves. Your proxy server may have a client connection limit which has been reached by the agent/opensso.
Similar Messages
-
Domain Agents and E6900 with multiple NICs.
Hello,
I have some issues configuring Sun management Center 3.6 (and 3.6.1) on a network with this characteristics:
2 x E6900 (with 2 Domains each one)
1 x v210
The Server Component of Sun Management Center is installed on the v210. In this machine are installed the Platform Agents of the 2 System Controllers of the 2 E6900.
Each domain has installed de Sun Management Center Agent.
The network configuration of the Domains is this:
Each domain has 3 NIC on 3 different network interfaces, and each NIC has its own hostname. One of this NIC is destinated to the administration network to be used for the Sun Management Center. This nic, as I said before, has its own hostname but it its different of the nodename (the node name is the same as the public interface of the domain, not the administration interface).
The Domains does not use DNS, and the information included on the /etc/hosts is related to local NICs and the NICs of the other Domains, but anyone contains the NIC of the admin interface of other domain nor the NIC of the v210.
The v210 does not has DNS neither, and has only their own information on /etc/hosts.
All Domains has Solaris 9, and v210 has Solaris 10.
Basically the problem is:
"The Domain Agents cannot communicate with SunMC Server", when I manually add each agent. The discovery process doesn't work neither.
I checked the domain-config.x of one domain and it shows:
agent = {
agentServer = "venwas1"
logicalAddressMode = "ip"
snmpPort = "1161"
"venwas1" is the hostname of the public interface, nor the administration interface.
I changed the value for the hostname of the administration interface with no success; then changed for the ip address of the administration interface; and no success neither.
The default platform agent works, but does not appers with the corrent icon on the SunMC console. Its appears like a folder icon, and the documentation said that the Platform Agents is represented with a specific Icon.
Please, anyone can help me ?
Thanks in advance.Hi Alejandro,
I checked the domain-config.x of one domain and it
shows:
agent = {
agentServer = "venwas1"
logicalAddressMode = "ip"
snmpPort = "1161"
nwas1" is the hostname of the public interface, nor
the administration interface.
I changed the value for the hostname of the
administration interface with no success; then
changed for the ip address of the administration
interface; and no success neither.If you just change the hostname or IP, but don't do anything else, it won't work as the Agent has already created security keys for that old entry and needs to be reseeded. Change the entry to the IP that's on the same network as your SunMC Server, then run this command on the Agent while it's turned off:
/opt/SUNWsymon/sbin/es-run base-usm-seed.sh -s <SEED> -c agent
..replacing <SEED> with the same seed/password you used on your SunMC Server. Then start the Agent back up, wait for it a couple minutes, and try to make an icon for it again.
The default platform agent works, but does not appers
with the corrent icon on the SunMC console. Its
appears like a folder icon, and the documentation
said that the Platform Agents is represented with a
specific Icon.If the icon is incorrect then your SunMC Server is missing some files (or you've found a bug). You'll want all these addons installed on your Server:
Dynamic Reconfiguration for Sun Fire High-End and Midrange Systems
Sun Fire Midrange Systems Platform Administration
Sun Fire Midrange Systems Domain Administration
If you think you may be missing some (look in /var/opt/SUNWsymon/install/install.[timestamp] to see how you answered questions during your last install) you can run /opt/SUNWsymon/sbin/es-inst again and point it to your distribution media and it will only ask about packages that may be missing. If you do end up adding in some of the Midrange addons then a simple Console restart should refresh your Platform icons.
Regards,
[email protected]
http://www.HalcyonInc.com -
Download still in progress...agent never registers with SDS
Team,
I've installed agents on a number of hosts and successfully patched and upgraded them, and I've recently run into a problem where the agent never seems to complete it's registration with the SDS. The agent error.log shows this:
7381:2008-04-28_16:31:02 ERROR [ default_logger: source_unavailable: #0 ] 151069440 INFO: Enabling SSL communication.
7381:2008-04-28_16:31:02 ERROR [ default_logger: source_unavailable: #0 ] 151069184 INFO: Setting Url to download: https://uce.example.com:8002/config_files/SOLARIS_10_0_SPARC/agent.tgz
7381:2008-04-28_16:31:02 ERROR [ default_logger: source_unavailable: #0 ] 118100736 Info: Enabling Authentication mechanism (User=<>, Pass<**>).
7381:2008-04-28_16:31:05 ERROR [ default_logger: source_unavailable: #0 ] 118100992 Info: Setting Username and Password (User=<>, Pass<**>).
7381:2008-04-28_16:31:05 ERROR [ default_logger: source_unavailable: #0 ] 151069440 INFO: Enabling SSL communication.
7381:2008-04-28_16:31:05 ERROR [ default_logger: source_unavailable: #0 ] 118100736 Info: Enabling Authentication mechanism (User=<>, Pass<**>).
7381:2008-04-28_16:31:05 ERROR [ default_logger: source_unavailable: #0 ] 151070720 INFO: Using output file = /opt/SUNWuce/agent//config_files/.temp_si.7381_vIaOAo .
7381:2008-04-28_16:31:05 ERROR [ default_logger: source_unavailable: #0 ] 151069184 INFO: Setting Url to download: https://uce.example.com:8002/config_files/SOLARIS_10_0_SPARC/agent.tgz.sig
7381:2008-04-28_16:31:08 ERROR [ default_logger: source_unavailable: #0 ] 0 ShouldGetFile /opt/SUNWuce/agent//config_files/agent.tgz return with signature equals
7381:2008-04-28_16:31:34 ERROR [ default_logger: source_unavailable: #0 ] 151069440 INFO: Enabling SSL communication.
7381:2008-04-28_16:31:34 ERROR [ default_logger: source_unavailable: #0 ] 151069184 INFO: Setting Url to download: https://uce.example.com:8002/cgi-bin/server.cgi
7381:2008-04-28_16:31:34 ERROR [ default_logger: source_unavailable: #0 ] 118100736 Info: Enabling Authentication mechanism (User=<>, Pass<**>).
7381:2008-04-28_16:31:41 ERROR [ default_logger: source_unavailable: #0 ] 151068928 INFO: Download still in progress, retrying longer (knowledgebase_conflict_reconnect_retries=360, knowledgebase_conflict_reconnect_interval=5).
