• Forums
    • Public Forums
      • Community Connect
      • Dynatrace
        • Dynatrace Open Q&A
      • Application Monitoring & UEM
        • AppMon & UEM Open Q&A
      • Network Application Monitoring
        • NAM Open Q&A
  • Home /
  • Public Forums /
  • Dynatrace /
  • Dynatrace Open Q&A /
avatar image
Question by Aniket D. · Nov 01, 2019 at 06:08 AM · configuration activegate permissions

Active gate synthetic engine not running as a user only as a local service

The new activegate synthetic engine for windows behaves differently than the PLM agent it replaces, and does not function in a corporate environment.

In the old PLM setup - when the PLM agent is installed you can override the local service account and configure a specific user to run the service as via the installation gui.
The PLM synthetic engine then runs as that user and most importantly the synthetic browser session honours windows user credentials for any single signon application.

In the new private activegate synthetic engine it runs as a local service account with no install option to use another account.
The the synthetic browser does not honour the windows credentials for single signon applications as the PLM browser did, as i am unaware of any corporate environment that has single signon for "local service"

This means the any synthetic tests do not function that use single signon. eg proxy services etc..
It also means that screenshots are not able to be published back up to AWS s3.

Comment

People who like this

0 Show 0
10 |2000000 characters needed characters left characters exceeded
  • Viewable by all users
  • Viewable by moderators
  • Viewable by moderators and the original poster
  • Advanced visibility
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 10 attachments (including images) can be used with a maximum of 50.0 MiB each and 250.0 MiB total.

2 Replies

  • Sort: 
  • Most voted
  • Newest
  • Oldest
avatar image

Answer by Aniket D. · Nov 01, 2019 at 06:13 AM

To summarize what we have done here and what the discussion is currently about.

1. The gateway and synthetic engines need different proxy configurations as one is Java and one is Chrome, Currently Dynatrace only supports one config shared by both, ( your java engine does not honor user or AD credentials sets - Chrome however can be configure to do so)

2. the gateway process and synthetic process on windows is now running as a domain use - as per PLM.

So we have found a way to make both those things happen but.....
for 1. how do we make the proxy configurations different and have it stick during upgrades? or how do we make Java behave like chrome.
for 2, how to we stop the upgrade process changing the services back to "local system"?

Remembering that auto updates is not far away for activegate on windows :)

Comment

People who like this

0 Show 0 · Share
10 |2000000 characters needed characters left characters exceeded
  • Viewable by all users
  • Viewable by moderators
  • Viewable by moderators and the original poster
  • Advanced visibility
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 10 attachments (including images) can be used with a maximum of 50.0 MiB each and 250.0 MiB total.

avatar image

Answer by Aniket D. · Nov 01, 2019 at 06:13 AM

We have been able to successfully get the activegate synthetic engine to replicate the behaviour of the Private Last Mile technology.
ie. run on windows as a windows user
use the windows user active directory crendentials for synthetic testing ( replicating a synthetic user session)
use the windows network automatic proxy configuration for synthetic testing

the detail of the steps we followed are attached in a word doc.
A summary is below

Step 1 Remove existing acitvegate installation
Run "services "as admin
Stop dynatrace Synthetic
Stop dynatrace gateway
Stop dynatrace autoupdater

Run control panel | programs and features
Uninstall dynatrace synthetic
Uninstall dynatrace gateway

Delete folders
c:\ProgramData\dynatrace
c:\Program Files\dynatrace

Step 2 Install Activegate software

  • Browse to our tenant install page page https://xxx.live.dynatrace.com/#install/activegate/agwindows;gf=all
    check synthetic and download
    Put it in \program_files\BCC
    Copy the installer command line from page above and run it
    Enable proxy setting <proxy domain>:<proxy port>
    Install directory default
    Installation successful message is important here !!

