Inconsistent or failed DNS name resolution by RSA SecurID Access Identity Router
2 years ago
Originally Published: 2019-03-29
Article Number
000041758
Applies To
RSA Product Set: SecurID Access Cloud Authentication Service
Issue
  • Name resolution by Identity Router is failing inconsistently. 
  • Running nslookup fails when not specifying nameserver, but may succeed if a particular nameserver is specified.
  • If the Identity Router is configured to communicate with Authentication Manager there may be errors in the symplified.log similar to:
Unable to resolve the Host:<AM_FULLY_QUALIFIED_HOSTNAME>, ignoring it

Note: An IDR to Authentication Manager test may also fail under these conditions.
Cause
The Identity Router is configured to utilize multiple DNS nameservers and at least one nameserver cannot resolve a required hostname (for example, Authentication Manager).
 
Resolution
Either remove any DNS namerserver(s) that cannot resolve required hostnames OR ensure that required hostnames are added to all configured DNS nameservers.