7381:2008-04-28_16:31:41 ERROR [ default_logger: source_unavailable: #0 ] 151066368 INFO: Waiting 5 seconds before retrying to communicate with parent.
7381:2008-04-28_16:31:46 ERROR [ default_logger: source_unavailable: #0 ] 151069440 INFO: Enabling SSL communication.
7381:2008-04-28_16:31:46 ERROR [ default_logger: source_unavailable: #0 ] 151069184 INFO: Setting Url to download: https://uce.example.com:8002/cgi-bin/server.cgi
7381:2008-04-28_16:31:46 ERROR [ default_logger: source_unavailable: #0 ] 118100736 Info: Enabling Authentication mechanism (User=<>, Pass<**>).
7381:2008-04-28_16:31:52 ERROR [ default_logger: source_unavailable: #0 ] 151068928 INFO: Download still in progress, retrying longer (knowledgebase_conflict_reconnect_retries=360,knowledgebase_conflict_reconnect_interval=5)....over and over again. I've tried several things to rectify this...stop/start the agent. Uninstall/reinstall the agent. I've stopped all other jobs on the SDS so this one can have all system resources. Nothing seems to be working and I can't find any information on either side to indicate why this is persisting.
Any ideas?
Thanks,
pbSecond this problem - various clients - Solaris 8 9 or 10 (all SPARC)
Only way I've been able to get around that for newly built hosts is to reboot after installation..
Very frustrating as we build a machine and then use UCE/CE to patch it - so we are leaving a relativly unpatched system on network till it can connect -
Policy agent fot apache tomcat opensso
Hi,
I am looking for policy agent fot apache tomcat opensso 8 u2. Can anyone post the url for the sameGo to https://edelivery.oracle.com and go to Sun Products Media Pack for Oracle Solaris on SPARC (64-bit)
There you will find OpenSSO Policy Agents 3.0 which includes the tomcat agent. Don't worry about the hardware platform or OS, the tomcat agent is pure java so it doesn't matter. -
SQL Server Agent job fails with error : The package execution returned DTSER_FAILURE (1).
Copyright (C) Microsoft Corp 1984-2005. All rights reserved. Started: 10:00:01 AM Error: 2014-08-15 10:00:07.20
Code: 0xC0047062 Source: Data Flow Task LEAN [6761]
Description: Teradata.Client.Provider.TdException: [Teradata Database] [3006] Logons are disabled.
at Teradata.Client.Provider.WpMessageManager.CheckForError()
at Teradata.Client.Provider.WpMessageManager.ProcessResponse()
at Teradata.Client.Provider.WpLogonManager.Action()
at Teradata.Client.Provider.WpSession.ManagerAction(WpMessageManager manager, UtlStopwatchWrapper watch, Int32 connectionTimeout)
at Teradata.Client.Provider.WpSession.Open(Int32 connectionTimeout, String password)
at Teradata.Client.Provider.WpSession.Open(Int32 connectionTimeout)
at Teradata.Client.Provider.Connection.Open(UtlConnectionString connectionString, UInt32 timeout)
at Teradata.Client.Provider.ConnectionPool.CreateConnection(UInt32 timeout)
at Teradata.Client.Provider.ConnectionPool.GetConnectionFromPool(Object owningObject)
at Teradata.Client.Provider.ConnectionFactory.GetConnection(Object owningObject, UtlConnectionString connStr)
at Teradata.Client.Provider.TdConnection.Open()
at Microsoft.SqlServer.Dts.Runtime.ManagedHelper.GetManagedConnection(String assemblyQualifiedName, String connStr, Object transaction)
at Microsoft.SqlServer.Dts.Runtime.Wrapper.IDTSConnectionManager100.AcquireConnection(Object pTransaction)
at Microsoft.SqlServer.Dts.Pipeline.DataReaderSourceAdapter.AcquireConnections(Object transaction)
at Microsoft.SqlServer.Dts.Pipeline.ManagedComponentHost.HostAcquireConnections(IDTSManagedComponentWrapper100 wrapper, Object transaction)
End Error Error: 2014-08-15 10:00:07.35 Code: 0xC0047017 Source: Data Flow Task SSIS.Pipeline
Description: component "LEAN" (6761) failed validation and returned error code 0x80004005. End Error Error: 2014-08-15 10:00:07.48
Code: 0xC004700C Source: Data Flow Task SSIS.Pipeline Description: One or more component failed validation.
End Error Error: 2014-08-15 10:00:07.60 Code: 0xC0024107 Source: Data Flow Task
Description: There were errors during task validation. End Error
DTExec: The package execution returned DTSER_FAILURE (1). Started: 10:00:01 AM Finished: 10:00:07 AM
Elapsed: 6.692 seconds. The package execution failed. The step failed.
SQL Server agent job fails with above error, Please let me know process tohandle it.
Thanks,
Vishal.The error message suggests its the issue with Teradata source database to which SSIS tries to connect within the data flow task. Make sure Teradata database is available and LOGON is enabled.
Please Mark This As Answer if it helps to solve the issue Visakh ---------------------------- http://visakhm.blogspot.com/ https://www.facebook.com/VmBlogs -
Policy Agent 2.2 with Tomcat connector (isapi_redirect.dll)?
Dear All,
We have installed Policy agent 2.2 for IIS6 to enable SSO with SUN Access Manager 7.1. Policy agent 2.2 was installed in IIS6 as wild card application mapping extension.
Our IIS6 also contains Apache tomcat connector (isapi_redirect.dll) as it needs to front JBOSS application server.
When we access protected resource Policy agent presents login screen. With the correct login details, policy agent authenticates successfully with SAM 7.1 and creates SSO token, which is good. But policyagent creates "goto" URL as /tomcat/isapi_redirect.dll rather than the original resource that user asked for as below?
2010-12-23 18:57:57.397 Info 3220:1e5b0d0 PolicyAgent: do_redirect(): redirect_header = Location: http://am-server.com:8080/amserver/login?goto=http%3A%2F%2Ftest-server%3A80%2Ftomcat%2Fisapi_redirect.dll
Any ideas on how to configure Policy agent for IIS6 when it has isapi_redirect.dll already installed on it.
Thanks,
SuryaHello Surya
Did you find a solution for this issue? How did you solve it?
