ERROR: CA DRAS server is not available for security check Web Viewer 12.1

Products

• Output Management Web Viewer

Issue/Introduction

At an attempted logon, users receive the following message:

CA DRAS Server is not available for the security check function. Contact your System Administrator.

Normally, no users will be able to login until System Admin intervention resolves the issue.  

Environment

CA DRAS, CA CCITCP, CA CCISSL, CA VIEW, CA DISPATCH, CA BUNDL

Cause

This message is generally caused by one or more of these conditions: 

• Heap Size is too small (this will be intermittent generally)
• A failure in the CCI connection to DRAS
• Change in the location of the CCITCP/SSL server
• Incorrect configuration
• The primary DRAS license server being hung or down
• A temporary network problem
• Backleved maintenance
• Timeouts not set appropriately for usage

Resolution

If this was previously working and is intermittent or results are unpredictable:
Users are seeing this from time to time.

• Please review  KB000009663 to check and increase your heap size if needed: CA Web Viewer 12.1 Check & Increase Java Heap Size

If this is the first time you are bringing up Web Viewer:

• Make sure that you have the 4Q LMPKEY applied on the LPAR where the DRAS is running.  The primary DRAS is you one that was selected during configuration with the configtool.  If you have questions about this, contact Broadcom Support for more information.

• Rerun the configtool and select system configuration, followed by CCI.  Fill in the values, or accept the ones that you already entered and test.
  This will verify the CCITCP or CCISSL is up and running.  If correct, Save.

• Check your WVProfile.properties in the config subdirectory under your install directory for the DRAS parameters to verify that they are correct:

  • LICENSE.SystemID= The name of the LPAR where the DRAS license server is running.

  • LICENSE.DRASServer=   The name of the DRAS server.  You can find it in the DRAS log, for example: Server ID          = DRASSVR 

If they are not correct, rerun the configtool and after selecting system configuration, select DRAS to do discovery. When the discovery comes back with a list,
select the number of the server that you want.  Do not select "No Change".

If this was previously working:

1. Retry the connection attempt to assure the issue was not a temporary network condition
2. Rerun the configtool and select system configuration, followed by CCI.  Fill in the values, or accept the ones that you already entered and test.
   This will verify the CCITCP or CCISSL is up and running.  If correct, Save.
3. Otherwise, recycle DRAS.  If this resolves the problem, do NOT recycle Web Viewer.  Make a note that this is what restored functionality
4. If reycyling DRAS does not resolved the problem recycle Web Viewer using Tomcat or Websphere.
5. Make sure you have the latest build of Web Viewer.  This has updated CCI logic for better recovery in the event of a broken connection plus added error logging.
6. Follow these instructions to increase the idle timeout value for CCI:
   How to Increase idle timeout value with CA CCISSL and CCITCP

7. If you still have problems, please setup CCI client side logging as follows and contact Broadcom Support

a.   Edit OmCCITrace.cfg, in your <CAOMWV12_HOME>/config folder and find the line:  

    log4j.category.com.ca.ccs.cciclient.cci.CCISocket=ERROR, A1

c.   Replace the line with:

      log4j.category.com.ca.erm.cciclient=ERROR, A1

d. Edit OmJDrasTrace.cfg and add this statement at the bottom

    log4j.logger.com.ca.omgmt.drascci.cci.OmCCIConnectionManager=DEBUG     
 

e. Wait three minutes for CA OM Web Viewer to get the updated logging settings

3.   Attempt to reconnect

4.   Your logs with be in <CAOMWV12_HOME>/logs

Additional Information

Please contact Broadcom Support if you are still having the problem.