Bigfix – Error – “The specified target is unknown or unreachable”

Background

Trying to configure our BigFix Application Server, but running into the error pasted below.

Error

Image

failedToConnectTheSpecificTargetIsUnknown_20180713_0400PM [BrushedUp

Textual


Failed to connect to https://bigfixsrv:52311:
Windows Error 0x80090303

Remediation

Network

netstat

Command


netstat -an | find "52311"

Explanation

Noticed network connections on our Application’s port ( 52311).

Active Directory

Service Principal Name ( SPN )

setspn

Overview

SPN is formatted as such :-

serviceclass/host:port servicename

Here is a quick breakdown of each element

  1. Serviceclass
    • For Bigfix, the service class registered is iem
  2. Host
    • The computer name
  3. Port
    • If other than the default port number for the application
  4. Service Name
    • It our case it will be the Active Domain Account that our service will be running under

 

Syntax
Syntax – List

REM List SPN entries for computer
setspn -L [computer]

Syntax – Add

REM Add iem account for computer
setspn -S iem/[computer] [user]

Sample

setlocal

set "_comp=BIGFIXSRV"
set "_compFQDN=BIGFIXSRV.LAB"
set "_user=LAB\servicebf"

REM Remove Previous iem account ( Computer )
setspn -D iem/%_comp% %_comp%

REM Remove Previous iem account ( FQDN )
setspn -D iem/%_compFQDN% %_comp%

REM Add iem account (Computer) 
setspn -S iem/%_comp%  %_user%

REM Add iem account  ( FQDN )
setspn -S iem/%_compFQDN% %_user%

REM List spn for computer
setspn -l %_comp%

REM List spn for user
setspn -l %_user%


endlocal

References

  1. IBM
    • Support
      • Pass-Through Authentication failing
        Link
    • IBM Knowledge Center \ SSPS Modeler  \ Configure Single Sign-On
      • The Service Principal Name
        Link
  2. Microsoft
    • Setspn
  3. Viruk67 – You Want It When!
    • Setting the NetworkService as an SPN account
      Link

Leave a Reply

Please log in using one of these methods to post your comment:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

w

Connecting to %s