Endpoint Protection

 View Only
  • 1.  V12.1.6 SEPM login error "Unexpected Server Error" 0X10010000

    Posted Jul 28, 2015 04:30 PM
      |   view attached

    I log into SEPM, and get the following error.

     

    7-27-2015 3-12-11 PM.png

     

    Once logged in, I cannot see Reports, Monitor, or Home, but can see everything else.

     

    I tried the server configuration wizard, no luck.

     

    I tried the update.bat, no luck.

     

    I checked the scm-server-0.log and found this:

    java.io.IOException: Server returned HTTP response code: 500 for URL: https://TFB-ISBK-01:8445/Reporting/reports/sr-login.php
        at sun.reflect.GeneratedConstructorAccessor112.newInstance(Unknown Source)
        at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
        at java.lang.reflect.Constructor.newInstance(Constructor.java:526)
        at sun.net.www.protocol.http.HttpURLConnection$6.run(HttpURLConnection.java:1676)
        at sun.net.www.protocol.http.HttpURLConnection$6.run(HttpURLConnection.java:1674)
        at java.security.AccessController.doPrivileged(Native Method)
        at sun.net.www.protocol.http.HttpURLConnection.getChainedException(HttpURLConnection.java:1672)
        at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1245)
        at sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(HttpsURLConnectionImpl.java:254)
        at com.sygate.scm.server.task.ScheduledReportingHelper.doRequest(ScheduledReportingHelper.java:447)
        at com.sygate.scm.server.task.ScheduledReportingHelper.doRequest(ScheduledReportingHelper.java:384)
        at com.sygate.scm.server.task.ScheduledReportingHelper.doIntegratedLogin(ScheduledReportingHelper.java:659)
        at com.sygate.scm.server.task.notification.EmailHelper.doMail(EmailHelper.java:130)
        at com.sygate.scm.server.task.notification.EmailWorker.doAction(EmailWorker.java:51)
        at com.sygate.scm.server.task.notification.ActionPerformer.takeActions(ActionPerformer.java:211)
        at com.sygate.scm.server.task.SecurityAlertNotifyTask.processResponses(SecurityAlertNotifyTask.java:5028)
        at com.sygate.scm.server.task.SecurityAlertNotifyTask.processResponses(SecurityAlertNotifyTask.java:4954)
        at com.sygate.scm.server.task.SecurityAlertNotifyTask.processResponses(SecurityAlertNotifyTask.java:4933)
        at com.sygate.scm.server.task.SecurityAlertNotifyTask.clientList(SecurityAlertNotifyTask.java:5556)
        at com.sygate.scm.server.task.SecurityAlertNotifyTask.processNotifications(SecurityAlertNotifyTask.java:1242)
        at com.sygate.scm.server.task.SecurityAlertNotifyTask.execute(SecurityAlertNotifyTask.java:571)
        at com.sygate.scm.server.task.MonitoredTimerTask.run(MonitoredTimerTask.java:41)
        at java.util.TimerThread.mainLoop(Timer.java:555)
        at java.util.TimerThread.run(Timer.java:505)
    Caused by: java.io.IOException: Server returned HTTP response code: 500 for URL: https://TFB-ISBK-01:8445/Reporting/reports/sr-login.php
        at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1627)
        at java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:468)
        at sun.net.www.protocol.https.HttpsURLConnectionImpl.getResponseCode(HttpsURLConnectionImpl.java:338)
        at com.sygate.scm.server.task.ScheduledReportingHelper.doRequest(ScheduledReportingHelper.java:435)
        ... 14 more
    2015-07-28 15:40:37.972 THREAD 30 SEVERE:  in: com.sygate.scm.server.task.SecurityAlertNotifyTask