Thank you
Prashanth
Edited by: user8605028 on Jun 15, 2011 1:24 PM -
Failover agents who work with active directory integration
Hi Guys,
I have implemented 'Active Directory' failover in SCOM. But what i see is that it doesn't work.
The agents are assigned by AD, but the first (RMS Role) management server has got all the agents and is to busy and
has got many problems to handle all the load. Even with this case nothing is failing over.
A few i could failover with hand, but the most i cannot because 'change primary management' server is blanked out. Even with the agents turned back from manuel to automatic (blog Kevin Holman).
1. Has anybody got any idea of getting the AD failover to work automatic?
2. Has anybody got a workaround to do this manual, by powershell (SCOM 2012 R2 cmdlets), bypassing the grayed out 'Change primary management server?
3. In my failover screen is see the management servers + the internet DMZ gateway server. I don't want to failover to the internet DMZ Gateway server. Can i delete this?
Please have a look at my specific question. I did read many blogs who are based on powershell without AD integration or AD integration without explaining how the automatic failover works.
Kind regards,
AndréHi,
SCOM windows agents automatic failover does not require AD integration or PowerShell scripting or Configuration Manager or manual agents installation specially for small to medium environment and agents distribution between different SCOM management servers
can be accomplished through push agents wizard, and windows agents failover can be simply verified from event viewer.
Please refer to the below links for more details:
How to Use Active Directory Domain Services to Assign Computers to Management Servers
http://technet.microsoft.com/en-us/library/hh212712.aspx
OpsMgr AD Integration - how it works
http://blogs.msdn.com/b/steverac/archive/2008/03/20/opsmgr-ad-integration-how-it-works.aspx
Regards,
Yan Li
Regards, Yan Li -
Looking for and SQL query to match CTI OS agent login ID with the Directory Number (instrument)
Hi All,
I am looking for an SQL query to request the HDS database to find out which Directory Number / instrument was associated with a specific CTI OS agent login ID.
Has anyone done such a query before ?
Thanks and Regards
NickHi,
this should work in 8.0 and 8.5:
SELECT
ag.PeripheralNumber AS [LoginID],
al.Extension,
al.LogoutDateTime
FROM [instance]_hds.dbo.Agent_Logout al
JOIN [instance]_awdb.dbo.Agent ag ON al.SkillTargetID = ag.SkillTargetID
Of course, replace [instance] with the ICM instance.
The query returns a table with three columns, first is the login ID aka PeripheralNumber, Extension is... well, the agent's extension, and LogoutDateTime is the timestamp when the agent logged out.
G. -
Hi,
I am trying to install 12c agent on windows 7 64 bit server by following m.note .
It is failing with Agent Configuration failed, please see below error message.
INFO: length of temp is2
INFO: Return value:C:\/Oracle/12.1.0.3.0_AgentCore_233/core
INFO: ** Agent Port Check completed successfully.**
INFO: ERROR: The Management Agent configuration failed. The plug-in configuration for the oracle.sysman.oh monitoring plug-in may have failed, or this plug-in may not be present in the Management Agent software. Ensure that the Management Agent software has the oracle.sysman.oh monitoring plug-in, if not then retry the operation. If the agent software has the oracle.sysman.oh monitoring plug-in, view the plug-in deployment log C:\Oracle\12.1.0.3.0_AgentCore_233\core\install\logs to check if the plug-in configuration for the oracle.sysman.oh monitoring plug-in failed.
INFO:
INFO: perform - mode finished for action: configure
INFO:
INFO: You can see the log file: C:\Oracle\12.1.0.3.0_AgentCore_233\core\12.1.0.3.0\cfgtoollogs\oui\configActions2014-10-03_08-48-15-AM.log
INFO:
INFO: C:\Oracle\12.1.0.3.0_AgentCore_233>exit /b 3
INFO: Plugin homes:
INFO: Plugin homes:
INFO: C:\Oracle\12.1.0.3.0_AgentCore_233\core\12.1.0.3.0\oui\bin\runConfig.bat ORACLE_HOME=C:\Oracle\12.1.0.3.0_AgentCore_233\core\12.1.0.3.0 RESPONSE_FILE=C:\Oracle\12.1.0.3.0_AgentCore_233\core\12.1.0.3.0\agent.rsp ACTION=configure MODE=perform COMPONENT_XML={oracle.sysman.top.agent.11_1_0_1_0.xml} RERUN=true completed with status=3
SEVERE: ERROR: Agent Configuration Failed
Thanks,Looks like , J2EE is having a problem connecting to the DB.Pls. chk. the following
-If you have configured the loop-back adapter , if installing on a local system & updated the /etc/host file with your ip address and host name.
or if the system is part of some n/w group and has ip address assigned ?
-Jdk 1.4 version is installed in your system
-Enough free Disk space available in the system
-How much RAM your system has which windows version you are using ?
-Is the DB is coming up properly ? its error related to this. check the logs.
-If the ports used by sap install / run used by other services running on the system ? & user have admin. privileges on the system .
Pls. update with your findings on above same , for the step next ...
Thanks ,
Uppal -
Agent Scripts failing with ID 21406 - agent can't finish discovery
We have 500+ agents installed- all the same way. I have this problem on only one. It's a windows 2003 server, x64. It's one of many we have monitored with this same OS. The environment is SCOM2007R2 CU5.
The agent installs fine. After installing, we start receiving EventLog warnings with ID 21406 on the agent host. The errors indicate Microsoft runtime error: File name or or class name not found during Automation operation: 'oAPI.CreatePropertyBag'
or whatever it's trying to do for that particular script. JS does the same thing. I easily reproduce it by building a simple vbs instantiating WSH and calling the CreatPropertyBag method. It fails every time on the line with the CreatePropertyBag
method.
Things I've tried thus far:
Reinstalling the agent
Upgrading the WSH to 5.7 (it was 5.6) and with the hotfix and reboot after
Validating the anti-virus. Sysadmin says it's set to warn not block anything (it's Symantec FYI)
I also noticed I occasionally get another error: ID 11105 - MOM Consolidator Module (misspelled in original message) failed to save the state after processing and might lose data.
