PAM node NTP status appears blank

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

The NTP status is blank.

The status tab was able to display the details of the NTP but unsure what has changed, the NTP Status page now does not display NTP related information at all and the NTP Status tab is a blank page.
Even a refresh does not show the NTP Status
Reboot the appliance but the issue still persists.

 

Environment

All supported versions of CA PAM

Resolution

In some cases:

• The Issue is resolved after removing the default NTP server list and keeping only the customer registered NTP server.
• The issue is related to DNS and you are using a server name that is unresolvable.
• In other cases this problem is caused by an internal corruption and requires deeper investigation at appliance OS level, so opening a support case with Broadcom is required.
• If the affected appliance belongs to a cluster, maybe redeploying it and joining it again to the cluster can be an option for a fast recovery.

Additional Information

Workarounds: (Option A and Option B)

Option A.
- Uncheck the "Synchronize at boot" save the settings
- Check the "Synchronize at boot" save the settings
- Go to the NTP Status Tab and check the details

Option B
- If there exists more than one CA PAM server and any of these other CA PAM servers have the information present in the NTP Status tab, copy over the IP / Name of the NTP server that is being resolved (The IP/Name will be visible under the heading 'remote' on the NTP Status Tab)
- How to identify which of the NTP Server is working, refer to the CA PAM documentation.

Resolution:
Resolved one root cause of this problem:(The below can only be performed by Broadcom Technical Support Team)

1. /etc/ntp.conf get's corrupted. (only had one line)

Put the following inside of it:

restrict 127.0.0.1
restrict ::1
server <ntp server1> iburst
server <ntp server2> iburst

2. netstat -ano | grep 123 
showed nothing binded to the default ntp port (123)

3. Recycle ntp daemon
/etc/init.d/ntp restart

4. Verify NTP binded to port 123
netstat -ano | grep 123

5. In PAM UI >> NTP status show sys.peer