6 Replies Latest reply on Mar 30, 2010 7:26 AM by rjordap

    EPO 4.5 "An Unexpected Error Occurred" when opening Policy Catalog

      I did a clean install of EPO 4.5 on a Hyper-V guest server running Server 2008 standard edition, SP2, using a SQL 2008 database on a seperate SQL server. This is currently a test environment.

      I noticed that when I attempt to open the Policy Catalog from the console, I get the error message "An unexpected error occurred" and I have to click on Ok to go back to the console. My thoughts are that the database is functioning fine in that I can log in and add subgroups and nodes.

      Any thoughts?
        • 1. RE: EPO 4.5 "An Unexpected Error Occurred" when opening Policy Catalog
          tonyb99
          do you mean server 2008 Release 2? If so its not supported yet

          ePO 4.5 is planned to support Microsoft Windows 2008 Server Release 2 with the release of ePO 4.5 Patch 1, which expected to be released by the end of Q4 2009.

          There were similar errors/issues with policy catalogue in the epo 4.0 system due to problems with missing/corrupt extensions that were resolved with EPo patches. This could be something similar. What does the orion.log show for the time in question?
          • 2. An Unexpected Error Has Occurred
            The Hyper-V guest is running 2008, 64-bit version, Service Pack 2. It is not running R2.

            The host server is running 2008, 64-bit, with SP1.

            Here is what the Orion.log recorded for that time;