I guess it's only script failures because in the console, I see the agent in agent managed view. Version is "Unknown". In windows computer state view it shows up as Win2k3 OS, agent shows healthy. I see some health objects and even some
performance objects. In a basic OS state view however, name shows as 'Microsoft.Windows.OperatingSystem, Operating System version is blank and so is OS Version Display name which I assume all get populated via the scripts that are failing.
Thanks for any help anyone can give me on this.Thanks Alexey.
1. Checked permissions. I found it hard to believe that this could be the problem since running a script as my own user outside of SCOM produces the same issue. Nevertheless, did confirm LS has full control to entire install path for the
agent.
2. I'm certainly not a com expert but I compared properties of every object I could find in the tree that was scom-related or scripting related. Local System was set the same on this host as another host that is working.
3. I set trace level to info and I've been combing through it. Unfortunately, the error output is no better in trace than it is in eventlog. I still basically get only "File name or class name not found during Automation operation: 'oAPI.CreatePropertyBag'
There are other errors in the log but some of those are perhaps expected when it recovers from reboot or shutdown. And as I mentioned, running the simple script outside of scom (as me and I'm a local admin) produces the same issue.
Any more thoughts?
Thanks! -
Poor performance using policy agent 2.2 with Sun Access Manager
Even if com.sun.am.policy.agents.config.do_sso_only is set to true, the policy agent sent a request to PolicyService (svcid="Policy") and it's take more than 8 seconds to receive a respose. Any idea why ??
Agent Log
2012-10-15 08:11:42.441MaxDebug 24211:130800 PolicyService: <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<RequestSet vers="1.0" svcid="Policy" reqid="9">
<Request><![CDATA[
<PolicyService version="1.0">
<PolicyRequest requestId="2" appSSOToken="AQIC5wM2LY4SfcynHuhUJZ2ol3lBzD0LJVKLpP7ULh6sgcg=@AAJTSQACMDE=#">
<GetResourceResults userSSOToken="AQIC5wM2LY4Sfczm02fTJAo4H1i82OGPsRWMs5t6D7bRaVQ=@AAJTSQACMDE=#" serviceName="iPlanetAMWebAgentService" resourceName="http://devappa11.dev.emergis:80" resourceScope="response-attributes-only">
<EnvParameters>
<AttributeValuePair>
<Attribute name="requestIp"/>
<Value>142.168.64.128</Value>
</AttributeValuePair>
</EnvParameters>
<GetResponseDecisions>
<Attribute name="uid"/>
</GetResponseDecisions>
</GetResourceResults>
</PolicyRequest>
</PolicyService>]]>
</Request>
</RequestSet>
2012-10-15 08:11:42.441MaxDebug 24211:130800 PolicyService: BaseService::sendRequest Request line: POST /amserver/policyservice HTTP/1.0
2012-10-15 08:11:42.441 Debug 24211:130800 PolicyService: BaseService::sendRequest Cookie and Headers =Host: devappf9.dev.emergis
2012-10-15 08:11:42.441 Debug 24211:130800 PolicyService: BaseService::sendRequest Content-Length =Content-Length: 778
2012-10-15 08:11:42.441 Debug 24211:130800 PolicyService: BaseService::sendRequest Header Suffix =Accept: text/xml
Content-Type: text/xml; charset=UTF-8
2012-10-15 08:11:42.441MaxDebug 24211:130800 PolicyService: BaseService::sendRequest(): Total chunks: 24.
2012-10-15 08:11:42.441MaxDebug 24211:130800 PolicyService: BaseService::sendRequest(): Sent 24 chunks.
2012-10-15 08:11:50.801 Debug 24211:130800 PolicyService: HTTP Status = 200 (OK)
2012-10-15 08:11:50.801MaxDebug 24211:130800 PolicyService: Http::Response::readAndParse(): Reading headers.
2012-10-15 08:11:50.801MaxDebug 24211:130800 PolicyService: Server: Sun-ONE-Web-Server/6.1
2012-10-15 08:11:50.801MaxDebug 24211:130800 PolicyService: Date: Mon, 15 Oct 2012 12:11:50 GMT
2012-10-15 08:11:50.801MaxDebug 24211:130800 PolicyService: Content-type: text/html
2012-10-15 08:11:50.801MaxDebug 24211:130800 PolicyService: Connection: close
2012-10-15 08:11:50.801 Debug 24211:130800 PolicyService: Http::Response::readAndParse(): No content length in response.
2012-10-15 08:11:50.802MaxDebug 24211:130800 all: Connection::waitForReply(): returns with status success.
