2016-03-13 09:10 AM
Have configured licensing online but SA is not successfully syncing them. Still showing Trial license.
Downloaded the Offline Request file but when trying to upload the response file, it gives error. Following are some errors in fne-error.log. What can be the reason for this?
Info : [13/Mar/2016:12:51:36 +0000] Generating capability request (using server hostid "ETHERNET=XXXXXXXXXX").
Info : [13/Mar/2016:12:51:36 +0000] Online sync to FNO is not needed at this time.
Info : [13/Mar/2016:12:51:37 +0000] Server refresh completed.
Debug : [13/Mar/2016:12:52:14 +0000] POST payload of 850 bytes received from ::ffff:127.0.0.1 at endpoint /fne/bin/offline-capability-response
Error : [13/Mar/2016:12:52:14 +0000] Offline capability response could not be processed for address ::ffff:127.0.0.1 - FNE Error 0x7000001d (Response is out of order with previous responses). Details [1,4,6,0[7000001D,0,450242]].
Error : [13/Mar/2016:12:52:14 +0000] Call to endpoint /fne/bin/offline-capability-response failed with HTTP status 500. Associated error: FNE Error 0x7000001d (Response is out of order with previous responses). Details [1,4,6,0[7000001D,0,450242]].
Info : [13/Mar/2016:12:52:14 +0000] Error response generated.
Debug : [13/Mar/2016:12:52:39 +0000] HTTP Connection failed : Connection timed out.
Error : [13/Mar/2016:12:52:39 +0000] FNO poll HTTP POST error: Connection timed out.
2016-03-14 09:39 AM
This is typically caused when the fneserver (the Security Analytics licensing server) is unable to reset the trust store due to old licensing information. It can happen when VMs are cloned, or when old licensing information is not flushed properly.
1. Stop the FNE server with the following command: service fneserver stop
2. Examine the environment variables with the following command: env | grep -i ld
3. Copy and paste the following entry into a paste buffer: LD_LIBRARY_PATH=/usr/bin/lic
4. Left click and highlight the LD_LIBRARY_PATH value, then paste the value onto the command line by left-clicking. Now append :/opt/fneserver/lib to the end of the line. The resulting LD_LIBRARY PATH should be as follows: LD_LIBRARY_PATH=/usr/bin/lic:/opt/fneserver/lib
5. it return.
6. Export the LD_LIBRARY_PATH variable to include the additional LD Library path and hit enter: export LD_LIBRARY_PATH
7. Ensure the path includes the extra path by once again examining the environment variables with the following command: env | grep -i ld
The following should display: LD_LIBRARY_PATH=/usr/bin/lic:/opt/fneserver/lib
8. Reset the trust store for the licensing server by executing the following command: /opt/fneserver/bin/fneserver reset
NOTE: Step 8 should execute relatively quickly. If it does not, it is necessary to reboot the SA server, then repeat steps 1 through 8 before continuing with step 9.
9. Navigate to the fneserver library directory with the following command: cd /var/lib/fneserver
10. Clear the license stub files from the directory by removing any file beginning with "ra" (without the quotes), using this command: rm ra*
11. Start the fneserver with the following command: service fneserver start
After performing the steps above, return to the Security Analytics UI and reload the offline capability request by navigating to Administration -> System -> Licensing -> Offline and clicking the Upload button.
2016-03-17 03:21 AM
Still getting error when uploading the BIN response file.
Info : Generating capability request (using
server hostid "ETHERNET=XXXXXXXXXX").
Debug : POST payload of 850 bytes received
from ::ffff:127.0.0.1 at endpoint /fne/bin/offline-capability-response
Error : Offline capability response could not
be processed for address ::ffff:127.0.0.1 - FNE Error 0x7000001a (The
allowed time to process response has expired). Details
[1,4,6,0[7000001A,0,450251]].
Error : Call to endpoint
/fne/bin/offline-capability-response failed with HTTP status 500.
Associated error: FNE Error 0x7000001a (The allowed time to process
response has expired). Details [1,4,6,0[7000001A,0,450251]].
Info : Error response generated.
2016-03-17 05:46 AM
the response file still valid? normally within 24 hours..
2016-03-17 06:04 AM
Yes. Did it within few minutes.
2016-03-17 08:39 PM
Hi Faiz,
Based on the issue you are experiencing I would recommend contacting RSA Customer Support to have a Technical Support case created so you can get assistance from an RSA Technical Support engineer.
You can contact support by calling +1 800 995 5095 or by sending an email to support@rsa.com and referencing this discussion by including this link License Syncing Issue
You would also need to include a Serial Number, Contract Number or Site ID so we can identify and log the case under the correct account.
Regards
Paul Thornton
RSA Support
2016-04-20 11:28 PM
Hi Faiz,
I just wanted to check to see if this issue had been resolved?
I see that you raised a case for what appears to be the same issue on March 23rd which has now be resolved and closed.
Was that case directly related to this question?
Regards
Paul Thornton
RSA Social Engagement Manager