Linux Access Gateway (LAG) import failure

mstatman · #1 17-Jul-2008, 09:04 AM

Fresh install of Access Manager 3.0.3. Management console on SLES10SP1. IM installed/imported ok (on same box as management console). SuSEFirewall disabled.

Trying to install LAG, but fails, shows "Server 172.16.170.145 is currently importing. If it has been several minutes after installation, click Repair Import to fix it." in management console. Repair import doesn't help. Reinstall doesn't help. Per docs, tried /chroot/lag/opt/novell/bin/lagconfigure.sh, but still didn't import. The logs do show some errors, but not sure where they're coming from, or what to do about them:

Output from lagconfigure.sh:

amag-va1:/ # /chroot/lag/opt/novell/bin/lagconfigure.sh
Novell Access Manager Installer
novell-vmc is running
hostname = amag-va1
Hostname validation success
Enter the Administration server IP address
[]:172.16.170.144
Enter the Access Manager Administration user ID [admin]:
Enter the Access Manager Administration password []:
Re-enter the password for verification []:

Do you want to import the device with current configuration or initial configuration after install(with only network-related)? (Enter C for current configuration, I for initial configuration)i
Importing the device with initial configuration
connect: Connection refused
Configuring Tomcat for Novell: done

Success
Configuring Novell Access Manager Server Communications: done

Successfully installed the following components:
Tomcat for Novell
Novell Access Manager Server Communications Configuration

Wait for few minutes to get the componets imported to Administration Server
For information regarding this install look in the logfile directory found at
/tmp/novell_access_manager.

To configure the installed service, please log into the management console at
http://172.16.170.144:8080/nps using the user ID "admin".

Installation complete.

/opt/novell/devman/jcc/logs/configure.log.0 has no errors

/opt/novell/devman/jcc/logs/configure.log.1:

Jul 17, 2008 10:34:11 AM com.novell.jcc.util.Configure L
INFO: Admin info set successfully
Jul 17, 2008 10:34:11 AM com.novell.jcc.util.JCCSettings A
INFO: Current settings
rmiPort: 1197
localMgmtPort: 1443
localMgmtIP: 172.16.170.145
remoteMgmtPort: 8444
remoteMgmtIP: [172.16.170.144]
jccProxyPort: 2843
agProxyPort: 444
sslvpnProxyPort: 3423
healthFreq: 300
statsFreq: 300
remoteMgmtIPFreq: 3600
secure: true

Jul 17, 2008 10:34:11 AM com.novell.jcc.util.JCCSettings A
WARNING: keystore_info.xml does not yet exist.
Jul 17, 2008 10:34:11 AM com.novell.jcc.util.JCCUtils logSevere
SEVERE: AM#100709021: Exception - get JCC Key store information failed
com.novell.jcc.util.JCCSettings getJCCKeystoreInfo
Missing settings for Keystore: Type
com.novell.jcc.cert.KeystoreInfoMissingSettingExce ption: Missing settings for Keystore: Type
at com.novell.jcc.cert.KeystoreInfo.load(y:1509)
at com.novell.jcc.cert.KeystoreInfo.<init>(y:1435)
at com.novell.jcc.util.JCCSettings.getJCCKeystoreInfo (y:477)
at com.novell.jcc.util.JCCSettings.getJCCKeystoreInfo (y:898)
at com.novell.jcc.sockets.JCCSSLSocketUtils.reinit(y: 886)
at com.novell.jcc.util.Configure.F(y:2488)
at com.novell.jcc.util.Configure.configure(y:1925)
at com.novell.jcc.util.Configure.main(y:1897)

Jul 17, 2008 10:34:11 AM com.novell.jcc.util.JCCUtils logSevere
SEVERE: AM#100708003: Error creating socket factory
com.novell.jcc.sockets.JCCSSLSocketUtils reinit
Missing settings for Keystore: Type
com.novell.jcc.cert.KeystoreInfoMissingSettingExce ption: Missing settings for Keystore: Type
at com.novell.jcc.cert.KeystoreInfo.load(y:1509)
at com.novell.jcc.cert.KeystoreInfo.<init>(y:1435)
at com.novell.jcc.util.JCCSettings.getJCCKeystoreInfo (y:477)
at com.novell.jcc.util.JCCSettings.getJCCKeystoreInfo (y:898)
at com.novell.jcc.sockets.JCCSSLSocketUtils.reinit(y: 886)
at com.novell.jcc.util.Configure.F(y:2488)
at com.novell.jcc.util.Configure.configure(y:1925)
at com.novell.jcc.util.Configure.main(y:1897)

