Problems enabling RSA 2 factor authentication
I have configured my PMP instance to use RSA authentication and copied the sdconf.rec file to the bin folder. I have enabled 2 factor auth for my account.
When I attempt to logon the rsa_api.log is populated with:
[2017-03-06 16:53:03,062] WARN /login/AjaxResponse.jsp-1488819181034_###_http-nio-443-exec-13 - User xyz123's access is denied.
I have updated the rsa_api to enable debugging. The rsa_api_debig.log is populated with:
[2017-03-06 16:52:33,656] /login/AjaxResponse.jsp-1488819153640_###_http-nio-443-exec-25 - RSA Authentication API started.
[2017-03-06 16:52:33,703] /login/AjaxResponse.jsp-1488819153640_###_http-nio-443-exec-25 - ReadReamlStatus[Servers= AcmServerInfo[ serverAddress = 10.62.15.7 activeAddress = 10.62.15.7 addressStatus = 12 serverStatus = 1 aliases = aliasOptions = 0 consecutiveSuspensions = 0 averageNetTurnaround = 0 worstNetTurnaround = 0 lastTimeUsed = 1488817894762 runPriority = 10 sdoptsPriority = 0 suspendTime = 0]
AcmServerInfo[ serverAddress = 10.59.10.7 addressStatus = 8 serverStatus = 17 aliases = aliasOptions = 0 consecutiveSuspensions = 1 averageNetTurnaround = 0 worstNetTurnaround = 0 lastTimeUsed = 0 runPriority = 10 sdoptsPriority = 0 suspendTime = 1488817895823]
Static Priority=0 ClientIP=null]
[2017-03-06 16:52:33,718] /login/AjaxResponse.jsp-1488819153640_###_http-nio-443-exec-25 - isStillSuspended() : false/pass suspension timeAcmServerInfo[ serverAddress = 10.59.10.7 addressStatus = 40 serverStatus = 17 aliases = aliasOptions = 0 consecutiveSuspensions = 1 averageNetTurnaround = 0 worstNetTurnaround = 0 lastTimeUsed = 0 runPriority = 10 sdoptsPriority = 0 suspendTime = 1488817895823]
[2017-03-06 16:52:33,718] /login/AjaxResponse.jsp-1488819153640_###_http-nio-443-exec-25 - SetPriorityByPerformance selectable:PriorityList[size=2Totalweight=20currentTotalWeight2currentIndex0 server=0 current weight=1(priority=10) server=1 current weight=1(priority=10)]
[2017-03-06 16:52:33,718] /login/AjaxResponse.jsp-1488819153640_###_http-nio-443-exec-25 - SetPriorityByPerformance emergency:PriorityList[size=0Totalweight=0currentTotalWeight0currentIndex0]
[2017-03-06 16:52:33,718] /login/AjaxResponse.jsp-1488819153640_###_http-nio-443-exec-25 - Write ReamlStatus[Servers= AcmServerInfo[ serverAddress = 10.62.15.7 activeAddress = 10.62.15.7 addressStatus = 12 serverStatus = 1 aliases = aliasOptions = 0 consecutiveSuspensions = 0 averageNetTurnaround = 0 worstNetTurnaround = 0 lastTimeUsed = 1488817894762 runPriority = 10 sdoptsPriority = 0 suspendTime = 0]
AcmServerInfo[ serverAddress = 10.59.10.7 addressStatus = 40 serverStatus = 17 aliases = aliasOptions = 0 consecutiveSuspensions = 1 averageNetTurnaround = 0 worstNetTurnaround = 0 lastTimeUsed = 0 runPriority = 10 sdoptsPriority = 0 suspendTime = 1488817895823]
Static Priority=0 ClientIP=null]
[2017-03-06 16:52:33,718] /login/AjaxResponse.jsp-1488819153640_###_http-nio-443-exec-25 - ACEServerDataObject.getData error: C:\ManageEngine\PMP\bin\securid (The system cannot find the file specified)
[2017-03-06 16:52:33,718] /login/AjaxResponse.jsp-1488819153640_###_http-nio-443-exec-25 - Can't get nodeSecret
[2017-03-06 16:52:33,750] /login/AjaxResponse.jsp-1488819153640_###_http-nio-443-exec-25 - server selected from selectable is : 0 Selectable=PriorityList[size=2Totalweight=20currentTotalWeight1currentIndex0 server=0 current weight=0(priority=10) server=1 current weight=1(priority=10)]
