This website uses cookies. By continuing to browse or login to this website, you consent to the use of cookies. Learn more.
OK
lorenzogarcia
Absent Member.
Absent Member.
‎2017-08-06 17:03
1047 views

Access Manager disconnect error every 15 seconds

Good morning, I have two servers with the following specifications:

Server 1:
Applications:
Access Manager 4.3: Identity Server and Administration Console
OS (Operating System)
SLES (Suse Linux Enterprise server) 12 SP1

Server 2:
Applications:
Access Gateway Appliance 4.3

In the error_log file of the Access Gateway every 15 seconds or so, the following error is generated that disconnects the user. Someone can help me figure out the cause.

Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [info] Inside isDummyConnection
Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [info] ipaddrss = 127.0.0.1
Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug] ../prerror.cpp(637): AM#604600000 AMDEVICEID#ag-AB763D28E99A9BC5: AMAUTHID#e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855: AMEVENTID#19: Requ: GET http://a.com:8181/IDPUpdate service:soapbc (127.0.0.1:48418->127.0.0.1:8181)
Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug] mod_headers.c(781): headers: ap_headers_error_filter()
Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug] ../AGFilterPolicy.cpp(27): AMEVENTID#19: CFilter AgFilterPolicy Initialized
Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug] ../AGRegexAutoFilter.cpp(31): AMEVENTID#19: CFilter AgRegexAuto Compare Initialized
Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug] ../AGRegexAutoFilter.cpp(42): AMEVENTID#19: CFilter AgRegexAuto No extension Matched the Uri
Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug] ../AGFilterPolicy.cpp(33): AMEVENTID#19: CFilter AgFilterPolicy match returned false
Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug] ../AGFilterPolicy.cpp(38): AMEVENTID#19: CFilter AgFilterPolicy no match found
Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug] ../AGFilterPolicy.cpp(27): AMEVENTID#19: CFilter AgFilterPolicy Initialized
Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug] ../AGRegexAutoFilter.cpp(31): AMEVENTID#19: CFilter AgRegexAuto Compare Initialized
Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug] ../AGRegexAutoFilter.cpp(42): AMEVENTID#19: CFilter AgRegexAuto No extension Matched the Uri
Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug] ../AGFilterPolicy.cpp(33): AMEVENTID#19: CFilter AgFilterPolicy match returned false
Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug] ../AGFilterPolicy.cpp(38): AMEVENTID#19: CFilter AgFilterPolicy no match found
Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug] ../prerror.cpp(637): AM#604600001 AMDEVICEID#ag-AB763D28E99A9BC5: AMAUTHID#e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855: AMEVENTID#19: status:200 GET http://a.com:8181/IDPUpdate <e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855> X-Mag: <AB763D28E99A9BC5;c9533cd3;19;FPE->0;> [127.0.0.1:48418->127.0.0.1:8181]service:soapbc (2400:0) -
Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [error] AMEVENTID#19: ID:19:2400:cres status:200 200 OK
Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [error] AMEVENTID#19: ID:19:2400:cres Strict-Transport-Security: max-age=31536000;includeSubDomains
Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [error] AMEVENTID#19: ID:19:2400:cres X-Mag: AB763D28E99A9BC5;c9533cd3;19;FPE->0;
Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [error] AMEVENTID#19: ID:19:2400:cres Via: 1.1 soap.backchannel (Access Gateway-ag-AB763D28E99A9BC5-19)
Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [error] AMEVENTID#19: ID:19:2400:cres Content-Length: 497
Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [error] AMEVENTID#19: ID:19:2400:cres Connection: close
Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [error] AMEVENTID#19: ID:19:2400:cres Content-Type: text/html; charset=iso-8859-1
Aug 4 17:03:06 SV934IdmMagDev httpd[87180]: [debug] ../health_thread.cpp(165): Bind address is not configured
Aug 4 17:03:06 SV934IdmMagDev httpd[87180]: [debug] ../health_thread.cpp(192): tcp_non_block_connect()- connection is in process 10.213.81.8
Aug 4 17:03:06 SV934IdmMagDev httpd[87180]: [debug] ../health_thread.cpp(222): totalworkers: 1
Aug 4 17:03:08 SV934IdmMagDev httpd[87180]: [debug] ../health_thread.cpp(318): tcp connection closed: worker:10.213.81.8
Aug 4 17:03:08 SV934IdmMagDev httpd[87180]: [debug] ../health_thread.cpp(544): health_check()-size of health_response is 391

