can't unsubscribe DH__ from DMS__

book

Article ID: 140349

calendar_today

Updated On:

Products

CA Privileged Access Manager (PAM) CA Privileged Access Manager - Cloakware Password Authority (PA) PAM SAFENET LUNA HSM CA Privileged Access Manager - Server Control (PAMSC)

Issue/Introduction

Customer needs to remove a Distribution Server from its current configuration to the DMS but sepmd -u DMS__ [email protected]<host> does not work with error

"Failed removing [email protected]<host> from Policy Model DMS__Subscriber does not exist."

 

Cause

Starting with CA PIM 12.8 the communication path has changed. You cannot directly unsubscribe the DH__ from the DMS__.


Environment

Release : 14.0 +

Component : CA PAM SERVER CONTROL 

Release : 12.8 - 14.0

Component : CA Privilege Identity Manager 

Resolution

Steps taken: On ENTM server: 



1) sepmd -L DMS__     (This displays each of the Distribution hosts connected to
the DMS)


Note: if the [email protected] you are removing has pending messages you
should clear the messages (https://localhost:8161)


 

2) sepmd -u DMS__ "Topic: ac_server_to_server_broadcast (DH)"      (This will remove all server to server message queue subscriptions)\




  3) sepmd -L DMS__       (Verify the DMS is cleared)



4) sepmd -smq DMS__ -predefined ServerToServerBroadcast -destination DH    (Adds the topic subscription to the DMS)



 5) sepmd -L DMS__       (Verify the topic is added)


6) dmsmgr -sync self    (Subscribe the ENTM host back to the DMS)


 Note: You will need to run this command on each DH you wish to re-subscribe to the DMS


7) sepmd -L DMS__        (Verify it was successful)



8) sepmd -L DH__WRITER       (Verify the DH__WRITTER is set properly)




Attachments