Bit us at 2:38 AM, took until 5 AM before I got called. By the time I got to it the necessary correct update was in place so the policy server restart got us on the air again.
Pretty tempted to block CP access to the CP update site so that we can open it up at times more convenient for us. We're so new to Aruba and ClearPass that we're not even using the feature. Definitely want to see syslog messages for this activity. Going to have to activate SNMP traps. On Wed, Oct 11, 2017 at 5:43 PM, Joachim Tingvold <joac...@tingvold.com> wrote: > On 11 Oct 2017, at 19:01, Ferguson, Michael wrote: > >> I didn’t see any (until Chad posted later) and so we thought our issue >> was more isolated. We wasted 20 minutes of valuable MTTR time collecting >> Server Logs when all we needed to do was start the “Policy server” service. >> > > "Only start the Policy Server" was not the case for most of us. The bad > update came, followed by failure of the "Policy Server". CPPM tried to > restart it (entries in event viewer), but seems to only try that for a > pre-defined number of times before "giving up", at which point the "Policy > Server" becomes "permanently" stopped (regardless of updates, unless > manually started). > > In our case, the bad update came in at around 09:03 CEST, we discovered it > a few minutes later, went on call with Aruba/HPE support (which after about > 10-15 minutes could tell us that "the whole world has the same issue", more > or less). At about 10:10 CEST a new update came, followed by yet another > update at 10:50 CEST or so. At this point we had an Aruba-engineer on the > phone, but even when starting "Policy Server" manually, it shut down after > a few seconds. It wasn't until a third update, at around 11:23 CEST, that > the service remained running after a manual start. We had to manually start > it on all members in the cluster, for all our clusters. > > Fun times (-: > > -- > Joachim > > > ********** > Participation and subscription information for this EDUCAUSE Constituent > Group discussion list can be found at http://www.educause.edu/discuss. > ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss.
