logo
Welcome Guest! To enable all features please Login or Register.

Notification

Icon
Error
Deployment error
Options Go to last post  Go to last post Go to first unread  Go to first unread
Previous Topic Next Topic
jone
#1 Posted : Tuesday, July 27, 2010 12:39:19 PM(UTC)
jone

Rank: Newbie

Groups: Registered
Joined: 7/7/2010(UTC)
Posts: 3
Points: 9

Thanks: 1 times
Hi,

I am trying to evaluate eSpect AGEE on a NetScaler VPX Express virtual appliance.

Unfortunately the GUI deployment tool fails to connect (/var/log/auth.log extract below), are there manual installation steps documented anywhere?

Thanks in advance,
Jon

Code:

Jul 27 12:31:46 <auth.info> ns sshd[624]: Received disconnect from 172.16.215.128: 3: System.Security.Cryptography.CryptographicException: Bad Data.\r\n\r\n at System.Security.Cryptography.CryptographicException.ThrowCryptogaphicException(Int32 hr)\r\n at System.Security.Cryptography.Utils._ImportKey(SafeProvHandle hCSP, Int32 keyNumber, CspProviderFlags flags, Object cspObject, SafeKeyHandle& hKey)\r\n at System.Security.Cryptography.DSACryptoServiceProvider.ImportParameters(DSAPara
Back to top
TDCHost
#2 Posted : Wednesday, July 28, 2010 8:52:45 PM(UTC)
TDCHost

Rank: Administration

Groups: Administrators
Joined: 4/24/2010(UTC)
Posts: 12
Points: 36

Was thanked: 1 time(s) in 1 post(s)
Hi,

It looks like a crypto error which could be related to the ciphers (or lack of ) installed on the NetScaler.

Are you able to SSH to the netscaler ok using an SSH client such as Putty?

Failing that we will provide the manual steps to emulate what the tool does.

Thanks,

TDC Support
Back to top
jone
#3 Posted : Thursday, July 29, 2010 12:02:04 PM(UTC)
jone

Rank: Newbie

Groups: Registered
Joined: 7/7/2010(UTC)
Posts: 3
Points: 9

Thanks: 1 times
Hi,

I can confirm I'm able to SSH on from the same client (using the same aes128-cbc cipher). If you want I can send you some wireshark traces?

Manual steps would be helpful for now though..

Thanks,
Jon
Back to top
MorrisJigUK
#4 Posted : Saturday, August 07, 2010 11:40:27 AM(UTC)
MorrisJigUK

Rank: Newbie

Groups: Registered
Joined: 5/11/2010(UTC)
Posts: 1
Points: 3

Was thanked: 1 time(s) in 1 post(s)
How to manually install

ssh to netscaler
make /var/vpn/patch_TDC folder
Code:
shell
cd ..
mkdir /var/vpn
mkdir /var/vpn/patch_TDC
cd /var/vpn/patch_TDC
ls -l



Copy the DLL
With WinSCP copy/rename eSpectAGEE.dll (installed by the .msi) to /var/vpn/patch_TDC/EPAFactory.dll


Create the text file Signature Checking File
Code:
nano /var/vpn/patch_TDC/EPAFactorySignature

In windows find the dll version of eSpectAGEE.dll by right clicking on it. Also find out the Digital Signature (The Development Cloud Ltd)
in the EPAFactorySignature text file add two lines ( version on line one, then code signing name on line two )
Code:
1.0.21.0
The Development Cloud Ltd

Save the file EPAFactorySignature text file

Set-up the symbolic links on boot
Edit or create file /nsconfig/rc.netscaler
Code:
nano /nsconfig/rc.netscaler
add the following lines
Code:
ln -fs /var/vpn/patch_TDC/EPAFactory.dll /netscaler/ns_gui/epa/scripts/EPAFactory.dll
ln -fs /var/vpn/patch_TDC/EPAFactorySignature /netscaler/ns_gui/epa/scripts/EPAFactorySignature



Make links ( so you wont have to reboot)
Code:
ln -fs /var/vpn/patch_TDC/EPAFactory.dll /netscaler/ns_gui/epa/scripts/EPAFactory.dll
ln -fs /var/vpn/patch_TDC/EPAFactorySignature /netscaler/ns_gui/epa/scripts/EPAFactorySignature


Now set up some policies, apply to a VS. Hit the VS with a windows client and you will see the Citrix ocx download the EPAFactory.dll and run the configured scans

Hope this helps Colin BigGrin
Back to top
 |  Edit by user
1 user thanked MorrisJigUK for this useful post.
jone on 8/9/2010(UTC)
jone
#5 Posted : Monday, August 09, 2010 11:53:06 AM(UTC)
jone

Rank: Newbie

Groups: Registered
Joined: 7/7/2010(UTC)
Posts: 3
Points: 9

Thanks: 1 times
That's exactly what I needed to get up & running, thanks!
Jon
Back to top
TDCHost
#6 Posted : Monday, August 30, 2010 6:08:33 PM(UTC)
TDCHost

Rank: Administration

Groups: Administrators
Joined: 4/24/2010(UTC)
Posts: 12
Points: 36

Was thanked: 1 time(s) in 1 post(s)
Hi Jon,

Would you be able to test a new deployment tool for us? We have compiled a test version and would like to see if it fixed the issue that you were seeing. If you could then please drop me us an email at support@thedevelopmentcloud.com and we will provide you with the installer.

Many thanks,

Devcloud Support
Back to top
Users browsing this topic
Guest
Forum Jump  
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.

Powered by YAF | YAF © 2003-2011, Yet Another Forum.NET
This page was generated in 0.297 seconds.