EmergencyPriorityList[size=0Totalweight=0currentTotalWeight0currentIndex0]
[2017-03-06 16:52:33,796] /login/AjaxResponse.jsp-1488819153640_###_http-nio-443-exec-25 - Error creating AceLockRequest: com.rsa.ace.techservice.udpserver.AUTHa7: Packet exception:Exception building Lock: no nodesecret
[2017-03-06 16:52:33,796] /login/AjaxResponse.jsp-1488819153640_###_http-nio-443-exec-25 - Can't lock because of no node secret
[2017-03-06 16:52:33,796] /login/AjaxResponse.jsp-1488819153640_###_http-nio-443-exec-25 - server selected from selectable is : 1 Selectable=PriorityList[size=2Totalweight=20currentTotalWeight0currentIndex1 server=0 current weight=0(priority=10) server=1 current weight=0(priority=10)]
EmergencyPriorityList[size=0Totalweight=0currentTotalWeight0currentIndex0]
[2017-03-06 16:52:34,108] /login/AjaxResponse.jsp-1488819153640_###_http-nio-443-exec-25 - Server Timeout : AcmServerInfo[ serverAddress = 10.59.10.7 addressStatus = 40 serverStatus = 17 aliases = aliasOptions = 0 consecutiveSuspensions = 1 averageNetTurnaround = 0 worstNetTurnaround = 0 lastTimeUsed = 0 runPriority = 10 sdoptsPriority = 0 suspendTime = 1488817895823]
[2017-03-06 16:52:34,108] /login/AjaxResponse.jsp-1488819153640_###_http-nio-443-exec-25 - before suspendServer(): AcmServerInfo[ serverAddress = 10.59.10.7 addressStatus = 40 serverStatus = 17 aliases = aliasOptions = 0 consecutiveSuspensions = 1 averageNetTurnaround = 0 worstNetTurnaround = 0 lastTimeUsed = 0 runPriority = 10 sdoptsPriority = 0 suspendTime = 1488817895823]
[2017-03-06 16:52:34,108] /login/AjaxResponse.jsp-1488819153640_###_http-nio-443-exec-25 - isStillSuspended() : 2 for41secondsAcmServerInfo[ serverAddress = 10.59.10.7 addressStatus = 40 serverStatus = 17 aliases = aliasOptions = 0 consecutiveSuspensions = 2 averageNetTurnaround = 0 worstNetTurnaround = 0 lastTimeUsed = 0 runPriority = 10 sdoptsPriority = 0 suspendTime = 1488819154108]
[2017-03-06 16:52:34,108] /login/AjaxResponse.jsp-1488819153640_###_http-nio-443-exec-25 - SetPriorityByPerformance selectable:PriorityList[size=1Totalweight=10currentTotalWeight0currentIndex0 server=0 current weight=0(priority=10)]
[2017-03-06 16:52:34,108] /login/AjaxResponse.jsp-1488819153640_###_http-nio-443-exec-25 - SetPriorityByPerformance emergency:PriorityList[size=0Totalweight=0currentTotalWeight0currentIndex0]
[2017-03-06 16:52:34,108] /login/AjaxResponse.jsp-1488819153640_###_http-nio-443-exec-25 - Write ReamlStatus[Servers= AcmServerInfo[ serverAddress = 10.62.15.7 activeAddress = 10.62.15.7 addressStatus = 12 serverStatus = 1 aliases = aliasOptions = 0 consecutiveSuspensions = 0 averageNetTurnaround = 0 worstNetTurnaround = 0 lastTimeUsed = 1488819153750 runPriority = 10 sdoptsPriority = 0 suspendTime = 0]
AcmServerInfo[ serverAddress = 10.59.10.7 addressStatus = 40 serverStatus = 17 aliases = aliasOptions = 0 consecutiveSuspensions = 2 averageNetTurnaround = 0 worstNetTurnaround = 0 lastTimeUsed = 0 runPriority = 10 sdoptsPriority = 0 suspendTime = 1488819154108]
Static Priority=0 ClientIP=null]
[2017-03-06 16:52:34,108] /login/AjaxResponse.jsp-1488819153640_###_http-nio-443-exec-25 - receive timeout: java.net.SocketTimeoutException: Receive timed out
[2017-03-06 16:52:36,152] /login/AjaxResponse.jsp-1488819153640_###_http-nio-443-exec-25 - Authenticaton failed for xyz123 !
