SEPM console opens and closes after login
Updated: 21 May 2010 | 33 comments
Hi All
We recently upgraded the SEPM server from 11.4 to 11.5 (without issue), this uses the new Java 6 version of the management console, so on my works PC i went to http://servername:9090 downloaded the java upgrade then downloaded and installed the new SEPM console and it works fine, but on one of our workstations we have an issue whereby i have completed the above steps (and even rebooted etc) but it wont stay logged into the console no matter what account i use, it just logs in loads then exits straight back out to the login screen.
Any ideas anyone?
Cheers
Stew
discussion Filed Under:
Comments
Try to remove all Java
Try to remove all Java installed on your PC and retry the procedures.
Jomar Gonzales
Check the
Check the scm-server-0.log(Program Files\Symantec\Symantec Endpoint Protection Manager\tomcat\logs) file, IIS logs...
Also alter the console timeout settings(Admin--> Servers-->local site properties).....
Regards,
Srinivas H.P.
HCL Infosystems Ltd
SEPM Login
This generally happens because of ODBC connection not established correctly.
Java Static Heap is not up to the mark.
User Group Everyone not added with full permissions into the inetpub folder properties.
To solve this issue, follow the steps below:
Increase the JVM static heap to 1GB
Locate the following registry key:
HKLM\SYSTEM\CurrentControlSet\Services\semsrv\Parameters\
Locate the following keys:
JVM Option Number 0
JVM Option Number 1
Adjust the key values upward, and match the key values.
Create a 1GB static heap, set JVM Option Number 0 to -Xms1024m, and set JVM Option Number 1 to -Xmx1024m
Restart the Symantec Endpoint Protection Manager service.
Thanks & Regards Sandip C Sali
on the Login screen Type the
on the Login screen
Type the IP address of the system where it says Localhost:8443 (IP:8443)
It worked for me
Hi
I agree with acretian,
check if resolves the server name.
put IP address and try should be able to log in.
if that works, add ip in your host file
Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq
Thanks everyone, no luck so
Thanks everyone, no luck so far though, done the following :-
removed and reinstalled java on affected workstation
increased my static heap to 1gb on server, service restarted
confirmed that name of the server is in the login screen, and name resolves.
Its definatley something local on this machine, as all my other remote consoles work. Also its something specific to running it as the specific user, as to test i did a 'run as' and use the admin account on IE, opened up http://servername:9090, installed the console then ran it and it opens fine, but close it off and open it as the normal domain user and it fails again. It just logs in then back out again, this is using any account to try and log into the SEPM console....
hmmmm what next?
Thanks everyone, no luck so
Thanks everyone, no luck so far though, done the following :-
removed and reinstalled java on affected workstation
increased my static heap to 1gb on server, service restarted
confirmed that name of the server is in the login screen, and name resolves.
Its definatley something local on this machine, as all my other remote consoles work. Also its something specific to running it as the specific user, as to test i did a 'run as' and use the admin account on IE, opened up http://servername:9090, installed the console then ran it and it opens fine, but close it off and open it as the normal domain user and it fails again. It just logs in then back out again, this is using any account to try and log into the SEPM console....
hmmmm what next?
Hi sometimes this happens ,
Hi
sometimes this happens , So try using the ip instead of the name of the server on the login screen. This happened to me once and used IP instead of name and it worked fine
Java on IE
Try this. Check if Java is enabled on your IE configuration. Open your IE. Go to Tools > Internet Options > Advanced. Check the Java checkbox.
Jomar Gonzales
Any error in event viewer?
Any error in event viewer? Also try to login from windows admin account....
Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind
tried with the IP and still
tried with the IP and still no luck.
Checked java enabled in IE config, already ticked.
No errors in the windows event log.
From my admin account it works fine though....
Local Admin Account Group
Hello! Check your domain ID if added in the local admin group.
Jomar Gonzales
If you go to strt->run>
If you go to strt->run> %temp% , do you see a file called scm-ui.log?
This log file records all the interactions with the UI.
