Quick Setup of a Replica Instance fails the attach to the Primary Instance
2 months ago
Originally Published: 2014-02-05
Article Number
000052708
Applies To

RSA Product Set: SecurID
RSA Product/Service Type: Authentication Manager 
RSA Version/Condition: 8.x

Issue
Primary instance cannot contact the Replica host
Attaching a replica host to a primary instance via Quick Setup generates an error
Cause
RSA Authentication Manager 8.1 relies on name resolution from the configured DNS server(s) defined in the network settings of the deployemnt.
Resolution

Where the DNS Servers are not providing the correct name resolution then use this workaround by updating the local hosts file (/etc/hosts) of the Primary Instance at the command line.

 

1. Ensure SSH is enabled on the Primary instance via the RSA Operations Console > Administration > Operating System Access > SSH Settings ? check Enable SSH.

 

2. Use a client (such as PuTTY) to open an SSH session and logon to the Primary instance using the ?rsaadmin? account. The password for this account was defined during the Primary instance Quick Setup.

 

3. Use the ?sudo su ? root? command to use the security privileges of the super user (root) to update the local hosts file.

 

4. Next, use an editor such as 'vi' to update the local hosts file /etc/hosts with the Replica instance IP address, fully qualified domain name and hostname (for an alias).

 

Example:

 

#

# hosts         This file describes a number of hostname-to-address

#               mappings for the TCP/IP subsystem.  It is mostly

#               used at boot time, when no name servers are running.

#               On small systems, this file can be used instead of a

#               "named" name server.

# Syntax:

#

# IP-Address  Full-Qualified-Hostname  Short-Hostname

#

 

127.0.0.1       localhost

 

# special IPv6 addresses

::1             localhost ipv6-localhost ipv6-loopback

 

fe00::0         ipv6-localnet

 

ff00::0         ipv6-mcastprefix

ff02::1         ipv6-allnodes

ff02::2         ipv6-allrouters

ff02::3         ipv6-allhosts

 

# BEGIN local address

10.0.0.245 appv8p.csau.ap.rsa.net appv8p

10.0.0.246 appv8r.csau.ap.rsa.net appv8r

# END local address

 

 

     NOTE: the Primary instance IP address, fully qualified domain name and host name will already exist as an entry in the hosts file

 

5. Now, use the Replica instance Quick Setup URL (e.g. https://10.0.0.246) in a supported web browser to continue with the Replica Quick Setup.

 

     NOTE: an access code is required for RSA Authentication Manager 8.1 Quick Setup which can be found on the local console of the deployment.

 

Please contact RSA Customer Support should you still require assistance with the Replica Quick Setup.

Related Articles

Trending Articles

Don't see what you're looking for?