    com.sygate.scm.server.task.notification.NotificationSystemException: java.io.IOException: Server returned HTTP response code: 500 for URL: https://TFB-ISBK-01:8445/Reporting/reports/sr-login.php
        at com.sygate.scm.server.task.notification.EmailWorker.doAction(EmailWorker.java:53)
        at com.sygate.scm.server.task.notification.ActionPerformer.takeActions(ActionPerformer.java:211)
        at com.sygate.scm.server.task.SecurityAlertNotifyTask.processResponses(SecurityAlertNotifyTask.java:5028)
        at com.sygate.scm.server.task.SecurityAlertNotifyTask.processResponses(SecurityAlertNotifyTask.java:4954)
        at com.sygate.scm.server.task.SecurityAlertNotifyTask.processResponses(SecurityAlertNotifyTask.java:4933)
        at com.sygate.scm.server.task.SecurityAlertNotifyTask.clientList(SecurityAlertNotifyTask.java:5556)
        at com.sygate.scm.server.task.SecurityAlertNotifyTask.processNotifications(SecurityAlertNotifyTask.java:1242)
        at com.sygate.scm.server.task.SecurityAlertNotifyTask.execute(SecurityAlertNotifyTask.java:571)
        at com.sygate.scm.server.task.MonitoredTimerTask.run(MonitoredTimerTask.java:41)
        at java.util.TimerThread.mainLoop(Timer.java:555)
        at java.util.TimerThread.run(Timer.java:505)
    Caused by: java.io.IOException: Server returned HTTP response code: 500 for URL: https://TFB-ISBK-01:8445/Reporting/reports/sr-login.php
        at sun.reflect.GeneratedConstructorAccessor112.newInstance(Unknown Source)
        at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
        at java.lang.reflect.Constructor.newInstance(Constructor.java:526)
        at sun.net.www.protocol.http.HttpURLConnection$6.run(HttpURLConnection.java:1676)
        at sun.net.www.protocol.http.HttpURLConnection$6.run(HttpURLConnection.java:1674)
        at java.security.AccessController.doPrivileged(Native Method)
        at sun.net.www.protocol.http.HttpURLConnection.getChainedException(HttpURLConnection.java:1672)
        at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1245)
        at sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(HttpsURLConnectionImpl.java:254)
        at com.sygate.scm.server.task.ScheduledReportingHelper.doRequest(ScheduledReportingHelper.java:447)
        at com.sygate.scm.server.task.ScheduledReportingHelper.doRequest(ScheduledReportingHelper.java:384)
        at com.sygate.scm.server.task.ScheduledReportingHelper.doIntegratedLogin(ScheduledReportingHelper.java:659)
        at com.sygate.scm.server.task.notification.EmailHelper.doMail(EmailHelper.java:130)
        at com.sygate.scm.server.task.notification.EmailWorker.doAction(EmailWorker.java:51)
        ... 10 more
    Caused by: java.io.IOException: Server returned HTTP response code: 500 for URL: https://TFB-ISBK-01:8445/Reporting/reports/sr-login.php
        at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1627)
        at java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:468)
        at sun.net.www.protocol.https.HttpsURLConnectionImpl.getResponseCode(HttpsURLConnectionImpl.java:338)
        at com.sygate.scm.server.task.ScheduledReportingHelper.doRequest(ScheduledReportingHelper.java:435)
        ... 14 more
