Cannot Do AceInitialize for communication with ACE/Server with RSA SecurID Authentication Agents for PAM when using sdopts
4 years ago
Originally Published: 2016-01-01
Article Number
000063038
Applies To

RSA Product Set:  SecurID

RSA Product/Service Type:  Authentication Agent for PAM

 

Issue
When testing authentication via the acetest utility the following error displays:
[root@rh 64bit]# ./acetest
Cannot Do  AceInitialize for communication with ACE/Server.

[root@rh 64bit]# ./acestatus
Error can't connect to ACE/Server
Tasks
Use strace to trace the system IO the utility will access, as in the example below:
[root@rh 64bit]# strace ./acetest
........
open("/var/ace/sdopts.rec", O_RDONLY)   = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=22, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe19a285000
read(3, "CLIENT IP=86.75.30.9\n", 4096) = 22
open("/etc/localtime", O_RDONLY)        = 4
fstat(4, {st_mode=S_IFREG|0644, st_size=3519, ...}) = 0
fstat(4, {st_mode=S_IFREG|0644, st_size=3519, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe19a284000
read(4, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\4\0\0\0\4\0\0\0\0"..., 4096) = 3519
lseek(4, -2252, SEEK_CUR)               = 1267
read(4, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\5\0\0\0\5\0\0\0\0"..., 4096) = 2252
close(4)                                = 0
munmap(0x7fe19a284000, 4096)            = 0
socket(PF_FILE, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
sendto(4, "<11>Dec 31 20:03:46 acetest: ACE"..., 93, MSG_NOSIGNAL, NULL, 0) = 93
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0x7fe19a285000, 4096)            = 0
sendto(4, "<11>Dec 31 20:03:46 acetest: ACE"..., 93, MSG_NOSIGNAL, NULL, 0) = 93
fstat(1, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 0), ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe19a285000
write(1, "Cannot Do  AceInitialize for com"..., 60Cannot Do  AceInitialize for communication with ACE/Server.
) = 60
exit_group(1)
Resolution
In this case, the error is due to incorrect parameters in the sdopts.rec file.  In looking at the line read(3, "CLIENT IP=86.75.30.9\n", 4096) = 22, an underscore is missing. It should be CLIENT_IP=86.75.30.9. To resolve, modify the sdopts.rec file and rerun the app.