Symantec Privileged Access Management

  • 1.  CA PAM SC - Database movement left out the application

    Posted Jun 12, 2018 10:33 AM

    Hi

     

    The client made a move from the Database to another Datacenter, generating an IP change, this change was not reported and the application does not start because it does not find the BD.

     

     

    This information is recorded in a configuration file where it can be modified manually.

     

    Is there a procedure for this type of case?



  • 2.  Re: CA PAM SC - Database movement left out the application

    Broadcom Employee
    Posted Jun 20, 2018 11:13 AM

    Julian

     

    If I understand your question correctly this procedure may already have been documented under the older name of this product which would have been Privileged Identity Manager. This document explains what needs to be updated to migrate the database to another location. Please let me know if this is what you are looking for and we can try to get this document updated under the CA PAM SC title

    Joe

     

    https://comm.support.ca.com/kb/HowTo-Point-ENTM-to-a-new-database-location-after-database-migration/KB000009754



  • 3.  Re: CA PAM SC - Database movement left out the application

    Posted Jun 20, 2018 05:12 PM

    Hi Joseph

     

    He performed the indicated procedure, but when I start jboss with the ./run command he generates the following errors

     

    Running JBOSS run.sh ...
    =========================================================================

    JBoss Bootstrap Environment

    JBOSS_HOME: /opt/jboss-4.2.3.GA

    JAVA: /usr/java/jdk1.8.0_101/bin/java

    JAVA_OPTS: -Dprogram.name=run.sh -server -Duser.language=en -Duser.region=US -Djava.security.egd=file:/dev/./urandom -Djava.security.policy=workpoint_client.policy -Xms512m -Xmx1024m -XX:MaxPermSize=256m -Djava.net.preferIPv4Stack=true