    2015-07-28 15:40:37.998 THREAD 30 FINE: select ls.SERIAL_NUM, ls.expire_date as EXPIRE_DATE,lc.RENEWAL_URL,  datediff (day,getdate(),DATEADD(second, ls.expire_date/1000, '19700101')) day, lc.CLIENT_PRODUCT_TYPE from license ls inner join license_chain lc on lc.id = ls.chainid  where  ((datediff (day,getdate(),DATEADD(second, ls.warn_date/1000, '19700101')) < 0 and  datediff (day,getdate(),DATEADD(second, ls.expire_date/1000, '19700101')) in(60,30,15,7)) or  datediff (day,getdate(),DATEADD(second, ls.warn_date/1000, '19700101')) = 0)  and ls.id in ( select top 1 id from license where chainid = ls.chainid order by end_date desc)  and ls.deleted = '0' and ls.type = 'I' order by day
    2015-07-28 15:40:38.000 THREAD 30 FINE: LicenseExpiring(). License Expiring
    2015-07-28 15:40:38.134 THREAD 30 SEVERE:  in: com.sygate.scm.server.task.notification.EmailHelper
    java.io.IOException: Server returned HTTP response code: 500 for URL: https://TFB-ISBK-01:8445/Reporting/reports/sr-login.php
        at sun.reflect.GeneratedConstructorAccessor112.newInstance(Unknown Source)
        at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
        at java.lang.reflect.Constructor.newInstance(Constructor.java:526)
        at sun.net.www.protocol.http.HttpURLConnection$6.run(HttpURLConnection.java:1676)
        at sun.net.www.protocol.http.HttpURLConnection$6.run(HttpURLConnection.java:1674)
        at java.security.AccessController.doPrivileged(Native Method)
        at sun.net.www.protocol.http.HttpURLConnection.getChainedException(HttpURLConnection.java:1672)
        at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1245)
        at sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(HttpsURLConnectionImpl.java:254)
        at com.sygate.scm.server.task.ScheduledReportingHelper.doRequest(ScheduledReportingHelper.java:447)
        at com.sygate.scm.server.task.ScheduledReportingHelper.doRequest(ScheduledReportingHelper.java:384)
        at com.sygate.scm.server.task.ScheduledReportingHelper.doIntegratedLogin(ScheduledReportingHelper.java:659)
        at com.sygate.scm.server.task.notification.EmailHelper.doMail(EmailHelper.java:130)
        at com.sygate.scm.server.task.notification.EmailWorker.doAction(EmailWorker.java:51)
        at com.sygate.scm.server.task.notification.ActionPerformer.takeActions(ActionPerformer.java:211)
        at com.sygate.scm.server.task.SecurityAlertNotifyTask.processResponses(SecurityAlertNotifyTask.java:5028)
        at com.sygate.scm.server.task.SecurityAlertNotifyTask.processResponses(SecurityAlertNotifyTask.java:4954)
        at com.sygate.scm.server.task.SecurityAlertNotifyTask.prepareHTMLAndSendNotificationOfExpiring(SecurityAlertNotifyTask.java:6684)
        at com.sygate.scm.server.task.SecurityAlertNotifyTask.licenseExpiring(SecurityAlertNotifyTask.java:6544)
        at com.sygate.scm.server.task.SecurityAlertNotifyTask.processNotifications(SecurityAlertNotifyTask.java:1318)
        at com.sygate.scm.server.task.SecurityAlertNotifyTask.execute(SecurityAlertNotifyTask.java:571)
        at com.sygate.scm.server.task.MonitoredTimerTask.run(MonitoredTimerTask.java:41)
        at java.util.TimerThread.mainLoop(Timer.java:555)
        at java.util.TimerThread.run(Timer.java:505)
    Caused by: java.io.IOException: Server returned HTTP response code: 500 for URL: https://TFB-ISBK-01:8445/Reporting/reports/sr-login.php
        at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1627)
        at java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:468)
        at sun.net.www.protocol.https.HttpsURLConnectionImpl.getResponseCode(HttpsURLConnectionImpl.java:338)
