HP Anyware Connector Broker Error Codes

Summary

This KB article details some know specific sources of failures, how to determine if it's that specific failure and if there's any known resolutions relating to the Cloud Access Connector Broker.

HP Anyware Manager logs can be found under:  
/var/log/cloud-access-connector  
https://www.teradici.com/web-help/pcoip_cloud_access_manager/CACv2/troubleshooting/troubleshooting_logs/

HP Anyware Connector Log Components

- connector_activedirectorysync: Syncs Active Directory Users and Computers to HP Anyware Manager. This is where we sync the Users and Computers that appear in the HP Anyware Manager Admin Console based on the computer-dn, computers-filter, users-filter & user-dn specified during installation. Other information logged:

• Connection information or errors to domain controllers
• Query information or errors to the AD
• information on what is transmitted up to HP Anyware Manager
• failures communicating AD information to HP Anyware Manager
• note, the sync information is logged in the HP Anyware Manager Admin Console and available in the activity log

 
- connector_brokerinternal: This will process requests from the connector_cm and look for resources the user is authorized to connect to in HP Anyware Manager. Other information logged:

• Only used for users connecting from inside the corporate network
• details are otherwise the same as for connector_brokerexternal
• brokerinternal works with cm for session establishment

-  connector_brokerexternal: This will process requests from the connector_cmsg.and look for resources the user is authorized to connect to in HP Anyware Manager. If MFA is enabled, this will pass the MFA passcode to the Radius server. Other information logged:

• Only used for users connecting from outside the corporate network
• user authentication during the brokering or session establishment flow
• incorrect password errors, mfa errors
• errors obtaining the list of workstations the user is entitled to
• status of the workstation at the time the user gets the list
• errors communicating with active directory to authenticate the user
• errors communicating with RADIUS server when attempting to authenticate the user
• brokerexternal works with cmsg for session establishment

- connector_cm: - Internal Connection Manager. This will broker connections with the connector_brokerinternal. Resulting connections will send in session traffic directly from the client to the agent machine. Other information logged:

• Users attempting to connect to their workstations (brokering)
• username, source IP, PCoIP client type and version
• stage of authentication
• failure reasons during authentication or brokering (password, workstation unavailability)
• cm works with brokerinternal to authenticate users

- connector_cmsg: This is the external Connection Manager. The Security Gateway here is enabled. This will broker connections with connector_brokerexternal. Resulting connections will send traffic from the client to agent via the Security Gateway. Other information logged:

• Only used for users connecting from outside the corporate network
• Same as above, but also
• stats on connections from clients to agents through the SG, simultaneous number, bandwidth
• cmsg works with brokerexternal to authenticate users

- connector_connectorgateway: Proxies incoming connections to either the connector_cm, connector_cmsg, or connector_managementinterface based off of the header information for the request. Other information logged:

• Basic network connection info, such as client IP and any response code, and which service or route the client was trying to access

- connector_healthcheck: This will probe HP Anyware Connector components and check if they are in a healthy state and update the connector's status in cam.teradici.com. This will also report on the health of  the Domain Controller and the connector_gateway's TLS Certificate expiration date . Other information logged:

• status of CAC components that are provided up to HP Anyware Manager
• errors communicating the information to HP Anyware Manager
• note: this information is available in the HP Anyware Manager Admin Console or via HP Anyware Manager APIs for the connector

-  connector_managementinterface: Legacy UI for HP Anyware Connector Legacy. Functional, but we recommend using the HP Anyware Manager Admin Console (ie, https://cam.teradici.com). Other information logged:

• information or errors that occur through the usage of the legacy management interface

- connector_sumologic: Information or errors that occur when working with sumologic to aggregate logs to Teradici.

HP Anyware Connector Error Codes

ping <domain.com>
ping <dc1.domain.com>
nslookup <domain.com>

openssl s_client -connect dc1.domain.com:636

ping <domain.com>
ping <dc1.domain.com>
nslookup <domain.com>
nslookup domain.com <ip-of-dc1.domain.com>
nslookup -type=SRV _ldap._tcp.domain.com
nslookup -type=SRV _ldap._tcp.domain.com <ip-of-dc1.domain.com>