OAM Access Server - Cannot load cert chain file aaa_chain.pem

Hi experts,
I am in the midst of changing the Transport Layer Security (TLS) of OAM Access Server from Open mode to Cert mode, and encountering the error not able to load aaa_chain.pem.
Below are the steps which I have did:-
1. Change the TLS mode for both Access Server and Webgate from Open >> Cert mode in the Access System console
2. Stop the Access Server from Services
3. From the <access server install dir> run ConfigureAAAServer.exe to generate aaa_req.pem and aaa_key.pem.
4. Copy the certificate request from the aaa_req.pem and submit to Internal CA (Ms CA).
5. Download the Certificate and Certificate Chain in Base 64 encoding, and rename into *.pem. E.g. certnew.cer >> aaa_cert.pem certnew.p7b >> aaa_chain.pem.
6. Copy *.pem files in to <access server install dir>/oblix/config
7. Rerun ConfigureAAAServer.exe to install the cert, all went smoothly without issue.
8. Start Access Server from Services. <<< Service failed to start.
NOTE: I did the same thing for Policy Manager, used genCert.exe to generate certificate request, submit the CA to sign and installed.
Check on the event viewer, the following error was found.
**===========================================================================**
Log Name: Application
Source: ObAAAServer-AccSvr01
Date: 16/8/2010 1:06:39 AM
Event ID: 1
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: IDMsvr.SSO.com
Description:
The description for Event ID 1 from source ObAAAServer-AccSvr01 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
If the event originated on another computer, the display information had to be saved with the event.
The following information was included with the event:
Access Server Exception: Error: Cannot load cert chain file C:\Program Files (x86)\NetPoint\access/oblix/config/aaa_chain.pem
the message resource is present but the message is not found in the string/message table
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="ObAAAServer-AccSvr01" />
<EventID Qualifiers="49152">1</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2010-08-15T17:06:39.000Z" />
<EventRecordID>1072</EventRecordID>
<Channel>Application</Channel>
<Computer>IDMsvr.SSO.com</Computer>
<Security />
</System>
<EventData>
<Data>Access Server Exception: Error: Cannot load cert chain file C:\Program Files (x86)\NetPoint\access/oblix/config/aaa_chain.pem</Data>
</EventData>
</Event>
**===========================================================================**
The ConfigureAAAServer.exe_
C:\Program Files (x86)\NetPoint\access\oblix\tools\configureAAAServer>configureA
AAServer.exe reconfig "C:\Program Files (x86)\NetPoint\access"
Please enter the Mode in which you want the Access Server to run : 1(Open) 2(Si
mple) 3(Cert) : 3
Do you want to request a certificate (1) or install a certificate (2) ? : 1
Please enter the Pass phrase for this Access Server :
Do you want to store the password in the file ? : 1(Y) 2(N) : 1
Preparing to generate certificate. This may take up to 60 seconds. Please wai
t.
Loading 'screen' into random state - done
Generating a 1024 bit RSA private key
.............++++++
..++++++
writing new private key to 'C:\Program Files (x86)\NetPoint\access\oblix\config\
aaa_key.pem'
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
Country Name (2 letter code) [US]:.
State or Province Name (full name) [Some-State]:.
Locality Name (eg, city) []:.
Organization Name (eg, company) [Some-Organization Pty Ltd]:.
Organizational Unit Name (eg, section) []:.
Common Name (eg, hostName.domainName.com) []:IDMsvr.sso.com
Email Address []:.
writing RSA key
Your certificate request is in file : C:\Program Files (x86)\NetPoint\access/ob
lix/config/aaa_req.pem
Please get your certificate request signed by the Certificate Authority.
On obtaining your certificate, please place your certificate in 'C:\Program Fil
es (x86)\NetPoint\access/oblix/config/aaa_cert.pem' file and the certificate aut
hority's certificate for the corresponding component (for example: WebGate, AXML
Server) in 'C:\Program Files (x86)\NetPoint\access/oblix/config/aaa_chain.pem'
file.
Once you have your certificate placed at the above mentioned location, please f
ollow the instructions on how to start the Access Server.
More Information on setting up Access Server in Certificate mode can be obtaine
d from the Setup Installation Guide.
Access Server mode has been re-configured successfully.
Please note that new security mode will take effect only after the security mod
e for this Access Server is changed to 'cert' from the Access Manager System Con
sole.
Do you want to specify or update the failover information ? : 1(Y) 2(N) :2
Please restart the Access Server from the Control Panel Services once you have
placed your certificates at the above mentioned location.
Press enter key to continue ...
C:\Program Files (x86)\NetPoint\access\oblix\tools\configureAAAServer>configureA
AAServer.exe reconfig "C:\Program Files (x86)\NetPoint\access"
Please enter the Mode in which you want the Access Server to run : 1(Open) 2(Si
mple) 3(Cert) : 3
Do you want to request a certificate (1) or install a certificate (2) ? : 2
Please enter the Pass phrase for this Access Server :
Do you want to store the password in the file ? : 1(Y) 2(N) : 1
Please provide the full path to the Certificate key file [C:\Program Files (x86)
\NetPoint\access/oblix/config/aaa_key.pem] : C:\Program Files (x86)\NetPoint\acc
ess\oblix\config\aaa_key.pem
Please provide the full path to the Certificate file [C:\Program Files (x86)\Net
Point\access/oblix/config/aaa_cert.pem] : C:\Program Files (x86)\NetPoint\access
\oblix\config\aaa_cert.pem
Please provide the full path to the Certificate authority's certificate chain fi
le [C:\Program Files (x86)\NetPoint\access/oblix/config/aaa_chain.pem] : C:\Prog
ram Files (x86)\NetPoint\access\oblix\config\aaa_chain.pem
Access Server mode has been re-configured successfully.
Please note that new security mode will take effect only after the security mod
e for this Access Server is changed to 'cert' from the Access Manager System Con
sole.
Do you want to specify or update the failover information ? : 1(Y) 2(N) :2
Please restart the Access Server from the Control Panel Services.
Press enter key to continue ...
**===========================================================================**
I followed through the documentation on OAM Identity & Common Admin - Chapter 8 guide.
Is there anything which I have missed or something to do with the certificate.
Thanks in advance.
Regards,
Wing
Edited by: user13340813 on Aug 19, 2010 8:56 PM

