AMT Commander Ceased to Correctly Function

David_Beveridge — Wed, 11 May 2011 17:01:29 GMT

About 3 weeks ago, AMT Commander began to fail to log into remote machines using Kerberos. Previously, it had worked fine for everyone (5 engineers) but now it does not.

We can log into these same machines web consoles via a browser, using both Kerberos and Digest credentials. PowerShell scripts work perfectely using the same credentials, and SCCM works as well.

We have started developing against MPS, which means that a working version of Commader is quite useful.

Attached is the commander's log containing the typical failed connection. Connection was from a W7/64 machine to an AMT v6.0.0 machine.

-> [9:25:16 AM] Event: 172.16.75.37 changing state to Connecting
-> [9:25:16 AM] Information: Attempting non-TLS connection to amtpc.amt.local
-> [9:25:16 AM] Event: NetworkCredential Kerberos*: User=********, Domain=***, Pass=********
-> [9:25:16 AM] Event: Service Setup: http://172.16.75.37:16992/SecurityAdministrationService
-> [9:25:16 AM] CallAttempt: GetCoreVersion
-> [9:25:17 AM] CallWarning: GetCoreVersion
-> [9:25:18 AM] CallFailed: GetCoreVersion
-> [9:25:18 AM] Error: System.Net.WebException
System.Net.WebException: Unable to connect to the remote server ---> System.Net.Sockets.SocketException: No connection could be made because the target machine actively refused it 172.16.75.37:16992
at System.Net.Sockets.Socket.DoConnect(EndPoint endPointSnapshot, SocketAddress socketAddress)
at System.Net.Sockets.Socket.InternalConnect(EndPoint remoteEP)
at System.Net.ServicePoint.ConnectSocketInternal(Boolean connectFailure, Socket s4, Socket s6, Socket& socket, IPAddress& address, ConnectSocketState state, IAsyncResult asyncResult, Int32 timeout, Exception& exception)
--- End of inner exception stack trace ---
at System.Net.HttpWebRequest.GetRequestStream(TransportContext& context)
at System.Net.HttpWebRequest.GetRequestStream()
at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
at SecurityAdministrationService.Invoke(String methodName, Object[] parameters)
-> [9:25:19 AM] Information: Attempting TLS connection to amtpc.amt.local
-> [9:25:19 AM] Event: NetworkCredential Kerberos*: User=********, Domain=***, Pass=*********
-> [9:25:19 AM] Event: Service Setup: https://172.16.75.37:16993/SecurityAdministrationService
-> [9:25:19 AM] CallAttempt: GetCoreVersion
-> [9:25:20 AM] CallWarning: GetCoreVersion
-> [9:25:20 AM] Event: NetworkCredential Kerberos*: User=********, Domain=***, Pass=*********
-> [9:25:20 AM] Event: Service Setup: https://172.16.75.37:16993/GeneralInfoService
-> [9:25:20 AM] CallAttempt: GetCoreVersion
-> [9:25:20 AM] CallWarning: GetCoreVersion
-> [9:25:22 AM] Event: 172.16.75.37 changing state to Disconnected
-> [9:25:22 AM] CallFailed: AmtSystem.IsWirelessSupported WSMAN error
WSMAN Fault
Code: a:Sender (subcode: b:DestinationUnreachable)
Detail:
Reason: No route can be determined to reach the destination role defined by the WSAddressing To.
-> [9:25:22 AM] CallFailed: AmtSystem.IsWirelessSupported
WSManFault.Code: a:Sender WSManFault.SubCode: b:DestinationUnreachable
at Intel.Manageability.WSManagement.DotNetWSManClient.WSManSendReceive(Header header, XmlElement[] bodyIn, XmlElement[]& bodyOut)
at Intel.Manageability.WSManagement.DotNetWSManClient.Get(Uri resourceUri, IEnumerable`1 selectors)
at Intel.Manageability.Cim.Untyped.CimObject.Get(CimKeys keys)
at Intel.Manageability.Cim.Typed.CimBase.Get(CimKeys keys)
at ManageabilityStack.AmtSystem.get_IsWirelessSupported()

