Error: Could not contact the DSCC agent
Hi there,
The following situation:
Global Zone: un128tmp1 (10.128.13.232)
OS: Solaris 10 Sparc
App: SJS Shared Components installed
Sparse Zone: un128tmp2 (10.128.13.234)
App: Sun Web Console - DSCC
Sparse Zone: un128tmp3 (10.128.13.233)
App: Directory Server 6
I get the following error message on the DSCC web page (on un128tmp2):
Error occurred searching the certificates for the server. Could not contact the DSCC agent on un128tmp3. Use the command cacaoadm to check that the DSCC agent is installed and running on port 11162.
However the DSCC agentis running on un128tmp3:
# cacaoadm status
default instance is ENABLED at system startup.
Smf monitoring process:
14806
5987
Uptime: 1 day(s), 4:43
# netstat -an| grep 11162
*.11162 *.*00 491520 LISTEN
10.128.13.233.11162 10.128.13.234.37287 491520 491520 FIN_WAIT_2
10.128.13.233.11162 10.128.13.234.37289 491520 491520 FIN_WAIT_2
Running "cacaoadm restart" doesn't fix this either.
Does anyone have an idea what I could do to fix this issue?
Kind regards,
Ed
[url=http://img170.imageshack.us/img170/7427/dsccerrorvu5.png]Screenshot 1[/url]
[url=http://img372.imageshack.us/img372/2168/dsccerrorou9.png]Screenshot 2[/url]
[1399 byte] By [
Clogboya] at [2007-11-27 6:33:25]
# 1
It is possible that the cacao agent only listen on the localhost.
You can check using cacaoadm list-params, the network-bind-address should contain 0.0.0.0 and not 128.0.0.1
ludo:~ > cacaoadm list-params
snmp-adaptor-port=11161
snmp-adaptor-trap-port=11162
jmxmp-connector-port=11162
commandstream-adaptor-port=11163
rmi-registry-port=11164
secure-webserver-port=11165
java-flags=-Xms4M -Xmx64M
java-home=/usr/jdk/jdk1.5.0_01
jdmk-home=/opt/SUNWjdmk/5.1
nss-lib-home=/usr/lib/mps/secv1
nss-tools-home=/usr/sfw/bin
retries=4
enable-instrumentation=false
network-bind-address=0.0.0.0
Regards,
Ludovic.
# 2
You can also check the status of the agent using "/opt/SUNWdsee/dscc6/bin/dsccsetup status".This will tell you if the agent is listening on localhost only and the command to run to change it.Regards,Ludovic.
# 3
Hi Ludovic,
Thanks for your help.
The output of your commands:
[root@un128tmp3 /]# cacaoadm list-params
snmp-adaptor-port=11161
snmp-adaptor-trap-port=11162
jmxmp-connector-port=11162
commandstream-adaptor-port=11163
rmi-registry-port=11164
secure-webserver-port=11165
java-flags=-Xms4M -Xmx64M
java-home=/usr/jdk/jdk1.5.0_09
jdmk-home=/usr/share/lib/jdmk
nss-lib-home=/usr/lib/mps/secv1
nss-tools-home=/usr/sfw/bin
retries=4
enable-instrumentation=false
network-bind-address=0.0.0.0
Seems it is binding to all interfaces (which matches up with the netstat output)
[root@un128tmp3 /]# /opt/SUNWdsee/dscc6/bin/dsccsetup status
***
DSCC Application is not installed
***
DSCC Agent is registered in Cacao
***
DSCC Registry has not been created yet
***
Now I'm not a 100% sure how to interpret the output of dsccsetup. It seems that the agent is properly registered, however I don't see anything relating to where the agent is listening.
Are there any other parameters I need to give to show this?
Kind regards,
Edwin
# 4
In addition to the above output (DS6 zone with DSCC Agent) here is the output of the zone where the DSCC Web Console is running:
[root@un128tmp2 /]# cacaoadm list-params
snmp-adaptor-port=11161
snmp-adaptor-trap-port=11162
jmxmp-connector-port=11162
commandstream-adaptor-port=11163
rmi-registry-port=11164
secure-webserver-port=11165
java-flags=-Xms4M -Xmx64M
java-home=/usr/jdk/jdk1.5.0_09
jdmk-home=/usr/share/lib/jdmk
nss-lib-home=/usr/lib/mps/secv1
nss-tools-home=/usr/sfw/bin
retries=4
enable-instrumentation=false
network-bind-address=0.0.0.0
[root@un128tmp2 /]# /opt/SUNWdsee/dscc6/bin/dsccsetup status
***
DSCC Application is registered in Sun Java (TM) Web Console
***
DSCC Agent is registered in Cacao
***
DSCC Registry has been created
Path of DSCC registry is /var/opt/SUNWdsee/dscc6/dcc/ads
Port of DSCC registry is 3998
***
# 5
Well it seems that the Agent is installed and configured properly on the 3rd zone (un128tmp3).
[root@un128tmp3 /]# /opt/SUNWdsee/dscc6/bin/dsccsetup status
***
DSCC Application is not installed
***
DSCC Agent is registered in Cacao
***
DSCC Registry has not been created yet
***
The 1st and 3rd message are accurate for that zone. Only the agent is running.
You may want to check that cacao has its SSL certificates setup correctly.
On , run cacaoadm show-cert-chain. This should display 2 certificates each in its own base64 encoded blob.
Can you also check if there is any additional message in the Web console debug log ?
It's located under /var/log/webconsole/console/
That's all I can offer today... after tapping in the knowledge of the Cacao team and the DSCC engineering team :-(
Ludovic.
