1 2 Previous Next 26 Replies Latest reply on Nov 14, 2019 12:34 AM by Sayan Banerjee Go to original post
      • 15. Re: Patrol Agent v11.3.02 Failed to connect Integration Service
        Oliver Biermann

        Hello,

        sorry I have not investigated the issue any further (comparison of the machine with the root installation and the non-root installation is still pending on my side). I just had not the time because of other projects. My new colleage in Berlin is involved, but he has only access to our demo environment where we cannot provide new VMs right now because of hardware failures, so he can just provide ideas (he has time, but no capable test environment, I do have a test environment but right now not enough time - typical situation). I hope to be able to do further investigation on this issue next week (from Tuesday 06.08.).

         

        Best regards,

        Oliver

        • 16. Re: Patrol Agent v11.3.02 Failed to connect Integration Service
          Stefan Hall

          Good to know, my goal is to bring BMC to a real analysis and then of course solve this error.

           

          Without a qualified ticket and good contacts this does not seem possible.

          • 17. Re: Patrol Agent v11.3.02 Failed to connect Integration Service
            Oliver Biermann

            Hi all,

            I compared my root installation and my non-root installation of TSIM and the missing /etc/patrol.d/_opt_bmc_TSIS_pw/ is the problem.

            In the non-root installation I have an error in /usr/pw/patrol/pis/logs/bppmpis-SA_DEFAULT-im04.ts.bmc.testlab.intern.errs:

             

            Mon Jul 22 05:58:23 PM 2019: ESS Error: ESS_Policy_InitSecurityPolicy() failed >-4<

            Mon Jul 22 05:58:23 PM 2019: ESS Error: Security policy is either missing or unreadable: /etc/patrol.d/_opt_bmc_tsim_pw/security_policy_v3.0/bppmpis.plc/common /etc/patrol.d/_opt_bmc_tsim_pw/security_policy_v3.0/bppmpis.plc/server /etc/patrol.d/_opt_bmc_tsim_pw/security_policy_v3.0/bppmpis.plc/common /etc/patrol.d/_

            opt_bmc_tsim_pw/security_policy_v3.0/bppmpis.plc/server >-4<

            Mon Jul 22 05:58:23 PM 2019: ESS Error: ESS_Policy_InitSecurityPolicy() failed >-4<

            Mon Jul 22 05:58:23 PM 2019: ESS Error: Security policy is either missing or unreadable: /etc/patrol.d/_opt_bmc_tsim_pw/security_policy_v3.0/bppmpis.plc/common /etc/patrol.d/_opt_bmc_tsim_pw/security_policy_v3.0/bppmpis.plc/encryptor /etc/patrol.d/_opt_bmc_tsim_pw/security_policy_v3.0/bppmpis.plc/common /etc/patrol.

            d/_opt_bmc_tsim_pw/security_policy_v3.0/bppmpis.plc/encryptor >-4<

            Mon Jul 22 05:58:23 PM 2019: Binding sadapter to TCP port 3183

            Mon Jul 22 05:58:37 PM 2019: Session `T:103.39654@::ffff:172.16.2.253' rejected. Client request was in the wrong Security Domain

             

            That indicates, that the PatrolAgent is rejected because the Patrol Integration Service could not verify the Patrol Security Policies on TSIM.

             

            After copying the files from the root installation to the non-root installation the Patrol Integration Service is working and the PatrolAgent is visible under the TSIM. The Integration Service is shown as "Unknown:0" instead of "ProactiveServer" and marked as down, but I think that happened because I just copied over the security files and did not do a fresh install.

             

            I just looked at the installation documentation for non-root installation:

             

            To be able to perform the installation, a non-root user needs the following permissions:

            • Read, write, and execute permissions for: TrueSight Infrastructure Management installation directory, /var/tmp, /tmp, /usr, and usr/bin directories.
            • Execute permission for the /Linux/Disk1/setup.bin file.
            • Read and write permissions for the /opt/bmc directory.

            You can run the config_nonroot.sh script as a root user from the following location to give the non-root user the above required directory permissions

             

            So the documentation is not correct, because the Read, write and execute permissions for /etc is NOT mentioned there. Then /etc/patrol.d cannot be created and the security files for the integrated Patrol Integration Service are missing.