Ing. Lorenzo García Security Consulting Solutions
0 Likes
Reply
Report Inappropriate Content
5 Replies
edmaa
Knowledge Partner Knowledge Partner
Knowledge Partner
‎2017-08-07 04:13

On 8/7/2017 2:04 AM, lorenzogarcia wrote:
>
> Good morning, I have two servers with the following specifications:
>
> Server 1:
> Applications:
> Access Manager 4.3: Identity Server and Administration Console
> OS (Operating System)
> SLES (Suse Linux Enterprise server) 12 SP1
>
> Server 2:
> Applications:
> Access Gateway Appliance 4.3
>
> In the error_log file of the Access Gateway every 15 seconds or so, the
> following error is generated that disconnects the user. Someone can help
> me figure out the cause.
>
> Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [info] Inside
> isDummyConnection
> Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [info] ipaddrss =
> 127.0.0.1
> Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug]
> ../prerror.cpp(637): AM#604600000 AMDEVICEID#ag-AB763D28E99A9BC5:
> AMAUTHID#e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855:
> AMEVENTID#19: Requ: GET http://a.com:8181/IDPUpdate service:soapbc
> (127.0.0.1:48418->127.0.0.1:8181)
> Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug] mod_headers.c(781):
> headers: ap_headers_error_filter()
> Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug]
> ../AGFilterPolicy.cpp(27): AMEVENTID#19: CFilter AgFilterPolicy
> Initialized
> Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug]
> ../AGRegexAutoFilter.cpp(31): AMEVENTID#19: CFilter AgRegexAuto Compare
> Initialized
> Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug]
> ../AGRegexAutoFilter.cpp(42): AMEVENTID#19: CFilter AgRegexAuto No
> extension Matched the Uri
> Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug]
> ../AGFilterPolicy.cpp(33): AMEVENTID#19: CFilter AgFilterPolicy match
> returned false
> Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug]
> ../AGFilterPolicy.cpp(38): AMEVENTID#19: CFilter AgFilterPolicy no match
> found
> Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug]
> ../AGFilterPolicy.cpp(27): AMEVENTID#19: CFilter AgFilterPolicy
> Initialized
> Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug]
> ../AGRegexAutoFilter.cpp(31): AMEVENTID#19: CFilter AgRegexAuto Compare
> Initialized
> Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug]
> ../AGRegexAutoFilter.cpp(42): AMEVENTID#19: CFilter AgRegexAuto No
> extension Matched the Uri
> Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug]
> ../AGFilterPolicy.cpp(33): AMEVENTID#19: CFilter AgFilterPolicy match
> returned false
> Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug]
> ../AGFilterPolicy.cpp(38): AMEVENTID#19: CFilter AgFilterPolicy no match
> found
> Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug]
> ../prerror.cpp(637): AM#604600001 AMDEVICEID#ag-AB763D28E99A9BC5:
> AMAUTHID#e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855:
> AMEVENTID#19: status:200 GET http://a.com:8181/IDPUpdate
> <e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855>
> X-Mag: <AB763D28E99A9BC5;c9533cd3;19;FPE->0;>
> [127.0.0.1:48418->127.0.0.1:8181]service:soapbc (2400:0) -
> Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [error] AMEVENTID#19:
> ID:19:2400:cres status:200 200 OK
> Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [error] AMEVENTID#19:
> ID:19:2400:cres Strict-Transport-Security:
> max-age=31536000;includeSubDomains
> Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [error] AMEVENTID#19:
> ID:19:2400:cres X-Mag: AB763D28E99A9BC5;c9533cd3;19;FPE->0;
> Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [error] AMEVENTID#19:
> ID:19:2400:cres Via: 1.1 soap.backchannel (Access
> Gateway-ag-AB763D28E99A9BC5-19)
> Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [error] AMEVENTID#19:
> ID:19:2400:cres Content-Length: 497
> Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [error] AMEVENTID#19:
> ID:19:2400:cres Connection: close
> Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [error] AMEVENTID#19:
> ID:19:2400:cres Content-Type: text/html; charset=iso-8859-1
> Aug 4 17:03:06 SV934IdmMagDev httpd[87180]: [debug]
> ../health_thread.cpp(165): Bind address is not configured
> Aug 4 17:03:06 SV934IdmMagDev httpd[87180]: [debug]
> ../health_thread.cpp(192): tcp_non_block_connect()- connection is in
> process 10.213.81.8
> Aug 4 17:03:06 SV934IdmMagDev httpd[87180]: [debug]
> ../health_thread.cpp(222): totalworkers: 1
> Aug 4 17:03:08 SV934IdmMagDev httpd[87180]: [debug]
> ../health_thread.cpp(318): tcp connection closed: worker:10.213.81.8
> Aug 4 17:03:08 SV934IdmMagDev httpd[87180]: [debug]
> ../health_thread.cpp(544): health_check()-size of health_response is 391
>
>

