AutoSys Workload Automation

Hi Autosys Experts, How do I clear the DNS cache while restarting dxserver processes in EEM.. Restarting the processes keeps using the cahced data.

Hi Guruprasad,

Can you give an example? Is it the DXserver peers' hostname you are referring to? Have you tried bouncing the nscd if it's on Linux/UNIX or flushdns for Windows?

Cheers,

Chandru

Hi Guruprasad,

Autosys is configured by default to cache the DNS settings of the server. To change this default behavior, adjust the networkaddress.ttl setting in the java.security file.

Follow these steps:

Navigate to the directory %JAVA_HOME%\lib\security

Open the java.security file.

Set the networkaddress.cache.ttl parameter to a positive integer. For example, networkaddress.cache.ttl=2

Specifies the duration, in seconds, for which the WAAE caches the successful DNS name look-ups. Enter a positive integer.

Here is the detail From java.security file

# The Java-level namelookup cache policy for successful lookups:

#

# any negative value: caching forever

# any positive value: the number of seconds to cache an address for

# zero: do not cache

#

# default value is forever (FOREVER). For security reasons, this

# caching is made forever when a security manager is set. When a security

# manager is not set, the default behavior in this implementation

# is to cache for 30 seconds.

#

# NOTE: setting this to anything other than the default value can have

# serious security implications. Do not set it unless

# you are sure you are not exposed to DNS spoofing attack.

#

#networkaddress.cache.ttl=-1

# The Java-level namelookup cache policy for failed lookups:

#

# any negative value: cache forever

# any positive value: the number of seconds to cache negative lookup results

# zero: do not cache

#

# In some Microsoft Windows networking environments that employ

# the WINS name service in addition to DNS, name service lookups

# that fail may take a noticeably long time to return (approx. 5 seconds).

# For this reason the default caching policy is to maintain these

# results for 10 seconds.

#

#

networkaddress.cache.negative.ttl=10

by the way I found the following helpful information

To remove all LDAP caching:

there are some adjustable parameters documented at the following link:

https://docops.ca.com/ca-api-gateway/8-3/en/reference/cluster-properties/credential-caching-cluster-properties

Set the following parameters to 0 could help

authCache.failureCacheSize

authCache.successCacheSize

Restart the Gateway

Please let us know if this help

Thanks and warm regards,

Faouzia

Thank you Chandru and Faouzia!

I see below entry in iPoz log:

06/27/18 10:30:39: ERROR: [0xebff7b70] iPoz::Cache::authenticate: Error authenticating with [CN=<accountname>,OU=Users,OU=<domain>,DC=<domain>,DC=<abc>,DC=<xyz>,DC=com]. ldap_simple_bind_s returned [49]. Description of error [Invalid credentials], LDAP_OPT_ERROR_STRING = [80090308: LdapErr: DSID-0C09042F, comment: AcceptSecurityContext error, data 775, v2580]

I don't see how DNS comes into picture here? It appears you are referring to the User DN used to bind EEM to LDAP? This should be updated from within EEM Configuration User store.

Hi Guruprasad_Kulkarni,
Was the information provided by Chandru helpful in resolving your question? Or are you still experiencing issue?

Hi Guruprasad,,

Is the information I provided above suits your need and can help on resolving your question.

Thanks and warm regards,

faouzia

Guruprasad,

We would appreciate if you could update the thread. Are you still looking for help here or already addressed it?

Thanks,

Chandru

Thank you Chandru/Faouzia/Luu Le,

I was required to restart the EEM processes (multiple times) to get this resolved.

Chandru,

How do I update user info from EEM configuration User Store? I was trying from "Admin" tab in WCC, and that wasnt very successful.

Regards

Guru

Hi Guruprasad,

You need to set up the User Store in the EEM UI -> Global application -> Configure -> User Store -> Reference from an external LDAP Directory.

I hope this helps.

Thanks,

Chandru

Guruprasad

Are you all set with the EEM LDAP/AD bind?