PMDB policy push is not working

Products

• CA Privileged Identity Management Endpoint (PIM)

Issue/Introduction

Policy push is not working from the PMDB but adding them manually is working.

Cause

Issue is related to DNS resolution. The "resolv.conf" contains a list of DNS servers to request updates from. Based on the load order and the error conditions, when a DNS server is having issues the problems resolving host names can cause programs like “seos” to have performance issues as well.

The delays the system route command had are symptomatic of the problems seos would have. The route command only needed to display 3 routes and its issue was clearly noticeable. Seos has thousands of commands to send when trying to subscribe to a PMD. The impact of a DNS issue would be much greater in "seos" than route. 

Resolution

 

Changing the load order of the DNS servers  resolves the issue in other servers on the same network. The route command works properly after subscribing the node again.