No, you didn't do anything wrong, JeanPhilippe. I'm right there with you. There's even another thread on this issue:
<http://discussions.apple.com/thread.jspa?messageID=10808126>
I had the same problem: IMAP & POP services would not launch using SSL. Finally got it resolved today. It had nothing to do with certificates and their names, or creating them in openssl, and everything to do with a botched dovecot.conf file, courtesy of Server Admin.
It appears that every time I changed the certificate for IMAP & POP SSL in Server Admin, it appended the new selection to the dovecot.conf file on 3 separate lines. The result was an unhealthy list of every certificate file Server Admin had ever been pointed to for this service.
After making a backup, I edited the file (/etc/dovecot/dovecot.conf) down to the single cert file I wanted it to use. It happened to be first in the list, FWIW.
If you want to duplicate this, look for the lines beginning with:
"sslcertfile"
"sslkeyfile"
"sslcafile"
Obviously you need to be careful in there. But I did not even have to bounce the service before it took my changes. Thankfully, Server Admin did not overwrite my edits (which I've seen happen with manual config of other services, such as the iChat service.)
Good luck, and let me know if I can provide more detail.

Similar Messages

Can't connect to server "Cannot load Interface Builder File "NSAlertPanel"

all of a sudden, one of my Macs cannot connect to our server due to this error in the Console:
NetAuthAgent [ 128 ] Cannot load Interface Builder File 'NSAlertPanel'
This is on a MacPro running 10.6.4 - rebooting this computer didn't help.
My searches on Google regarding this message didn't pull results related to connecting to a server.
The error appears when in the Finder and you type Command + K or if you select Go in the menu and then select "Connect to Server". The "Connecting to Server" window does appear but it just sits there like it's trying to connect to our server. The login window should appear but it doesn't.
This happens both with AFP and SMB - it never connects and that error message i posted shows up in the Console whenever I attempt to connect.
Any ideas?
more info: i logged in as Root and the problem isn't there so it's isolated to the other profile. the problem is, i can't always use the Root profile.
Message was edited by: ifone_lover
Message was edited by: ifone_lover

I would recommend the usual basic troubleshooting:
1) Repair Permissions in Disk Utility, then reboot.
If that doesn't work,
2) Re-apply the latest Combo Update in safe mode (boot while holding shift).
http://support.apple.com/kb/DL1048