2012-10-15 08:11:50.802MaxDebug 24211:130800 PolicyService: Http::Response::readAndParse(): Completed processing the response with status: success
2012-10-15 08:11:50.802MaxDebug 24211:130800 PolicyService: <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<ResponseSet vers="1.0" svcid="policy" reqid="9">
<Response><![CDATA[<PolicyService version="1.0" revisionNumber="30">
<PolicyResponse requestId="2">
<ResourceResult name="http://devappa11.dev.emergis:80">
<PolicyDecision>
<ResponseDecisions>
<AttributeValuePair>
<Attribute name="uid"/>
<Value>cppuser1</Value>
</AttributeValuePair>
</ResponseDecisions>
</PolicyDecision>
</ResourceResult>
</PolicyResponse>
</PolicyService>
]]></Response>
</ResponseSet>10/15/2012 08:11:48:511 AM EDT: Thread[service-j2ee-9,5,main]
PolicyCache:cacheKeys in cache:[policies/dc=dev^dc=emergis^^policyadmin/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/o=nfld-ehr^dc=dev^dc=emergis^^datastoresreadonly/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/o=nfld-ehr^dc=dev^dc=emergis^^realmadmin/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/dc=dev^dc=emergis^^realmadmin/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/o=nfld-ehr^dc=dev^dc=emergis^^policyadmin/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/selfreadattributes/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/jackpolicy/default/1.0/iplanetampolicyservice/o=nfld-ehr,dc=dev,dc=emergis, /policies/test jack/default/1.0/iplanetampolicyservice/dc=dev,dc=emergis, /policies/dc=dev^dc=emergis^^datastoresreadonly/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/p_dis_system administrator_null/default/1.0/iplanetampolicyservice/o=nfld-ehr,dc=dev,dc=emergis, /policies/o=nfld-ehr^dc=dev^dc=emergis^^realmreadonly/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/jackpolicy/default/1.0/iplanetampolicyservice/dc=dev,dc=emergis, /policies/selfwriteattributes/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/dc=dev^dc=emergis^^realmreadonly/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/p_dis_testjan1_null/default/1.0/iplanetampolicyservice/o=nfld-ehr,dc=dev,dc=emergis, /policies/routetonfld-ehr/default/1.0/iplanetampolicyservice/dc=dev,dc=emergis]
10/15/2012 08:11:48:511 AM EDT: Thread[service-j2ee-9,5,main]
Policy dc=dev^dc=emergis^^DatastoresReadOnly is Using Policy evaluation order :1
10/15/2012 08:11:48:511 AM EDT: Thread[service-j2ee-9,5,main]
Using policy evaluation order:SUBJECTS_CONDITIONS_RULES
10/15/2012 08:11:48:511 AM EDT: Thread[service-j2ee-9,5,main]
Subjects.isMember():getting subject evaluation results from resultCache of policy
10/15/2012 08:11:48:511 AM EDT: Thread[service-j2ee-9,5,main]
at Policy.getPolicyDecision() principal, resource name, action names, policyName, policyDecision = uid=cppuser1,ou=people,o=NFLD-EHR,dc=dev,dc=emergis, sms://o=nfld-ehr,dc=dev,dc=emergis/sunIdentityRepositoryService/1.0/application/user/cppuser1, [MODIFY, READ, DELEGATE], dc=dev^dc=emergis^^DatastoresReadOnly,
10/15/2012 08:11:48:511 AM EDT: Thread[service-j2ee-9,5,main]
at PolicyCache.getPolicy(orgName,policyName):orgName=o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis:policyName=dc=dev^dc=emergis^^RealmAdmincacheKey=/policies/dc=dev^dc=emergis^^realmadmin/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis
10/15/2012 08:11:48:511 AM EDT: Thread[service-j2ee-9,5,main]
PolicyCache:cacheKeys in cache:[policies/dc=dev^dc=emergis^^policyadmin/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/o=nfld-ehr^dc=dev^dc=emergis^^datastoresreadonly/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/o=nfld-ehr^dc=dev^dc=emergis^^realmadmin/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/dc=dev^dc=emergis^^realmadmin/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/o=nfld-ehr^dc=dev^dc=emergis^^policyadmin/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/selfreadattributes/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/jackpolicy/default/1.0/iplanetampolicyservice/o=nfld-ehr,dc=dev,dc=emergis, /policies/test jack/default/1.0/iplanetampolicyservice/dc=dev,dc=emergis, /policies/dc=dev^dc=emergis^^datastoresreadonly/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/p_dis_system administrator_null/default/1.0/iplanetampolicyservice/o=nfld-ehr,dc=dev,dc=emergis, /policies/o=nfld-ehr^dc=dev^dc=emergis^^realmreadonly/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/jackpolicy/default/1.0/iplanetampolicyservice/dc=dev,dc=emergis, /policies/selfwriteattributes/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/dc=dev^dc=emergis^^realmreadonly/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/p_dis_testjan1_null/default/1.0/iplanetampolicyservice/o=nfld-ehr,dc=dev,dc=emergis, /policies/routetonfld-ehr/default/1.0/iplanetampolicyservice/dc=dev,dc=emergis]
10/15/2012 08:11:48:511 AM EDT: Thread[service-j2ee-9,5,main]
Policy dc=dev^dc=emergis^^RealmAdmin is Using Policy evaluation order :1
10/15/2012 08:11:48:511 AM EDT: Thread[service-j2ee-9,5,main]
Using policy evaluation order:SUBJECTS_CONDITIONS_RULES
10/15/2012 08:11:48:511 AM EDT: Thread[service-j2ee-9,5,main]
Subjects.isMember():getting subject evaluation results from resultCache of policy
10/15/2012 08:11:48:512 AM EDT: Thread[service-j2ee-9,5,main]
at Policy.getPolicyDecision() principal, resource name, action names, policyName, policyDecision = uid=cppuser1,ou=people,o=NFLD-EHR,dc=dev,dc=emergis, sms://o=nfld-ehr,dc=dev,dc=emergis/sunIdentityRepositoryService/1.0/application/user/cppuser1, [MODIFY, READ, DELEGATE], dc=dev^dc=emergis^^RealmAdmin,
10/15/2012 08:11:48:512 AM EDT: Thread[service-j2ee-9,5,main]
at PolicyCache.getPolicy(orgName,policyName):orgName=o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis:policyName=SelfWriteAttributescacheKey=/policies/selfwriteattributes/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis
10/15/2012 08:11:48:512 AM EDT: Thread[service-j2ee-9,5,main]
