DLP - Firewalled Client generates error "System java.rmi.ServerException: RemoteException occurred in server thread".

Products

• CA Security Command Center
• CA Data Protection (DataMinder)
• CA User Activity Reporting

Issue/Introduction

Description:

Network communication between CA DLP machines depends on ports being correctly allocated. Each machine uses a combination of client and server ports. In order to transfer data, a machine creates a connection between a client port and a server port on a remote machine. If port allocations through a firewall are incorrect and/ or blocked, they may result in errors being generated in the STDerr.log file.

Example:

 <Date Time> System java.rmi.ServerException: RemoteException  occurred in server thread; nested exception is:   java.rmi.ConnectException:  Connection refused to host: <Machine Name> ; nested exception is:  java.net.ConnectException: Connection timed out: connect   at  sun.rmi.server.UnicastServerRef.dispatch(UnicastServerRef.java:292)   at  sun.rmi.transport.Transport$1.run(Transport.java:148)   at  java.security.AccessController.doPrivileged(Native Method)   at  sun.rmi.transport.Transport.serviceCall(Transport.java:144)   at  sun.rmi.transport.tcp.TCPTransport.handleMessages(TCPTransport.java:460)   at  sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run  (TCPTransport.java:701)   at java.lang.Thread.run(Thread.java:534)   at  sun.rmi.transport.StreamRemoteCall.exceptionReceivedFromServer  (StreamRemoteCall.java:247)   at  sun.rmi.transport.StreamRemoteCall.executeCall(StreamRemoteCall.java:223)  at  sun.rmi.server.UnicastRef.invoke(UnicastRef.java:133)   at  wigan.infrastruct.database.DBUser2_Stub.GetFromName(Unknown Source)   at  wigan.infrastruct.database.DBUser.GetFromName(DBUser.java:860)   at  wigan.infrastruct.database.DBUser.GetFromName(DBUser.java:847)   at  wigan.infrastruct.database.DBUser.GetFromName(DBUser.java:897)   at  wigan.infrastruct.database.DBUser.GetFromName(DBUser.java:847)   at  wigan.infrastruct.user.UserServicesServer.LoginEx3(UserServicesServer.java:235  )   at wigan.infrastruct.user.UserServicesServer.LoginEx  (UserServicesServer.java:161)   at  wigan.infrastruct.user.UserServices.LoginEx(UserServices.java:98)   at  wigan.infrastruct.Session.LoginOrCreate  (Session.java:604)   at wigan.infrastruct.Session.<init>(Session.java:242)  at wigan.infrastruct.Infrastruct.CreateSession(Infrastruct.java:2470)  Caused by: java.rmi.ConnectException: Connection refused to host: 

This is caused by an incorrect allocation of TCP/IP ports.

Solution:

To resolve this issue, check that the port allocations specified in the "startup.properties" file on the client and corresponding parent match those opened on the firewall.

For more information on port allocations please refer to:

CA DLP Release 12 Deployment Guide - Page 524
Orchestria 6 Deployment Guide - Page 502
Orchestria 5.0 SP2 Deployment Guide Page - 438

Environment

Release:
Component: DLPAPM