Can not secure target agent behind firewall

Agent successfully installed on remote target using clone method. Ports opened in firewall for grid , ping, ssh available.
Can not secure agent. have reviewed the metalink notes; however not sure where to go from here. 'emctl status agent' shows agent url not secure, repository url secure.

Here is secure.log:
Agent Version : 10.2.0.1.0
OMS Version : 10.2.0.1.0
Protocol Version : 10.2.0.0.0
Agent Home : /local0/app/grid/agent10g
Agent binaries : /local0/app/grid/agent10g
Agent Process ID : 2783
Parent Process ID : 2778
Agent URL : http://8250db3.wdc1.attens.net:3872/emd/main/
Repository URL : https://njunpestr24.bedbath.com:1159/em/upload/
[07-08-2008 08:44:21] INFO ::OMS HTTPS URL ... [main] DEBUG sec.util - caught IOException 1 java.net.UnknownHostException: nj
unpestr24.bedbath.com: njunpestr24.bedbath.com
[main] DEBUG sec.GetSecPort - getSecurePort Error: njunpestr24.bedbath.com: njunpestr24.bedbath.com
-1
[07-08-2008 08:44:21] USERINFO :: Done.
[07-08-2008 08:44:21] USERINFO ::Requesting an Oracle Wallet and Agent Key from the OMS...
[07-08-2008 08:44:21] DEBUG ::Executing cmd .. /local0/app/grid/agent10g/jdk/jre/bin/java -cp /local0/app/grid/agent10g/jdbc/li
b/ojdbc14.jar:/local0/app/grid/agent10g/lib/xmlparserv2.jar:/local0/app/grid/agent10g/sysman/jlib/log4j-core.jar:/local0/app/grid/
agent10g/jlib/http_client.jar:/local0/app/grid/agent10g/jlib/share.jar:/local0/app/grid/agent10g/jlib/jssl-1_1.jar:/local0/app/gri
d/agent10g/jlib/javax-ssl-1_1.jar:/local0/app/grid/agent10g/jlib/ojmisc.jar:/local0/app/grid/agent10g/jlib/repository.jar:/local0/
app/grid/agent10g/opmn/lib/optic.jar:/local0/app/grid/agent10g/sysman/jlib/emagentRT.jar:/local0/app/grid/agent10g/sysman/jlib/ema
gentSDK.jar:/local0/app/grid/agent10g/lib/dmsEmd.jar:/local0/app/grid/agent10g/sysman/jlib/emcoreAgent.jar -DpropertiesFile=/local
0/app/grid/agent10g/sysman/config/emd.properties -Ddebug=true oracle.sysman.eml.sec.emd.GetWallet ######
[main] INFO sec.GetWallet - walletURL=http://njunpestr24.bedbath.com:4889/em/genwallet/?host=8250db3.wdc1.attens.net&port=3872&p
wdSelect=424EA7FB42F492613E7CC2A5E155CD7F
[main] INFO sec.GetWallet - downloadURL=http://njunpestr24.bedbath.com:4889/em/wallets/agent.8250db3.wdc1.attens.net
[main] INFO sec.GetWallet - walletDestination=/local0/app/grid/agent10g/sysman/config/server
[main] INFO sec.GetWallet - localTrustCert=/local0/app/grid/agent10g/sysman/config/b64LocalCertificate.txt
[main] INFO sec.GetWallet - internetTrustCert=/local0/app/grid/agent10g/sysman/config/b64InternetCertificate.txt
[main] INFO sec.GetWallet - agentHost=8250db3.wdc1.attens.net
[main] DEBUG sec.GetWallet - generateAgentSeed:agent seed =-1966673326838984191
[main] DEBUG sec.GetWallet - secureAgentWithOMS: szAgent seed = -1966673326838984191
[main] DEBUG sec.GetWallet - secureAgentWithOMS: MD5IPW = B6919F9951D080DEC439DF14C847A506
[main] DEBUG sec.GetWallet - secureAgentWithOMS: init URL = http://njunpestr24.bedbath.com:4889/em/genwallet/?host=8250db3.wdc1.a
ttens.net&port=3872&pwdSelect=424EA7FB42F492613E7CC2A5E155CD7F&agentseed=-1966673326838984191&reqstatus=init
[main] DEBUG sec.util - caught IOException 1 java.net.UnknownHostException: njunpestr24.bedbath.com: njunpestr24.bedbath.com
[main] ERROR sec.GetWallet - caught Exceptionjava.net.UnknownHostException: njunpestr24.bedbath.com: njunpestr24.bedbath.com
[07-08-2008 08:44:22] USERINFO :: Failed.
[07-08-2008 08:44:22] USERINFO ::Failed to contact the OMS at the HTTP URL set in /local0/app/grid/agent10g/sysman/config/emd.prop
erties
[07-08-2008 08:44:22] USERINFO ::The Agent has not been secured.
~
Here are last few lines of emagent.trc (messages all the same):
2008-08-07 08:43:45 Thread-5618 ERROR http: snmehl_connect: Failed to get address for njunpestr24.bedbath.com: Authoritive Answer Host n
ot found (error = 1)
2008-08-07 08:43:45 Thread-5618 ERROR pingManager: nmepm_pingReposURL: Cannot connect to https://njunpestr24.bedbath.com:1159/em/upload/
: retStatus=-32
2008-08-07 08:43:45 Thread-5618 ERROR http: snmehl_connect: Failed to get address for njunpestr24.bedbath.com: Authoritive Answer Host n
ot found (error = 1)
2008-08-07 08:43:45 Thread-5618 ERROR pingManager: nmepm_pingReposURL: Cannot connect to https://njunpestr24.bedbath.com:1159/em/upload/
: retStatus=-32
2008-08-07 08:44:15 Thread-5621 ERROR http: snmehl_connect: Failed to get address for njunpestr24.bedbath.com: Authoritive Answer Host n
ot found (error = 1)
2008-08-07 08:44:15 Thread-5621 ERROR pingManager: nmepm_pingReposURL: Cannot connect to https://njunpestr24.bedbath.com:1159/em/upload/
: retStatus=-32
2008-08-07 08:44:15 Thread-5621 ERROR http: snmehl_connect: Failed to get address for njunpestr24.bedbath.com: Authoritive Answer Host n
ot found (error = 1)
2008-08-07 08:44:15 Thread-5621 ERROR pingManager: nmepm_pingReposURL: Cannot connect to https://njunpestr24.bedbath.com:1159/em/upload/
: retStatus=-32
2008-08-07 08:44:19 Thread-3 WARN http: 256,-1: nmehl_httpListener: signaled to exit from emctl

