• Forums
    • Public Forums
      • Community Connect
      • Dynatrace
        • Dynatrace Open Q&A
      • Application Monitoring & UEM
        • AppMon & UEM Open Q&A
      • Network Application Monitoring
        • NAM Open Q&A
  • Home
  • Public Forums
  • Network Application Monitoring
  • NAM Open Q&A
avatar image
Question by Anthony P. · Jun 23, 2014 at 01:09 PM ·

CAS accessing AMD via proxy???

Hi Fellow presales engineers,

We have a need to setup a CAS to access an AMD via a proxy for a PoC . The reason for this is that only this permitted  PC can get to the AMD via a firewall.

The proxy does not have any authentication requirements...

We have done the following so far;

  1. Altered the CAS JVM parameters to allow Java it to use the proxy.
  2. Setup a Apache proxy on the permitted PC so we can fiddle with the proxy config
  3. Tested it with a browser on the CAS which seems to indicate the proxy works OK

However the CAS gives the following errors when polling the AMD...( from server.log)

E JUL 14-06-23 07:26:02.824 SEVERE:com.compuware.frameworks.security.client.impl.ManagementServiceClientCache$BulkUpdate:getSecurityBulkData:<Exception during BULK update from CSS: Service unavailable; > <<  exception >>
1 ADM 14-06-23 07:26:23.182 ServerState 10.158.141.90:9091/hid?id=b16ade7df4_80_rtm using GET, protocol HTTP, user compuware, authentication BASIC received response code 401. Change authentication.  
1 ADM 14-06-23 07:26:23.213 ServerState 10.158.141.90:9091/hid?id=b16ade7df4_80_rtm using GET, protocol HTTP, user compuware, authentication DIGEST received response code 401. Change authentication.  
1 ADM 14-06-23 07:26:23.650 ServerState 10.158.141.90:9091/hid?id=b16ade7df4_80_rtm using GET, protocol HTTP, user compuware, authentication BASIC received response code 401. Change authentication.  
1 ADM 14-06-23 07:26:23.650 ServerState 10.158.141.90:9091/hid?id=b16ade7df4_80_rtm using GET, protocol HTTP, user compuware, authentication DIGEST received response code 401. Change authentication.  
E RTM 14-06-23 07:26:23.650 Cannot get license information for probe -1 [10.158.141.90:9091].

OK so it cant get to do something with the CSS but...

It seems as if Apache is sending a 401 back to the CAS in response to its authentication attempt which it seems unable to process..

If a browser is used, filing out the login/password for the AMD works fine...

Are we "barking up the wrong tree" here? e.g has this problem been already solved?

Just thought I would ask before I commence the in-depth troubleshooting....

Regards

AP

 

Comment

People who like this

0 Show 0
10 |2000000 characters needed characters left characters exceeded
  • Viewable by all users
  • Viewable by moderators
  • Viewable by moderators and the original poster
  • Advanced visibility
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 10 attachments (including images) can be used with a maximum of 50.0 MiB each and 250.0 MiB total.

3 Replies

  • Sort: 
  • Most voted
  • Newest
  • Oldest
avatar image

Answer by Anthony P. · Jul 02, 2014 at 11:49 AM

Hi all,

I managed to get  this working but not completely...e.g after about 8 hours I have to restart the CAS service if I wish to log in to the CAS...

OK for a PoC though.

But the CAS is talking to the AMD fine via the Apache proxy as long as the proxy does not reside on the same server as the CCS/ RUM console

This is what I did...

  1. Install Apache web server for windows on a none CCS or RUM console CAS. ( could be any windows server)
  2. Http.conf looks like below ( 141.168.21.84 is my new CAS). 
    Listen is 141.168.21.20:3128 and you need "load  proxy modules" list  un-commented etc.

    ProxyRequests On

    ProxyVia On

    <Proxy *>

    Order deny,allow

    Deny from all

    Allow from 141.168.21.84

    </Proxy>

  3. CAS Adlex Java parameter in NT registry line has this added. (CCS is .141.168.21.19)

    -DproxySet=true -DproxyHost=141.168.21.20 -DproxyPort=3128 -DnonProxyHosts=141.168.21.19

  4. So it looks like this 

    CAS3 ---------- >Proxy|CAS2-------- >FW---------- >AMD

    .84---------------->.20-------------------------------------->AMD

Hope this helps

 

Regards

 

AP

 

 

Comment

People who like this

0 Show 0 · Share
10 |2000000 characters needed characters left characters exceeded
  • Viewable by all users
  • Viewable by moderators
  • Viewable by moderators and the original poster
  • Advanced visibility
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 10 attachments (including images) can be used with a maximum of 50.0 MiB each and 250.0 MiB total.

avatar image

Answer by Anthony P. · Jun 25, 2014 at 06:08 AM

 

Hi Adam,

Thanks for the reply.

I have, its Case #00902719...

Just trying to procure traces now...

regards

 

AP

 

Comment

People who like this

0 Show 0 · Share
10 |2000000 characters needed characters left characters exceeded
  • Viewable by all users
  • Viewable by moderators
  • Viewable by moderators and the original poster
  • Advanced visibility
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 10 attachments (including images) can be used with a maximum of 50.0 MiB each and 250.0 MiB total.

avatar image

Answer by Adam P. · Jun 24, 2014 at 07:15 PM

This would require troubleshooting.

Would you please file a support ticket with Wireshark capture of this failed communication?

 

Comment

People who like this

0 Show 0 · Share
10 |2000000 characters needed characters left characters exceeded
  • Viewable by all users
  • Viewable by moderators
  • Viewable by moderators and the original poster
  • Advanced visibility
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 10 attachments (including images) can be used with a maximum of 50.0 MiB each and 250.0 MiB total.

How to get started

First steps in the forum
Read Community User Guide
Best practices of using forum

NAM 2019 SP5 is available


Check the RHEL support added in the latest NAM service pack.

Learn more

LIVE WEBINAR

"Performance Clinic - Monitoring as a Self Service with Dynatrace"


JANUARY 15, 3:00 PM GMT / 10:00 AM ET

Register here

Follow this Question

Answers Answers and Comments

2 People are following this question.

avatar image avatar image

Forum Tags

esm siebel Dynatrace Managed license nam probe wan citrix dna rest api configuration mq alerting NAM 2018 dashboard dcrumadvisory reports css nam universal decode database mobileapp RUM ads sap nam console scripting nam server sequence transactions nam 2019 upgrade
  • Forums
  • Public Forums
    • Community Connect
    • Dynatrace
      • Dynatrace Open Q&A
    • Application Monitoring & UEM
      • AppMon & UEM Open Q&A
    • Network Application Monitoring
      • NAM Open Q&A