    CLASSPATH: /opt/jboss-4.2.3.GA/bin/run.jar:/usr/java/jdk1.8.0_101/lib/tools.jar

    =========================================================================

    16:08:47,541 INFO [Server] Starting JBoss (MX MicroKernel)...
    16:08:47,542 INFO [Server] Release ID: JBoss [Trinity] 4.2.3.GA (build: SVNTag=JBoss_4_2_3_GA date=200807181417)
    16:08:47,543 INFO [Server] Home Dir: /opt/jboss-4.2.3.GA
    16:08:47,543 INFO [Server] Home URL: file:/opt/jboss-4.2.3.GA/
    16:08:47,543 INFO [Server] Patch URL: null
    16:08:47,543 INFO [Server] Server Name: default
    16:08:47,543 INFO [Server] Server Home Dir: /opt/jboss-4.2.3.GA/server/default
    16:08:47,543 INFO [Server] Server Home URL: file:/opt/jboss-4.2.3.GA/server/default/
    16:08:47,544 INFO [Server] Server Log Dir: /opt/jboss-4.2.3.GA/server/default/log
    16:08:47,544 INFO [Server] Server Temp Dir: /opt/jboss-4.2.3.GA/server/default/tmp
    16:08:47,544 INFO [Server] Root Deployment Filename: jboss-service.xml
    16:08:47,683 INFO [ServerInfo] Java version: 1.8.0_101,Oracle Corporation
    16:08:47,683 INFO [ServerInfo] Java VM: Java HotSpot(TM) 64-Bit Server VM 25.101-b13,Oracle Corporation
    16:08:47,684 INFO [ServerInfo] OS-System: Linux 3.10.0-514.6.1.el7.x86_64,amd64
    16:08:47,833 INFO [Server] Core system initialized
    16:08:49,116 INFO [WebService] Using RMI server codebase: http://127.0.0.1:8083/
    16:08:49,117 INFO [Log4jService$URLWatchTimerTask] Configuring from URL: resource:jboss-log4j.xml
    16:08:49,319 INFO [TransactionManagerService] JBossTS Transaction Service (JTA version) - JBoss Inc.
    16:08:49,319 INFO [TransactionManagerService] Setting up property manager MBean and JMX layer
    16:08:49,403 INFO [TransactionManagerService] Starting recovery manager
    16:08:49,441 INFO [TransactionManagerService] Recovery manager started
    16:08:49,441 INFO [TransactionManagerService] Binding TransactionManager JNDI Reference
    16:08:50,281 INFO [EJB3Deployer] Starting java:comp multiplexer
    16:08:51,149 INFO [NativeServerConfig] JBoss Web Services - Native
    16:08:51,149 INFO [NativeServerConfig] jbossws-3.0.1-native-2.0.4.GA (build=200803312044)
    16:08:51,893 INFO [Http11Protocol] Initializing Coyote HTTP/1.1 on http-18443
    16:08:51,894 INFO [Http11Protocol] Initializing Coyote HTTP/1.1 on http-127.0.0.1-18080
    16:08:51,894 INFO [AjpProtocol] Initializing Coyote AJP/1.3 on ajp-127.0.0.1-8009
    16:08:51,894 INFO [Catalina] Initialization processed in 415 ms
    16:08:51,894 INFO [StandardService] Starting service jboss.web
    16:08:51,895 INFO [StandardEngine] Starting Servlet Engine: JBossWeb/2.0.0.GA_CP
    16:08:51,927 INFO [Catalina] Server startup in 32 ms
    16:08:51,985 INFO [TomcatDeployer] deploy, ctxPath=/jbossws, warUrl=.../deploy/jbossws.sar/jbossws-context.war/
    16:08:52,229 WARN [SecurityCollection] Suspicious url pattern: "/*" - see http://java.sun.com/aboutJava/communityprocess/first/jsr053/servlet23_PFD.pdf section 11.2
    16:08:52,351 INFO [TomcatDeployer] deploy, ctxPath=/jbossmq-httpil, warUrl=.../deploy/jms/jbossmq-httpil.sar/jbossmq-httpil.war/
    16:08:52,404 WARN [SecurityCollection] Suspicious url pattern: "/restricted/*" - see http://java.sun.com/aboutJava/communityprocess/first/jsr053/servlet23_PFD.pdf section 11.2
    16:08:52,649 INFO [MailService] Mail Service bound to java:/Mail
    16:08:54,008 INFO [RARDeployment] Required license terms exist, view META-INF/ra.xml in .../deploy/jboss-ha-local-jdbc.rar
    16:08:54,019 INFO [RARDeployment] Required license terms exist, view META-INF/ra.xml in .../deploy/jboss-ha-xa-jdbc.rar
    16:08:54,026 INFO [RARDeployment] Required license terms exist, view META-INF/ra.xml in .../deploy/jboss-local-jdbc.rar
    16:08:54,033 INFO [RARDeployment] Required license terms exist, view META-INF/ra.xml in .../deploy/jboss-xa-jdbc.rar
    16:08:54,048 INFO [RARDeployment] Required license terms exist, view META-INF/ra.xml in .../deploy/jms/jms-ra.rar
