PAM Cluster does not turn ON

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

I get the following error message when trying to turn the PAM Cluster ON:

Error: PAM-CMN-5142: Save to cluster failed for following reasons: PAM-CMN-5136: XXX.YYY.ZZZ.10 STATUS OK. PAM-CMN-5136: XXX.YYY.ZZZ.11 STATUS OK. PAM-CMN-5136: XXX.YYY.ZZZ.12 STATUS OK. PAM-CMN-5135: AAA.BBB.CCC.1 SAVING FAILED - PAM-CMN-5103: CAN NOT CONNECT TO MEMBER: AAA.BBB.CCC.1. PAM-CMN-5135: AAA.BBB.CCC.2 SAVING FAILED - PAM-CMN-5103: CAN NOT CONNECT TO MEMBER: AAA.BBB.CCC.2.

Environment

Any PAM version.

Resolution

Set the VIP for the primary and secondary cluster sites properly, this is belonging to the same subnet of the nodes in its site. In the above example they can be, for instance, XXX.YYY.ZZZ.13 for the primary site and AAA.BBB.CCC.3 for the secondary site.

In the 'Configuration / Clustering / Local Settings' pane within the PAM Client:

• Save the cluster configuration locally on the Primary server of the primary site by pressing the "SAVE CONFIG LOCALLY".
• Save the cluster configuration to all the cluster nodes by pressing  the "SAVE TO CLUSTER".
• Turn the cluster ON by pressing the "TURN CLUSTER ON" button.

Solution 2:

"PAM-CMN-5103: CAN NOT CONNECT TO MEMBER" can also be caused due to an IP issue.  If your IP is invalid for the site it is trying to connect to you will see this the "5103" message.  Correct the IP and save to cluster again. 

Additional Information

See also: Configure a Cluster