After upgrading SPS to 6.11 all SPP and SPS initiated session requests fail. RDP sessions fail with the error "Authentication Failed". SSH sessions fail with the error "Remote side sent disconnect message type 11 (by application): "Gateway authentication failed""
The SPS logs show the following error:
zorp/scb_rdp[x]: scb.info(4): (svc/ozQ4GvQMdWTM9dywtZn1ey/safeguard_rdp:1/rdp): Plugin call log follows; plugin_location='/opt/scb/var/plugins/aa/SGAA/main.py' zorp/scb_rdp[x]: scb.info(4): (svc/ozQ4GvQMdWTM9dywtZn1ey/safeguard_rdp:1/rdp): Plugin(aa/SGAA/main.py): TypeError: __init__() missing 1 required positional argument: 'configuration' zorp/scb_rdp[x]: scb.info(4): (svc/ozQ4GvQMdWTM9dywtZn1ey/safeguard_rdp:1/rdp): Plugin(aa/SGAA/main.py): zorp/scb_rdp[x]: core.session(4): (svc/ozQ4GvQMdWTM9dywtZn1ey/safeguard_rdp:1): Ending proxy instance;
WORKAROUND
The issue can be resolved by un-joining and re-joining the SPP and SPS.
To un-join, you have to follow the following procedure on the SPP.
1. Get ID information
Login https://Safeguard IP/service/core/swagger
Click Authorize and Login with admin
Navigate to Cluster | GET /v3/Cluster/SessionModules
Set includeDisconnected to True
and Try it out!
Copy the ID from the results.
2. Delete the ID from step 1.
Navigate to DELETE Cluster/SessionModules/{ID}
Set the ID to the result above
Click Try it out!
Click Try it out! again to perform a hard delete
Repeat Step 1 to confirm ID has been deleted
More information available below:
https://support.oneidentity.com/technical-documents/one-identity-safeguard-for-privileged-passwords/6.11/administration-guide/96#TOPIC-1668610
To re-join SPP with SPS, follow the join procedure in our documentation.
SPP: https://support.oneidentity.com/technical-documents/one-identity-safeguard-for-privileged-passwords/6.11/administration-guide/149#TOPIC-1668859
SPS: https://support.oneidentity.com/technical-documents/one-identity-safeguard-for-privileged-sessions/6.11.0/administration-guide/116#TOPIC-1672330
STATUS
Issue fixed in version 6.11.1
© 2024 One Identity LLC. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center