MBSA 2.2 Cannot load security CAB file

Hello everyone!
I'm trying to run MBSA 2.2 with the following command but it ends with "Cannot load security CAB file" error in Windows 7 client. Windows XP works fine:
@ECHO OFF
mkdir %windir%\temp\mbsa\
copy mbsa %windir%\temp\mbsa\
%windir%\temp\mbsa\mbsacli.exe /xmlout /wi /nvc /nd /catalog %windir%\temp\mbsa\wsusscn2.cab >>
\\fileshare\MBSA_Reportsssssss.xml
rmdir /s /q %windir%\temp\mbsa\
MBSA folder includes all the needed files: mbsacli.exe, wsusscn02.cab & wusscan.dll. Remote Registry, Server, Windows Update & Workstation services are running + File and Printer Sharing service is enabled. This is a fresh Win7 install
with the latest Windows Update Agent.
If I run the command line without the variables (mbsacli.exe /xmlout /wi /nvc /nd /catalog wsusscn2.cab >> MBSA_Reportsssssss.xml) in the correct folder I get that same error. I've also deleted & re-downloaded/copied the cab file
just in case if it got corrupted during the first copy.
Are there any other requirements in Win7 to get this work locally with mbsacli.exe?
Thanks!

Can you explain how you fixed your user rights to get access? I keep getting access denied when I run this simple script even as a DA
mbsacli /listfile <D:\wsus>\Servers.txt /n os+iis+sql+password

Error message: Cannot load the rpt file

Can anyone please help.
I created a Crystal Report which I deployed into Business One. Tested this report on about 13 machines running Business One and all running well except one machine where it comes up with the following error messages:
1: Cannot load the rpt file
2: Object reference not set to an instance of an object
3: Invalid report file path
I have tried logging into Business One on that machine as a different user and encountered the same issue. Then logged onto another machine as the user who uses the machine with the error message and her profile works well on another machine.
This is leaving me with concluding this problem could be down to the machine but cannot figure out how to fix it.
Does anyone have any ideas to solving this?
Thanks
Tony

Hi Tony,
On the troubled computer, check in Control Panel whether Crystal Report Runtime is installed. If not, un-install client app and re-install from B1_Shr client's folder. The first thing that it will do is to instal Crystal Report Runtime.
Source: when I did an upgrade on a client recently this happened. After troubleshooting everything I found that this issue is a hit-and-miss as some PCs had it some don't. I started comparing between working and non-working PC and found this is the only difference I could found.

Libstdc++-libc6.1-1.so.2: cannot load shared object file:

Greetings,
I've just downloaded and installed Pervasive's jdbc driver and j2re-1_4_0-fcs-linux-i386.rpm, but when I try to run java:
[admin@samba-two admin]$ /usr/java/j2re1.4.0/bin/java
Error: failed /usr/java/j2re1.4.0/lib/i386/client/libjvm.so, because libstdc++-libc6.1-1.so.2: cannot load shared object file: No such file or directory
How can I fix this?

Just had this problem in Mandrake 9.0 with jsdk1.4.1, Same as RedHat 8.0 and 7.x.
On the RPMS section of Disc 1 (I imagine the same for Red Hat) look for the RPM libstdc++2.x.y.rpm (I am not sure what xyz are, the 2 is the key) The other libstdc++5.x.y.z.rpm's are already installed.
Install this RPM and it installs the proper libraries. (as root)
rpm -iv libstdc++2.x.y.rpm In fact Forte4 doesn't even even boot as it uses this lib for the splash screen.
Netscape 7 also needs this library.

JRE 1.4.0 on RedHat7.1. - error... failed... cannot load shared object file

I just installed JRE 1.4, but it doesn't work:
failed /usr/java/j2re1.4.0/lib/i386/client/libjvm.co, because libstdc++-libc6.1.1.so.2: cannot load shared object file: no such file or directory
When i check:
ls /lib/libc-*
/lib/libc/libc-2.2.2.so
What files should I install to get it work?
Thank you.

The best way to explain this problem is JRE 1.4.0 is execting an old shared object for libstdc which had been updated in Redhat 7.2. Since, the functionality in libstdc should still exist in the newer version of libstc I simply made a symbolic link pointing to the current version of libstdc to satisfy JRE 1.4.0.
ln -s /usr/lib/libstdc++-3-libc6.2-2-2.10.0.so /usr/lib/libstdc++-libc6.1-1.so.2Hope this helps.
steve

Cannot load the animation file...

