Sensors Not Connecting to the Server After Global VDI is Enabled

[#1]

Version

Cb Response 4.1.2 , 4.2.x, 5.x

Issue

After installing Cb Response Sensors on VDI machines, using the "Carbon Black v4.x - Server VDI Support" document or "Server VDI Support" in the Appendix section of the 5.x User Guide, the sensor does not connect to the Carbon Black server.

Symptoms

Sensor

The following error will be logged in the %WINDIR%\CarbonBlack\Sensor.log:

2014-11-21 17:06:48: Unable to find SensorId in permanent config - Log file rolling may behave incorrectly

2014-11-21 17:06:52: failed to register [hr=0x801901f4] [Code=500]

Server

These errors can be seen on the server:

/var/log/cb/coreservices/debug.log:

<err>  cb.flask.app - Exception on /sensor/register [POST]

Traceback (most recent call last):

  File "/usr/lib/python2.6/site-packages/flask/app.py", line 1687, in wsgi_app

    response = self.full_dispatch_request()

  File "/usr/lib/python2.6/site-packages/flask/app.py", line 1360, in full_dispatch_request

    rv = self.handle_user_exception(e)

  File "/usr/lib/python2.6/site-packages/flask/app.py", line 1358, in full_dispatch_request

    rv = self.dispatch_request()

  File "/usr/lib/python2.6/site-packages/flask/app.py", line 1344, in dispatch_request

    return self.view_functions[rule.endpoint](**req.view_args)

  File "/usr/lib/python2.6/site-packages/cb/flask/sensor_blueprint.py", line 129, in register

  File "/opt/jenkins/builds/workspace/cbent-nightly-release-5.2.x/code/coreservices/src/cb/utils/decorators.py", line 30, in wrapper

  File "/opt/jenkins/builds/workspace/cbent-nightly-release-5.2.x/code/coreservices/src/cb/sensor/engine.py", line 1230, in register

  File "/usr/lib64/python2.6/contextlib.py", line 34, in __exit__

    self.gen.throw(type, value, traceback)

  File "/opt/jenkins/builds/workspace/cbent-nightly-release-5.2.x/code/coreservices/src/cb/sensor/engine.py", line 151, in sensor_activity_tracker

  File "/opt/jenkins/builds/workspace/cbent-nightly-release-5.2.x/code/coreservices/src/cb/sensor/engine.py", line 1099, in register

AttributeError: 'module' object has no attribute 'DefaultNewRegistrationCallback'

/var/log/cb/enterprise/enterprise.log:

Error parsing /etc/cb/cb.conf line 760 (default_new_sensor_registration_callback.py): need more than 1 value to unpack

Cause

One of the parameters was added to the configuration file /etc/cb/cb.conf is incorrect:

NewRegistrationCallbackModulePath=/usr/share/cb/plugins/default_new_sensor_registratio

Or:

NewRegistrationCallbackModulePath=/usr/share/cb/plugins/

default_new_sensor_registration_callback.py

Solution

1. On the Cb Response server, edit the /etc/cb/cb.conf file and enter the correct value:

   NewRegistrationCallbackModulePath=/usr/share/cb/plugins/default_new_sensor_registration.py

2. Restart services:
   

   service cb-enterprise restart