Here is a log from annother machine (W2003ES/32) attempting to connect to the same AMT v6 machine. Two attempts resulting in two different errors, this is what we see for everything:

-> [9:52:18 AM] Event: 172.16.75.37 changing state to Connecting
-> [9:52:18 AM] Information: Attempting non-TLS connection to amtpc.amt.local
-> [9:52:18 AM] Event: NetworkCredential Kerberos*: User=********, Domain=***, Pass=*********
-> [9:52:18 AM] Event: Service Setup: http://172.16.75.37:16992/SecurityAdministrationService
-> [9:52:18 AM] CallAttempt: GetCoreVersion
-> [9:52:19 AM] CallWarning: GetCoreVersion
-> [9:52:20 AM] CallFailed: GetCoreVersion
-> [9:52:20 AM] Error: System.Net.WebException
System.Net.WebException: Unable to connect to the remote server ---> System.Net.Sockets.SocketException: No connection could be made because the target machine actively refused it 172.16.75.37:16992
at System.Net.Sockets.Socket.DoConnect(EndPoint endPointSnapshot, SocketAddress socketAddress)
at System.Net.Sockets.Socket.InternalConnect(EndPoint remoteEP)
at System.Net.ServicePoint.ConnectSocketInternal(Boolean connectFailure, Socket s4, Socket s6, Socket& socket, IPAddress& address, ConnectSocketState state, IAsyncResult asyncResult, Int32 timeout, Exception& exception)
--- End of inner exception stack trace ---
at System.Net.HttpWebRequest.GetRequestStream(TransportContext& context)
at System.Net.HttpWebRequest.GetRequestStream()
at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
at SecurityAdministrationService.Invoke(String methodName, Object[] parameters)
-> [9:52:21 AM] Information: Attempting TLS connection to amtpc.amt.local
-> [9:52:21 AM] Event: NetworkCredential Kerberos*: User=********, Domain=***, Pass=*********
-> [9:52:21 AM] Event: Service Setup: https://172.16.75.37:16993/SecurityAdministrationService
-> [9:52:21 AM] CallAttempt: GetCoreVersion
-> [9:52:22 AM] CallWarning: GetCoreVersion
-> [9:52:22 AM] Event: NetworkCredential Kerberos*: User=********, Domain=***, Pass=*********
-> [9:52:22 AM] Event: Service Setup: https://172.16.75.37:16993/GeneralInfoService
-> [9:52:22 AM] CallAttempt: GetCoreVersion
-> [9:52:22 AM] CallWarning: GetCoreVersion
-> [9:52:25 AM] Event: 172.16.75.37 changing state to Disconnected
-> [9:52:25 AM] CallFailed: AmtSystem.IsWirelessSupported WSMAN error
WSMAN Fault
Code: a:Sender (subcode: b:DestinationUnreachable)
Detail:
Reason: No route can be determined to reach the destination role defined by the WSAddressing To.
-> [9:52:25 AM] CallFailed: AmtSystem.IsWirelessSupported
WSManFault.Code: a:Sender WSManFault.SubCode: b:DestinationUnreachable
at Intel.Manageability.WSManagement.DotNetWSManClient.WSManSendReceive(Header header, XmlElement[] bodyIn, XmlElement[]& bodyOut)
at Intel.Manageability.WSManagement.DotNetWSManClient.Get(Uri resourceUri, IEnumerable`1 selectors)
at Intel.Manageability.Cim.Untyped.CimObject.Get(CimKeys keys)
at Intel.Manageability.Cim.Typed.CimBase.Get(CimKeys keys)
at ManageabilityStack.AmtSystem.get_IsWirelessSupported()
-> [9:52:30 AM] Event: 172.16.75.37 changing state to Connecting
-> [9:52:30 AM] Information: Attempting non-TLS connection to amtpc.amt.local
-> [9:52:30 AM] Event: NetworkCredential Kerberos*: User=********, Domain=***, Pass=*********