    16:08:54,056 INFO [RARDeployment] Required license terms exist, view META-INF/ra.xml in .../deploy/mail-ra.rar
    16:08:54,552 INFO [ConnectionFactoryBindingService] Bound ConnectionManager 'jboss.jca:service=DataSourceBinding,name=DefaultDS' to JNDI name 'java:DefaultDS'
    16:08:54,692 INFO [ConnectionFactoryBindingService] Bound ConnectionManager 'jboss.jca:service=DataSourceBinding,name=auditDbDataSource' to JNDI name 'java:auditDbDataSource'
    16:08:54,716 INFO [ConnectionFactoryBindingService] Bound ConnectionManager 'jboss.jca:service=DataSourceBinding,name=jdbc/imquartz' to JNDI name 'java:jdbc/imquartz'
    16:08:54,737 INFO [ConnectionFactoryBindingService] Bound ConnectionManager 'jboss.jca:service=DataSourceBinding,name=jdbc/idm' to JNDI name 'java:jdbc/idm'
    16:08:54,757 INFO [ConnectionFactoryBindingService] Bound ConnectionManager 'jboss.jca:service=DataSourceBinding,name=jdbc/WPDS' to JNDI name 'java:jdbc/WPDS'
    16:08:54,795 INFO [ConnectionFactoryBindingService] Bound ConnectionManager 'jboss.jca:service=ConnectionFactoryBinding,name=ActivemqJms' to JNDI name 'ActivemqJms'
    16:08:54,820 INFO [ConnectionFactoryBindingService] Bound ConnectionManager 'jboss.jca:service=ConnectionFactoryBinding,name=JmsXA' to JNDI name 'java:JmsXA'
    16:08:54,846 INFO [ConnectionFactoryBindingService] Bound ConnectionManager 'jboss.jca:service=DataSourceBinding,name=jdbc/objectstore' to JNDI name 'java:jdbc/objectstore'
    16:09:55,034 WARN [JBossManagedConnectionPool] Throwable while attempting to get a new connection: null
    org.jboss.resource.JBossResourceException: Could not create connection; - nested throwable: (java.sql.SQLRecoverableException: IO Error: The Network Adapter could not establish the connection)
    at org.jboss.resource.adapter.jdbc.local.LocalManagedConnectionFactory.createManagedConnection(LocalManagedConnectionFactory.java:190)
    at org.jboss.resource.connectionmanager.InternalManagedConnectionPool.createConnectionEventListener(InternalManagedConnectionPool.java:619)
    at org.jboss.resource.connectionmanager.InternalManagedConnectionPool.getConnection(InternalManagedConnectionPool.java:264)
    at org.jboss.resource.connectionmanager.JBossManagedConnectionPool$BasePool.getConnection(JBossManagedConnectionPool.java:575)
    at org.jboss.resource.connectionmanager.BaseConnectionManager2.getManagedConnection(BaseConnectionManager2.java:347)
    at org.jboss.resource.connectionmanager.BaseConnectionManager2.getManagedConnection(BaseConnectionManager2.java:332)
    at org.jboss.resource.connectionmanager.BaseConnectionManager2.allocateConnection(BaseConnectionManager2.java:402)
    at org.jboss.resource.connectionmanager.BaseConnectionManager2$ConnectionManagerProxy.allocateConnection(BaseConnectionManager2.java:849)
    at org.jboss.resource.adapter.jdbc.WrapperDataSource.getConnection(WrapperDataSource.java:89)
    at org.jboss.mq.pm.jdbc2.PersistenceManager.getConnection(PersistenceManager.java:1722)
    at org.jboss.mq.pm.jdbc2.PersistenceManager.createSchema(PersistenceManager.java:268)
    at org.jboss.mq.pm.jdbc2.PersistenceManager.startService(PersistenceManager.java:1829)
    at org.jboss.system.ServiceMBeanSupport.jbossInternalStart(ServiceMBeanSupport.java:289)
    at org.jboss.system.ServiceMBeanSupport.jbossInternalLifecycle(ServiceMBeanSupport.java:245)
    at sun.reflect.GeneratedMethodAccessor3.invoke(Unknown Source)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
    at java.lang.reflect.Method.invoke(Method.java:498)
    at org.jboss.mx.interceptor.ReflectedDispatcher.invoke(ReflectedDispatcher.java:155)
    at org.jboss.mx.server.Invocation.dispatch(Invocation.java:94)
    at org.jboss.mx.server.Invocation.invoke(Invocation.java:86)
    at org.jboss.mx.server.AbstractMBeanInvoker.invoke(AbstractMBeanInvoker.java:264)
    at org.jboss.mx.server.MBeanServerImpl.invoke(MBeanServerImpl.java:659)
