About mfeinman

mfeinman · ‎Sep 20, 2022

Hi all ... When you drill down into Beacon status in the FNMS UI, the "Inventory beacon upload status" page shows you the number of files of each import type that are getting uploaded to FNMS. One of the import types is "logs". What log is getting uploaded - is it the Inventory (tracker) log? When it gets to FNMS, in which database and table(s) are these logs being stored? --Mark

mfeinman · ‎Sep 20, 2022

Hi all ... After reading "Common: Collection from Virtual Environments", I have a question. If you are collecting VMWare host data, is it enough to get the host data from vCenter or should you also host data from the individual ESXi hosts? --Mark

mfeinman · ‎Aug 22, 2022

Hi all ... For Unix-like devices, is it sufficient to simply place the CA's root certificate in mgsft_rollout_cert (pre-install) / cert.pem (post-install), or do you also have to include the intermediate CA certificates used in the chain leading up to the CA's root? The reason I ask is that I see both documented: https://community.flexera.com/t5/FlexNet-Manager-Knowledge-Base/How-to-setup-https-SSL-TLS-to-secure-and-encrypt-internal-FNMS/ta-p/2085 near the bottom under "Windows Agents", the text reads (emphasis is mine): "If you're using a Certificate issued by a Certificate Authority, you only need to include their certificate chain (which has a longer expire date than the actual certificate) starting from the Root Certificate on top then the Intermediate Certificate of the Certificate Authority after." Gathering FlexNet Inventory FlexNet Manager Suite 2022 R1 - Agent Third-Party Deployment: HTTPS CA Certificate File Format (UNIX) (flexera.com): The text reads near the top: "[...]certificate checking requires that a copy of the certificate for the root CA has been installed on the managed device. When a certificate being validated matches the locally-stored certificate for the root CA, trust is confirmed.". Further down: "All the root CA certificates that are used by the HTTPS web servers supplying content to the managed device or receiving content from the managed device can be concatenated into a single file. (For many organizations, this will be a single certificate for a single root Certification Authority. It may even be a CA that is internal to the enterprise.) " Which is it - root CA certificate only, or the root CA with any intermediate certificates that signed the root CA? I have an agent unable to upload its inventory and I'm pretty sure it's because a CA certificate is missing (I see "Download failure: OpenSSL error 0xFC14: unable to get local issuer certificate." in the tracker.log). --Mark

mfeinman · ‎Aug 18, 2022

I happened to stumble onto a truncated document that might help you. The table of contents in the document contains more topics than are actually documented, and I don't know if this is by design or if something "got lost" at the time the file was attached. Take a look at https://community.flexera.com/t5/FlexNet-Manager-Forum/FNMS-2018-R1-Cloning-Prod-to-Dev/td-p/95321. The first reply contains a document called "Restore Prod to Dev.docx". Does anyone from Flexera know if that document is truncated by design? --Mark

mfeinman · ‎Aug 10, 2022

Wouldn't the feed from BMC ADDM Discovery have a different connection name than information coming directly from the Flexnet Agent? What about creating a management view in the FNMS UI that shows all inventory by last inventory date and connection name? I would expect to see separate line item for the BMC connection and the connection from agents. You could then get an idea of where the agents stopped reporting based on an old inventory date. For example, see the attachment ReportSample.png. I have a feed from SCCM as well as the agent itself, and I can see where the connections are coming from. --Mark

mfeinman · ‎Aug 04, 2022

Hi all ... When you installed SQL Server for use by FNMS, did you give any consideration to the available options in the Feature Selection list and de-select the ones you felt you didn't need, or did you just "install everything" because it was easier to do that? When you installed SQL Server, did you realize, sometime after initial installation, that an optional feature would have been useful, so you went back and installed that feature? For example, did you go back to install the "full-text and semantic extractions for search" thinking it might help optimize queries against the database? (I don't know if this is true or not so it might be a poor example.) To me, the essential instance features to install are: Database Engine Client Tools Connectivity Client Tools SDK SQL Client Connectivity SDK SQL Server Management Studio I'm curious what the community has done. Thanks! --Mark

mfeinman · ‎Aug 04, 2022

Ahhh, very good and thanks. Didn't know this already existed as a registry entry. Doc link: ActiveDirectoryImport timer setting - Community (flexera.com) I will definitely give this a try. --Mark

mfeinman · ‎Aug 04, 2022

To add to what @mag00_75 posted, I'm in this same situation (2019 R1 as the Application Server, though I don't have any M1 macs at the moment). The 2021 R1 mac agent works just fine with the 2019 R1 Application Server; we've done some tests with it and didn't see any issues.

mfeinman · ‎Aug 04, 2022

Hi @kclausen ... Is the domain you are trying to connect different than the domain that the beacon server is registered to? No, it's the default AD Import job for "current domain". And the issue is intermittent - most of the time the AD Import works; once in a while, this error occurs. --Mark