[2017-03-06 16:53:01,050] /login/AjaxResponse.jsp-1488819181034_###_http-nio-443-exec-13 - Error creating AceLockRequest: com.rsa.ace.techservice.udpserver.AUTHa7: Packet exception:Exception building Lock: no nodesecret
[2017-03-06 16:53:01,050] /login/AjaxResponse.jsp-1488819181034_###_http-nio-443-exec-13 - Can't lock because of no node secret
[2017-03-06 16:53:01,050] /login/AjaxResponse.jsp-1488819181034_###_http-nio-443-exec-13 - server selected from selectable is : 0 Selectable=PriorityList[size=1Totalweight=10currentTotalWeight0currentIndex0 server=0 current weight=0(priority=10)]
EmergencyPriorityList[size=0Totalweight=0currentTotalWeight0currentIndex0]
[2017-03-06 16:53:03,062] /login/AjaxResponse.jsp-1488819181034_###_http-nio-443-exec-13 - Authenticaton failed for xyz123 !
Based on this, is a "securid" file required?
Does the timeout indicate that no response is being received?
Please can you assist.
Many Thanks
Rob
When I attempt to logon the rsa_api.log is populated with:
[2017-03-06 16:53:03,062] WARN /login/AjaxResponse.jsp-1488819181034_###_http-nio-443-exec-13 - User xyz123's access is denied.
I have updated the rsa_api to enable debugging. The rsa_api_debig.log is populated with:
[2017-03-06 16:52:33,656] /login/AjaxResponse.jsp-1488819153640_###_http-nio-443-exec-25 - RSA Authentication API started.
[2017-03-06 16:52:33,703] /login/AjaxResponse.jsp-1488819153640_###_http-nio-443-exec-25 - ReadReamlStatus[Servers= AcmServerInfo[ serverAddress = 10.62.15.7 activeAddress = 10.62.15.7 addressStatus = 12 serverStatus = 1 aliases = aliasOptions = 0 consecutiveSuspensions = 0 averageNetTurnaround = 0 worstNetTurnaround = 0 lastTimeUsed = 1488817894762 runPriority = 10 sdoptsPriority = 0 suspendTime = 0]
AcmServerInfo[ serverAddress = 10.59.10.7 addressStatus = 8 serverStatus = 17 aliases = aliasOptions = 0 consecutiveSuspensions = 1 averageNetTurnaround = 0 worstNetTurnaround = 0 lastTimeUsed = 0 runPriority = 10 sdoptsPriority = 0 suspendTime = 1488817895823]
Static Priority=0 ClientIP=null]
[2017-03-06 16:52:33,718] /login/AjaxResponse.jsp-1488819153640_###_http-nio-443-exec-25 - isStillSuspended() : false/pass suspension timeAcmServerInfo[ serverAddress = 10.59.10.7 addressStatus = 40 serverStatus = 17 aliases = aliasOptions = 0 consecutiveSuspensions = 1 averageNetTurnaround = 0 worstNetTurnaround = 0 lastTimeUsed = 0 runPriority = 10 sdoptsPriority = 0 suspendTime = 1488817895823]
[2017-03-06 16:52:33,718] /login/AjaxResponse.jsp-1488819153640_###_http-nio-443-exec-25 - SetPriorityByPerformance selectable:PriorityList[size=2Totalweight=20currentTotalWeight2currentIndex0 server=0 current weight=1(priority=10) server=1 current weight=1(priority=10)]
[2017-03-06 16:52:33,718] /login/AjaxResponse.jsp-1488819153640_###_http-nio-443-exec-25 - SetPriorityByPerformance emergency:PriorityList[size=0Totalweight=0currentTotalWeight0currentIndex0]