Similar Messages

Disk Utility - Restore can not unmount target drive

Just got a brand new MacBook Pro with Lion. As usual there are "issues"..
I wanted to move my old TimeMachine backup (250 GB) to a larger Firewire drive (500 GB) and found a lot of instructions on that.. Problem is they don't work on Lion. (Both are Iomega drives with Firewire)
The instructions suggest that using Disk Utility to "restore" the new drive from the old will work but I always get the Error "Can not unmount target drive..." and I can see that the source drive is unmounted but not the target. I did all of the "First Aid" stuff to both drives.. (and the target drive was turned into a MacOS partition and verified..)
I then tried the exact same process on my old MacBook Pro (Leopard) and everything worked as expected..
Was there another way to do this in Lion.. or is this broken..???
Thanks for any feedback..
John..

Is the new drive prepped?
Drive Preparation
1. If you are preparing an external or a non-startup drive, then open Disk Utility in your Utilities folder.
2. After DU loads select your hard drive (this is the entry with the mfgr.'s ID and size) from the left side list. Note the SMART status of the drive in DU's status area. If it does not say "Verified" then the drive is failing or has failed and will need replacing. SMART info will not be reported on external drives. Otherwise, click on the Partition tab in the DU main window.
3. Under the Volume Scheme heading set the number of partitions from the drop down menu to one. Set the format type to Mac OS Extended (Journaled.) Click on the Options button, set the partition scheme to GUID then click on the OK button. Click on the Partition button and wait until the process has completed.
4. Select the volume you just created (this is the sub-entry under the drive entry) from the left side list. Click on the Erase tab in the DU main window.
5. Set the format type to Mac OS Extended (Journaled.) Click on the Security button, check the button for Zero Data and click on OK to return to the Erase window.
6. Click on the Erase button. The format process can take up to several hours depending upon the drive size.
In Disk Utility you clone as follows:
Clone using Restore Option of Disk Utility
Open Disk Utility from the Utilities folder.
Select the destination volume from the left side list.
Click on the Restore tab in the DU main window.
Check the box labeled Erase destination.
Select the destination volume from the left side list and drag it to the Destination entry field.
Select the source volume from the left side list and drag it to the Source entry field.
Double-check you got it right, then click on the Restore button.
Destination means the new backup drive. Source means the old backup drive.
If you still have a problem then boot into the Recovery HD:
Boot to the Recovery HD:
Restart the computer and after the chime press and hold down the COMMAND and R keys until the menu screen appears. Alternatively, restart the computer and after the chime press and hold down the OPTION key until the boot manager screen appears. Select the Recovery HD and click on the downward pointing arrow button.
Choose Disk Utility from the main menu then click on the Continue button.