PolicyCache:cacheKeys in cache:[policies/dc=dev^dc=emergis^^policyadmin/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/o=nfld-ehr^dc=dev^dc=emergis^^datastoresreadonly/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/o=nfld-ehr^dc=dev^dc=emergis^^realmadmin/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/dc=dev^dc=emergis^^realmadmin/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/o=nfld-ehr^dc=dev^dc=emergis^^policyadmin/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/selfreadattributes/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/jackpolicy/default/1.0/iplanetampolicyservice/o=nfld-ehr,dc=dev,dc=emergis, /policies/test jack/default/1.0/iplanetampolicyservice/dc=dev,dc=emergis, /policies/dc=dev^dc=emergis^^datastoresreadonly/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/p_dis_system administrator_null/default/1.0/iplanetampolicyservice/o=nfld-ehr,dc=dev,dc=emergis, /policies/o=nfld-ehr^dc=dev^dc=emergis^^realmreadonly/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/jackpolicy/default/1.0/iplanetampolicyservice/dc=dev,dc=emergis, /policies/selfwriteattributes/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/dc=dev^dc=emergis^^realmreadonly/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/p_dis_testjan1_null/default/1.0/iplanetampolicyservice/o=nfld-ehr,dc=dev,dc=emergis, /policies/routetonfld-ehr/default/1.0/iplanetampolicyservice/dc=dev,dc=emergis]
10/15/2012 08:11:48:512 AM EDT: Thread[service-j2ee-9,5,main]
at PolicyCache.getPolicy(orgName,policyName):orgName=o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis:policyName=o=nfld-ehr^dc=dev^dc=emergis^^DatastoresReadOnlycacheKey=/policies/o=nfld-ehr^dc=dev^dc=emergis^^datastoresreadonly/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis
10/15/2012 08:11:48:512 AM EDT: Thread[service-j2ee-9,5,main]
PolicyCache:cacheKeys in cache:[policies/dc=dev^dc=emergis^^policyadmin/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/o=nfld-ehr^dc=dev^dc=emergis^^datastoresreadonly/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/o=nfld-ehr^dc=dev^dc=emergis^^realmadmin/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/dc=dev^dc=emergis^^realmadmin/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/o=nfld-ehr^dc=dev^dc=emergis^^policyadmin/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/selfreadattributes/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/jackpolicy/default/1.0/iplanetampolicyservice/o=nfld-ehr,dc=dev,dc=emergis, /policies/test jack/default/1.0/iplanetampolicyservice/dc=dev,dc=emergis, /policies/dc=dev^dc=emergis^^datastoresreadonly/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/p_dis_system administrator_null/default/1.0/iplanetampolicyservice/o=nfld-ehr,dc=dev,dc=emergis, /policies/o=nfld-ehr^dc=dev^dc=emergis^^realmreadonly/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/jackpolicy/default/1.0/iplanetampolicyservice/dc=dev,dc=emergis, /policies/selfwriteattributes/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/dc=dev^dc=emergis^^realmreadonly/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/p_dis_testjan1_null/default/1.0/iplanetampolicyservice/o=nfld-ehr,dc=dev,dc=emergis, /policies/routetonfld-ehr/default/1.0/iplanetampolicyservice/dc=dev,dc=emergis]
10/15/2012 08:11:48:512 AM EDT: Thread[service-j2ee-9,5,main]
at PolicyCache.getPolicy(orgName,policyName):orgName=o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis:policyName=o=nfld-ehr^dc=dev^dc=emergis^^RealmAdmincacheKey=/policies/o=nfld-ehr^dc=dev^dc=emergis^^realmadmin/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis
10/15/2012 08:11:48:512 AM EDT: Thread[service-j2ee-9,5,main]
PolicyCache:cacheKeys in cache:[policies/dc=dev^dc=emergis^^policyadmin/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/o=nfld-ehr^dc=dev^dc=emergis^^datastoresreadonly/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/o=nfld-ehr^dc=dev^dc=emergis^^realmadmin/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/dc=dev^dc=emergis^^realmadmin/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/o=nfld-ehr^dc=dev^dc=emergis^^policyadmin/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/selfreadattributes/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/jackpolicy/default/1.0/iplanetampolicyservice/o=nfld-ehr,dc=dev,dc=emergis, /policies/test jack/default/1.0/iplanetampolicyservice/dc=dev,dc=emergis, /policies/dc=dev^dc=emergis^^datastoresreadonly/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/p_dis_system administrator_null/default/1.0/iplanetampolicyservice/o=nfld-ehr,dc=dev,dc=emergis, /policies/o=nfld-ehr^dc=dev^dc=emergis^^realmreadonly/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/jackpolicy/default/1.0/iplanetampolicyservice/dc=dev,dc=emergis, /policies/selfwriteattributes/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/dc=dev^dc=emergis^^realmreadonly/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/p_dis_testjan1_null/default/1.0/iplanetampolicyservice/o=nfld-ehr,dc=dev,dc=emergis, /policies/routetonfld-ehr/default/1.0/iplanetampolicyservice/dc=dev,dc=emergis]
10/15/2012 08:11:48:512 AM EDT: Thread[service-j2ee-9,5,main]
at PolicyCache.getPolicy(orgName,policyName):orgName=o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis:policyName=SelfReadAttributescacheKey=/policies/selfreadattributes/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis
10/15/2012 08:11:48:513 AM EDT: Thread[service-j2ee-9,5,main]
PolicyCache:cacheKeys in cache:[policies/dc=dev^dc=emergis^^policyadmin/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/o=nfld-ehr^dc=dev^dc=emergis^^datastoresreadonly/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/o=nfld-ehr^dc=dev^dc=emergis^^realmadmin/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/dc=dev^dc=emergis^^realmadmin/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/o=nfld-ehr^dc=dev^dc=emergis^^policyadmin/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/selfreadattributes/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/jackpolicy/default/1.0/iplanetampolicyservice/o=nfld-ehr,dc=dev,dc=emergis, /policies/test jack/default/1.0/iplanetampolicyservice/dc=dev,dc=emergis, /policies/dc=dev^dc=emergis^^datastoresreadonly/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/p_dis_system administrator_null/default/1.0/iplanetampolicyservice/o=nfld-ehr,dc=dev,dc=emergis, /policies/o=nfld-ehr^dc=dev^dc=emergis^^realmreadonly/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/jackpolicy/default/1.0/iplanetampolicyservice/dc=dev,dc=emergis, /policies/selfwriteattributes/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/dc=dev^dc=emergis^^realmreadonly/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/p_dis_testjan1_null/default/1.0/iplanetampolicyservice/o=nfld-ehr,dc=dev,dc=emergis, /policies/routetonfld-ehr/default/1.0/iplanetampolicyservice/dc=dev,dc=emergis]
10/15/2012 08:11:48:513 AM EDT: Thread[service-j2ee-9,5,main]
at PolicyCache.getPolicy(orgName,policyName):orgName=o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis:policyName=dc=dev^dc=emergis^^DatastoresReadOnlycacheKey=/policies/dc=dev^dc=emergis^^datastoresreadonly/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis
