topic Re: Problem with CVPND in Firewall and Security Management

Problem with CVPND

Ardenvil — Fri, 02 Oct 2020 06:07:47 GMT

Hello!

I have a problem with the CVPND daemon on a VSX R80.40 cluster after updating JHF Take from 77 to 78.
The VS4 has Mobile Access blade enabled and SNX portal configured, which is not available after update.

1.On both nodes of the VSX cluster, the cpwd_admin list command shows the following outputs:

VSX-1:

VSX-2:

2.After starting the debug of CVPND daemon, the following logs are displayed in cvpnd.elg:

Line 14197: [30 Sep 15:44:06][CONF_READ] [CVPN_INFO] CvpnIS::SetDataReader::getField: Obtain the field: 'citrixStrictTicketEnforcement'
Line 14198: [30 Sep 15:44:06][CONF_READ] [CVPN_ERROR] CvpnIS::SetDataReader::getField: Could not obtain the field: citrixStrictTicketEnforcement
Line 14199: [30 Sep 15:44:06][ANY] Exception: SetDataReader::getField: Could not obtain the requested field - field name is: citrixStrictTicketEnforcement
Line 14200: [30 Sep 15:44:06] Exception: SetDataReader::getField: Could not obtain the requested field - field name is: citrixStrictTicketEnforcement - CVPND aborting

'
3.What is the reason for these messages?

Re: Problem with CVPND

MartinTzvetanov — Fri, 02 Oct 2020 07:27:37 GMT

Do you have a Citrix application published in Mobile portal?

Re: Problem with CVPND

Ardenvil — Fri, 02 Oct 2020 07:35:30 GMT

No.

Re: Problem with CVPND

Alex- — Fri, 02 Oct 2020 08:04:47 GMT

I've got exactly the same issue since Take 78 on VSX, and opened a TAC case for some days but no news for now.

Re: Problem with CVPND

G_W_Albrecht — Fri, 02 Oct 2020 08:11:02 GMT

The same issue at our customers - Take 78 kills MAB, it seems. Also TAC case open but no solution yet...

Re: Problem with CVPND

eakselrod — Fri, 02 Oct 2020 14:05:36 GMT

Hello Ardenvil,

Fix for this issue will be part of the next jumbo release.

In the meantime please test if the following procedure help resolve the issue:

---
1. Connect to command line on VSX Gateway.
2. Log in to Expert mode.
3. For each involved Virtual System:
4. Backup the current cvpnd_internal_settings.C file in the context of the involved Virtual System:
[Expert@HostName:0]# vsenv <VSID>
[Expert@HostName:<VSID>]# cp $CVPNDIR/conf/cvpnd_internal_settings.C $CVPNDIR/conf/cvpnd_internal_settings.C_bck
5. Copy the cvpnd_internal_settings.C file from the context of VS0 (VSX Gateway itself) to the context of the involved Virtual System:
[Expert@HostName:<VSID>]# cp $CVPNDIR/conf/cvpnd_internal_settings.C $CVPNDIR/CTX/CTX<VSID>/conf/cvpnd_internal_settings.C
for example: cp $CVPNDIR/conf/cvpnd_internal_settings.C $CVPNDIR/CTX/CTX00002>/conf/cvpnd_internal_settings.C
Assign the required permissions to the copied file in the context of the involved Virtual System:
[Expert@HostName:<VSID>]# chmod 640 $CVPNDIR/CTX/CTX<VSID>/conf/cvpnd_internal_settings.C
Restart Mobile Access services:
[Expert@HostName:<VSID>]# cvpnrestart

Re: Problem with CVPND

Ardenvil — Mon, 05 Oct 2020 06:47:17 GMT

Hello, Eakselrod!

Thanks for your help, but unfortunately I cannot test your suggested procedure. Because I already reverted the VSX cluster using the snapshot taken before the JHF Take 78 update and now the MAB blade is working again.

Re: Problem with CVPND

G_W_Albrecht — Wed, 07 Oct 2020 09:59:47 GMT

This fix is included in R80.40 Jumbo Ongoing take 83.

Re: Problem with CVPND

eakselrod — Wed, 07 Oct 2020 12:33:29 GMT

sk169877 was published about this issue.