Attaching fresh replica fails after importing RSA Authentication Manager 7.1 data file into RSA Authentication Manager 8.1
4 years ago
Originally Published: 2015-03-17
Article Number
000060140
Applies To
RSA Product Set: SecurID
RSA Product/Service Type: SecurID Appliance
RSA Version/Condition: 8.1.0
 
Issue
Attaching a fresh replica fails after importing RSA Authentication Manager 7.1 data file into RSA Authentication Manager 8.1 fails with the following error:

Failed to attach replica instance.
You must redeploy this replica instance by performing the following steps:
1. Delete this replica instance. Log on to the Operations console (primary instance) and click Replication Status Report.
2. Shut down and delete the virtual appliance for this replica instance.
3. Follow the procedures in the Setup and Configuration Guide for deploying a new replica instance.
Click here to access the install_logs, and then call RSA Customer Support"

 
The /opt/rsa/am/server/Install_logs/config/config.sh_Appliance_configureReplica_<yearmonthdaytime>.log contains the following
86762  2015-03-16 11:11:12,271 INFO: Trying to enable SBR replication for 'rsaauth01.company.com'
86772  2015-03-16 11:11:12,281 ERROR: Error looking up SBR server data for host 'rsaauth01.company.com': 
Replication server 'rsaauth01.company.com' not found.
86772  2015-03-16 11:11:12,281 INFO: Attempting to enable SBR replication again...
86772  2015-03-16 11:11:12,281 INFO: Configuring SBR as REPLICA RADIUS Server
86792  2015-03-16 11:11:12,301 INFO: Executing /opt/rsa/am/radius/radiuswrapper.bin restart radius nodep on command line
86900  2015-03-16 11:11:12,409 INFO: Return code: 1: sbrd: WARNING: unable to stop radius

86900  2015-03-16 11:11:12,409 INFO: Output: radius state is running

86900  2015-03-16 11:11:12,409 INFO: Executing /opt/rsa/am/radius/radiuswrapper.bin stop radius on command line
90113  2015-03-16 11:11:15,622 INFO: Return code: 0: 
90113  2015-03-16 11:11:15,622 INFO: Output: radius state is running
waiting for radius
radius stopped

90118  2015-03-16 11:11:15,627 FATAL: Error enabling replication for SBR server 'rsaauth01.company.com'
90162  2015-03-16 11:11:15,671 FATAL: 
Error enabling replication for SBR server 'rsaauth01.company.com'
java.lang.AssertionError: Error enabling replication for SBR server 'rsaauth01.company.com'
 
Cause
When the replica package was first created there was a name in the reverse lookup of DNS which was associated with the IP address being used for the replica. 

Even though DNS has been cleared of this name and address, using the address still fails in the replica attachment.
Resolution
The resolution is to use a different IP address and/or name for the new replica and regenerate the package.