2 Replies Latest reply on Sep 12, 2016 2:28 PM by Brian Engel

    SCAP 16,018 Error

    Brian Engel

      While running SCAP compliance on our servers we have about 130 or so that are failing. In the logs it shows the following:

      Info09/12/2016 12:54:47OVAL interpreter execution complete on server: <hostname>, exitCode: 16,018

       

       

      Error09/12/2016 12:54:47OVAL interpreter execution completed unexpectedly on server <hostname>
      Error09/12/2016 12:54:47The job 'Windows 2012 SCAP Compliance' has failed

       

      In talking to BMC we are told that this is due to either .NET 4 not being on or the agent needing re-installed. I ran .NET 4 compliance on the group that was failing and about 30 of them failed for .NET. I installed .NET 4 on those boxes, re-ran SCAP and they passed. So now I am down to about 100 boxes still failing. I tried uninstalling the agent on one of them and that required a reboot. After the reboot I reinstalled the agent. I then re-ran SCAP and got this:

      Error09/09/2016 15:02:20Error while running OVAL interpreter on server: <hostname>,2,052,318, Error: Failed to create agent side directory: //<hostname>/C/Program Files/BMC Software/BladeLogic/RSCD/tmp/SCAPCompliance_2061885_2978771_<hostname>,Error: JNI mkdirs of '//<hostname>/C/Program Files/BMC Software/BladeLogic/RSCD/tmp/SCAPCompliance_2061885_2978771_<hostname>' failed: : Permission denied
      Error09/09/2016 15:02:22The job 'Windows 2012 SCAP Compliance' has failed

       

      In seeing the "Permission Denied" i thought to copy over users.local, users, and exports files that we have on all of our servers. I then re-ran compliance and got the 16,018 error again.

       

      Really looking for ideas here.

        • 1. Re: SCAP 16,018 Error
          Bill Robinson

          what's in the rscd log when this happens?  what local account are you mapped to?

          • 2. Re: SCAP 16,018 Error
            Brian Engel

            09/12/16 14:04:21.166 INFO     rscd -  <HOSTNAME> 1448 SYSTEM (Not_available): (Not_available): FIPS already enabled

            09/12/16 14:04:21.166 INFO     rscd -  <HOSTNAME> 1448 SYSTEM (Not_available): (Not_available): Agent version is 8.7.00.263

            09/12/16 14:04:21.197 INFO     rscd -  <HOSTNAME> 1448 SYSTEM (Not_available): (Not_available): OS VERSION By Major=6.3

            09/12/16 14:04:21.197 INFO     rscd -  <HOSTNAME> 1448 SYSTEM (Not_available): (Not_available): The operation completed successfully. 

            09/12/16 14:04:21.197 INFO     rscd -  <HOSTNAME> 1448 SYSTEM (Not_available): (Not_available): Platform Details: x86_64;<HOSTNAME>;6.3;WindowsNT;9200;x86_64

            09/12/16 14:04:21.229 INFO     rscd -  <HOSTNAME> 1448 SYSTEM (Not_available): (Not_available): Main: **** RSCD started (app) ****

            09/12/16 14:04:21.229 INFO     rscd -  <HOSTNAME> 3420 SYSTEM (Not_available): (Not_available): User Privilege Mapping enabled.

            09/12/16 14:04:21.229 INFO     rscd -  <HOSTNAME> 3420 SYSTEM (Not_available): (Not_available): The following local user will be used by the agent for user privilege mapping: BladeLogicRSCD

            09/12/16 14:04:21.229 INFO     rscd -  <HOSTNAME> 3420 SYSTEM (Not_available): (Not_available): Adding account right "SeDenyInteractiveLogonRight" to user BladeLogicRSCD@<HOSTNAME> for user privilege mapping

            09/12/16 14:07:31.864 ERROR    rscd -  <HOSTNAME> 2376 SYSTEM (Not_available): (Not_available): Zero length returned in bl_openssl_io_from_file

            09/12/16 14:14:21.778 INFO     rscd -  <HOSTNAME> 1448 SYSTEM (Not_available): (Not_available): Main: Starting AgentHouseKeeping.

            09/12/16 14:24:21.811 INFO     rscd -  <HOSTNAME> 1448 SYSTEM (Not_available): (Not_available): Main: Starting AgentHouseKeeping.

             

            Mapped to the local default admin account on the server that has been renamed.