I am using Captivate 5 and Flash CS5. I created an interactive swf I am trying to import but when I try to drag it into Captivate nothing happens. If I go to "Insert > Animation" and select it, I get the error "Cannot load the animation file. The file is either damaged or is not available in the specified location."
I wrote the swf in AS3 from the start, it runs fine in Flash, no compiler errors and works fine in a browser standalone. I tried saving it with a new name in a new location, but no luck. I can import other swf's fine including ones that are a lot more complicated. Any ideas?

I believe I have somewhat figured out the problem. I had imported some graphics from Adobe Illustrator into Flash. When I deleted the folder containing these in the Flash library I was able to import the swf into Captivate. Oddly, once I had imported the swf into Captivate, if I then added the folder back in Flash and re-published, then right-clicked the swf in Captivate and selected "Update..." it said "All items have been successfully updated." and everything ran fine. But, if I removed the swf from the slide and tried to drag it back into Captivate, I got the same error however.
If I figure out what about the Illustrator files Captivate doesn't like I'll post back.

Oracle 9.i - SQLPLUS libodm9.so - cannot load shared object file

I am receive this error when I try to run sqlplus as any other user other than the user who installed the distribution:
libodm9.so: cannot load shared object file file does not exist.
Anyone have any ideas?
-Jim Wartnick
[email protected]

I did have my LD_LIBRARY_PATH exported. The funny thing about this is that it works for one user (the user that installed the distribution), but nobody else. This is pretty bizzare. I tried to relink Oracle and received all of the similar errors that everyone else did (GLIBC22 errors). One person said to UPGRADE my binutils, I did this and am still having problems. I think I will wait for Oracle to certify the thing. It's nice to know that some things with Oracle never change. They can release a production piece of software that doesn't work. Pretty typical.
null

Report Server cannot load the extension

Hi,
I am developing a custom delivery extension with user interface for SQL Reporting Services. After some other issues that I was able to solve I finally reach this error here: "Report Server (MSSQLSERVER) cannot load the Custom extension."
Where "Custom" is my extension name.
I don't know where the problem is, this is all information I get. I also tried to deploy the PrinterDelivery sample which is part of the official SDK samples for SQL Reporting Services extensions. The weird thing is that this extension does not produce any
event log entries but it is also not displayed in the user interface.
I used this here:
http://msdn.microsoft.com/en-us/library/ms153647%28v=sql.110%29.aspx as deployment guide.
What am I doing wrong?

Hi guw,
By default, we can use the steps below to use a custom assembly in a report:
Build the assembly.
Copy the assembly to the following 3 locations:
    C:\Program Files\Microsoft Visual Studio 9.0\Common7\IDE\PrivateAssemblies
    C:\Program Files\Microsoft SQL Server\MSRS10.MSSQLSERVER\Reporting Services\ReportServer\bin
    C:\Program Files\Microsoft SQL Server\MSRS10.MSSQLSERVER\Reporting Services\ReportManager\bin
Edit rsreportserver.config
under <delivery>
<Extension Name="Printer Delivery Sample" Type="Microsoft.Samples.ReportingServices.PrinterDelivery.PrinterDeliveryProvider,Microsoft.Samples.ReportingServices.PrinterDeliverySample">
   <Configuration>
    <Printers>
     <Printer>\\Server\MyNetworkPrinter1</Printer>
     <Printer>\\Server\MyNetworkPrinter2</Printer>
     <Printer>MyPrinter</Printer>
    </Printers>
   </Configuration>
</Extension>
under <deliveryUI>
<Extension Name="Printer Delivery Sample" Type="Microsoft.Samples.ReportingServices.PrinterDelivery.PrinterDeliveryUIProvider,Microsoft.Samples.ReportingServices.PrinterDeliverySample"/>
Open the rssrvpolicy.config(uder C:\Program Files\Microsoft SQL Server\MSRS10.MSSQLSERVER\Reporting Services\ReportServer\bin) with text editor. Then add the following code group to the file:
<CodeGroup class="UnionCodeGroup"
version="1"
PermissionSetName="FullTrust"
Name="PrinterDeliveryCodeGroup"
Description="Code group for my delivery extension">
<IMembershipCondition class="UrlMembershipCondition"
version="1"
Url="C:\Program Files\Microsoft SQL Server\MSRS10.MSSQLSERVER\Reporting Services\ReportServer\bin\yourAssembly.dll"
/>
</CodeGroup>
Open the rsmgrpolicy.config(uder C:\Program Files\Microsoft SQL Server\MSRS10.MSSQLSERVER\Reporting Services\ReportManager\bin) with text editor. Then add the following code group to the file:
<CodeGroup class="UnionCodeGroup"
version="1"
PermissionSetName="FullTrust"
Name="PrinterDeliveryCodeGroup"
Description="Code group for my delivery extension">
<IMembershipCondition class="UrlMembershipCondition"
version="1"
Url="C:\Program Files\Microsoft SQL Server\MSRS10.MSSQLSERVER\Reporting Services\ReportManager\bin\yourAssembly.dll"
/>
</CodeGroup>
Add the assembly reference in the report.
The following sample extension is for your reference:
http://msftrsprodsamples.codeplex.com/
Hope this helps.
Thanks,
Katherine Xiong
Katherine Xiong
TechNet Community Support