Step 3 - Dynatrace SaaS check
Wait for the engine to come up in our https://xxx.live.dynatrace.com/ui/deploymentstatus/activegate tenant - all components must be up
check your machine name synthetic engine
Synthetic Engine status Running
Synthetic Engine health check Ok
HTTP monitors Enabled
Browser monitors Enabled

Step 4 - Stop Activegate
Run "services "as admin
Stop dynatrace Synthetic
Stop dynatrace gateway
Stop dynatrace autoupdater

Step 5 - Change Folder Permissions
Change folder permissions -
allow full control for bcc\ictdashnn on the following folders
c:\ProgramData\dynatrace
c:\Program Files\dynatrace

Do this by clicking security tab - then edit and add bcc\ictdashnn full control and save

Step 6 - Fix folder permissions
As the ictdashnn user browse to C:\ProgramData\dynatrace\synthetic and allow permanent access (For some reason the synthetic directory still requests access override)

Step 7 - Modify Activegate Chromium
In file C:\ProgramData\dynatrace\synthetic\config\config.properties
Change

  1. Disables AppContainer on Windows 8 and newer
    com.ruxit.vuc.poolConfig.playerConfig.startupParams=--disable-appcontainer
    TO
  2. Disables AppContainer on Windows 8 and newer
    com.ruxit.vuc.poolConfig.playerConfig.startupParams=--disable-appcontainer
  3. BCC - auto detect Proxy
    com.ruxit.vuc.poolConfig.playerConfig.startupParams=--proxy-auto-detect

Step 8 - Run Activegate as the user ictdashnn
Change the logon as user for the 2 following services to username@domain.com ( password in the password portal)
Dynatrace Gateway
Dynatrace Synthetic

Step 9 - Delay start the synthetic engine
Change Dynatrace Synthetic service to be "Automatic (Delayed Start)"

Step 10 - Reboot

Step 11 - Fix Location in Dynatrace SaaS
Browse to https://xxxx.live.dynatrace.com/#settings/syntheticprivatelocations;gf=all
You will need to reconfigure the activegate into locations

  • Step 12 - Reboot*

NOTE: Changing config.properties is not supported. Upgrade will overwrite those settings at this moment.

Comment

People who like this

0 Show 0 · Share
10 |2000000 characters needed characters left characters exceeded
  • Viewable by all users
  • Viewable by moderators
  • Viewable by moderators and the original poster
  • Advanced visibility
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 10 attachments (including images) can be used with a maximum of 50.0 MiB each and 250.0 MiB total.

How to get started

First steps in the forum
Read Community User Guide
Best practices of using forum

NAM 2019 SP5 is available


Check the RHEL support added in the latest NAM service pack.

Learn more

LIVE WEBINAR

"Performance Clinic - Monitoring as a Self Service with Dynatrace"


JANUARY 15, 3:00 PM GMT / 10:00 AM ET

Register here

Follow this Question

Answers Answers and Comments

27 People are following this question.

avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image

Related Questions

Dynatrace Saas - Active gate configuration

DYNATRACE LEADERSHIP - How much longer for an update around providing enterprise permissions?

Browser monitors in private locations for Windows coming anytime soon?

How Long Does OneAgent takes to know if there is any new Active Gate added?

Which cluster node (Dynatrace server instance without active gateway) will oneagent communicate directely with ?

Forum Tags

mobile monitoring dotnet iis chat kubernetes servicenow amazon web services feedback mysql mainframe application rules rest api cassandra dashboard oneagent sdk cmc waterfall chart application monitoring openkit smartscape request attributes monitoring developer community user tagging log monitoring services ufo opentelemetry integrations activegate auto-detection high five award uem webserver usql iib test automation license ios news migration management zones ibm mq web services notifications sso host monitoring knowledge sharing reports browser monitors java hybris sap vmware maintenance window user action naming resource javascript appmon ai availability tipstricks automation extensions diagnostic tools session replay permissions search davis assistant auto-update faq documentation problem detection http monitors easytravel apdex network docker tags and metadata cloud foundry google cloud platform synthetic monitoring lambda process groups account usability dynatrace saas gui paas openshift key user actions administration production user actions postgresql synthetic locations upgrade oneagent security Dynatrace Managed user management python technologies mongodb openstack user session monitoring continuous delivery citrix configuration alerting performance monitoring NGINX action naming geolocation linux nam installation error reporting database mission control apache slo mobileapp RUM php azure purepath davis scripting aix nodejs android
  • Forums
  • Public Forums
    • Community Connect
    • Dynatrace
      • Dynatrace Open Q&A
    • Application Monitoring & UEM
      • AppMon & UEM Open Q&A
    • Network Application Monitoring
      • NAM Open Q&A