Can not get the agent from rule determination

Dear expert,
We have a PR workflow,for one step, the agent is determined by one rule,In our Q system,everythink is ok to get the agent correctly,and the workflow also can works.but in our P system,can not get the agent from the rule,when we simulate the rule,the agent can be get smoothly,but in workflow,realy can't get the agent(after trace the workflow), so would you like to give me sone suggestion, whant had happen in our workflow?
Many thanks!
Best Regards,
Kerry

Tks!
I have one question,how to check the agent assignment is active?
and also want to say,the rule that determin the responsible agent is used at one step of the workflow,not for possible agent of task ,and the rule's type is RESPONSIBILITIES.
Best Regards
Edited by: Kerry Wang on Jun 25, 2010 3:14 AM

Issue with Adobe flex data.xml file not reachable from bsp behind firewall

Hi Gurus,
I have a problem with the <mx:HTTPService> tag the following is the actual tag,
<mx:HTTPService
id="Srv"
url="data.xml"
useProxy="false"
method="POST" result="resultHandler(event)"/>
When accessed locally I can see the data in the flex as the data.xml can be reached. when the same is accessed from internet behind firewall, the url is entirely different and the .swf file in the BSP page cannot access the data.xml. I cannot give the absolute url in the tag as the BSP page application is accessed differently in different servers. any help on this would be greatly appreciated
Thanks
Akbar

Sorry somehow I missed this question, an even easier way to do this is to allow your Flash movie to "script" ( this is the default behavior for a Flex application ) and then call some javascript to obtain exactly what the page URL is and then go from there to get your data:
import flash.external.ExternalInterface;
import mx.utils.URLUtil;
var
if(ExternalInterface.available){
pageURL = ExternalInterface.call("window.location.href.toString");
// Do whatever you need with the URL here.
var serverName:String = URLUtil.getServerNameWithPort(pageURL);
-d

ZLM Agent behind firewall: What ports needs to be opened?

What ports ZLM Agent (managed device) is using when communizating the ZLM Server? And what ports ZLM Server is using when communicating to ZLM Agent? We do not have server GUI up, so Remote Management ports are not needed...
Thanx in advance...
-John-

John,
Scroll down in the list till you get the TCP Ports,
that has the information you are looking for:
Novell Documentation
Rainer

How to Upgrade Target Agent from 10.2.0.3 to 10.2.0.4

Hi Everybody,
I am doing this first time so need some help
Q1. I need to Upgrade Target Agent from 10.2.0.3 to 10.2.0.4 manually and can't seem to find the right patch I need.
I tried p3731593, but this seems to be installing much more than what I need so I cancelled it
One option I thought of was to uninstall 10203 agent and install 10204 in the same agent home But I was wondering if there is a way I can upgrade my agent.
Q2. Does the agent version on target and host(OMS) need to be same or can I have Target Agent 10.2.0.4 and host agent 10.2.0.3?
Thanks for helping in advance
Jeet

Hi Jeet,
You can use Patch 3822442 to upgrade the agent.
The agent can be of different version.
Regards
Lai

Firefox will not upgrade the company whose firewall I am behind say that UPX files are not allowed where can I download a Non-UPX latest version

Firefox will not upgrade the company whose firewall I am behind say that UPX files are not allowed where can I download a Non-UPX latest version

UPX is used to compress the Firefox program.
It is not possible to un-compress that file without corrupting it.
Can you use the portable Firefox version?
*http://portableapps.com/apps/internet/browsers/portable_firefox

I can not sign in to both face time and messages, each time I try I receive a msg stating that my user name or password r incorrect, i try with others friends pass word and we have the same msg, I bought my iPad from USA, and I visit the agent at Egypt,

Each time I try to sign in to face time I receive a msg stating that the user name or password are incorrect, I visit the local agent and the told me we can not do help you , they think there's an problem with the iPad as I bought it from USA