The video tab in ipod is locked- cannot load dvd (.mp4 files) files to ipod

I converted the dvd files to .mp4 files (Using cusoft).
The files were loaded in the itune (by using add files to library). I can play the dvd in the itune on my pc but cannot transfer the dvd files to the ipod because:
The dvd tab in the ipod is locked (white out). I can see the white out: [X] do not update video files .
Since the dvd tab is locked out I cannot transfer the dvd files to the ipod. I used the latest verson of itune and ipod programs.
Please reply directly to: [email protected]
Urgent help will be highly appreciated.
Thanks

Sahay,
Welcome to Apple Discussions.
You've posted in the iMac G3 forum - the users here, including myself, have little or no experience of using iTunes on Windoze. You'll be far better to repost your question in the iTunes for Windows forum.
kind regards
mrtotes

Cannot load large CSV files in SignalExpress("Not enough memory to complete this operation" error)

Hi guys,
I'm new here and just have browsed
some of the related topics here regarding my problem but could not seem
to find anything to help me fix this problem so I decided to post this.
I currently have a saved waveform from an oscilloscope that is quite
big in size(around 700MB, CSV file format) and I want to view this on
my PC using SignalExpress. Unfortunately when I try to load the file
using "Load/Save Signals -> Load From ASCII", I always get the "Not
enough memory to complete this operation" error. How can we view and
analyze large waveform files in SignalExpress? Is there a workaround on
this?
Thanks,
Louie
P.S.>I'm very new to Signal Express and haven't modified any settings on it.

Hi Louie,
Are you encountering a read-only message when you tried to save the boot.ini file? If so, you can try this method: right-click on My Computer >> Select "Properties", and go to the "Advanced" tab. Select "Settings", and on the next screen, there is a button called Edit. If you click on Edit you should be able to modify the "/3GB" tag in boot.ini. Are you able to change it in this manner? After reboot, you can reload the file to see if it helps.
To open a file in SignalExpress, a contiguous chunk of memory is required. If SignalExpress cannot find a contiguous memory chunk that is large enough to hold this file, then an error will be generated. This can happen when fragmentation occurs in memory, and fragmentation (memory management) is managed by Windows, so unfortunately this is a limitation that we have.
As an alternative, have you looked at NI DIAdem before? It is a software tool that allows users to manage and analyze large volumes of data, and has some unique memory management method that lets it open and work on large amounts of data. There is an evaluation version which is available for download; you can try it out and see if it is suitable for your application.
Best regards,
Victor
NI ASEAN
Attachments:
Clipboard01.jpg ‏181 KB

Using MBSA 2.2 getting error 'Cannot load security CAB file" when attempting to scan any remote systems

Could scan all remote servers previously from same sources and version. Replaced/updated all cabs and other files associated (C:\Documents and Settings\<username>\Local Settings\Application Data\Microsoft\MBSA\Cache) with no change. Removed/re-installed
MBSA 2.2 with not effect.
Local scans appear to function fine, but do not wish to download MBSA on EVERY system we need to scan.
Settings for remote scan are: Check for security updates>Configure computers for Microsoft
Update and scanning prerequisites>Advanced Update Services
options:>Scan using
Microsoft Update only
Have attempted from different systems/OS's, with same results. Checked firewall for any blocked traffic from both host and scanner, no entries.
Checked Technet/blogged for about two hours, without any positive results. Please advise/assist.
Regards,
AJ Lebeau
MCSE, MCP, MCP+I, CNA, ACNA, A+
Server Administrator
Progenics Pharmaceuticals
[email protected]
(914) 789-4558