[2017-03-06 16:52:33,718] /login/AjaxResponse.jsp-1488819153640_###_http-nio-443-exec-25 - Write ReamlStatus[Servers= AcmServerInfo[ serverAddress = 10.62.15.7 activeAddress = 10.62.15.7 addressStatus = 12 serverStatus = 1 aliases = aliasOptions = 0 consecutiveSuspensions = 0 averageNetTurnaround = 0 worstNetTurnaround = 0 lastTimeUsed = 1488817894762 runPriority = 10 sdoptsPriority = 0 suspendTime = 0]
AcmServerInfo[ serverAddress = 10.59.10.7 addressStatus = 40 serverStatus = 17 aliases = aliasOptions = 0 consecutiveSuspensions = 1 averageNetTurnaround = 0 worstNetTurnaround = 0 lastTimeUsed = 0 runPriority = 10 sdoptsPriority = 0 suspendTime = 1488817895823]
Static Priority=0 ClientIP=null]
[2017-03-06 16:52:33,718] /login/AjaxResponse.jsp-1488819153640_###_http-nio-443-exec-25 - ACEServerDataObject.getData error: C:\ManageEngine\PMP\bin\securid (The system cannot find the file specified)
[2017-03-06 16:52:33,718] /login/AjaxResponse.jsp-1488819153640_###_http-nio-443-exec-25 - Can't get nodeSecret
[2017-03-06 16:52:33,750] /login/AjaxResponse.jsp-1488819153640_###_http-nio-443-exec-25 - server selected from selectable is : 0 Selectable=PriorityList[size=2Totalweight=20currentTotalWeight1currentIndex0 server=0 current weight=0(priority=10) server=1 current weight=1(priority=10)]
EmergencyPriorityList[size=0Totalweight=0currentTotalWeight0currentIndex0]
[2017-03-06 16:52:33,796] /login/AjaxResponse.jsp-1488819153640_###_http-nio-443-exec-25 - Error creating AceLockRequest: com.rsa.ace.techservice.udpserver.AUTHa7: Packet exception:Exception building Lock: no nodesecret
[2017-03-06 16:52:33,796] /login/AjaxResponse.jsp-1488819153640_###_http-nio-443-exec-25 - Can't lock because of no node secret
[2017-03-06 16:52:33,796] /login/AjaxResponse.jsp-1488819153640_###_http-nio-443-exec-25 - server selected from selectable is : 1 Selectable=PriorityList[size=2Totalweight=20currentTotalWeight0currentIndex1 server=0 current weight=0(priority=10) server=1 current weight=0(priority=10)]
EmergencyPriorityList[size=0Totalweight=0currentTotalWeight0currentIndex0]
[2017-03-06 16:52:34,108] /login/AjaxResponse.jsp-1488819153640_###_http-nio-443-exec-25 - Server Timeout : AcmServerInfo[ serverAddress = 10.59.10.7 addressStatus = 40 serverStatus = 17 aliases = aliasOptions = 0 consecutiveSuspensions = 1 averageNetTurnaround = 0 worstNetTurnaround = 0 lastTimeUsed = 0 runPriority = 10 sdoptsPriority = 0 suspendTime = 1488817895823]
[2017-03-06 16:52:34,108] /login/AjaxResponse.jsp-1488819153640_###_http-nio-443-exec-25 - before suspendServer(): AcmServerInfo[ serverAddress = 10.59.10.7 addressStatus = 40 serverStatus = 17 aliases = aliasOptions = 0 consecutiveSuspensions = 1 averageNetTurnaround = 0 worstNetTurnaround = 0 lastTimeUsed = 0 runPriority = 10 sdoptsPriority = 0 suspendTime = 1488817895823]