Jul 17, 2008 10:34:11 AM com.novell.jcc.server.JCCServerImpl getInstance
WARNING: This class has not been constructed.
Jul 17, 2008 10:34:11 AM com.novell.jcc.client.AlertDispatcher <init>
INFO: Alert dispatcher ready
Jul 17, 2008 10:34:11 AM com.novell.jcc.cert.CertificateClient A
INFO: Getting key: test-signing from 172.16.170.144
Jul 17, 2008 10:34:11 AM com.novell.jcc.server.JCCServerImpl getInstance
WARNING: This class has not been constructed.
Jul 17, 2008 10:34:12 AM com.novell.jcc.cert.CertificateClient A
INFO: Successfully wrote /opt/novell/devman/jcc/certs/esp/29E1B7CFC68E74E1/signing.keystore
Jul 17, 2008 10:34:12 AM com.novell.jcc.cert.CertificateClient A
INFO: Getting key: test-encryption from 172.16.170.144
Jul 17, 2008 10:34:12 AM com.novell.jcc.cert.CertificateClient A
INFO: Successfully wrote /opt/novell/devman/jcc/certs/esp/29E1B7CFC68E74E1/encryption.keystore
Jul 17, 2008 10:34:12 AM com.novell.jcc.cert.CertificateClient A
INFO: Getting key: test-connector from 172.16.170.144
Jul 17, 2008 10:34:12 AM com.novell.jcc.cert.CertificateClient A
INFO: Successfully wrote /opt/novell/devman/jcc/certs/esp/29E1B7CFC68E74E1/connector.keystore
Jul 17, 2008 10:34:12 AM com.novell.jcc.cert.CertificateClient A
INFO: Getting key: configCA from 172.16.170.144
Jul 17, 2008 10:34:12 AM com.novell.jcc.cert.CertificateClient A
INFO: Successfully wrote /opt/novell/devman/jcc/certs/esp/29E1B7CFC68E74E1/truststore.keystore
Jul 17, 2008 10:34:12 AM com.novell.jcc.util.Configure A
INFO: Configuration completed successfully

excerpt of /opt/novell/devman/jcc/logs/jcc-0.log.0

...
Jul 17, 2008 10:44:48 AM com.novell.jcc.proxy.JCCProxy A
WARNING: ESP idp-esp-41C2DA5961E036A5 name not found
Jul 17, 2008 10:44:48 AM com.novell.jcc.proxy.JCCProxy A
INFO: jcc.ag.esp.not_started
Jul 17, 2008 10:44:48 AM com.novell.jcc.proxy.JCCProxy A
WARNING: ESP idp-esp-41C2DA5961E036A5 is not registered
Jul 17, 2008 10:49:48 AM com.novell.jcc.proxy.JCCProxy A
WARNING: ESP idp-esp-41C2DA5961E036A5 name not found
Jul 17, 2008 10:49:48 AM com.novell.jcc.proxy.JCCProxy A
INFO: jcc.ag.esp.not_started
Jul 17, 2008 10:49:48 AM com.novell.jcc.proxy.JCCProxy A
WARNING: ESP idp-esp-41C2DA5961E036A5 is not registered
Jul 17, 2008 10:50:12 AM com.novell.jcc.handler.ProxyHandler handleRequest
INFO: Proxy response to Device Manager: 1959 bytes

/tmp/novell_access_manager/inst_jcc_2008-07-17_10\:32\:58.log showed no errors.

/tmp/novell_access_manager/inst_main_2008-07-17_10\:32\:58.log

Started installation at 2008-07-17_10:32:58
17 Jul 10:33:44 ntpdate[24981]: the NTP socket is in use, exiting
Importing the device with initial configuration
Stopping Novell Linux Access Gateway Virtualization Controller
Starting Novell Linux Access Gateway Virtualization Controller: ..done
Starting vmcontroller
Configuring Tomcat for Novell:
cp: cannot stat `utils/CharsetMapperDefault.properties': No such file or directory
Successfully configured novell tomcat
Verified device manager configuration store is working
Successfully configured nesp
Successfully configured access manager communications server
Starting Tomcat
Starting tomcat4: Using CATALINA_BASE: /var/opt/novell/tomcat4
Using CATALINA_HOME: /var/opt/novell/tomcat4
Using CATALINA_TMPDIR: /var/opt/novell/tomcat4/temp
Using JAVA_HOME: /opt/novell/java

Starting Novell Access Manager Server Communications
Starting Novell Access Manager Server Communications ..done
Configuration, started at 2008-07-17_10:32:58, finished at 2008-07-17_10:35:14

/tmp/novell_access_manager/inst_nesp_2008-07-17_10\:32\:58.log

Configuring Novell ESP:

cp: cannot stat `/var/opt/novell/tomcat4/webapps/nesp/WEB-INF/lib/xmlParserAPIs.jar': No such file or directory
mv: cannot stat `/var/opt/novell/tomcat4/webapps/nesp/WEB-INF/lib/LogEvent.jar': No such file or directory
Configuration completed successfully
We are not in DHost. pid = 1073835008
NESP install complete
java.util.NoSuchElementException: Cannot find xPath "/Server/Service[1]/Connector[@className='org.apache.coyote.tomcat4.CoyoteConnec tor' and @port='']/@enableLookups"

Any suggestions appreciated!