Skip to main content

Troubleshooting

If you experience any errors, verify that:

  • The IBM iSeries Access for Windows client software is installed on the Bravura Security Fabric server.

  • The IBM iSeries Access for Windows libraries are on the system-wide search path (PATH variable). If not, add the appropriate directory to the PATH environment variable and restart the Bravura Security Fabric server.

  • You can log into each OS/400 server from the Bravura Security Fabric server, using any tool in the IBM iSeries Access for Windows client, and the target system administrator ID and password you created.

  • Ensure correct ports are open between all the Bravura Security Fabric servers (nodes or proxies, wherever the agent runs), and all targets to be managed, as described in: https://www.ibm.com/support/pages/unable-start-or-connect-tcpip-server . Encrypted communication is recommended.

  • You can issue the crtusrprf and chgusrprf commands to create and update accounts when logged into each OS/400 server as the target system administrator.

  • You can issue a chgusrprf command on each OS/400 server to reset a user’s password when logged in with the administrative account.

Specific error messages

If you get the following error messages:

cwbCO_Connect: err=10061 (winsock error) The connection has been refused.

Check with the target administrators if they used different ports than the ones in the port table from the IBM article https://www.ibm.com/support/pages/unable-start-or-connect-tcpip-server , for these services:

  • Port mapper

  • License Management

  • Signon Verification

  • Telnet (PC5250 Emulation)

    Open remote access from the Privilege servers or proxies to whatever ports those services are listening on, to each specific target server, as they can be configured differently from target to target.

cwbCO_Connect: err=11001 (winsock error) The host was not found. Change the target system address line from the DNS to IP address.

cwbCO_CreateSystem: err=8014 Ensure there is no whitespace in the target system address line.