10/15/2012 08:11:48:513 AM EDT: Thread[service-j2ee-9,5,main]
PolicyCache:cacheKeys in cache:[policies/dc=dev^dc=emergis^^policyadmin/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/o=nfld-ehr^dc=dev^dc=emergis^^datastoresreadonly/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/o=nfld-ehr^dc=dev^dc=emergis^^realmadmin/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/dc=dev^dc=emergis^^realmadmin/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/o=nfld-ehr^dc=dev^dc=emergis^^policyadmin/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/selfreadattributes/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/jackpolicy/default/1.0/iplanetampolicyservice/o=nfld-ehr,dc=dev,dc=emergis, /policies/test jack/default/1.0/iplanetampolicyservice/dc=dev,dc=emergis, /policies/dc=dev^dc=emergis^^datastoresreadonly/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/p_dis_system administrator_null/default/1.0/iplanetampolicyservice/o=nfld-ehr,dc=dev,dc=emergis, /policies/o=nfld-ehr^dc=dev^dc=emergis^^realmreadonly/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/jackpolicy/default/1.0/iplanetampolicyservice/dc=dev,dc=emergis, /policies/selfwriteattributes/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/dc=dev^dc=emergis^^realmreadonly/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/p_dis_testjan1_null/default/1.0/iplanetampolicyservice/o=nfld-ehr,dc=dev,dc=emergis, /policies/routetonfld-ehr/default/1.0/iplanetampolicyservice/dc=dev,dc=emergis]
10/15/2012 08:11:48:513 AM EDT: Thread[service-j2ee-9,5,main]
at PolicyCache.getPolicy(orgName,policyName):orgName=o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis:policyName=dc=dev^dc=emergis^^RealmAdmincacheKey=/policies/dc=dev^dc=emergis^^realmadmin/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis
10/15/2012 08:11:48:513 AM EDT: Thread[service-j2ee-9,5,main]
PolicyCache:cacheKeys in cache:[policies/dc=dev^dc=emergis^^policyadmin/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/o=nfld-ehr^dc=dev^dc=emergis^^datastoresreadonly/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/o=nfld-ehr^dc=dev^dc=emergis^^realmadmin/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/dc=dev^dc=emergis^^realmadmin/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/o=nfld-ehr^dc=dev^dc=emergis^^policyadmin/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/selfreadattributes/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/jackpolicy/default/1.0/iplanetampolicyservice/o=nfld-ehr,dc=dev,dc=emergis, /policies/test jack/default/1.0/iplanetampolicyservice/dc=dev,dc=emergis, /policies/dc=dev^dc=emergis^^datastoresreadonly/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/p_dis_system administrator_null/default/1.0/iplanetampolicyservice/o=nfld-ehr,dc=dev,dc=emergis, /policies/o=nfld-ehr^dc=dev^dc=emergis^^realmreadonly/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/jackpolicy/default/1.0/iplanetampolicyservice/dc=dev,dc=emergis, /policies/selfwriteattributes/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/dc=dev^dc=emergis^^realmreadonly/default/1.0/iplanetampolicyservice/o=sunamhiddenrealmdelegationservicepermissions,ou=services,dc=dev,dc=emergis, /policies/p_dis_testjan1_null/default/1.0/iplanetampolicyservice/o=nfld-ehr,dc=dev,dc=emergis, /policies/routetonfld-ehr/default/1.0/iplanetampolicyservice/dc=dev,dc=emergis]
10/15/2012 08:11:48:513 AM EDT: Thread[service-j2ee-9,5,main]
at PolicyEvaluator.getPolicyDecision() orgsToVist=[]
10/15/2012 08:11:48:513 AM EDT: Thread[service-j2ee-9,5,main]
at PolicyEvaluator.getPolicyDecision() orgsToVist(after removing already visited orgs=[]
10/15/2012 08:11:50:515 AM EDT: Thread[service-j2ee-9,5,main]
PolicyRequestHandler.processRequest(): get response from policy framework:
<PolicyService version="1.0" revisionNumber="30">
<PolicyResponse requestId="2">
<ResourceResult name="http://devappa11.dev.emergis:80">
<PolicyDecision>
<ResponseDecisions>
<AttributeValuePair>
<Attribute name="uid"/>
<Value>cppuser1</Value>
</AttributeValuePair>
</ResponseDecisions>
</PolicyDecision>
</ResourceResult>
</PolicyResponse>
</PolicyService> -
SCOM 2012 Agent - Best Practices with Base Images
I've read through the
SCOM 2012 agent installation methods technet article, as well as how to
install the SCOM 2012 agent via command line, but don't see any best practices in regards to how to include the SCOM 2012 agent in a base workstation image. My understanding is that the SCOM agent's unique identifier is created at the time of client installation,
is this correct? I need to ensure that this is a supported configuration before I can recommend it.
If it is supported, and it does work the way I think it does, I'm trying to find out a way to strip out the unique information so that a new client GUID will be created after the machine is sysprepped, similar to how the SCCM client should be stripped of
unique data when preparing a base image.
Has anyone successfully included a SCOM 2012 (or 2007 for that matter) agent in their base image?
Thanks,
JoeHi
It is fine to build the agent into a base image but you then need to have a way to assign the agent to a management group. SCOM does this via AD Integration:
http://technet.microsoft.com/en-us/library/cc950514.aspx
http://blogs.msdn.com/b/steverac/archive/2008/03/20/opsmgr-ad-integration-how-it-works.aspx
http://blogs.technet.com/b/jonathanalmquist/archive/2010/06/14/ad-integration-considerations.aspx
http://thoughtsonopsmgr.blogspot.co.uk/2010/07/active-directory-ad-integration-when-to.html
http://technet.microsoft.com/en-us/library/hh212922.aspx
http://blogs.technet.com/b/momteam/archive/2008/01/02/understanding-how-active-directory-integration-feature-works-in-opsmgr-2007.aspx
You have to be careful in environments with multiple forests if no trust exists.
http://blogs.technet.com/b/smsandmom/archive/2008/05/21/opsmgr-2007-how-to-enable-ad-integration-for-an-untrusted-domain.aspx
http://rburri.wordpress.com/2008/12/03/untrusted-ad-integration-suppress-misleading-runas-alerts/
You might also want to consider group policy or SCCM as methods for installing agents.
Cheers
Graham
Regards Graham New System Center 2012 Blog! -
http://www.systemcentersolutions.co.uk
View OpsMgr tips and tricks at
http://systemcentersolutions.wordpress.com/ -
Help DSCC agent not communicating with AppServer or Tomcat?!
Installing Directory Server Enterprise Edition 6.3 From Zip Distribution on system running Solaris10 11/08.
Cannot get DSCC to work with either AppServer or Tomcat.
