Unable to login to the CLI of CSPC

[Varun Muthusamy]

I am getting the below error when logging in to the CSPC. the GUI is working fine. I have tried restarting it couple of times. any thoughts?

#########################################################################
#     This system is hardened and for the use of authorized users only. #
#     Individuals using this computer system without authority, or in   #
#     excess of their authority, are subject to having all of their     #
#     activities on this system monitored and recorded by system        #
#     personnel.                                                        #
#                                                                       #
#     In the course of monitoring individuals improperly using this     #
#     system, or in the course of system maintenance, the activities    #
#     of authorized users may also be monitored.                        #
#                                                                       #
#     Anyone using this system expressly consents to such monitoring    #
#     and is advised that if such monitoring reveals possible           #
#     evidence of criminal activity, system personnel may provide the   #
#     evidence of such monitoring to law enforcement officials.         #
#########################################################################
java.net.ConnectException: Connection refused
        at java.net.PlainSocketImpl.socketConnect(Native Method)
        at java.net.AbstractPlainSocketImpl.doConnect(Unknown Source)
        at java.net.AbstractPlainSocketImpl.connectToAddress(Unknown Source)
        at java.net.AbstractPlainSocketImpl.connect(Unknown Source)
        at java.net.SocksSocketImpl.connect(Unknown Source)
        at java.net.Socket.connect(Unknown Source)
        at java.net.Socket.connect(Unknown Source)
        at java.net.Socket.<init>(Unknown Source)
        at java.net.Socket.<init>(Unknown Source)
        at com.cisco.ca.ss.adminshell.client.ShellClient.main(ShellClient.java:63)
Error occured: could not connect to the command server

[CC Cisco]

Hello Varun,

Are you able to connect to the CLI using the collectorlogin and root users?

Also is your CSPC version, 2.5?

Cesar

[Varun Muthusamy]

Hi Cesar, 

Yes it is the latest version available 2.5.

I have not tried to login using the other credentials yet. 

If I login, anything that I should try? I am back home now, I can test again tomorrow when I reach office. 

[CC Cisco]

Hello Varun,

There is a potential fix for this issue.

Please follow the below instructions to apply the attached patch file:

• Download to your computer the attached file.
• Using a program such as WinSCP, transfer the file into the collector, please use the credentials for collectorlogin to log into WinSCP.
• Place the patch file in the /home/collectorlogin directory for simplicity.
• Log into an SSH session using the collectorlogin user and password.
• Once logged in, please enter the following command to enter root mode:

su -

• When prompted, enter the root password.
• Change directories to /home/collectorlogin by entering the following command:

cd /home/collectorlogin

• Confirm that the patch file is present:

ls -larth

• Unzip the patch file:

unzip  CASP1.6.0.4_SecurityPatch.zip

• Change directory into unzipped directory:

cd  CASP1.6.0.4_SecurityPatch

• Install the patch:

./install.sh

• Wait for the process to complete, about 7-10 minutes.
• After about 10 minutes, please open a new ssh session, this time use the admin credentials.
• Confirm that you are able to log into the admin shell with your admin credentials.

If this does not solve the issue, then more than likely this would need to be looked at by a TAC engineer. If you have a valid NLS1/CSAS contract, please feel free to open a TAC case for further troubleshooting.

Regards,

Cesar

[Varun Muthusamy]

Hello Cesar,

I have the screenshot when I generated the collectorlogin and root credentials, but unfortunately it does not work anymore when I try ssh to it. It has been less than a month since I installed the server.

so, I have installed another vm instance of the collector server and now I am trying to restore the full backup. when i start the full restore, I can see the file is being transferred successfully form the ftp server but when I check the report, the job has failed and the message says "Job aborted due to server restart". Anything I am missing ?

[CC Cisco · Accepted solution]

Hi Varun,

I'll need to investigate what could be causing that issue.

Meanwhile I recommend that you follow the recommendation in this other post which will allow you to backup/restore only the essential elements from your first collector.

https://supportforums.cisco.com/discussion/12881691/cspc-losing-connectivity#comment-11196991

Regards,

Cesar

[Varun Muthusamy]

Thanks, I have restored the data to a new server, do I need to install the security patch CASP1.6.0.4_SecurityPatch.zip still ?

Regards,

Varun

[CC Cisco]

Hi Varun,

I would say go ahead and install it, this will prevent an issue where if you change the GUI's admin password, sometimes this will cause the admin shell not to come up.

Glad you were able to get your new collector up and going.

Regards,

Cesar

[its-networking]

Hi Cesar,

Do you have a similar CASP1.6.0.4_SecurityPatch file for sntc cli access in version 2.6.  I used the patch to get 2.5 admin cli working and it worked well.  I've since upgraded to 2.6 via the cli and now have the same issue back. 

I tried running the patch again but it didn't work this time and I worked out that the java is now 1.8.  I did try updating the check in the install script to look for 1.8 instead of 1.7 but still no go.

I'd appreciate any advice,

thanks

David

[D Kendz]

This process does not work as far as I can tell.  Here's what I did.

1.  Spin up a new CSPC instance via .ova

2.  Set up collectorlogin and root passwords

3.  Create GUI user "NetOps"

4.  Delete user "Admin123"

5.  Log in to NetOps

6.  Change password for "admin" account

7.  Log into CLI

8.  Reboot the CSPC

9.  Log in to GUI using "admin" account (new password)  SUCCESS!!!

10. Log in to CLI using "admin" account FAILED!!! 

    Java error same as before.  I am using different passwords for the GUI and CLI "admin" accounts as I am aware they are NOT the same account so this should not be any issue.  The patch does not work as far as I can tell. 

[Lynden Price]

Hi,

You still have the passwords for "collectorlogin" and "root"? If you do then we can reset the admin password.

Thanks,

Lynden

[cc_support]

I lost my admin password for CLI mode ( I do have admin password for GUI ), do we know what is the default password we set by Cisco for root and collectorlogin.

[CC Cisco]

Hello,

The root and collectorlogin users are by default disabled, if you never enabled them and generated a new password, you will not be able to access them.

Regards,

Cesar

[Dustin Harris]

Hi Cesar,

When the admin or collectorlogin account gets locked trying to login via the cli, how long are they locked for? Is it indefinite?

Thank you.

[Dustin Harris]

When the admin or collectorlogin account gets locked trying to login via the cli, how long are they locked for?