    at org.jboss.system.ServiceController$ServiceProxy.invoke(ServiceController.java:978)
    at com.sun.proxy.$Proxy0.start(Unknown Source)
    at org.jboss.system.ServiceController.start(ServiceController.java:417)
    at org.jboss.system.ServiceController.start(ServiceController.java:435)
    at org.jboss.system.ServiceController.start(ServiceController.java:435)
    at org.jboss.system.ServiceController.start(ServiceController.java:435)
    at org.jboss.system.ServiceController.start(ServiceController.java:435)
    at sun.reflect.GeneratedMethodAccessor12.invoke(Unknown Source)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
    at java.lang.reflect.Method.invoke(Method.java:498)
    at org.jboss.mx.interceptor.ReflectedDispatcher.invoke(ReflectedDispatcher.java:155)
    at org.jboss.mx.server.Invocation.dispatch(Invocation.java:94)
    at org.jboss.mx.server.Invocation.invoke(Invocation.java:86)
    at org.jboss.mx.server.AbstractMBeanInvoker.invoke(AbstractMBeanInvoker.java:264)
    at org.jboss.mx.server.MBeanServerImpl.invoke(MBeanServerImpl.java:659)
    at org.jboss.mx.util.MBeanProxyExt.invoke(MBeanProxyExt.java:210)
    at com.sun.proxy.$Proxy4.start(Unknown Source)
    at org.jboss.deployment.SARDeployer.start(SARDeployer.java:304)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
    at java.lang.reflect.Method.invoke(Method.java:498)
    at org.jboss.mx.interceptor.ReflectedDispatcher.invoke(ReflectedDispatcher.java:155)
    at org.jboss.mx.server.Invocation.dispatch(Invocation.java:94)
    at org.jboss.mx.interceptor.AbstractInterceptor.invoke(AbstractInterceptor.java:133)
    at org.jboss.mx.server.Invocation.invoke(Invocation.java:88)
    at org.jboss.mx.interceptor.ModelMBeanOperationInterceptor.invoke(ModelMBeanOperationInterceptor.java:142)
    at org.jboss.mx.server.Invocation.invoke(Invocation.java:88)
    at org.jboss.mx.server.AbstractMBeanInvoker.invoke(AbstractMBeanInvoker.java:264)
    at org.jboss.mx.server.MBeanServerImpl.invoke(MBeanServerImpl.java:659)
    at org.jboss.mx.util.MBeanProxyExt.invoke(MBeanProxyExt.java:210)
    at com.sun.proxy.$Proxy42.start(Unknown Source)
    at org.jboss.deployment.XSLSubDeployer.start(XSLSubDeployer.java:197)
    at org.jboss.deployment.MainDeployer.start(MainDeployer.java:1025)
    at org.jboss.deployment.MainDeployer.deploy(MainDeployer.java:819)
    at org.jboss.deployment.MainDeployer.deploy(MainDeployer.java:782)
    at sun.reflect.GeneratedMethodAccessor24.invoke(Unknown Source)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
    at java.lang.reflect.Method.invoke(Method.java:498)
    at org.jboss.mx.interceptor.ReflectedDispatcher.invoke(ReflectedDispatcher.java:155)
    at org.jboss.mx.server.Invocation.dispatch(Invocation.java:94)
    at org.jboss.mx.interceptor.AbstractInterceptor.invoke(AbstractInterceptor.java:133)
    at org.jboss.mx.server.Invocation.invoke(Invocation.java:88)
    at org.jboss.mx.interceptor.ModelMBeanOperationInterceptor.invoke(ModelMBeanOperationInterceptor.java:142)
    at org.jboss.mx.server.Invocation.invoke(Invocation.java:88)
    at org.jboss.mx.server.AbstractMBeanInvoker.invoke(AbstractMBeanInvoker.java:264)
    at org.jboss.mx.server.MBeanServerImpl.invoke(MBeanServerImpl.java:659)
    at org.jboss.mx.util.MBeanProxyExt.invoke(MBeanProxyExt.java:210)
    at com.sun.proxy.$Proxy9.deploy(Unknown Source)
    at org.jboss.deployment.scanner.URLDeploymentScanner.deploy(URLDeploymentScanner.java:421)
    at org.jboss.deployment.scanner.URLDeploymentScanner.scan(URLDeploymentScanner.java:634)
    at org.jboss.deployment.scanner.AbstractDeploymentScanner$ScannerThread.doScan(AbstractDeploymentScanner.java:263)
    at org.jboss.deployment.scanner.AbstractDeploymentScanner.startService(AbstractDeploymentScanner.java:336)
    at org.jboss.system.ServiceMBeanSupport.jbossInternalStart(ServiceMBeanSupport.java:289)
    at org.jboss.system.ServiceMBeanSupport.jbossInternalLifecycle(ServiceMBeanSupport.java:245)
