CA Service Management

  • 1.  Request Tickets access Error

    Posted Jul 27, 2018 06:41 AM

    Hi Team

     

    We are having issue while accessing Request Tickets from search-->Requests--> Search and getting error "Request forbidden by administrative rules." This is happening with accessing only Request tickets.However if we search request ticket from scoreboard , we are able to see all the request tickets. 

     

     

     

    We are running sdm 17.1 AA mode with 2 app servers and we have Loadbalancer configured infront of app servers. We also noticed that this issue only with while accessing servicedesk with HTTPS url. If we access servicedesk using appserver hostname using http then there is no issue while accessing request tickets.

     

    I can see one of my app server logs repeating this many time...see below

     

    Please advise

     

    07/27 15:17:31.25 C01ISB-SDM slump_nxd 4400 SIGNIFICANT ping_port.c 557 Node Ping: Resetting arbritrator value as we have duplicate with node (10.**5.2**.**)
    07/27 15:17:46.25 C01ISB-SDM slump_nxd 4400 SIGNIFICANT ping_port.c 557 Node Ping: Resetting arbritrator value as we have duplicate with node (10.**5.2**.**)
    07/27 15:18:01.25 C01ISB-SDM slump_nxd 4400 SIGNIFICANT ping_port.c 557 Node Ping: Resetting arbritrator value as we have duplicate with node (10.**5.2**.**)
    07/27 15:18:16.25 C01ISB-SDM slump_nxd 4400 SIGNIFICANT ping_port.c 557 Node Ping: Resetting arbritrator value as we have duplicate with node (10.**5.2**.**)
    07/27 15:18:31.25 C01ISB-SDM slump_nxd 4400 SIGNIFICANT ping_port.c 557 Node Ping: Resetting arbritrator value as we have duplicate with node (10.**5.2**.**)

     

     

     

     

     



  • 2.  Re: Request Tickets access Error

    Broadcom Employee
    Posted Jul 30, 2018 12:06 PM

    Hi Aamir,

    Would you be able to verify the settings in the doc below:

    HTTP Error 403 - Forbidden: Access is denied. - CA Knowledge 

     

    If that is set properly try running an "iisreset" command.

     

    If you are still facing issues I would recommend opening a standard case for further investigation.

     

    Thanks,

    Scott



  • 3.  Re: Request Tickets access Error

    Posted Aug 01, 2018 08:51 AM

    Hi Johsc

     

    I do not see 'web service extension' & 'internet information services' in IIS manager as mentioned in document. Also please note we are accessing sdm url with https using 8080 port.

     



  • 4.  Re: Request Tickets access Error

    Broadcom Employee
    Posted Aug 01, 2018 10:20 AM

    This is under "ISAPI and CGI Restrictions" in IIS7 and later.



  • 5.  Re: Request Tickets access Error

    Posted Aug 02, 2018 06:05 AM

    Hi Johsc

     

    see below snapshot, Unicentre already allowed but i cannot see 'Internet Information Service' under IIS Manager.

     

    Please advise

     

     



  • 6.  Re: Request Tickets access Error

    Broadcom Employee
    Posted Aug 03, 2018 09:08 AM

    Hey Aamir,

     

    What load balancer are you using, it seems to me that some characters in the URL that your Search Request  query is creating, is being denied by the LB.

     

     

    _R



  • 7.  Re: Request Tickets access Error

    Posted Aug 03, 2018 10:35 AM

    Hi Raghu

     

    Fortinet loadbalance we are using

     

    On Fri, Aug 3, 2018, 6:08 PM Raghu.Rudraraju <



  • 8.  Re: Request Tickets access Error

    Broadcom Employee
    Posted Aug 03, 2018 12:07 PM

    Hey Aamir,

     

    https://www.google.com/search?q=Fortinet+Request+forbidden+by+administrative+rules&oq=Fortinet+Request+forbidden+by+admi… 

     

    Maybe there's a custom re-write / protection rules that are causing this error.  I'd advise engaging your Fortinet admin on this for them to trace the call and see why

     

    _R