mfeinman · ‎Aug 03, 2022

Hi all ... I'm seeing the following intermittent error in the AD Import (the actual DN is redacted): 2022-08-03 09:40:56,784 [rt.DomainDetailsImport] [INFO ] Importing organizational units, users and computers. 2022-08-03 09:42:46,894 [oryImport.LdapSearcher] [ERROR] Failed to search DN OU=myOU,DC=dc1,DC=dc2,DC=com, filter: ( &(objectCategory=person)(objectClass=user)(!(userAccountControl:1.2.840.113556.1.4.803:=2)) ) System.DirectoryServices.Protocols.LdapException: The operation was aborted because the client side timeout limit was exceeded. at System.DirectoryServices.Protocols.LdapConnection.ConstructResponse(Int32 messageId, LdapOperation operation, ResultAll resultType, TimeSpan requestTimeOut, Boolean exceptionOnTimeOut) at System.DirectoryServices.Protocols.LdapConnection.SendRequest(DirectoryRequest request, TimeSpan requestTimeout) at Flexera.Directory.ActiveDirectoryImport.LdapSearcher.<>c__DisplayClass11.<SendRequest>b__10() at Flexera.Directory.ActiveDirectoryImport.LdapSearcher.Retry(Action act, String errMsgFormat, Object[] args) 2022-08-03 09:42:46,899 [irectoryImportLauncher] [ERROR] Error occurred. System.DirectoryServices.Protocols.LdapException: The operation was aborted because the client side timeout limit was exceeded. at System.DirectoryServices.Protocols.LdapConnection.ConstructResponse(Int32 messageId, LdapOperation operation, ResultAll resultType, TimeSpan requestTimeOut, Boolean exceptionOnTimeOut) at System.DirectoryServices.Protocols.LdapConnection.SendRequest(DirectoryRequest request, TimeSpan requestTimeout) at Flexera.Directory.ActiveDirectoryImport.LdapSearcher.<>c__DisplayClass11.<SendRequest>b__10() at Flexera.Directory.ActiveDirectoryImport.LdapSearcher.Retry(Action act, String errMsgFormat, Object[] args) at Flexera.Directory.ActiveDirectoryImport.LdapSearcher.SendRequest(SearchRequest req, TimeSpan timeout) at Flexera.Directory.ActiveDirectoryImport.LdapSearcher.<Search>d__2.MoveNext() at Flexera.Directory.ActiveDirectoryImport.DomainDetailsImport.ImportUsers(OrganizationalUnit p_OrganizationalUnit, IXmlWriterHelper p_XmlWriterHelper) at Flexera.Directory.ActiveDirectoryImport.DomainDetailsImport.ImportOrganizationalUnits(String p_DefaultNamingContext, IXmlWriterHelper p_XmlWriterHelper) at Flexera.Directory.ActiveDirectoryImport.DomainDetailsImport.Execute(IXmlWriterHelper p_XmlWriterHelper) at Flexera.Directory.ActiveDirectoryImport.ActiveDirectoryImportLauncher.Execute() Is there a client timeout setting I can adjust to compensate for this error? Or is this an AD setting I need to get adjusted? I'm running FNMS 2019 R1. --Mark

mfeinman · ‎Aug 02, 2022

Hi all ... FNMS has a dependency on SQLCMD for the ARL Import on the batch / application server. Does it matter to FNMS whether SQLCMD is the 32-bit or the 64-bit version? Is there a best practice or preference on this? --Mark

mfeinman · ‎Jul 26, 2022

Could it also be that these SAMs are exporting the results of some Flexera report to .csv or .xlsx, and then writing scripts against that report? For example, someone writing an Excel macro to get data or maybe a script run against a CSV file?

mfeinman · ‎Jul 21, 2022

Hi all ... In FNMS, looking at the raw evidence types, under installer evidence, I see the value "ASPA" for "raw evidence type". I know this has something to do with evidence found on a mac. What does ASPA stand for? Is there a list of raw evidence types and their meaning somewhere? The closest document I found is this one, but it does not list ASRA as a type. Thank you! --Mark

mfeinman · ‎Jun 17, 2022

The Beacon connection is attempted to https://<your beacon server>/ManagesoftRL. Have you checked whether this is responding? Open a browser from one of the target machines having an issue and enter this URL: https://<your beacon server>/ManagesoftRL/Test. If the Beacon is working properly, you should see "Test succeeded" in the browser. Have you also checked the Beacon logs (Beacon Engine, BeaconIIS)? Link to logging reference --Mark

mfeinman · ‎Jun 13, 2022

Browse the Flexnet Manager Content Release Blog. --Mark

Online Status	Online
Date Last Visited	‎Mar 29, 2023 02:47 PM

Beacons Upload Logs Coming From Agents ... Where Do They Go In The Database?

Gathering VMWare Inventory: Is It Enough To get It From vCenter or Should You Also Get It From ESXi...

Need Clarification Regarding The Certificate(s) That Are Placed in mgsft_rollout_cert / cert.pem

Re: Steps to redirect FNMS to the new database server

Re: Identifying Flexnet Agent Status - is it there? is it running?

Installing SQL Server for FNMS: What Features Did You Choose?

Re: LDAP Timeout Issues With Active Directory Import

Re: Apple Silicon(Arm64)/JAMF

Re: LDAP Timeout Issues With Active Directory Import

LDAP Timeout Issues With Active Directory Import

SQLCMD 32 or 64-bit?

Re: Question regarding Scripting

What Does The Raw Evidence Type "ASPA" Mean?

Re: Connection reset by Peer error while beacon communication

Re: ARL build history

ndtrack Questions Regarding High CPU utilization, the "LowProfile" Registry Entry, OneDrive Scanning...

Re: Adding/replacing beacons

Re: "Bootstrap Server 1" Registry Entry After The Original Bootstrap Beacon is Retired - Does It Nee...

"Bootstrap Server 1" Registry Entry After The Original Bootstrap Beacon is Retired - Does It Need to...

Re: Upgrading to server 2019 for FNMA

Re: More Than One Install Command For Linux X86_64?

More Than One Install Command For Linux X86_64?

Re: Healthcheck for Beacon

Re: Upgrading to server 2019 for FNMA

Re: [FNMS] Directory of an application installed on Flexera