    at sun.reflect.GeneratedMethodAccessor3.invoke(Unknown Source)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
    at java.lang.reflect.Method.invoke(Method.java:498)
    at org.jboss.mx.interceptor.ReflectedDispatcher.invoke(ReflectedDispatcher.java:155)
    at org.jboss.mx.server.Invocation.dispatch(Invocation.java:94)
    at org.jboss.mx.server.Invocation.invoke(Invocation.java:86)
    at org.jboss.mx.server.AbstractMBeanInvoker.invoke(AbstractMBeanInvoker.java:264)
    at org.jboss.mx.server.MBeanServerImpl.invoke(MBeanServerImpl.java:659)
    at org.jboss.system.ServiceController$ServiceProxy.invoke(ServiceController.java:978)
    at com.sun.proxy.$Proxy0.start(Unknown Source)
    at org.jboss.system.ServiceController.start(ServiceController.java:417)
    at sun.reflect.GeneratedMethodAccessor12.invoke(Unknown Source)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
    at java.lang.reflect.Method.invoke(Method.java:498)
    at org.jboss.mx.interceptor.ReflectedDispatcher.invoke(ReflectedDispatcher.java:155)
    at org.jboss.mx.server.Invocation.dispatch(Invocation.java:94)
    at org.jboss.mx.server.Invocation.invoke(Invocation.java:86)
    at org.jboss.mx.server.AbstractMBeanInvoker.invoke(AbstractMBeanInvoker.java:264)
    at org.jboss.mx.server.MBeanServerImpl.invoke(MBeanServerImpl.java:659)
    at org.jboss.mx.util.MBeanProxyExt.invoke(MBeanProxyExt.java:210)
    at com.sun.proxy.$Proxy4.start(Unknown Source)
    at org.jboss.deployment.SARDeployer.start(SARDeployer.java:304)
    at org.jboss.deployment.MainDeployer.start(MainDeployer.java:1025)
    at org.jboss.deployment.MainDeployer.deploy(MainDeployer.java:819)
    at org.jboss.deployment.MainDeployer.deploy(MainDeployer.java:782)
    at org.jboss.deployment.MainDeployer.deploy(MainDeployer.java:766)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
    at java.lang.reflect.Method.invoke(Method.java:498)
    at org.jboss.mx.interceptor.ReflectedDispatcher.invoke(ReflectedDispatcher.java:155)
    at org.jboss.mx.server.Invocation.dispatch(Invocation.java:94)
    at org.jboss.mx.interceptor.AbstractInterceptor.invoke(AbstractInterceptor.java:133)
    at org.jboss.mx.server.Invocation.invoke(Invocation.java:88)
    at org.jboss.mx.interceptor.ModelMBeanOperationInterceptor.invoke(ModelMBeanOperationInterceptor.java:142)
    at org.jboss.mx.server.Invocation.invoke(Invocation.java:88)
    at org.jboss.mx.server.AbstractMBeanInvoker.invoke(AbstractMBeanInvoker.java:264)
    at org.jboss.mx.server.MBeanServerImpl.invoke(MBeanServerImpl.java:659)
    at org.jboss.mx.util.MBeanProxyExt.invoke(MBeanProxyExt.java:210)
    at com.sun.proxy.$Proxy5.deploy(Unknown Source)
    at org.jboss.system.server.ServerImpl.doStart(ServerImpl.java:482)
    at org.jboss.system.server.ServerImpl.start(ServerImpl.java:362)
    at org.jboss.Main.boot(Main.java:200)
    at org.jboss.Main$1.run(Main.java:508)
    at java.lang.Thread.run(Thread.java:745)
    Caused by: java.sql.SQLRecoverableException: IO Error: The Network Adapter could not establish the connection

     

     

    Some idea for this ?



  • 4.  Re: CA PAM SC - Database movement left out the application
    Best Answer

    Broadcom Employee
    Posted Jun 21, 2018 03:09 AM

    Hi Julian

    The error seems indicative of failure to contact the oracle server at the specified service url. I gather following the documentation you configured

     

    <connection-url>jdbc:sqlserver://HOSTNAME.DOMAIN.COM:1433;selectMethod=cursor;DatabaseName=DBNAME</connection-url>

     

    in several files. I think you should verify that you can connect to the specified server/port and database. The java error indicates such connection can't be established. There may be multiple reasons for this, like for instance firewalls in the middle, typos in url, server not started... dfficult to say, but the starting point is making sure the DB is reachable and is listening on the specified port/url