Remote Exception when trying to add device in Expedition

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Remote Exception when trying to add device in Expedition

L0 Member

I'm receiving the error code "Remote Exception" after clicking "save", after entering in the device information of my Panorama appliance after clicking "add" in the Devices TAB. We're running Expedition version 1.2.12 with Spark Dependencies 0.1.3-h2, and best practices 3.33.0. We have applied the fix here >> https://live.paloaltonetworks.com/t5/expedition-discussions/error-when-adding-device/td-p/218547 But it did not resolve the issue.

sudo php /var/www/html/bin/updates/updateSQL.php

 I have also confirmed that when the error is received no traffic is leaving the box (so no network/firewall issues). Can someone please advise? 

4 REPLIES 4

L4 Transporter

Hello,

 

please check your panReadOrders.log file for the actual error. It should be located within /home/expedition/* likely this error is a bad password or credential input but the log file should confirm this.

L0 Member

We received this when checking the panReadOrders.log file:

 

Fatal error: Uncaught ErrorException: stream_socket_client(): unable to connect to tcp://localhost:5672 (Connection refused) in /var/www/html/libs/vendor/php-amqplib/php-amqplib/PhpAmqpLib/Wire/IO/StreamIO.php:155
Stack trace:
#0 /var/www/html/libs/vendor/php-amqplib/php-amqplib/PhpAmqpLib/Wire/IO/StreamIO.php(157): PhpAmqpLib\Wire\IO\StreamIO->cleanup_error_handler()
#1 /var/www/html/libs/vendor/php-amqplib/php-amqplib/PhpAmqpLib/Connection/AbstractConnection.php(208): PhpAmqpLib\Wire\IO\StreamIO->connect()
#2 /var/www/html/libs/vendor/php-amqplib/php-amqplib/PhpAmqpLib/Connection/AbstractConnection.php(192): PhpAmqpLib\Connection\AbstractConnection->connect()
#3 /var/www/html/libs/vendor/php-amqplib/php-amqplib/PhpAmqpLib/Connection/AMQPStreamConnection.php(60): PhpAmqpLib\Connection\AbstractConnection->__construct('guest', 'guest', '/', false, 'AMQPLAIN', NULL, 'en_US', Object(PhpAmqpLib\Wire\IO\StreamIO), 0, 3)
#4 /var/www/html/libs/PaloAltoNetworks/AmqpWrapper/SimpleReceiver.php(33): PhpAmqpLib\Connection\AMQPStreamC in /var/www/html/libs/vendor/php-amqplib/php-amqplib/PhpAmqpLib/Wire/IO/StreamIO.php on line 155

 

And from our Ubuntu admin:

 

Port 5672 is owned by the local MQ server, and it IS up

L4 Transporter

Make sure your firewall has the expedition server white listed as it will make an SSL request from this device. Also the panReadOrders.log file should give you more details for that failure.

L0 Member

this is most certainly a bug. I managed to work around it though.

Go to your firewall api page "https://<FW MGMT IP ADDRESS>/restapi-doc/#tag/key-generation/paths/~1api~1?type=keygen/get
Use postman (or any other api tool) to generate the API key for ADMIN user. and copy the API key that's returned.
switch to the expedition and when trying to add "Authentication API Keys" - switch the "Auth. Type:" from "username and password" to "API KEY"
Paste the API key here.

  • 2723 Views
  • 4 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!