Aniket
Aniket, heres the log
Aniket, heres the log contents :-
English
LoginPanel->getLoginAttr: file: C:\DOCUME~1\monitor\LOCALS~1\Temp\sesm.xml file exists: true
LoginPanel->getLoginAttr: attr: locationCounting value: true
LoginPanel->getLoginAttr: file: C:\DOCUME~1\monitor\LOCALS~1\Temp\sesm.xml file exists: true
LoginPanel->getLoginAttr: attr: getAllGroupLocations value: true
LoginPanel->getLoginAttr: file: C:\DOCUME~1\monitor\LOCALS~1\Temp\sesm.xml file exists: true
LoginPanel->getLoginAttr: attr: option value: less
LoginPanel->getOptionButton option = less
LoginPanel->getLoginAttr: file: C:\DOCUME~1\monitor\LOCALS~1\Temp\sesm.xml file exists: true
LoginPanel->getLoginAttr: attr: locationCounting value: true
LoginPanel->getLoginAttr: file: C:\DOCUME~1\monitor\LOCALS~1\Temp\sesm.xml file exists: true
LoginPanel->getLoginAttr: attr: getAllGroupLocations value: true
############# Begin Login ###############
GUIManager>> login: After session got cleaned up!
============= After login: Begin =============
time=2009-10-26 09:30:12
>>> GetObject(getObjectByGUID): SemSite 36CD88C70A960A8E00937CEAEE875C82 1256513412382, duration: 0.032s (32.0)
============= Set up reporting once =============
============= After login: elapsed (secs): 0.39
Reporting login start...
>>> GetObject(getObjectByGUID): SemConfigRoot B655E64D0A320801000000E164041B79 1256513412428, duration: 0.031s (31.0)
>>> GetObject(getObjectByGUID): SemDomain 28F4B7BA0A960A8E01873AD9AFA5FE05 1256513412475, duration: 0.047s (47.0)
>>>MainPanel: CreateHomePanel: Duration: 0.0s (0.0ms)
============= Got lock on PHP session ID in (secs): 2
>>>MainPanel: CreateMonitorPanel: Duration: 0.016s (16.0ms)
>>>MainPanel: CreateReportPanel: Duration: 0.0s (0.0ms)
>>>MainPanel: CreatePolicyPanel: Duration: 0.0s (0.0ms)
>>>MainPanel: CreateComputerUserPanel: Duration: 0.015s (15.0ms)
>>>MainPanel: CreateAdminPanel: Duration: 0.032s (32.0ms)
MainPanel::Button clicked begin
MainPanel::Button clicked end: [Product Overview]: 1256513415534, duration: 0.0s (0.0)
############# Ater Login ############### 1256513415550, duration: 3.574s (3574.0)
Response code after sending command for JNDI: 0
Stopping all background threads in console...
Mon Oct 26 09:30:16 GMT+10:00 2009: Not Tracking User Interaction Any Longer
Mon Oct 26 09:30:16 GMT+10:00 2009: Not Monitoring Server System Log Any More
>>> GetStateObject: AdministratorState 7E50E2EB0A960A8E001B380C859D348C 1256513416439, duration: 0.015s (15.0)
>>> UpdateStateObject com.sygate.scm.common.configobject.schema.AdministratorState 84C6C4060A960A8E01D95BB51B9DFC12 1256513416486, duration: 0.047s (47.0)
Logging off...
Logoff successfully!
Mon Oct 26 09:30:16 GMT+10:00 2009Not refreshing Data Cache any longer
LoginPanel->getLoginAttr: file: C:\DOCUME~1\monitor\LOCALS~1\Temp\sesm.xml file exists: true
LoginPanel->getLoginAttr: attr: option value: less
LoginPanel->getOptionButton option = less
for me this happens when i
for me this happens when i set internet explorer settings to use a proxy server. Remove proxy if exists and see
Removed the proxy settings in
Removed the proxy settings in IE, still no luck :(
as said by jomargonzales try
as said by jomargonzales
try to add the domain account to the local admin group and check what happens.
