Remote Exception when trying to add device in Expedition

[arhaars]

I'm receiving the error code "Remote Exception" after clicking "save", after entering in the device information of my Panorama appliance after clicking "add" in the Devices TAB. We're running Expedition version 1.2.12 with Spark Dependencies 0.1.3-h2, and best practices 3.33.0. We have applied the fix here >> https://live.paloaltonetworks.com/t5/expedition-discussions/error-when-adding-device/td-p/218547 But it did not resolve the issue.

sudo php /var/www/html/bin/updates/updateSQL.php

 I have also confirmed that when the error is received no traffic is leaving the box (so no network/firewall issues). Can someone please advise? 

[azuniga]

Hello,

please check your panReadOrders.log file for the actual error. It should be located within /home/expedition/* likely this error is a bad password or credential input but the log file should confirm this.

[arhaars]

We received this when checking the panReadOrders.log file:

Fatal error: Uncaught ErrorException: stream_socket_client(): unable to connect to tcp://localhost:5672 (Connection refused) in /var/www/html/libs/vendor/php-amqplib/php-amqplib/PhpAmqpLib/Wire/IO/StreamIO.php:155
Stack trace:
#0 /var/www/html/libs/vendor/php-amqplib/php-amqplib/PhpAmqpLib/Wire/IO/StreamIO.php(157): PhpAmqpLib\Wire\IO\StreamIO->cleanup_error_handler()
#1 /var/www/html/libs/vendor/php-amqplib/php-amqplib/PhpAmqpLib/Connection/AbstractConnection.php(208): PhpAmqpLib\Wire\IO\StreamIO->connect()
#2 /var/www/html/libs/vendor/php-amqplib/php-amqplib/PhpAmqpLib/Connection/AbstractConnection.php(192): PhpAmqpLib\Connection\AbstractConnection->connect()
#3 /var/www/html/libs/vendor/php-amqplib/php-amqplib/PhpAmqpLib/Connection/AMQPStreamConnection.php(60): PhpAmqpLib\Connection\AbstractConnection->__construct('guest', 'guest', '/', false, 'AMQPLAIN', NULL, 'en_US', Object(PhpAmqpLib\Wire\IO\StreamIO), 0, 3)
#4 /var/www/html/libs/PaloAltoNetworks/AmqpWrapper/SimpleReceiver.php(33): PhpAmqpLib\Connection\AMQPStreamC in /var/www/html/libs/vendor/php-amqplib/php-amqplib/PhpAmqpLib/Wire/IO/StreamIO.php on line 155

And from our Ubuntu admin:

Port 5672 is owned by the local MQ server, and it IS up

[azuniga]

Make sure your firewall has the expedition server white listed as it will make an SSL request from this device. Also the panReadOrders.log file should give you more details for that failure.

[manny.mekala]

this is most certainly a bug. I managed to work around it though.

Go to your firewall api page "https://<FW MGMT IP ADDRESS>/restapi-doc/#tag/key-generation/paths/~1api~1?type=keygen/get
Use postman (or any other api tool) to generate the API key for ADMIN user. and copy the API key that's returned.
switch to the expedition and when trying to add "Authentication API Keys" - switch the "Auth. Type:" from "username and password" to "API KEY"
Paste the API key here.