CS-MARS & data archiving.

[andrea.meconi]

I'm using CS-MARS model 20 with software version 6.0.6.

I'm unable to restart data archiving after a SFTP server crash.

I can connect successfully to server from appliance using CLI with SSH client, but archiving reports an error timeout.

From my pc, with the same credentials, I'm able to transfer file, delete and so on.

Any ideas?

Thanks.

Regards.

Andrea

[Johan Svanberg]

Hi!

I have had the same issue twice when reinstalling a sftp-server and a new ssh key was generated, first time i did a discover on the sftp-server and it accepted the new ssh key and it started working again, second time this didn't work and no matter what i tried i couldn't get it to work and what i did was to setup the sftp-server with a new alias ip and then connect the mars sftp archive to the new ip, then it worked.

But i got a tips about an "expert" account and as root go to /root/.ssh and with vi edit known_hosts and delete the row with the sftp host, but i never got it to work, i thougt that the pnadmin was able to su to root but not.

If someone has some info how to get the expert account to work i would be glad, thanks!

[andrea.meconi]

Thanks Johan for your reply.

The expert account requires a password.

I can't setup a sftp server with an alias!

Regards.

Andrea

[Johan Svanberg]

What sftp-server are you running?

I read before that with the pnadmin account you could change the password for the expert account with passwd, but that didn't work for me when i tried.

[andrea.meconi]

Running Sysax Multi Server for Windows.

Regards.

Andrea

[andrea.meconi]

Yes, changing the server address, data archiving restarts successfully.

But I need to use the same old IP!

How can I edit known_host?

Thanks for help.

Regards.

Andrea

[Johan Svanberg]

Did you try a discover on the device, set ssh and run discover towards the old ip?

Otherwise I think you need to go with the expert mode to be able to edit known_hosts, but i read this when searching some.

Prior to CS-MARS version 4.1.3, users do not have a method to modify the root password. CS-MARS versions 4.1.3 and later provide the command passwd expert, which allows users to modify a portion of the root password providing additional security. The selected user password is combined with a Cisco controlled component to form a new root password. After performing this step, neither Cisco personnel or the user can access the root account without knowledge of both components used to create the root password. When authorized Cisco development engineers need access to the root account for advanced debugging, both Cisco and the user will need to enter their portion of the configured root password to enable access. Please refer to the Workarounds section of this advisory for more information.

A TAC case for this maybe?

[andrea.meconi]

Johan,

a case for this? Maybe!

I'm not able to edit known hosts.

Thanks for help.

Regards.

Andrea

[Johan Svanberg]

Remembered one thing, there is a setting on how the MARS will behave when there is a new ssh key, under Admin -> System Parameters and SSL/SSH Settings, this did not work for me but you could check it, but it really feels like a bug.

[andrea.meconi]

Also changing the SSH/SSL settings nothing changes.

Now, adding a secondary IP address, I'm able to restart data archiving service.

Many many thanks for your help Johan.

Regards.

Andrea

[Mykola Srebnyuk]

Hi,

Simply use NFS protocol.

Regards,

Nickolas

[andrea.meconi]

Hi Nickolas.

This is a bug, CSCsw49187.

Yesterday I have configured the appliance to use a NFS server.

And now MARS stops responding. I'm opening a service request.

Many thanks for your help.

Andrea