I'm pretty sure that that is just some internal process querying the status of the IDP. Probably comes from the AMC as its querying the soapbc
connector (internal proxy only which you can't configure)

--
Cheers,
Edward
0 Likes
Reply
Report Inappropriate Content
lorenzogarcia
Absent Member.
Absent Member.
‎2017-08-07 05:00

edmaa;2463562 wrote:
On 8/7/2017 2:04 AM, lorenzogarcia wrote:
>
> Good morning, I have two servers with the following specifications:
>
> Server 1:
> Applications:
> Access Manager 4.3: Identity Server and Administration Console
> OS (Operating System)
> SLES (Suse Linux Enterprise server) 12 SP1
>
> Server 2:
> Applications:
> Access Gateway Appliance 4.3
>
> In the error_log file of the Access Gateway every 15 seconds or so, the
> following error is generated that disconnects the user. Someone can help
> me figure out the cause.
>
> Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [info] Inside
> isDummyConnection
> Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [info] ipaddrss =
> 127.0.0.1
> Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug]
> ../prerror.cpp(637): AM#604600000 AMDEVICEID#ag-AB763D28E99A9BC5:
> AMAUTHID#e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855:
> AMEVENTID#19: Requ: GET http://a.com:8181/IDPUpdate service:soapbc
> (127.0.0.1:48418->127.0.0.1:8181)
> Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug] mod_headers.c(781):
> headers: ap_headers_error_filter()
> Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug]
> ../AGFilterPolicy.cpp(27): AMEVENTID#19: CFilter AgFilterPolicy
> Initialized
> Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug]
> ../AGRegexAutoFilter.cpp(31): AMEVENTID#19: CFilter AgRegexAuto Compare
> Initialized
> Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug]
> ../AGRegexAutoFilter.cpp(42): AMEVENTID#19: CFilter AgRegexAuto No
> extension Matched the Uri
> Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug]
> ../AGFilterPolicy.cpp(33): AMEVENTID#19: CFilter AgFilterPolicy match
> returned false
> Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug]
> ../AGFilterPolicy.cpp(38): AMEVENTID#19: CFilter AgFilterPolicy no match
> found
> Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug]
> ../AGFilterPolicy.cpp(27): AMEVENTID#19: CFilter AgFilterPolicy
> Initialized
> Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug]
> ../AGRegexAutoFilter.cpp(31): AMEVENTID#19: CFilter AgRegexAuto Compare
> Initialized
> Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug]
> ../AGRegexAutoFilter.cpp(42): AMEVENTID#19: CFilter AgRegexAuto No
> extension Matched the Uri
> Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug]
> ../AGFilterPolicy.cpp(33): AMEVENTID#19: CFilter AgFilterPolicy match
> returned false
> Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug]
> ../AGFilterPolicy.cpp(38): AMEVENTID#19: CFilter AgFilterPolicy no match
> found
> Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug]
> ../prerror.cpp(637): AM#604600001 AMDEVICEID#ag-AB763D28E99A9BC5:
> AMAUTHID#e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855:
> AMEVENTID#19: status:200 GET http://a.com:8181/IDPUpdate
> <e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855>
> X-Mag: <AB763D28E99A9BC5;c9533cd3;19;FPE->0;>
> [127.0.0.1:48418->127.0.0.1:8181]service:soapbc (2400:0) -
> Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [error] AMEVENTID#19:
> ID:19:2400:cres status:200 200 OK
> Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [error] AMEVENTID#19:
> ID:19:2400:cres Strict-Transport-Security:
> max-age=31536000;includeSubDomains
> Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [error] AMEVENTID#19:
> ID:19:2400:cres X-Mag: AB763D28E99A9BC5;c9533cd3;19;FPE->0;
> Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [error] AMEVENTID#19:
> ID:19:2400:cres Via: 1.1 soap.backchannel (Access
> Gateway-ag-AB763D28E99A9BC5-19)
> Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [error] AMEVENTID#19:
> ID:19:2400:cres Content-Length: 497
> Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [error] AMEVENTID#19:
> ID:19:2400:cres Connection: close
> Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [error] AMEVENTID#19:
> ID:19:2400:cres Content-Type: text/html; charset=iso-8859-1
> Aug 4 17:03:06 SV934IdmMagDev httpd[87180]: [debug]
> ../health_thread.cpp(165): Bind address is not configured
> Aug 4 17:03:06 SV934IdmMagDev httpd[87180]: [debug]
> ../health_thread.cpp(192): tcp_non_block_connect()- connection is in
> process 10.213.81.8
> Aug 4 17:03:06 SV934IdmMagDev httpd[87180]: [debug]
> ../health_thread.cpp(222): totalworkers: 1
> Aug 4 17:03:08 SV934IdmMagDev httpd[87180]: [debug]
> ../health_thread.cpp(318): tcp connection closed: worker:10.213.81.8
> Aug 4 17:03:08 SV934IdmMagDev httpd[87180]: [debug]
> ../health_thread.cpp(544): health_check()-size of health_response is 391
>
>