[2017-03-06 16:52:34,108] /login/AjaxResponse.jsp-1488819153640_###_http-nio-443-exec-25 - isStillSuspended() : 2 for41secondsAcmServerInfo[ serverAddress = 10.59.10.7 addressStatus = 40 serverStatus = 17 aliases = aliasOptions = 0 consecutiveSuspensions = 2 averageNetTurnaround = 0 worstNetTurnaround = 0 lastTimeUsed = 0 runPriority = 10 sdoptsPriority = 0 suspendTime = 1488819154108]
[2017-03-06 16:52:34,108] /login/AjaxResponse.jsp-1488819153640_###_http-nio-443-exec-25 - SetPriorityByPerformance selectable:PriorityList[size=1Totalweight=10currentTotalWeight0currentIndex0 server=0 current weight=0(priority=10)]
[2017-03-06 16:52:34,108] /login/AjaxResponse.jsp-1488819153640_###_http-nio-443-exec-25 - SetPriorityByPerformance emergency:PriorityList[size=0Totalweight=0currentTotalWeight0currentIndex0]
[2017-03-06 16:52:34,108] /login/AjaxResponse.jsp-1488819153640_###_http-nio-443-exec-25 - Write ReamlStatus[Servers= AcmServerInfo[ serverAddress = 10.62.15.7 activeAddress = 10.62.15.7 addressStatus = 12 serverStatus = 1 aliases = aliasOptions = 0 consecutiveSuspensions = 0 averageNetTurnaround = 0 worstNetTurnaround = 0 lastTimeUsed = 1488819153750 runPriority = 10 sdoptsPriority = 0 suspendTime = 0]
AcmServerInfo[ serverAddress = 10.59.10.7 addressStatus = 40 serverStatus = 17 aliases = aliasOptions = 0 consecutiveSuspensions = 2 averageNetTurnaround = 0 worstNetTurnaround = 0 lastTimeUsed = 0 runPriority = 10 sdoptsPriority = 0 suspendTime = 1488819154108]
Static Priority=0 ClientIP=null]
[2017-03-06 16:52:34,108] /login/AjaxResponse.jsp-1488819153640_###_http-nio-443-exec-25 - receive timeout: java.net.SocketTimeoutException: Receive timed out
[2017-03-06 16:52:36,152] /login/AjaxResponse.jsp-1488819153640_###_http-nio-443-exec-25 - Authenticaton failed for xyz123 !
[2017-03-06 16:53:01,050] /login/AjaxResponse.jsp-1488819181034_###_http-nio-443-exec-13 - Error creating AceLockRequest: com.rsa.ace.techservice.udpserver.AUTHa7: Packet exception:Exception building Lock: no nodesecret
[2017-03-06 16:53:01,050] /login/AjaxResponse.jsp-1488819181034_###_http-nio-443-exec-13 - Can't lock because of no node secret
[2017-03-06 16:53:01,050] /login/AjaxResponse.jsp-1488819181034_###_http-nio-443-exec-13 - server selected from selectable is : 0 Selectable=PriorityList[size=1Totalweight=10currentTotalWeight0currentIndex0 server=0 current weight=0(priority=10)]
EmergencyPriorityList[size=0Totalweight=0currentTotalWeight0currentIndex0]
[2017-03-06 16:53:03,062] /login/AjaxResponse.jsp-1488819181034_###_http-nio-443-exec-13 - Authenticaton failed for xyz123 !
Based on this, is a "securid" file required?
Does the timeout indicate that no response is being received?
Please can you assist.
Many Thanks
Rob