        at com.sygate.scm.server.task.ScheduledReportingHelper.doRequest(ScheduledReportingHelper.java:435)
        ... 14 more
    2015-07-28 15:40:38.142 THREAD 30 SEVERE:  in: com.sygate.scm.server.task.SecurityAlertNotifyTask
    com.sygate.scm.server.task.notification.NotificationSystemException: java.io.IOException: Server returned HTTP response code: 500 for URL: https://TFB-ISBK-01:8445/Reporting/reports/sr-login.php
        at com.sygate.scm.server.task.notification.EmailWorker.doAction(EmailWorker.java:53)
        at com.sygate.scm.server.task.notification.ActionPerformer.takeActions(ActionPerformer.java:211)
        at com.sygate.scm.server.task.SecurityAlertNotifyTask.processResponses(SecurityAlertNotifyTask.java:5028)
        at com.sygate.scm.server.task.SecurityAlertNotifyTask.processResponses(SecurityAlertNotifyTask.java:4954)
        at com.sygate.scm.server.task.SecurityAlertNotifyTask.prepareHTMLAndSendNotificationOfExpiring(SecurityAlertNotifyTask.java:6684)
        at com.sygate.scm.server.task.SecurityAlertNotifyTask.licenseExpiring(SecurityAlertNotifyTask.java:6544)
        at com.sygate.scm.server.task.SecurityAlertNotifyTask.processNotifications(SecurityAlertNotifyTask.java:1318)
        at com.sygate.scm.server.task.SecurityAlertNotifyTask.execute(SecurityAlertNotifyTask.java:571)
        at com.sygate.scm.server.task.MonitoredTimerTask.run(MonitoredTimerTask.java:41)
        at java.util.TimerThread.mainLoop(Timer.java:555)
        at java.util.TimerThread.run(Timer.java:505)
    Caused by: java.io.IOException: Server returned HTTP response code: 500 for URL: https://TFB-ISBK-01:8445/Reporting/reports/sr-login.php
        at sun.reflect.GeneratedConstructorAccessor112.newInstance(Unknown Source)
        at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
        at java.lang.reflect.Constructor.newInstance(Constructor.java:526)
        at sun.net.www.protocol.http.HttpURLConnection$6.run(HttpURLConnection.java:1676)
        at sun.net.www.protocol.http.HttpURLConnection$6.run(HttpURLConnection.java:1674)
        at java.security.AccessController.doPrivileged(Native Method)
        at sun.net.www.protocol.http.HttpURLConnection.getChainedException(HttpURLConnection.java:1672)
        at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1245)
        at sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(HttpsURLConnectionImpl.java:254)
        at com.sygate.scm.server.task.ScheduledReportingHelper.doRequest(ScheduledReportingHelper.java:447)
        at com.sygate.scm.server.task.ScheduledReportingHelper.doRequest(ScheduledReportingHelper.java:384)
        at com.sygate.scm.server.task.ScheduledReportingHelper.doIntegratedLogin(ScheduledReportingHelper.java:659)
        at com.sygate.scm.server.task.notification.EmailHelper.doMail(EmailHelper.java:130)
        at com.sygate.scm.server.task.notification.EmailWorker.doAction(EmailWorker.java:51)
        ... 10 more
    Caused by: java.io.IOException: Server returned HTTP response code: 500 for URL: https://TFB-ISBK-01:8445/Reporting/reports/sr-login.php
        at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1627)
        at java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:468)
        at sun.net.www.protocol.https.HttpsURLConnectionImpl.getResponseCode(HttpsURLConnectionImpl.java:338)
        at com.sygate.scm.server.task.ScheduledReportingHelper.doRequest(ScheduledReportingHelper.java:435)
        ... 14 more

