AAA, NAC, Guest Access & BYOD

Reports cannot be exported automatically to external SFTP server, as configured under InSight
Problem:

Reports cannot be exported automatically to external SFTP server, as configured under InSight, due to an error "Permission denied" in Insight logs.

Found in Version: 6.6.0

Issue: 

First report will be created in the SFTP server successfully. However, when the report is run again, SFTP upload will fail with the above error message. If the directory and files is deleted on the external SFTP server, ClearPass will be able to create the report directory and upload the file successfully.

 

Expected Behavior: 

When report is configured to be exported automatically to SFTP server, for the very first time ClearPass will attempt to create a folder with the report name (any spaces will be replaced by hyphen). Inside this folder, report.tar.gz file  will be created. When the report is ran again during the next schedule or ran for a different time frame, ClearPass should uploaded the tar.gz file under the same directory (directory created in the name of report name). 

 

 

 

 

 



Diagnostics:

When the report is generated again, ClearPass  will attempt to upload the file in SFTP server with wrong path as shown in the screenshot below. 

 

Log snippet of insight.log file: 

2016-06-22 02:12:18,187 ERROR  Failed to sftp/scp report:Test Copy
Traceback (most recent call last):
  File "/usr/local/avenda/tips/insight/lib/report/run.py", line 369, in remote_copy
    fileserver.sftp(fs, tgz, remote_dir, remote_path)
  File "/usr/local/avenda/tips/insight/lib/report/fileserver.py", line 54, in sftp
    sftp.put(src_file, remote_path)
  File "/usr/lib/python2.6/site-packages/paramiko-1.15.2-py2.6.egg/paramiko/sftp_client.py", line 669,                                                                                     in put
    return self.putfo(fl, remotepath, file_size, callback, confirm)
  File "/usr/lib/python2.6/site-packages/paramiko-1.15.2-py2.6.egg/paramiko/sftp_client.py", line 621,                                                                                     in putfo
    with self.file(remotepath, 'wb') as fr:
  File "/usr/lib/python2.6/site-packages/paramiko-1.15.2-py2.6.egg/paramiko/sftp_client.py", line 327,                                                                                     in open
    t, msg = self._request(CMD_OPEN, filename, imode, attrblock)
  File "/usr/lib/python2.6/site-packages/paramiko-1.15.2-py2.6.egg/paramiko/sftp_client.py", line 729,                                                                                     in _request
    return self._read_response(num)
  File "/usr/lib/python2.6/site-packages/paramiko-1.15.2-py2.6.egg/paramiko/sftp_client.py", line 776,                                                                                     in _read_response
    self._convert_status(msg)
  File "/usr/lib/python2.6/site-packages/paramiko-1.15.2-py2.6.egg/paramiko/sftp_client.py", line 804,                                                                                     in _convert_status
    raise IOError(errno.EACCES, text)
IOError: [Errno 13] Permission denied

 



Solution

Solution: 

This is due to the wrong root directory specified in the Insight configuration. If the 'Root Directory' path is specified with '\' (back slash) instead of '/' (forword slash), then ClearPass will attempt to send the file as "SFTP /tmp/tmpmA1GK1.tgz -> 10.17.168.170:\Test-Copy\21-Jun-2016_20-42-14". Hence the SFTP PUT request wil be sent as "Test-Copy/\Test-Copy\21-June-2016_20-42.tgz". Due to this conflict, SFTP rejects this request and ClearPass logs the failure as permission denied. 

 

Wrong configuration: 

 

Correct Configuration: 

Version History
Revision #:
2 of 2
Last update:
‎09-08-2016 07:22 AM
Updated by:
 
Labels (1)
Contributors
Search Airheads
Showing results for 
Search instead for 
Did you mean: 
Is this a frequent problem?

Request an official Aruba knowledge base article to be written by our experts.