1 Reply Latest reply on Dec 1, 2012 1:09 PM by Bill Robinson

    Compliance Remediation deploy job failng with Exit code = -4001

    Shankar Masekar

      Hello Everyone,

       

      I’m trying to run compliance remediation on one of the with Windows 2008 server with CIS component template. The compliance Discover & analysis is completed succsfully on the server but failing while running ALL no compliance remediation BLDeploy job at the commit stage.

       

      Please see below errors for more details…

       

      Compliance Remediation package Deploy Job Log….

      Info        Nov 30, 2012 5:08:18 AM               The job 'CIS Windows 2008 - windows2008 @2012-11-28 14:15:58:125-0500->CIS Windows 2008 - windows2008 @2012-11-28 14:15:58:125-0500' has failed on server windows2008                            

      Error      Nov 30, 2012 5:08:18 AM               APPLY failed for server windows2008. Exit code = -4001                

      Info        Nov 30, 2012 5:08:12 AM               Package "CIS Windows 2008 - windows2008(windows2008)-3.1 @2012-11-28 14-15-43-422-0500" UUID(65ddcaeb1eee350b822eeb56886927db) completed. exitCode = -4001 (Apply failed; auto-rollback successful)                         

      Warning               Nov 30, 2012 5:08:11 AM               Deploy failed. Cleaning up staging area.

      Warning               Nov 30, 2012 5:08:11 AM               Deploy failed. Cleaning up staging area.                

      Info        Nov 30, 2012 5:08:11 AM               Undo succeeded                             

      Info        Nov 30, 2012 5:08:04 AM               Sending request to refresh security settings. The refresh will take a few minutes.

                      1              Security Settings\Account Policies\Password Policy

      Info        Nov 30, 2012 5:08:03 AM               Processing asset SECURITYCATEGORY

                      1              Security Settings\Account Policies\Password Policy

      Info        Nov 30, 2012 5:07:56 AM               Sending request to refresh security settings. The refresh will take a few minutes.

                      2              Security Settings\Account Policies\Password Policy

      Info        Nov 30, 2012 5:07:55 AM               Processing asset SECURITYCATEGORY

                      2              Security Settings\Account Policies\Password Policy

      Info        Nov 30, 2012 5:07:48 AM               Sending request to refresh security settings. The refresh will take a few minutes.

                      3              Security Settings\Account Policies\Account Lockout Policy

      Info        Nov 30, 2012 5:07:47 AM               Package "CIS Windows 2008 - windows2008(windows2008)-3.1 @2012-11-28 14-15-43-422-0500" UUID(65ddcaeb1eee350b822eeb56886927db) auto-rollback on failure started                       

      Info        Nov 30, 2012 5:07:47 AM               Processing asset SECURITYCATEGORY

                      3              Security Settings\Account Policies\Account Lockout Policy

      Info        Nov 30, 2012 5:07:47 AM               Processing asset BLPACKAGE                   

      Info        Nov 30, 2012 5:07:47 AM               Starting undo                    

      Error      Nov 30, 2012 5:07:47 AM               Apply failed: id = 3          3              Security Settings\Account Policies\Account Lockout Policy

      Info        Nov 30, 2012 5:07:41 AM               Sending request to refresh security settings. The refresh will take a few minutes.

                      3              Security Settings\Account Policies\Account Lockout Policy

      Warning               Nov 30, 2012 5:07:41 AM               Update security database returned error code: 1

                      3              Security Settings\Account Policies\Account Lockout Policy

      Info        Nov 30, 2012 5:07:40 AM               Processing asset SECURITYCATEGORY

                      3              Security Settings\Account Policies\Account Lockout Policy

      Info        Nov 30, 2012 5:07:33 AM               Sending request to refresh security settings. The refresh will take a few minutes.

                      2              Security Settings\Account Policies\Password Policy

      Info        Nov 30, 2012 5:07:31 AM               Processing asset SECURITYCATEGORY

                      2              Security Settings\Account Policies\Password Policy

      Info        Nov 30, 2012 5:07:25 AM               Sending request to refresh security settings. The refresh will take a few minutes.