     

    So it appears Java is having issues on ports.

    I checked the following ports:

    netstat -an |findstr 8445
      TCP    0.0.0.0:8445           0.0.0.0:0              LISTENING

    netstat -an |findstr 8443
      TCP    0.0.0.0:8443           0.0.0.0:0              LISTENING
      TCP    10.10.16.110:8443      10.10.16.110:51101     ESTABLISHED
      TCP    10.10.16.110:51101     10.10.16.110:8443      ESTABLISHED
      TCP    [::]:8443              [::]:0                 LISTENING

     

    Attachment(s)

    txt
    scm-server-0.txt   225 KB 1 version


  • 2.  RE: V12.1.6 SEPM login error "Unexpected Server Error" 0X10010000

    Posted Jul 28, 2015 04:32 PM

    Can you post the scm-server-0.log file? It shoudl contain the error messages needed to troubleshoot.



  • 3.  RE: V12.1.6 SEPM login error "Unexpected Server Error" 0X10010000

    Posted Jul 28, 2015 04:36 PM

    log posted. I can see Tomcat is having an issue with ports, but after the server management wizard, update.bat, and looking at the tomcat config, where should I look next?



  • 4.  RE: V12.1.6 SEPM login error "Unexpected Server Error" 0X10010000

    Posted Jul 28, 2015 07:58 PM

    Please try this:

    1) Run the Management Server Configuration wizard.

    2) Choose NOT to use a recovery file.

    3) In the "Server name" field replace the host name of the server with the IP address of the server.

    4) Complete the wizard and login to the SEPM.



  • 5.  RE: V12.1.6 SEPM login error "Unexpected Server Error" 0X10010000

    Posted Jul 29, 2015 04:11 AM
    Is HTTPS:// added to your trusted sites list?


  • 6.  RE: V12.1.6 SEPM login error "Unexpected Server Error" 0X10010000



  • 7.  RE: V12.1.6 SEPM login error "Unexpected Server Error" 0X10010000

    Posted Jul 29, 2015 04:38 AM

    Hi,

    had this after update from RU4 to RU5.

    Please make sure:

    - Run Configuration Wizard with Service Account (needs Admin- and Loginpermissions)

    - Grant LogonAsAService to Service-Account

    - Grant SeAssignPrimaryTokenPrivilege to Service Account

     

    Should be the solution, spent days/weeks to solve this issue.

     

    Regards,

    Tobias



  • 8.  RE: V12.1.6 SEPM login error "Unexpected Server Error" 0X10010000

    Posted Jul 29, 2015 11:39 AM

    So I walked through all proposed solutions, except for TobiasK's recommendation as I couldn't find an old 2003 toolkit with the NTrights.exe program to try the SeAssignPrimaryTokenPrivilege command and I'm not willing to spend another day doing development work for Symantec.

    Bottom Line - This shouldn't be this hard. I manage 2 small sites with around 100 clients each, and am the only IT staff supporting all users. I don't have DAYS to try to fix applications that break after a simple version upgrade.

    My solution, I blew away the install and will rebuild based on my other site server on the previous version. I didn't want to, but I can't afford to waste time on "beta" software.

    Symantec - If there are this many threads all for the same error message, please either code your error codes more specifically, or ask for a Symhelp.exe export of the relivant information so the software can be patched for the fix. Looking at these posts as referances, they ALL have different solutions for the same error code.

    SAME EXACT ERROR IN LOG FILES AS MINE.

    https://www-secure.symantec.com/connect/forums/unexpected-server-error-sepm-server

    REF OTHER THREADS:

    https://www-secure.symantec.com/connect/forums/symantec-endpoint-protection-manager-unexpected-server-error

    https://www-secure.symantec.com/connect/forums/unexpected-server-error-msg-after-upgrading-sep12ru6

    https://www-secure.symantec.com/connect/forums/symantec-endpoint-protection-manager-unexpected-server-error

    https://www-secure.symantec.com/connect/forums/unexpected-server-error-sepm-server

    https://www-secure.symantec.com/connect/forums/error-login-sepm-console-unexpected-server-error

    https://www-secure.symantec.com/connect/forums/sepm-console-unexpected-server-error

    https://www-secure.symantec.com/connect/forums/severe-unexpected-server-error-symantec-endpoint-protection-11

    https://www-secure.symantec.com/connect/forums/unexpected-server-error-trying-use-sepm

    https://support.symantec.com/en_US/article.TECH200253.html

    http://mcsv2.net/connect/zh-hans/forums/unexpected-server-error-11

    See a trend????

     

     



  • 9.  RE: V12.1.6 SEPM login error "Unexpected Server Error" 0X10010000

    Posted Jul 29, 2015 11:42 AM

    Hi again,

     

    you simply have to put the Serviceaccount to Usergroup (local or SecurityGroup - don't know your config). Thats all to activate SeAssignPrimaryTokenPrivilege

     

    Regards,

    Tobias