If its not working, try running a repair install and check
It was already in the local
It was already in the local admin group, must have been done for something else previously.
When you say repair install, not sure what you mean, ive tried uninstalling Java and the SEPM console, rebooting then reinstalling but no luck. Its gotta be something to do with this new version of java as the SEPM console worked before back in MR4, its only the new RU5 update that uses the new java that is having the problem... hmmmm damn java
When you run the program as
When you run the program as local admin it works, Can you try it on a different PC and see whether it works also make sure it has a lower version of Java
I had the same issue and the
I had the same issue and the fix was to back date to Java 6.13:
Hope this helps,
Bryon
i was hopeful that would fix
i was hopeful that would fix the issue Bryon but still no luck :( After it re-downloaded the management console when i downgraded java it still does the same, login then straight back out.
Hi, Have you tred putting in
Hi,
Have you tred putting in x.x.x.x:8443 at the login screen instead of localhost:8443?
Also, you can try with the servername:8443 as well.
Aniket
yeah, tried both the host
yeah, tried both the host name and the IP, still the same problem
Vista?
I'm not sure if your workstation is Vista, but in Vista I believe the remote console required the "Run as Administartor" option.
nah, windows XP
nah, windows XP
Do you have any IE security
Do you have any IE security group policies (or directly configred security settings) that might cause issues? If so, can you try from a "clean" computer without those settings. Any custom Java certificate configurations in use?
Eric C. Lukens IT Security Policy and Risk Assessment Analyst University of Northern Iowa
When you use RunAs to open
When you use RunAs to open Remote Console, do you log in to the Remote Console with the same account as the one that normally fails or the one that you used to open the console? Is your DB embedded? Do you bounce authentication off a LDAP server (AD)?
when i use the run as, i can
when i use the run as, i can log into the console with any account ok. When i dont use run as i cannot log in with any account.
The DB is a remote SQL. and yes authentication is AD.
Is your RunAs account Local
Is your RunAs account Local admin or Domain Admin? Check to see if there are any group policies etc... that might be applied to just this system and not being applied to the other systems around it. The policy may not apply to the domain admin account). Since, you are able to access the program I’d assume that it’s not Java or the user account.
Maybe one of the Symantec guy’s can chime in and let us know what else may make the Remote Console itself need elevated privileges to run.
Go to start -->RunType
Go to start -->Run
Type rsop.msc
It will give you the list of policies
currently applied to your system
Do the same in other pc of which you
are able to access the sepm
Compare and fin out which policy is
blocking and change that policy in domain
Take special care abut the policies which is related to network.
Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind
Hi Team, If the issue is just
Hi Team,
If the issue is just local and all others are working with their present configs..
Why not replicate the profiles of the other working PC then you wouldn't have a hard time configuring the issue...
Re-image... If possible...
Because there might be a setting that was change prior to you using the pc for SEPM...
thanks...
Nel Ramos
Thanks for everyones
Thanks for everyones thoughts.
We do have different GPOs applied but none relating to security or java, just things like screensaver on and stuff like that.
The run as account i used when it works is a domain admin, where as the normal user account is a local admin only, i cant see how domain admin rights needs to be granted to run a java console though.
And re-imaging a machine is a bit out there, just to get a console working on one workstation, we would probably just not use it.
Its something java related, and seems like permissions even though the user is local admin but i cant for the life of me figure out what it is. Especially as the console upgrade worked on our other workstations.
Might never get to the bottom of this one then.... :(
If you're convinced
If you’re convinced that it’s a Java issue try playing around with the different versions of Java. The issue I had was that any version of Java above 6.13 did not work and gave the same symptom as you’re seeing. One difference in what I saw and you're seeing is that I was unable to login using any account.
As a test you may want to try moving the workstation under a group where no policies are applied and see if that helps.
Other than that I’m out of ideas too. I’m curious as to what the problem turns out to be, so if you get it resolved please post it. Good luck
Would you like to reply?
Login or Register to post your comment.