             

            Sadly my /tmp Filesystem got cleaned, so I cannot look at the installation logs anymore, maybe the errors are in it, but at the end the log stated, that the installation was successful, and that is not true, too.

             

            @BMC: Why does the installation not check if the requirements are met? Would be a nice improvement and would have saved a lot of work. At least the provided script config_nonroot.sh could set all permissions needed... also the file permissions after the non-root installation are almost everywhere 777, while a root installation is 755, I think there are some bugs in the installation or it is a combination of install and OS.

             

            @Andre Lemberg: Could you try to install again as non-root user but with permissions to /etc/patrol.d for the non-root user?

            Best regards,

            Oliver Biermann

            3 of 3 people found this helpful
            • 18. Re: Patrol Agent v11.3.02 Failed to connect Integration Service
              Robert Pidde

              Hello,

              thank you for your help. I work together with Andre Lemberg on his Case.

              Today I tried to install the TSIM with full right to the folder /etc/patrol.d for the non-root user.

              Unfortunately the installation did not create any data in /etc/patrol.d. As it seems I have to install with root for a working installation and then assign all permissions to the non-root user.

               

              Best Regards,

              Robert

              • 19. Re: Patrol Agent v11.3.02 Failed to connect Integration Service
                Sayan Banerjee

                Hello Oliver and Andre,

                 

                Thanks for updating us with all these details. We are following this thread closely and would like to investigate further on this. Can you please help us with the Case number raised with BMC support , it will help us work internally on this.

                 

                Regards

                Sayan Banerjee

                1 of 1 people found this helpful
                • 20. Re: Patrol Agent v11.3.02 Failed to connect Integration Service
                  Stefan Hall

                  Hi Sayan

                  the case number is 00727441, ignore the reinstall part. The impossible connection is the important topic

                  Thanks for your support

                  Stefan

                  • 21. Re: Patrol Agent v11.3.02 Failed to connect Integration Service
                    Sayan Banerjee

                    Hello Stefan,

                     

                    Thank you for this information. We will investigate internally and let you know more details on this.

                     

                    Regards

                    Sayan

                    1 of 1 people found this helpful
                    • 22. Re: Patrol Agent v11.3.02 Failed to connect Integration Service
                      Sayan Banerjee

                      Hello Stephen / Oliver / Andre,

                       

                      Thank you for the patience and working with us all along on this. Sorry about the delayed response , we were trying to verify things internally and test it before confirming and getting back to you. Please note we have tested the solution given to you over the support case and it works fine for us. We are planning to document the same so that customers can follow proper steps after non-root installation.

                      Meanwhile can you please let us know if we are good to close the support case now while you verify the steps locally in your planned testing time.

                       

                      Regards

                      Sayan Banerjee

                      1 of 1 people found this helpful
                      • 23. Re: Patrol Agent v11.3.02 Failed to connect Integration Service
                        Roland Pocek

                        hi Sayan Banerjee

                         

                        is there already an article how to fix this? having a customer with non root installation right now and cannot connect patrol agents to OOTB integration service

                         

                        thank you

                        1 of 1 people found this helpful
                        • 24. Re: Patrol Agent v11.3.02 Failed to connect Integration Service
                          Sayan Banerjee

                          Hello Roland,

                           

                          The steps to resolve this would be to run the excute the script located at /opt/bmc/TrueSight/pw/scripts/create_startup_script post-intsall with root priviliges

                          This script will create the product starup-script and copy bppmpis.plc and patrol,conf files to /etc/patrol.d directory.

                           

                          Regards

                          Sayan

                          2 of 2 people found this helpful
                          • 25. Re: Patrol Agent v11.3.02 Failed to connect Integration Service
                            Roland Pocek

                            many thanks Sayan Banerjee

                             

                            will there be a KB article also and documentation corrected? if so, please post article number for further use

                            • 26. Re: Patrol Agent v11.3.02 Failed to connect Integration Service
                              Sayan Banerjee

                              Hello Roland,

                               

                              Please find the same documented in the below link

                               

                              https://docs.bmc.com/docs/display/TSOMD113/Starting+and+stopping+the+TrueSight+Operations+Management+components

                               

                              Please check under the section "

                              Starting and stopping Infrastructure Management on Linux"

                              Regards

                              Sayan

                              1 2 Previous Next