Threat analytics scheduled backup is not executed

Products

• CA Threat Analytics for PAM

Issue/Introduction

When you go to Threat analytincs and schedule a backup, nothing happens, this backup is not launched despite is not appearing any error message in the GUI

Manual backup works fine

Environment

Threat Analytics 2.4 and 2.5

Cause

File /var/spool/cron/crontabs/interlock contains the CRON job as configured on the Backups page, but it had 644 file permissions and therefore CRON ignored it. Changing permissions to 600 and restarting cron fix the problem.

Resolution

Run the following steps, you can take a look at TA PAM documentation as suggested below :

• Go to the VM console. If the blue menu shows, use CTRL+ALT+F2 as instructed in PAM documentation to get to the login shell.
• Logon as interlock and run command "chmod 600 /var/spool/cron/crontabs/interlock". Confirm with "ls -l /var/spool/cron/crontabs/interlock" that permissions have changed. Use "cat /var/spool/cron/crontabs/interlock" to confirm that the cron job in the file shows the right run time.
• Run command "sudo systemctl restart cron"
• Wait for the next run time and see if the backup now gets created. Give it a few minutes after the scheduled time before checking.