408 null null fail to get config file error from A2A script

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

We are calling the cspmclient binary from within a script, e.g. "$CSPM_CLIENT_HOME/cspmclient/bin/cspmclient A2Aalias false" but get the following error:

408 null null, fail to get config file: /opt/cloakware/cspmclient/config/cspm_client_config.xml

This is the wrong path, missing the "catech" subdirectory. The CSPM_CLIENT_HOME home variable is set correctly to /opt/cloakware/catech in the script, and the script is mapped correctly in PAM.

Environment

Release : Applies to all PAM release as of Jan 2024

Component : PRIVILEGED ACCESS MANAGEMENT

Cause

The CSPM_CLIENT_HOME variable was set in the shell script, but not exported and therefore not passed into the cspmclient binary. If the variable is not set, the A2A client uses default /opt/cloakware on Linux/Unix.

Resolution

Make sure to not only set CSPM_CLIENT_HOME in your shell script, but also export it:

 

CSPM_CLIENT_HOME=/opt/cloakware/catech

export CSPM_CLIENT_HOME

 

Additional Information

The error may be observed if folders under cspmclient, such as the "bin" folder that includes the script to source environment variables, have incorrect permissions. These folders should have 755 permissions:

 

[root@a2aserver cspmclient]# ls -l
total 12
drwxr-xr-x. 2 root root  165 May  3  2023 bin
drwxr-xr-x. 3 root root   70 Jan 18 18:01 config
drwxr-xr-x. 3 root root  258 Jan 19 16:55 examples
drwxr-xr-x. 2 root root 4096 Jan 18 18:00 lib
-rw-r--r--. 1 root root 8162 May  3  2023 license.txt
drwxr-xr-x. 2 root root   60 Jan 18 18:12 log
drwxr-xr-x. 2 root root   31 May  3  2023 tools
drwxr-xr-x. 2 root root   22 Jan 18 18:01 var