topic Re: Remote Exception when trying to add device in Expedition in Expedition Discussions

Remote Exception when trying to add device in Expedition

arhaars — Mon, 07 Mar 2022 19:07:06 GMT

I'm receiving the error code "Remote Exception" after clicking "save", after entering in the device information of my Panorama appliance after clicking "add" in the Devices TAB. We're running Expedition version 1.2.12 with Spark Dependencies 0.1.3-h2, and best practices 3.33.0. We have applied the fix here >> https://live.paloaltonetworks.com/t5/expedition-discussions/error-when-adding-device/td-p/218547 But it did not resolve the issue.

sudo php /var/www/html/bin/updates/updateSQL.php

I have also confirmed that when the error is received no traffic is leaving the box (so no network/firewall issues). Can someone please advise?

Re: Remote Exception when trying to add device in Expedition

azuniga — Mon, 07 Mar 2022 19:28:07 GMT

Hello,

please check your panReadOrders.log file for the actual error. It should be located within /home/expedition/* likely this error is a bad password or credential input but the log file should confirm this.

Re: Remote Exception when trying to add device in Expedition

arhaars — Thu, 10 Mar 2022 19:46:59 GMT

We received this when checking the panReadOrders.log file:

Fatal error: Uncaught ErrorException: stream_socket_client(): unable to connect to tcp://localhost:5672 (Connection refused) in /var/www/html/libs/vendor/php-amqplib/php-amqplib/PhpAmqpLib/Wire/IO/StreamIO.php:155
Stack trace:
#0 /var/www/html/libs/vendor/php-amqplib/php-amqplib/PhpAmqpLib/Wire/IO/StreamIO.php(157): PhpAmqpLib\Wire\IO\StreamIO->cleanup_error_handler()
#1 /var/www/html/libs/vendor/php-amqplib/php-amqplib/PhpAmqpLib/Connection/AbstractConnection.php(208): PhpAmqpLib\Wire\IO\StreamIO->connect()
#2 /var/www/html/libs/vendor/php-amqplib/php-amqplib/PhpAmqpLib/Connection/AbstractConnection.php(192): PhpAmqpLib\Connection\AbstractConnection->connect()
#3 /var/www/html/libs/vendor/php-amqplib/php-amqplib/PhpAmqpLib/Connection/AMQPStreamConnection.php(60): PhpAmqpLib\Connection\AbstractConnection->__construct('guest', 'guest', '/', false, 'AMQPLAIN', NULL, 'en_US', Object(PhpAmqpLib\Wire\IO\StreamIO), 0, 3)
#4 /var/www/html/libs/PaloAltoNetworks/AmqpWrapper/SimpleReceiver.php(33): PhpAmqpLib\Connection\AMQPStreamC in /var/www/html/libs/vendor/php-amqplib/php-amqplib/PhpAmqpLib/Wire/IO/StreamIO.php on line 155

And from our Ubuntu admin:

Port 5672 is owned by the local MQ server, and it IS up

Re: Remote Exception when trying to add device in Expedition

azuniga — Thu, 10 Mar 2022 20:00:48 GMT

Make sure your firewall has the expedition server white listed as it will make an SSL request from this device. Also the panReadOrders.log file should give you more details for that failure.

Re: Remote Exception when trying to add device in Expedition

manny.mekala — Sat, 18 Mar 2023 22:05:49 GMT

this is most certainly a bug. I managed to work around it though.

Go to your firewall api page "https://<FW MGMT IP ADDRESS>/restapi-doc/#tag/key-generation/paths/~1api~1?type=keygen/get
Use postman (or any other api tool) to generate the API key for ADMIN user. and copy the API key that's returned.
switch to the expedition and when trying to add "Authentication API Keys" - switch the "Auth. Type:" from "username and password" to "API KEY"
Paste the API key here.