-> [9:52:30 AM] Event: Service Setup: http://172.16.75.37:16992/SecurityAdministrationService
-> [9:52:30 AM] CallAttempt: GetCoreVersion
-> [9:52:31 AM] CallWarning: GetCoreVersion
-> [9:52:32 AM] CallFailed: GetCoreVersion
-> [9:52:32 AM] Error: System.Net.WebException
System.Net.WebException: Unable to connect to the remote server ---> System.Net.Sockets.SocketException: No connection could be made because the target machine actively refused it 172.16.75.37:16992
at System.Net.Sockets.Socket.DoConnect(EndPoint endPointSnapshot, SocketAddress socketAddress)
at System.Net.Sockets.Socket.InternalConnect(EndPoint remoteEP)
at System.Net.ServicePoint.ConnectSocketInternal(Boolean connectFailure, Socket s4, Socket s6, Socket& socket, IPAddress& address, ConnectSocketState state, IAsyncResult asyncResult, Int32 timeout, Exception& exception)
--- End of inner exception stack trace ---
at System.Net.HttpWebRequest.GetRequestStream(TransportContext& context)
at System.Net.HttpWebRequest.GetRequestStream()
at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
at SecurityAdministrationService.Invoke(String methodName, Object[] parameters)
-> [9:52:33 AM] Information: Attempting TLS connection to amtpc.amt.local
-> [9:52:33 AM] Event: NetworkCredential Kerberos*: User=*******, Domain=***, Pass=*********
-> [9:52:33 AM] Event: Service Setup: https://172.16.75.37:16993/SecurityAdministrationService
-> [9:52:33 AM] CallAttempt: GetCoreVersion
-> [9:52:33 AM] CallWarning: GetCoreVersion
-> [9:52:33 AM] Event: NetworkCredential Kerberos*: User=*******, Domain=***, Pass=*********
-> [9:52:33 AM] Event: Service Setup: https://172.16.75.37:16993/GeneralInfoService
-> [9:52:35 AM] Event: NetworkCredential Kerberos*: User=*******, Domain=***, Pass=*********
-> [9:52:35 AM] Event: Service Setup: https://172.16.75.37:16993/AgentWatchdogLocalService
-> [9:52:35 AM] Event: NetworkCredential Kerberos*: User=*******, Domain=***, Pass=*********
-> [9:52:35 AM] Event: Service Setup: https://172.16.75.37:16993/EventManagerService
-> [9:52:35 AM] Event: NetworkCredential Kerberos*: User=*******, Domain=***, Pass=*********
-> [9:52:35 AM] Event: Service Setup: https://172.16.75.37:16993/EndpointAccessControlService
-> [9:52:36 AM] Event: 172.16.75.37 changing state to Connected
-> [9:52:36 AM] Error: Error while changing system connection state
EXCEPTION: Object reference not set to an instance of an object. (type System.NullReferenceException)
EXCEPTION STACK: at System.Windows.Forms.Control.MarshaledInvoke(Control caller, Delegate method, Object[] args, Boolean synchronous)
at System.Windows.Forms.Control.Invoke(Delegate method, Object[] args)
at ManageabilityCommanderTool.MainForm.SystemStateChangedHandler(AmtSystem system)
-> [9:52:38 AM] Event: 172.16.75.37 changing state to Disconnected

AMT Commander Ceased to Correctly Function

Lance_A_Intel — Thu, 12 May 2011 16:13:36 GMT

Hello David, I've put in a request to the support team for this tool.

For your reference, they can be contacted at mailto:business-client-software-support@intel.com
Thanks

topic AMT Commander Ceased to Correctly Function in Intel® Business Client Software Development

AMT Commander Ceased to Correctly Function

AMT Commander Ceased to Correctly Function