IBM Security Verify

Hello All,

I am creating a webseal junction to a back-end server using the hostname. The hostname of the back-end server is getting resolved to IP by the DNS server. I am able to ping it from the appliance tools section. Also, I am able to test the connection to it successfully from the LMI.

However, when I try to create the junction, the LMI shows an error:

906 DPWIV1062E Unable to resolve IP address for hostname '<server-name>' (Error -3: Temporary failure in name resolution)
907 2020-01-17-14:58:49.002+05:00I----- 0x3898319B webseald ERROR wad general ThirdPartyJunction.cpp 5013 0x7f73840ad700

Why is that the reverse proxy junction component is not able to resolve the hostname to IP when the appliance is able to do it?

Regards,

------------------------------
Jahanzaib Sarwar
------------------------------

HI

did you try nslookup <server-name>? is it working from appliance?

also, what happens when you do a manual entry in the hosts file in the appliance, does it get the junction to a working state?

Thanks


------------------------------
Tushar Prasad
------------------------------

Original Message:
Sent: Fri January 17, 2020 05:51 AM
From: Jahanzaib Sarwar
Subject: WebSEAL Junction: DPWIV1062E Unable to resolve IP address for hostname

Hello All,

I am creating a webseal junction to a back-end server using the hostname. The hostname of the back-end server is getting resolved to IP by the DNS server. I am able to ping it from the appliance tools section. Also, I am able to test the connection to it successfully from the LMI.

However, when I try to create the junction, the LMI shows an error:

906 DPWIV1062E Unable to resolve IP address for hostname '<server-name>' (Error -3: Temporary failure in name resolution)
907 2020-01-17-14:58:49.002+05:00I----- 0x3898319B webseald ERROR wad general ThirdPartyJunction.cpp 5013 0x7f73840ad700

Why is that the reverse proxy junction component is not able to resolve the hostname to IP when the appliance is able to do it?

Regards,

------------------------------
Jahanzaib Sarwar
------------------------------

Hi
are you able to do nslookup on the server-name and see if that is successful from the appliance?


------------------------------
Tushar Prasad
------------------------------

Original Message:
Sent: Fri January 17, 2020 05:51 AM
From: Jahanzaib Sarwar
Subject: WebSEAL Junction: DPWIV1062E Unable to resolve IP address for hostname

Hello All,

I am creating a webseal junction to a back-end server using the hostname. The hostname of the back-end server is getting resolved to IP by the DNS server. I am able to ping it from the appliance tools section. Also, I am able to test the connection to it successfully from the LMI.

However, when I try to create the junction, the LMI shows an error:

906 DPWIV1062E Unable to resolve IP address for hostname '<server-name>' (Error -3: Temporary failure in name resolution)
907 2020-01-17-14:58:49.002+05:00I----- 0x3898319B webseald ERROR wad general ThirdPartyJunction.cpp 5013 0x7f73840ad700

Why is that the reverse proxy junction component is not able to resolve the hostname to IP when the appliance is able to do it?

Regards,

------------------------------
Jahanzaib Sarwar
------------------------------

HI

Is your nslookup working from appliance? 

nslookup <server-name>

thanks

------------------------------
Tushar Prasad
------------------------------

Original Message:
Sent: Fri January 17, 2020 05:51 AM
From: Jahanzaib Sarwar
Subject: WebSEAL Junction: DPWIV1062E Unable to resolve IP address for hostname

Hello All,

I am creating a webseal junction to a back-end server using the hostname. The hostname of the back-end server is getting resolved to IP by the DNS server. I am able to ping it from the appliance tools section. Also, I am able to test the connection to it successfully from the LMI.

However, when I try to create the junction, the LMI shows an error:

906 DPWIV1062E Unable to resolve IP address for hostname '<server-name>' (Error -3: Temporary failure in name resolution)
907 2020-01-17-14:58:49.002+05:00I----- 0x3898319B webseald ERROR wad general ThirdPartyJunction.cpp 5013 0x7f73840ad700

Why is that the reverse proxy junction component is not able to resolve the hostname to IP when the appliance is able to do it?

