CA Privileged Access Manager Tech Tip by Kelly Wong, Principal Support Engineer for 10th April 2017
Issue
Users remote access to a common Terminal Server and run CA PAM Client session. CA PAM Client session is locked to the user that initiated CA PAM Client session first.
Environment
Privileged Access Manager: 2.7, 2.8
Cause
CA PAM Client is installed by Windows Administrator and make available to all users. Hence, all users are initiating CA PAM Client from a common location.
When another user remote access to the Terminal Server and attempt to initiate CA PAM Client session from the same file directory, in parallel to another user, some files are locked and new session goes back to the first user:
c:\Program Files (x86)\CA PAM Client>classpath: updater__V2.8.0.0.jar;lib/log4j-1.2.15__V2.8.0.0.jar;lib/slf4j-api-1.7.12__V2.8.0.0.jar;lib/slf4j-log4j12-1.7.12__V2.8.0.0.jar
Java HotSpot(TM) Client VM warning: ignoring option MaxPermSize=250m; support was removed in 8.0
2017-02-27 22:47:55 INFO - Application started with parameters [CAPAMClient.exe] com.ca.Main.main(?:?) [main]
2017-02-27 22:47:56 WARN - Can't update awtAppClassName, awtAppClassName com.ca.Main.main(?:?) [main]
2017-02-27 22:47:56 INFO - Free memory: 118956488 bytes com.ca.Main.main(?:?) [main]
2017-02-27 22:47:56 INFO - Available memory: 129761280 bytes com.ca.Main.main(?:?) [main]
2017-02-27 22:47:56 INFO - Maximum memory: 1037959168 bytes com.ca.Main.main(?:?) [main]
2017-02-27 22:47:56 TRACE - Client ROOT autodetected as C:\Program Files (x86)\CA PAM Client com.ca.client.b.z.a(?:?) [main]
2017-02-27 22:47:56 INFO - Client ROOT set to C:\Program Files (x86)\CA PAM Client com.ca.client.b.z.(?:?) [main]
2017-02-27 22:47:56 DEBUG - Locking client instance: C:\Program Files (x86)\CA PAM Client\temp\.lock com.ca.client.b.z.a(?:?) [main]
2017-02-27 22:47:56 DEBUG - Locking C:\Program Files (x86)\CA PAM Client\temp\.lock com.ca.client.b.z.a(?:?) [main]
2017-02-27 22:47:56 INFO - Strating second instance com.ca.Main.main(?:?) [main]
com.ca.client.b.a.f: File is locked C:\Program Files (x86)\CA PAM Client\temp\.lock
at com.ca.client.b.z.a(Unknown Source)
at com.ca.client.b.z.a(Unknown Source)
at com.ca.client.b.z.a(Unknown Source)
at com.ca.client.b.E.a(Unknown Source)
at com.ca.Main.main(Unknown Source)
2017-02-27 22:47:56 INFO - Starting instance with params [CAPAMClient.exe] throught port 60605 com.ca.client.b.E.a(?:?) [main]
Resolution
The issue shall be addressed with CA PAM 3.0 release.