1 2 Previous Next 20 Replies Latest reply on Aug 30, 2010 4:54 AM by satish surisetty

Failed job applying DISA STIG

Sean M. Carr Jul 6, 2009 7:38 AM

I'm having trouble applying the DISA STIG to my servers with BladeLogic. I get the following errors and then the job fails.

Error Jul 6, 2009 8:16:56 AM Apply failed for server %SERVERNAME%. Exit code = -4001
Error Jul 6, 2009 9:21:01 AM Apply failed: id = 31
31 Security Settings\Account Policies\Account Lockout Policy
Error Jul 6, 2009 9:21:02 AM Parsing of file 'C:\Program Files\BladeLogic\RSC\Transactions\STORES-STIG-2-@2009.07.06-07.13.09.440-0500-2030797.1-2050433.2\bldeploy.xml' failed at line 127: not well-formed (invalid token)

Error Jul 6, 2009 9:21:02 AM Caught exception 'Parsing of file failed. View Parser.log' while processing file 'C:\Program Files\BladeLogic\RSC\Transactions\STORES-STIG-2-@2009.07.06-07.13.09.440-0500-2030797.1-2050433.2\bldeploy.xml'

Error Jul 6, 2009 9:21:02 AM Apply failed, auto rollback failed.

Info Jul 6, 2009 8:15:07 AM Started running the deploy step job 'STORES STIG @2009-07-06 07:13:52:555-0500->STORES STIG @2009-07-06 07:13:52:555-0500 (Apply)' on application server 'blapp3_2JobServer'(2,023,000) against target server 'UMECHPRJ'
Info Jul 6, 2009 8:16:56 AM The job 'STORES STIG @2009-07-06 07:13:52:555-0500->STORES STIG @2009-07-06 07:13:52:555-0500 (Apply)' has failed on server UMECHPRJ
Warning Jul 6, 2009 9:19:27 AM Copy on reboot files present - ignoring

Warning Jul 6, 2009 9:21:01 AM Update security database returned error code: 1
31 Security Settings\Account Policies\Account Lockout Policy
Warning Jul 6, 2009 9:21:02 AM Deploy failed. Cleaning up staging area.

Warning Jul 6, 2009 9:21:02 AM Deploy failed. Cleaning up staging area.

I am running a job pointing to a component template created by BladeLogic. Any suggestions on how to resolve this would be appreciated. Thanks.

1. Re: Failed job applying DISA STIG

Adam Bowen Jul 6, 2009 8:52 AM (in response to Sean M. Carr)

Do you get this error when trying to apply to just the one rule, or when you are trying to remediate all?
Like Show 0 Likes(0)

Actions
2. Re: Failed job applying DISA STIG

Sean M. Carr Jul 6, 2009 8:53 AM (in response to Adam Bowen)

I get that when trying to remediate all.
Like Show 0 Likes(0)

Actions
3. Re: Failed job applying DISA STIG

Adam Bowen Jul 6, 2009 8:57 AM (in response to Sean M. Carr)

Can you run it again and check if it gives the same bit about "Security Settings\Account Policies\Account Lockout Policy?"
Like Show 0 Likes(0)

Actions
4. Re: Failed job applying DISA STIG

Sean M. Carr Jul 6, 2009 9:05 AM (in response to Adam Bowen)

I got something different this time, but it still errored out. I got id 29 instead of 31 on 3 of the 4 servers I attempted to apply it to. On the 4th server I got the same error.

Error Jul 6, 2009 9:56:05 AM Apply failed for server %SERVERNAME%. Exit code = -4001
Error Jul 6, 2009 11:00:13 AM Apply failed: id = 29
29 Security Settings\Account Policies\Account Lockout Policy
Info Jul 6, 2009 9:55:36 AM Started running the deploy step job 'STORES STIG @2009-07-06 07:13:52:555-0500->STORES STIG @2009-07-06 07:13:52:555-0500 (Apply)' on application server 'blapp3_1JobServer'(2,024,000) against target server '%SERVERNAME%
6, 2009 9:56:05 AM The job 'STORES STIG @2009-07-06 07:13:52:555-0500->STORES STIG @2009-07-06 07:13:52:555-0500 (Apply)' has failed on server %SERVERNAME%
l 6, 2009 11:00:13 AM Update security database returned error code: 1
29 Security Settings\Account Policies\Account Lockout Policy
Warning Jul 6, 2009 11:00:26 AM Deploy failed. Cleaning up staging area.

