02-18-2021 05:26 AM
dealing with full root partition and trying to override the IPS policy
/opt/Symantec/sdcssagent/IPS/sisipsoverride.sh
getting a message 'Unable to communicate with the SDCSS Util Daemon'
need assistance troubleshooting, have not encountered this error before
Solved! Go to Solution.
02-19-2021 12:34 PM
I opened a case and was given steps to boot to single user mode with IPS shutdown.
I was able to log in and clear out a MegaSAS.log file which has grown quite large. That was enough to get the system back up for backup processing. Will look things over for other files to clean up.
02-18-2021 05:49 AM
hey
maybe some process died... I would try to reboot, or open a case with Vertias...
Of course elevate did not work, right?
02-18-2021 06:09 AM
Any idea what processes to check on? I have rebooted the appliance once and the results did not change. Maybe a 2nd reboot will do the trick :)
02-18-2021 06:32 AM
hey
Second most likely will not do it...
On my 3.1.2 appliance I have such outcomes for this command
ps -ef|grep sdc
root 24167 1 1 Feb17 ? 00:22:57 /opt/Symantec/sdcssagent/IDS/bin/sisidsdaemon
sisips 24251 1 0 Feb17 ? 00:00:19 /opt/Symantec/sdcssagent/IPS/bin/sisipsdaemon
sisips 24259 1 0 Feb17 ? 00:00:00 /opt/Symantec/sdcssagent/IPS/bin/sisipsutildaemon
02-18-2021 06:49 AM
mine looks the same
maintenance-!> ps -ef|grep sdc
root 5473 1 42 09:26 ? 00:06:40 /opt/Symantec/sdcssagent/IDS/bin/sisidsdaemon
sisips 5598 1 0 09:26 ? 00:00:00 /opt/Symantec/sdcssagent/IPS/bin/sisipsdaemon
sisips 5603 1 0 09:26 ? 00:00:00 /opt/Symantec/sdcssagent/IPS/bin/sisipsutildaemon
mainten+ 36457 35951 0 09:42 pts/0 00:00:00 grep sdc
maintenance-!> /opt/Symantec/sdcssagent/IPS/sisipsoverride.sh
Symantec Data Center Security Server Policy Override
Unable to communicate with the SDCSS Util Daemon.
02-19-2021 12:26 AM
Ok try the below steps.
ps -ef | grep -i sdcs
In a environment where it is ok you should get these services running:
/opt/Symantec/sdcssagent/IDS/bin/sisidsdaemon
/opt/Symantec/sdcssagent/IPS/bin/sisipsdaemon
/opt/Symantec/sdcssagent/IPS/bin/sisipsutildaemon
on the appliance with the issue, the highlighted one above had stopped running.
to get it running, return to the CLISH and in Support run the following:
Service Restart sisipsutildaemon
you should get this output: - [Info] Restarted sisipsutildaemon service.
now all you need to do is run /opt/Symantec/sdcssagent/IPS/sisipsoverride.sh and the rest is BAU
02-19-2021 12:34 PM
I opened a case and was given steps to boot to single user mode with IPS shutdown.
I was able to log in and clear out a MegaSAS.log file which has grown quite large. That was enough to get the system back up for backup processing. Will look things over for other files to clean up.