-
Título
Periodic offline mode errors such as pmplugin6.0.0 (027)or(031)3004.01 Lost connection with server -
Descripción
In Privilege Manager for Sudo version offline authorization of commands is not always working. In the logs "upmSocSend10 - unsuccessful" messages are being seen. The offlinetimeout setting does not make any difference.
pmplugin6.0.0 (027): 3004.01 Lost connection with server
-
Causa
In this situation where there is a timeout between the pmplugin and the local pmmasterd during an offline evaluation, caused by extraneous DNS or Authentication Services lookups with version < 6.0.0.040. The 3004.01 message is usually accompanied by "432(ACT_SENDINFO_1) - upmSocSend10 -- Unsuccessful" messages, and will also have associated "9090 Client handling offline session" and "9091 Starting offline client session for failed" message in the /var/log/pmmasterd.log on the plugin hosts.
Some DNS lookups were unnecessarily being made, causing some timing issues during offline(local) policy evaluation. QAS can compound this as the QAS account and domain name are also in DNS.
Product Defect 6390 has been created to track this issue. -
Resolución
-
Solicitud de cambio
6390 -
Información adicional
Generally the 3004.01 error just means that there was an error (e.g. timeout, network failure, pmmasted died,...) between the pmplugin and the pmmasterd. The pmmasterd could be either a local pmmasterd during an offline policy evaluation, or the pmmasterd on the policy servers during an "on-line" session.