Warning Jul 6, 2009 11:00:26 AM Deploy failed. Cleaning up staging area.
Like Show 0 Likes(0)

Actions
5. Re: Failed job applying DISA STIG

Adam Bowen Jul 6, 2009 9:14 AM (in response to Sean M. Carr)

Can you export the job log and email it to me please?
Like Show 0 Likes(0)

Actions
6. Re: Failed job applying DISA STIG

Sean M. Carr Jul 6, 2009 9:17 AM (in response to Adam Bowen)

Will do.

Thanks Adam.
Like Show 0 Likes(0)

Actions
7. Re: Failed job applying DISA STIG

Adam Bowen Jul 6, 2009 9:35 AM (in response to Sean M. Carr)

Is this a server you have to test with? Or is this a "real" server?
Like Show 0 Likes(0)

Actions
8. Re: Failed job applying DISA STIG

Adam Bowen Jul 6, 2009 9:40 AM (in response to Sean M. Carr)

Can you export the job "STORES STIG @2009-07-06 07:13:52:555-0500" and send that to me? I do not think it should be very big.
Like Show 0 Likes(0)

Actions
9. Re: Failed job applying DISA STIG

Sean M. Carr Jul 6, 2009 9:42 AM (in response to Adam Bowen)

This is a new server for an incoming project. Its not live yet.
Like Show 0 Likes(0)

Actions
10. Re: Failed job applying DISA STIG

Sean M. Carr Jul 6, 2009 10:00 AM (in response to Sean M. Carr)

Adam,

I sent you the job, but I'm not sure if our email system will block it or not. Let me know if you got my email or not.
Like Show 0 Likes(0)

Actions
11. Re: Failed job applying DISA STIG

Adam Bowen Jul 6, 2009 11:52 AM (in response to Sean M. Carr)

I did get it. I will look at it shortly. Thanks Sean
Like Show 0 Likes(0)

Actions
12. Re: Failed job applying DISA STIG

Adam Bowen Jul 13, 2009 2:27 PM (in response to Adam Bowen)

Sean,
I actually wanted the STORES STIG @2009-07-06 07:13:52:555-0500 job. Can you send that to me as well?
Like Show 0 Likes(0)

Actions
13. Re: Failed job applying DISA STIG

Sean M. Carr Jul 13, 2009 2:37 PM (in response to Adam Bowen)

Adam,

I thought I sent that to you already. It should have been a zip file renamed to a txt file, unless the email system blocked it. When I export the job it creates a folder with two xmls (blexport.xml and mapping.xml) with a string of subfolders and another xml file (bldeploy.xml). Is that what you need or do you need something else?
Like Show 0 Likes(0)

Actions
14. Re: Failed job applying DISA STIG

Adam Bowen Jul 13, 2009 2:50 PM (in response to Sean M. Carr)

Yes, you sent me the right stuff. I was looking in another folder. My apologies.
Like Show 0 Likes(0)

Actions

1 2 Previous Next

Go to original post

Communities

Communities

Failed job applying DISA STIG

1. Re: Failed job applying DISA STIG

2. Re: Failed job applying DISA STIG

3. Re: Failed job applying DISA STIG

4. Re: Failed job applying DISA STIG

5. Re: Failed job applying DISA STIG

6. Re: Failed job applying DISA STIG

7. Re: Failed job applying DISA STIG

8. Re: Failed job applying DISA STIG

9. Re: Failed job applying DISA STIG

10. Re: Failed job applying DISA STIG

11. Re: Failed job applying DISA STIG

12. Re: Failed job applying DISA STIG

13. Re: Failed job applying DISA STIG

14. Re: Failed job applying DISA STIG

Actions

More Like This