I'm pretty sure that that is just some internal process querying the status of the IDP. Probably comes from the AMC as its querying the soapbc
connector (internal proxy only which you can't configure)

--
Cheers,
Edward


Thanks for your reply edmaa,

But as I solve this problem since I am closing the session of users, even of all integrated applications. In detail the moment the user enters the integrated application and starts to navigate in it, after about 15 seconds it disconnects from the session and the home screen appears or the message is displayed that the user does not have navigation permissions in the application.

Lorenzo Garcia

Ing. Lorenzo García Security Consulting Solutions
0 Likes
Reply
Report Inappropriate Content
edmaa
Knowledge Partner Knowledge Partner
Knowledge Partner
‎2017-08-07 13:38

On 8/7/2017 2:04 PM, lorenzogarcia wrote:
> Thanks for your reply edmaa,
>
> But as I solve this problem since I am closing the session of users,
> even of all integrated applications. In detail the moment the user
> enters the integrated application and starts to navigate in it, after
> about 15 seconds it disconnects from the session and the home screen
> appears or the message is displayed that the user does not have
> navigation permissions in the application.

Are you on 4.3? Try disabling the session assurance feature and see if the problem then still exists.


--
Cheers,
Edward
0 Likes
Reply
Report Inappropriate Content
lorenzogarcia
Absent Member.
Absent Member.
‎2017-08-08 17:20

Good morning, Edmaa,

Thank you for your collaboration. The problem solves it by colonizing in the AG advanced options the NAGHostOptions DisableIDC on parameter. Which I understand disables it for small sessions.

Lorenzo

Ing. Lorenzo García Security Consulting Solutions
0 Likes
Reply
Report Inappropriate Content
edmaa
Knowledge Partner Knowledge Partner
Knowledge Partner
‎2017-08-11 13:47

On 8/9/2017 2:24 AM, lorenzogarcia wrote:
>
> Good morning, Edmaa,
>
> Thank you for your collaboration. The problem solves it by colonizing in
> the AG advanced options the NAGHostOptions DisableIDC on parameter.
> Which I understand disables it for small sessions.

Cool, thanks for the feedback


--
Cheers,
Edward
0 Likes
Reply
Report Inappropriate Content
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.