            2009-10-12 06:38:11,132 ERROR [http-8443-Processor25] dashboard.DashboardAction - Dashboard Element creation failed: MyAvert Threat Advisory
            java.lang.RuntimeException: The EXECUTE permission was denied on the object 'EPOAvert_GetRepositoryDatEngine', database 'ePO4_VBAS909', schema 'dbo'.
            at com.mcafee.epo.avertalerts.dashboard.AvertDashboardElement.renderHTML(AvertDash boardElement.java:308)
            at com.mcafee.orion.console.ui.dashboard.DashboardAction.createContainer(Dashboard Action.java:279)
            at sun.reflect.GeneratedMethodAccessor409.invoke(Unknown Source)
            at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.ja va:25)
            at java.lang.reflect.Method.invoke(Method.java:597)
            at com.mcafee.orion.core.servlet.mvc.MvcActionFactoryBase.executeAction(MvcActionF actoryBase.java:60)
            at com.mcafee.orion.core.servlet.ControllerServlet.executeAction(ControllerServlet .java:246)
            at com.mcafee.orion.core.servlet.ControllerServlet.processRequest(ControllerServle t.java:131)
            at com.mcafee.orion.core.servlet.ControllerServlet.doPost(ControllerServlet.java:1 07)
            at javax.servlet.http.HttpServlet.service(HttpServlet.java:647)
            at javax.servlet.http.HttpServlet.service(HttpServlet.java:729)
            at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFil terChain.java:269)
            at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain .java:188)
            at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java: 213)
            at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java: 172)
            at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.ja va:525)
            at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
            at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:117)
            at org.apache.catalina.valves.FastCommonAccessLogValve.invoke(FastCommonAccessLogV alve.java:482)
            at com.mcafee.orion.core.server.AjaxValve.invoke(AjaxValve.java:88)
            at com.mcafee.orion.core.server.OrionUserSetupValve.invoke(OrionUserSetupValve.jav a:54)
            at org.apache.catalina.authenticator.SingleSignOn.invoke(SingleSignOn.java:420)
            at com.mcafee.orion.core.server.OrionSingleSignOn.invoke(OrionSingleSignOn.java:11 3)
            at com.mcafee.orion.core.server.ParameterEncodingValve.invoke(ParameterEncodingVal ve.java:37)
            at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:10 8)
            at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:174)
            at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:875)
            at org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.processConn ection(Http11BaseProtocol.java:665)
            at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:5 28)
            at org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorke rThread.java:81)
            at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:6 89)
            at java.lang.Thread.run(Thread.java:619)
            Caused by: java.sql.SQLException: The EXECUTE permission was denied on the object 'EPOAvert_GetRepositoryDatEngine', database 'ePO4_VBAS909', schema 'dbo'.
            at net.sourceforge.jtds.jdbc.SQLDiagnostic.addDiagnostic(SQLDiagnostic.java:368)
            at net.sourceforge.jtds.jdbc.TdsCore.tdsErrorToken(TdsCore.java:2816)
            at net.sourceforge.jtds.jdbc.TdsCore.nextToken(TdsCore.java:2254)
            at net.sourceforge.jtds.jdbc.TdsCore.getMoreResults(TdsCore.java:631)
            at net.sourceforge.jtds.jdbc.JtdsStatement.executeSQLQuery(JtdsStatement.java:477)
            at net.sourceforge.jtds.jdbc.JtdsPreparedStatement.executeQuery(JtdsPreparedStatem ent.java:777)
            at org.apache.commons.dbcp.DelegatingPreparedStatement.executeQuery(DelegatingPrep aredStatement.java:93)
            at com.mcafee.epo.avertalerts.dashboard.AvertDashboardElement.renderHTML(AvertDash boardElement.java:149)
            ... 31 more
            2009-10-12 06:38:17,101 ERROR [http-8443-Processor24] datasource.EPOGroupsDS - Caught exception in getChilden: java.sql.SQLException: The EXECUTE permission was denied on the object 'EPOSP_GetViewableBranchNodes', database 'ePO4_VBAS909', schema 'dbo'.
            java.sql.SQLException: The EXECUTE permission was denied on the object 'EPOSP_GetViewableBranchNodes', database 'ePO4_VBAS909', schema 'dbo'.
            at net.sourceforge.jtds.jdbc.SQLDiagnostic.addDiagnostic(SQLDiagnostic.java:368)
            at net.sourceforge.jtds.jdbc.TdsCore.tdsErrorToken(TdsCore.java:2816)
            at net.sourceforge.jtds.jdbc.TdsCore.nextToken(TdsCore.java:2254)
            at net.sourceforge.jtds.jdbc.TdsCore.getMoreResults(TdsCore.java:631)
            at net.sourceforge.jtds.jdbc.JtdsStatement.processResults(JtdsStatement.java:584)
            at net.sourceforge.jtds.jdbc.JtdsStatement.executeSQL(JtdsStatement.java:546)
            at net.sourceforge.jtds.jdbc.JtdsPreparedStatement.execute(JtdsPreparedStatement.j ava:562)
            at org.apache.commons.dbcp.DelegatingPreparedStatement.execute(DelegatingPreparedS tatement.java:169)
            at com.mcafee.epo.computermgmt.ui.datasource.EPOGroupsDS.getChildren(EPOGroupsDS.j ava:111)
            at com.mcafee.orion.core.ui.control.TreeTagUtil.writeTreeData(TreeTagUtil.java:163 )
            at com.mcafee.orion.core.ui.control.TreeTagUtil.getTreeData(TreeTagUtil.java:71)
            at com.mcafee.orion.core.ui.control.TreeTagUtil.getTreeData(TreeTagUtil.java:31)
            at com.mcafee.orion.core.ui.control.TreeTagActions.loadBranch(TreeTagActions.java: 50)
            at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
            at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
            at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.ja va:25)
            at java.lang.reflect.Method.invoke(Method.java:597)
            at com.mcafee.orion.core.servlet.mvc.MvcActionFactoryBase.executeAction(MvcActionF actoryBase.java:60)
            at com.mcafee.orion.core.servlet.ControllerServlet.executeAction(ControllerServlet .java:246)
            at com.mcafee.orion.core.servlet.ControllerServlet.processRequest(ControllerServle t.java:131)
            at com.mcafee.orion.core.servlet.ControllerServlet.doPost(ControllerServlet.java:1 07)
            at javax.servlet.http.HttpServlet.service(HttpServlet.java:647)
            at javax.servlet.http.HttpServlet.service(HttpServlet.java:729)
            at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFil terChain.java:269)
            at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain .java:188)
            at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java: 213)
            at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java: 172)
            at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.ja va:525)
            at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
            at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:117)
            at org.apache.catalina.valves.FastCommonAccessLogValve.invoke(FastCommonAccessLogV alve.java:482)
            at com.mcafee.orion.core.server.AjaxValve.invoke(AjaxValve.java:88)
            at com.mcafee.orion.core.server.OrionUserSetupValve.invoke(OrionUserSetupValve.jav a:54)
            at org.apache.catalina.authenticator.SingleSignOn.invoke(SingleSignOn.java:420)
            at com.mcafee.orion.core.server.OrionSingleSignOn.invoke(OrionSingleSignOn.java:11 3)
            at com.mcafee.orion.core.server.ParameterEncodingValve.invoke(ParameterEncodingVal ve.java:37)
            at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:10 8)
            at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:174)
            at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:875)
            at org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.processConn ection(Http11BaseProtocol.java:665)
            at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:5 28)
            at org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorke rThread.java:81)
            at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:6 89)
            at java.lang.Thread.run(Thread.java:619)
            • 3. RE: An Unexpected Error Has Occurred
              JoeBidgood

              Okay, this is looking very much like an SQL account permission error. What account is being used by ePO to access the SQL server?
              As a test, configure ePO to use the sa account - not any other account that allegedly has sa privileges: it must be the sa account - and restart the ePO services. Does it work?

              HTH -

              Joe
              • 4. RE: An Unexpected Error Has Occurred
                DB permissions was the culprit. While I was waiting for a reply to my thread, I had one of my DBAs check the permissions again on the SQL account. He bumped up the permissions from R/W and it is working now.

                Thanks to all who responded to my thread.
                • 5. RE: An Unexpected Error Has Occurred
                  JoeBidgood

                  Good stuff. Just to clarify, the account used to install or upgrade ePO needs to have sa privileges: the account used to run ePO needs to have dbo privileges over its own DB. See KB 59903 for more details (this applies to ePO 4.5 as well - I'm in the process of getting the article updated.)

                  Regards -

                  Joe
                  • 6. Re: RE: An Unexpected Error Has Occurred

                    Similar problem when accessing to Endpoint Encryption 1.0.0 > User Based Policies

                     

                     

                    Only happens with extensions EEPC6Patch1, if we rollback to EEPC6.0 the error is gone.