Thank you for sending this to the MBSA forums!
If you haven't already, you may want to check the MBSA FAQ located here:
http://technet.microsoft.com/en-us/security/cc184922 specifically under the sections titled, "How can I scan a computer that is protected by a firewall" (to resolve potential DCOM connectivity issues), and "When attempting to scan a remote machine,
why do I see the error 'Cannot deploy security metadata?"
This is also a very misleading error message since the problem could be due to connectivity to the target (client) machines - nothing relating to the CAB file. In any circumstance, you should not need to install MBSA on all of the target machines to
successfully assess their security state.
Possible solutions include
Confirm the latest WUA client is installed on all target machines (with the files you've already placed in the cache directory, you can simply check the scan option to "Configure computers for Microsoft
Update and scanning prerequisites" - which will update and re-register each target machine with the latest WUA client and the ability to respond to requests from MBSA.
Check whether the target machines have limited disk space (unlikely)
Check DCOM settings on both the server - but more likely due to the failure to remotely scan - the target machines.
Change the scan options to further troubleshoot. Specifically, 'Check for security updates' option uses a DCOM connection to the target WUA client while the other scan settings 'Check for weak passwords, etc." use specific UDP/TCP ports as indicated
in the System Requirements section of the MBSA help file and the MBSA FAQ. Also use the 'Advanced Update Services options' to determine whether WSUS connectivity may be at issue.
Please let me know if that helps.
Doug Neal - Microsoft Update and MBSA

Cannot load a RAW file from Nikon D7200 into Elements 9!

trying to open a RAW (NEF) file from my Nikon D7200 into Elements 9 (version 9.0.3) and I get the message that "cannot open because it is the wrong type of file". Can some one help me? I have the RAW 6.5 plug-in installed

Hi,
The D7200 requires Camera Raw 9.0 which is not compatible with PSE 9.
You either need to upgrade to PSE 13 or use the free Adobe DNG converter which can take the NEF files and convert them to DNG files. The DNG files can then be processed by PSE 9.
DNG Converter 9.0
Mac – http://www.adobe.com/support/downloads/detail.jsp?ftpID=5882
Win – http://www.adobe.com/support/downloads/detail.jsp?ftpID=5883
Useful Tutorial
http://www.youtube.com/watch?v=0bqGovpuih
This assumes that you are not on an old operating system which is not supported.
Brian

FF 10: cannot load local html files by dragging to FF; links in email don't open

Just upgraded to FF 10. I cannot open a local html file by dragging it to to FF, or by clicking the file name. Clicking the file name brings up an error message: There was a problem sending the command to the program. Dragging just shows a circle with a slash.
I can open a local file by typing "file///<file location>" in the location bar.
Also, clicking a link in an email to any site does not open the site.

Hi,
Please see [http://kb.mozillazine.org/Windows_error_opening_Internet_shortcut_or_local_HTML_file_-_Firefox this]. You can start Firefox in [https://support.mozilla.com/en-US/kb/Safe%20Mode Safe Mode] to check if an add-on is causing the problem. You can also try to '''Open with''' by right-clicking on the HTML file and choose Firefox and enable '''Always use the selected program to open this kind of file'''.

Audit Vault agent on another server cannot read OS audit files on source

We have very highly secured database running on node1, we don't want to install agent on that server, so we installed it on node2. We want to use OSAUD collector to audit sys operations. But OSAUD collector is failing because it cannot read audit_trail_dest folder on the source database, network admins don't want to enable SSH from node2/oracle to node1.
Please suggest what are the options I have in this case.
I appreciate your help.

Thanks for the clarification on versions and architecture. In the future do not use the term "node" unless you are referring to RAC as it will cause very substantial confusion. You don't have two nodes ... you have two servers.
Throw it back at management. Ultimately they need to decide whether enabling secure communications makes sense in an environment where they wish to implement Audit Vault's very considerable capabilities.
I think your network admins need to be sent off to a re-education camp. One that reminds them that their purpose is to support the organization. I doubt your business model shows substantial revenue generation from network administration.

OAM Access Server - Cannot load cert chain file aaa_chain.pem

Similar Messages

Maybe you are looking for