Using FaceTime http://support.apple.com/kb/ht4319
Troubleshooting FaceTime http://support.apple.com/kb/TS3367
The Complete Guide to FaceTime + iMessage: Setup, Use, and Troubleshooting
http://tinyurl.com/a7odey8
Troubleshooting FaceTime and iMessage activation
http://support.apple.com/kb/TS4268
Using FaceTime and iMessage behind a firewall
http://support.apple.com/kb/HT4245
iOS: About Messages
http://support.apple.com/kb/HT3529
Set up iMessage
http://www.apple.com/ca/ios/messages/
Troubleshooting Messages
http://support.apple.com/kb/TS2755
Setting Up Multiple iOS Devices for iMessage and Facetime
http://macmost.com/setting-up-multiple-ios-devices-for-messages-and-facetime.htm l
FaceTime and iMessage not accepting Apple ID password
http://www.ilounge.com/index.php/articles/comments/facetime-and-imessage-not-acc epting-apple-id-password/
Unable to use FaceTime and iMessage with my apple ID
https://discussions.apple.com/thread/4649373?tstart=90
For non-Apple devices, check out the TextFree app https://itunes.apple.com/us/app/text-free-textfree-sms-real/id399355755?mt=8
 Cheers, Tom

Can not use stored windows credential when running merge agent with agent proxy

I have an account ACCT_A and create a windows credential
CRED_B target to server DISTRIBUTOR_1 (with cmdkey).
And I setup a pull subscription to DISTRIBUTOR_1 and set merge agent run under agent proxy with credential of account
ACCT_A (The sql server agent is running as LocalSystem or Network Service). Then the merge agent job will failed and complain "Failed to connect to distributor
DISTRIBUTOR_1".
However if I change the sql server agent to run as ACCT_A and let merge agent job run as SQL Server Agent Service Account it will successfully connect to distributor
DISTRIBUTOR_1 with credential CRED_B, with other setting unchanged.
Here are the questions:
Is it possible to grant other accounts to access one's stored windows credential in Credential Manager?
I suppose merge agent job will get full security context of ACCT_A when it runs under agent proxy with credential of ACCT_A and should be able to access stored credential CRED_B and
successfully connect to DISTRIBUTOR_1. But nowCRED_B seems can not be accessed by merge agent. Could somebody explain what's the problem here?

Hello,
I am currently looking into this issue and will give you an update as soon as possible.
Thank you for your understanding and support.
Regards,
Fanny Liu
If you have any feedback on our support, please click here.
Fanny Liu
TechNet Community Support

10gR1 OEM can not verify Solaris 10 host. 10gR2 agent can upload though

Got following error when tried to verify Solaris 10 host.
I have 10gR1 (1.0.3) fresh installation without patch on server 1. Recently I installed 10g R2 agent on a Solaris 10 server 2. The agent can upload data back to the OMS without problem. But after I enter server 2 host credential to verify host connection I got the following error in emoms.log on Sever 1.
"2006-05-31 17:16:49,704 [EMUI_17_05_35_/console/pref/setCredentials$targetType=host] ERROR creds.SetPrefCreds testCreds.1281 - SetPrefCreds.testCreds(): CredsException: Connection to host bcrcxfwwd7p.something.com as user xxxx failed: IOException in sending Request :: Connection timed out"
I can use Secure shell in Solaris to connect to server2 as xxxx directly & do my work.
But somehow I can not verify the host connection from within OEM.
I don't have any problem to use OEM to manage 9 other Solaris 9 hosts and 10g databases. Is Solaris 10 specific problem?
Any suggestions are welcome
Mike

Hang on, are you using a 10.1 oms with a 10.2 agent reporting to it?
If so, thats an unsupported configuration.
Bazza

Security error on ff launch. can not open https sites.

I have to use IE to see most of my sites. When I launch Fire Fox, an error pops up. "Could not initialize the application's security component. The most likely cause is problems with files in your application's profile directory. Please check that this directory has no read/write restrictions and your hard disk is not full or close to full. It is recommended that you exit the application and fix the problem. If you continue to use this session, you might see incorrect application behaviour when accessing security features."
I checked the profile file settings, windows and webroot firewall and security settings, rebooted several times. Keep getting the same launch error.
I checked and both SSL3.0 and TLS1.0 are selected for use. In spite of that this is what displays when I try to access a https site.
Secure Connection Failed
An error occurred during a connection to personal.vanguard.com.
Can't connect securely because the SSL protocol has been disabled.
(Error code: ssl_error_ssl_disabled)
* The page you are trying to view can not be shown because the authenticity of the received data could not be verified.
* Please contact the web site owners to inform them of this problem. Alternatively, use the command found in the help menu to report this broken site.
This problem is not happening with IE.
In addition to the above, I read the article about SSL and FF needing to connect to itself. My firewall is not on the list (Webroot) however I found the permission screen of my firewall and verified that FF is allowed through and is a parent application.