Both AppServer & Tomcat deploy DSEE WAR file and I can look at things that I have manually registered via command line. Cacao agent is running it is just not communicating with AppServer or Tomcat so it cannot commit any actions such as starting and stopping directory instances or creating new directories instances within the web app.
Is this a bug that occurs only when doing a new install using the Zip Distribution?
The Error message I get regardless if Appserver or Tomcat is:
"Could not contact the DSCC agent on <server>. Use the command cacaoadm to check that the DSCC agent is installed and running on port 11169."
I changed to port 11169 because it had a conflict on default port 11162.
Output from cacaoadm & dsccsetup commands is follows:
root@dsee:/ $ /local/dsee6/cacao_2/usr/lib/cacao/bin/cacaoadm status
default instance is DISABLED at system startup.
Smf monitoring process:
8423
8424
Uptime: 0 day(s), 0:47
root@dsee:/ $ /local/dsee6/cacao_2/usr/lib/cacao/bin/cacaoadm list-params
snmp-adaptor-port=11161
snmp-adaptor-trap-port=11162
jmxmp-connector-port=11169
commandstream-adaptor-port=11163
rmi-registry-port=11164
secure-webserver-port=11165
java-flags=-Xms4M -Xmx128M -Dcom.sun.management.jmxremote -Dfile.encoding=utf-8
java-home=/local/jre
jdmk-home=/local/dsee6/private
nss-lib-home=/local/dsee6/private/lib
nss-tools-home=/local/dsee6/bin
retries=4
enable-instrumentation=false
network-bind-address=0.0.0.0
root@dsee:/ $ /local/dscc6/bin/dsccsetup status -v
## /local/webconsole/usr/sbin/smreg/smreg is MISSING
## /local/webconsole/usr/sbin/smcwebserver/smcwebserver is MISSING
## /local/dscc6/dccapp is present
Sun Java (TM) Web Console is not installed
## /local/dsee6/cacao_2/usr/lib/cacao/bin/cacaoadm is present
## /local/dsee6/cacao_2/.configured is present
## /local/dscc6/lib/jar/nquickmodule.jar is present
## Running /local/dsee6/cacao_2/usr/lib/cacao/bin/cacaoadm list-modules -r
DSCC Agent is registered in Cacao
## Running /local/dsee6/cacao_2/usr/lib/cacao/bin/cacaoadm status
## Running /local/dsee6/cacao_2/usr/lib/cacao/bin/cacaoadm list-modules
## Running /local/dsee6/cacao_2/usr/lib/cacao/bin/cacaoadm get-param network-bind-address
## Running /local/dsee6/cacao_2/usr/lib/cacao/bin/cacaoadm get-param jmxmp-connector-port
Cacao uses a custom port number (11169)
## /local/ds6/bin/dsadm is present
DSCC Registry has been created
Path of DSCC registry is /local/var/dscc6/dcc/ads
Port of DSCC registry is 3998
Any work around or ideas on how to get DSCC working?
Thanks!I started over and installed Glassfish and everything just worked. After the fact I think the real problem was related to the server.policy file. I think this was the problem because using the default appserver 8.2 that comes with Solaris has a different path and I got this same error when tried using tomcat also. When installing glassfish it uses this default path as in the server.policy example as follows so it just worked.
Add the following lines in the {install-dir}/domains/domain1/config/server.policy file
// Permissions for Directory Service Control Center
grant codeBase "file:${com.sun.aas.instanceRoot}/applications/j2ee-modules/DSCC/-"
permission java.security.AllPermission;
Hope this helps some as I was really stuck and confused at the time and just started playing with the stuff. Growing pains. Thanks to those that replied.
Thanks!
Wences -
DPM Agent Installation Failed with Error code =0x80070643
Hi,
We had an Virtual Machine TFS server 2010 which had SQL server 2008 R2 installed on it.
On this Server we were running an DPM 2010 agent and it was fine.
Then I had uninstalled DPM 2010 agent and try to Install DPM 2012 R2 Agent on this Virtual Machine it gives me error 0x80070643. And for other VM the agent installation is fine.
When I checked on DPM agent logs in Windows/Temp folder it gives me below error.
I had tried with Deleting DPM Registry but still the Problem remains same.
ThanksHi,
Earlier the Protected Server had DPM 2010 Agent installed and while Troubleshooting I had already deleted the
HKLM\SOFTWARE\MICROSOFT\Microsoft Data Protection Manager\Setup Registry
And Tried to Reinstall Agent but still it gives same error.
Regards,
Nadeem -
Sccm 2012 agent not installing with error CcmSetup failed with error code 0x80041013
We have sccm 2012 r2 enviroment , when we deploy client agent to one DC , client agent is not getting install with below error .. I can able to install agent to all the machines except one DC.
CcmGetOSVersion failed with 0x80041013
CcmSetup failed with error code 0x80041013
Any idea ?The error code 0x80041013 translates to:
Provider load failure
Source: Windows Management (WMI)
Like Briij suggested, you should try to fix the WMI repository.
Regards,
Nickolaj Andersen | www.scconfigmgr.com | @Nickolaja
Maybe you are looking for
-
Can't print from IE 8 after upgrading from Vista to Windows 7
My laptop (HP Elitebook 8530w) uses two HP printers: Color LaserJet CP3525x (at work) and Deskjet 6940 (at home). Both printers are accessed across a local network. I recently upgraded from Vista Enterprise to Windows 7 Enterprise. Everything still p
-
Spool an output file to dynamic filename
Hi. Let say I have an Oracle Script as following: spool c:\hms_report\HMS.xls SELECT field1||chr(9)||field2 from table1; spool off exit Question: Currently the output file will be HMS.xls If I run the script thrice a day, the HMS.xls will be overwrit
-
Hi, we just bought a Macbook air and we can't find the 'reminders' app in the applications or through the spotlight search. Is there a link to download the app? I can't find it online or through the app store. Please help!
-
ACD sleep indicator light not pulsing
I installed Windows Vista Home Basic on my Mac Pro yesterday. My display is a 20" ACD (aluminium). Since this Vista installation, the indicator light on the ACD does not pulse during sleep, but remains on steadily. The front indicator light on the Ma
-
I need clarification on what object gets locked when you say synchronized( lockObj ) // Do something Assume that both the class that contains the above snippet as well as the class of lockObj have synchronized methods. Now, when a thread enters the c