2 Replies Latest reply: Jul 10, 2014 11:09 AM by d_a_parker RSS

    'dsccreg add-server' results in 'No DSCC agent found'

    d_a_parker

      Hello,

       

      I have set up two servers, "ldap1" and "ldap2", both running DSEE 7 (11.1.1.7.0) with DSCC configured on ldap1.  On ldap1, the DSCC agent is running:

       

      root@ldap1:~# /opt/dsee7/bin/dsccagent info -v

      Instance Path         :   /opt/dsee7/var/dcc/agent 

      Owner                 :   root 

      JMX port              :   3997 

      SNMP port             :   Disabled 

      State                 :   Running 

      PID                   :   25898 

      DSCC hostname         :   ldap1.utica.edu 

      DSCC non-secure port  :   3998 

      DSCC secure port      :   3999 

      Instance version      :   A-A00

       

      I was able to register its own DS instance in DSCC by executing the following:

       

      root@ldap1:~# /opt/dsee7/bin/dsccreg add-server -v -H ldap1.utica.edu -h ldap1.utica.edu -d ldap1-dsins1 /var/opt/dsee7/dsins1

      Enter DSCC administrator's password:

      DSCC Administrator password is OK

      Trusted cert creation

      KeyStore File creation OK; try to connect ...

      /var/opt/dsee7/dsins1 is an instance of DS

      DSCC Administrator password is OK

      Trusted cert creation

      KeyStore File creation OK; try to connect ...

      Agent No  Hostname         Port  Owner  iPath 

      --------  ---------------  ----  -----  ------------------------ 

      0         ldap1.utica.edu  3997  root   /opt/dsee7/var/dcc/agent 

      The registration will use DSCC agent on port: 3997

      Enter password of "cn=Directory Manager" for /var/opt/dsee7/dsins1:

      This operation will restart /var/opt/dsee7/dsins1.

      Do you want to continue ? (y/n) y

      Connecting to /var/opt/dsee7/dsins1 (using ldap://127.0.0.1:389)

      Enabling DSCC access to /var/opt/dsee7/dsins1

      Restarting /var/opt/dsee7/dsins1

      Registering /var/opt/dsee7/dsins1 in DSCC on ldap1.utica.edu.

      Searching for entry "cn=ldap1.utica.edu@/var/opt/dsee7/dsins1,cn=Servers,cn=dscc"

       

      However, when I try to register the DS instance on ldap2 with the DSCC instance on ldap1, I get the following:

       

      root@ldap2:~# /opt/dsee7/bin/dsccreg add-server -v -H ldap2.utica.edu -h ldap1.utica.edu -d ldap2-dsins1 /var/opt/dsee7/dsins1

      Enter DSCC administrator's password:

      DSCC Administrator password is OK

      Trusted cert creation

      KeyStore File creation OK; try to connect ...

      /var/opt/dsee7/dsins1 is an instance of DS

      DSCC Administrator password is OK

      Trusted cert creation

      KeyStore File creation OK; try to connect ...

      No DSCC agent found

      /var/opt/dsee7/dsins1 has not been registered in DSCC on ldap1.

       

      Running tcpdump on ldap1 showed that ldap2 connected to ldap1 on port 3998 and there were 51 packets exchanged between these two hosts before ldap2 showed the No DSCC agent found error and aborted the attempt.  So, at least I know it's not a networking problem.  I have restarted the DSCC agent on ldap1 several times, but it hasn't made a difference.

       

      Does anyone know what the problem might be?

        • 1. Re: 'dsccreg add-server' results in 'No DSCC agent found'
          d_a_parker

          Just a quick update on this...  I also have a server running DSEE 6.3.1.1.2, and I was able to register its DS instance with DSCC just fine.  So the only one which won't work is the 2nd DSEE 7 instance.

          • 2. Re: 'dsccreg add-server' results in 'No DSCC agent found'
            d_a_parker

            I finally solved the problem.  I needed to create a DSCC agent on the 2nd DSEE server (ldap2) and point it to the DSCC host (ldap1):

             

            root@ldap2:~# /opt/dsee7/bin/dsccreg add-agent -v -h ldap1.utica.edu /opt/dsee7/var/dcc/agent

            Hostname : ldap2.utica.edu

            Agent path: /opt/dsee7/var/dcc/agent

            Enter DSCC agent "/opt/dsee7/var/dcc/agent" password:

            Get the config file

            Agent is not already registered ; check agent instance password

            Agent instance password OK

            Enter DSCC administrator's password:

            DSCC Administrator password is OK

            Trusted cert creation

            KeyStore File creation OK; try to connect ...

            Try to register agent:

            Agent port: 3997

            Agent user name: root

            Host name: ldap2.utica.edu

            Agent instance registered in DSCC; update agent config file

            Update config file:

            Agent config file /opt/dsee7/var/dcc/agent updated with :

            Registry host name = ldap1.utica.edu

            Registry port = 3998

            Registry secure port = 3999

            Agent instance has been registered in DSCC on ldap1.utica.edu

            You can now run dsccagent start to start the agent

            root@ldap2:~# /opt/dsee7/bin/dsccagent start

            The agent /opt/dsee7/var/dcc/agent has been started

             

            Once that was done, the DSCC registration worked fine:

             

            root@ldap2:~# /opt/dsee7/bin/dsccreg add-server -v -H ldap2.utica.edu -h ldap1.utica.edu -d ldap2-dsins1 /var/opt/dsee7/dsins1

            Enter DSCC administrator's password:

            DSCC Administrator password is OK

            Trusted cert creation

            KeyStore File creation OK; try to connect ...

            /var/opt/dsee7/dsins1 is an instance of DS

            DSCC Administrator password is OK

            Trusted cert creation

            KeyStore File creation OK; try to connect ...

            Agent No  Hostname         Port  Owner  iPath

            --------  ---------------  ----  -----  ------------------------

            0         ldap2.utica.edu  3997  root   /opt/dsee7/var/dcc/agent

            The registration will use DSCC agent on port: 3997

            Enter password of "cn=Directory Manager" for /var/opt/dsee7/dsins1:

            This operation will restart /var/opt/dsee7/dsins1.

            Do you want to continue ? (y/n) y

            Connecting to /var/opt/dsee7/dsins1 (using ldap://127.0.0.1:389)

            Enabling DSCC access to /var/opt/dsee7/dsins1

            Restarting /var/opt/dsee7/dsins1

            Registering /var/opt/dsee7/dsins1 in DSCC on ldap1.utica.edu.

            Searching for entry "cn=ldap2.utica.edu@/var/opt/dsee7/dsins1,cn=Servers,cn=dscc"