You also need to allow the loopback connection that Firefox uses to communicate with the Software Security Device.
Remove all rules for Firefox from the permissions list in the firewall and let your firewall ask again for permission to get full unrestricted access to internet for Firefox.
Rename or delete secmod.db (secmod.db.old) and possibly cert8.db (cert8.db.old) in the [http://kb.mozillazine.org/Profile_folder_-_Firefox Profile Folder] in case there is a problem with those files.
The file cert8.db stores your user certificates, so if you have user certificates then you may want to export them now and import them after having removed cert8.db.
See Tools > Options > Advanced > Encryption: Certificates: View Certificates
If that works then you can delete the renamed files or undo the changes if you want to revert the process.

Was always working and today I get a message that it can not connect to the internet. Internet Exployer works fine. So, I tried uninstalling the program and reinstalled. Still did not work. check out the proxy and firewall no problems there.

I get a message can not connect to the internet when trying to open Mozzila Firefox. It was working fine until my internet service went down. Once back up it was not working. I have tried installing and uninstalling the browser. I have looked at the firewall and proxy on my computer. Still not working Internet Exployer works fine. Deleted all cookies also.

Did you check your security software (firewall)?
A possible cause is security software (firewall) that blocks or restricts Firefox without informing you about that, possibly after detecting changes (update) to the Firefox program.
Remove all rules for Firefox from the permissions list in the firewall and let your firewall ask again for permission to get full unrestricted access to internet for Firefox.
See [[Server not found]] and [[Firewalls]] and http://kb.mozillazine.org/Firewalls

I CAN load secure sites, but CAN NOT load regular sites; help!

Hi guys,
For whatever reason, I suddenly can not view regular websites with my browser; either Firefox or IE. Strangely, I ''can'' visit websites that are to secure; ie those starting with "https". I have not changed any browser settings, nor have I installed new hardware or software; the problem just seem to come out of the blue. Additionally, I have run a full scan of my system using NOD32 anti-virus, and nothing was found.
Any help you can provide will be greatly appreciated.
Thanks!
Brad in Dallas, TX

Have you checked your firewall rules?
* http://kb.mozillazine.org/Firewalls

HT5312 what if i can not remember the security questions and no longer have access to the rescue email address?

Hi
I can not remember my security questions and no longer have access to the email account that i used for my rescue email.
I have a new ipad and can not buy anything on the app store until i can resolve this.

On your computer or safari on your iOS device navigate to:
For Canada - https://appleid.apple.com/ca.
For United States - https://appleid.apple.com/us/.
Click the "Manage your Apple ID" button, and sign in to your iCloud account. Once in, on the left side select "Password and Security", and this will populate our options on the right side. You should see an option to reset your security questions.
Also see this article - http://support.apple.com/kb/HT5312.
If for any reason you can not reset these security questions, or get an error, then you may need to contact Apple directly at 1 800 692 7753. Explain the issue, and they can get your to a "Account Security" agent, who will be able to verify your identity, and assist in resetting the security questions.

DPM: Agent unreachable - Can not map machine account Resolution state

Hello,
We have 15 DPM servers with latest patches (3.0.8193.0). Currently we are having below error messages into two of our DPM servers. Could you help us to resolve these problems?
Alert: DPM: Agent unreachable - Can not map machine account
Source: DPMSERV011
Path: DPMSERV011.xxx.xx.com;DPMSERV011.xxx.xx.com
Last modified by: System
Last modified time: 10/31/2013 2:00:02 PM Alert description: DPM agents on some of the protected servers are not reachable because machine account cannot be mapped.
DPM Server: DPMSERV011.corpaa.aa.com
Resolution steps:
Verify that both protected server and the domain controller are responding. Then in Microsoft Management Console (MMC), open the Group Policy Object Editor snap-in for the local computer and verify the local DNS client settings in Local Computer Policy\Computer
Configuration\Administrative Templates\Network\DNS Client.
(Note: The DNS Client is disabled at both DPM and agent server)
Alert view link: "http://DataSERV54021.xxx.xx.com:51908/OperationsManager?DisplayMode=Pivot&AlertID=%7b925c8b34-0d99-4bd2-a754-71354bd89f0e%7d"
Notification subscription ID generating this message: {6EED81DB-935D-651F-4ACA-194C1FDBB428}
Regards
Abul Hasnat
Abul Hasnat

Hello,
The servers are pingable and there is no local firewall. The servers are communicating but some sync jobs are failing. The Sync set to every 45 min.
Thank ypu
Abul Hasnat
Abul Hasnat

Can not secure target agent behind firewall

Similar Messages

Maybe you are looking for