Regards,

------------------------------
Jahanzaib Sarwar
------------------------------

There should be no reason why WebSEAL cannot resolve the IP address if the appliance is able to do it - both use the same DNS mechanism/setting to resolve the IP address.  I assume that you have double-checked that the correct name is being referenced, in the correct spot, when creating the junction?  Did you 'massage' the error message which you included above, as the '<server-name>' string should have the name of the server which is being resolved?

Thanks.

------------------------------
Scott Exton
IBM
Gold Coast
------------------------------

Original Message:
Sent: Fri January 17, 2020 05:51 AM
From: Jahanzaib Sarwar
Subject: WebSEAL Junction: DPWIV1062E Unable to resolve IP address for hostname

Hello All,

I am creating a webseal junction to a back-end server using the hostname. The hostname of the back-end server is getting resolved to IP by the DNS server. I am able to ping it from the appliance tools section. Also, I am able to test the connection to it successfully from the LMI.

However, when I try to create the junction, the LMI shows an error:

906 DPWIV1062E Unable to resolve IP address for hostname '<server-name>' (Error -3: Temporary failure in name resolution)
907 2020-01-17-14:58:49.002+05:00I----- 0x3898319B webseald ERROR wad general ThirdPartyJunction.cpp 5013 0x7f73840ad700

Why is that the reverse proxy junction component is not able to resolve the hostname to IP when the appliance is able to do it?

Regards,

------------------------------
Jahanzaib Sarwar
------------------------------

Hello all,

Thank you for the responses. It works fine when I define the hostname in the appliance's hosts file. But it doesn't work with the DNS. I have run the nslookup command and observed the following behavior:

1. Having the host file entry in the appliance's hosts file for themrsol.com, the response was:

tools> nslookup themrsol.com
Server: 192.168.10.1
Address 1: 192.168.10.1 router.asus.com

Name: themrsol.com
Address 1: 96.44.142.42 themrsol.com

2. Not having the host file entry and having only the DNS server configured, the response was:

tools> nslookup themrsol.com
Server: 192.168.10.1
Address 1: 192.168.10.1 router.asus.com

Name: themrsol.com
Address 1: 96.44.142.42 srv33.hosterpk.com

It is observed that the DNS is resolving it to a different hostname using nslookup when we dont have the host file entry. Does that mean that we are providing the wrong hostname? If that is the case, then how come the the ping command able to resolve it from the appliance using the DNS?

Regards,

------------------------------
Jahanzaib Sarwar
------------------------------

Original Message:
Sent: Mon January 20, 2020 04:18 PM
From: Scott Exton
Subject: WebSEAL Junction: DPWIV1062E Unable to resolve IP address for hostname

There should be no reason why WebSEAL cannot resolve the IP address if the appliance is able to do it - both use the same DNS mechanism/setting to resolve the IP address.  I assume that you have double-checked that the correct name is being referenced, in the correct spot, when creating the junction?  Did you 'massage' the error message which you included above, as the '<server-name>' string should have the name of the server which is being resolved?

Thanks.

------------------------------
Scott Exton
IBM
Gold Coast

Original Message:
Sent: Fri January 17, 2020 05:51 AM
From: Jahanzaib Sarwar
Subject: WebSEAL Junction: DPWIV1062E Unable to resolve IP address for hostname

Hello All,

I am creating a webseal junction to a back-end server using the hostname. The hostname of the back-end server is getting resolved to IP by the DNS server. I am able to ping it from the appliance tools section. Also, I am able to test the connection to it successfully from the LMI.

However, when I try to create the junction, the LMI shows an error:

906 DPWIV1062E Unable to resolve IP address for hostname '<server-name>' (Error -3: Temporary failure in name resolution)
907 2020-01-17-14:58:49.002+05:00I----- 0x3898319B webseald ERROR wad general ThirdPartyJunction.cpp 5013 0x7f73840ad700

Why is that the reverse proxy junction component is not able to resolve the hostname to IP when the appliance is able to do it?

Regards,

------------------------------
Jahanzaib Sarwar
------------------------------