                      1              Security Settings\Account Policies\Password Policy

      Info        Nov 30, 2012 5:07:24 AM               Package "CIS Windows 2008 - windows2008(windows2008)-3.1 @2012-11-28 14-15-43-422-0500" UUID(65ddcaeb1eee350b822eeb56886927db) processing instructions                       

      Info        Nov 30, 2012 5:07:24 AM               Package "CIS Windows 2008 - windows2008(windows2008)-3.1 @2012-11-28 14-15-43-422-0500" UUID(65ddcaeb1eee350b822eeb56886927db) initialized, entering wait queue for processing                         

      Info        Nov 30, 2012 5:07:23 AM               Processing asset SECURITYCATEGORY

                      1              Security Settings\Account Policies\Password Policy

      Info        Nov 30, 2012 5:07:23 AM               Processing asset BLPACKAGE

                                     

      Info        Nov 30, 2012 5:07:23 AM               Starting apply

                                     

      Info        Nov 30, 2012 5:07:23 AM               Bldeploy "CIS Windows 2008 - windows2008(windows2008)-3.1 @2012-11-28 14-15-43-422-0500" UUID(65ddcaeb1eee350b822eeb56886927db) started using file C:\temp\stage\e8f472879d243cddb0d1cdcc36f8c4e9\bldeploy.xml with rollback directory C:\Program Files\BMC Software\BladeLogic\RSCD\\Transactions\65ddcaeb1eee350b822eeb56886927db

                                     

      Info        Nov 30, 2012 5:07:21 AM               Package "CIS Windows 2008 - windows2008(windows2008)-3.1 @2012-11-28 14-15-43-422-0500" UUID(65ddcaeb1eee350b822eeb56886927db) started                       

      Info        Nov 30, 2012 5:07:19 AM               Deployment job not in single-job mode. Reboot is not allowed. Any reboot requests by certain file operations will be ignored.

                                     

      Info        Nov 30, 2012 5:07:18 AM               Started running the deploy step job 'CIS Windows 2008 - windows2008 @2012-11-28 14:15:58:125-0500->CIS Windows 2008 - windows2008 @2012-11-28 14:15:58:125-0500' on application server 'qdcws1782'(1) against target server 'windows2008'                        

      Info        Nov 30, 2012 5:07:18 AM               Deploy Apply Job (Pre-Execute):CIS Windows 2008 - windows2008 @2012-11-28 14:15:58:125-0500; Server:windows2008;  PkgID:"17a68709-199e-45e4-b505-487d7d1a09ab-2423.9"; UUID:65ddcaeb1eee350b822eeb56886927db                    

       

       

       

      Application Server log….

       

      30 Nov 2012 05:08:20,273] [SSL-Connections-Thread-6] [INFO] [Anonymous:Anonymous:156.30.152.3] [Client] Connection disconnecting: id = 121493

      [30 Nov 2012 05:08:20,773] [Job-Execution-4] [INFO] [BLAdmin:BLAdmins:] [Deploy] Phase: Commit completed with errors for target: windows2008

      [30 Nov 2012 05:08:20,773] [Job-Execution-4] [ERROR] [BLAdmin:BLAdmins:] [Deploy] The job 'CIS Windows 2008 - windows2008 @2012-11-28 14:15:58:125-0500' has failed

      [30 Nov 2012 05:08:20,944] [Authentication-Service-Thread-1] [WARN] [::156.30.152.2] [Appserver] Connection closed by /156.30.152.2:59253 before pre-authentication handshake could be completed.

      [30 Nov 2012 05:08:20,944] [Authentication-Service-Thread-1] [INFO] [::156.30.152.2] [Appserver] Authentication Connection closed

      [30 Nov 2012 05:08:21,335] [SSL-Connections-Thread-4] [WARN] [Anonymous:Anonymous:156.30.152.2] [Client] Error authorizing the connect

      1. com.bladelogic.om.infra.mfw.util.BlException: javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake

                      at com.bladelogic.om.infra.mfw.net.SSLServerConnection.doHandshake(SSLServerConnection.java:36)

                      at com.bladelogic.om.infra.mfw.net.ClientWorkerThread.handleNewConnection(ClientWorkerThread.java:144)

                      at com.bladelogic.om.infra.mfw.net.ClientWorkerThread.execute(ClientWorkerThread.java:97)

                      at com.bladelogic.om.infra.mfw.net.ClientWorkerThread.execute(ClientWorkerThread.java:27)

                      at com.bladelogic.om.infra.app.service.thread.BlBlockingThread.run(BlBlockingThread.java:95)

      Caused by: javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake

                      at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(Unknown Source)

                      at com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(Unknown Source)

                      at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(Unknown Source)

                      at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(Unknown Source)

                      at com.bladelogic.om.infra.mfw.net.SSLServerConnection.doHandshake(SSLServerConnection.java:32)

                      ... 4 more

      Caused by: java.io.EOFException: SSL peer shut down incorrectly

                      at com.sun.net.ssl.internal.ssl.InputRecord.read(Unknown Source)

                      ... 9 more

       

       

      Can someone help me trace the cause of the issue & fix it.

       

       

      Thanks,

      Shankar