Admin Console, Identity server and Access Gateway Service not functional after upgrading OS from SLES 11.4 to SLES 12, 12.1 or12.2

  • 7018476
  • 11-Jan-2017
  • 20-Jan-2017

Environment

NetIQ Access Manager 4.3
NetIQ Access Manager 4.2
NetIQ Access Manager 4.1

Situation

After upgrading the underlying OS on each functional NAM component from SLES 11.4 to SLES 12 SP1, the NAM 4.2 Admin Console and Access Gateway's were not functional. The Identity Providers's however were all fine.

On the Admin (AC) Console, eDirectory is failing to start when booting/rebooting the machine. As a result, the AC service also fails to start. In log file /var/opt/novell/eDirectory/log/ndsd.log I see an event similar to the following during bootup:

"Got SIGINT/SIGTERM signal, server shutting down"

Once the server is up and eDirectory and the AC have failed to start, I can manually start ndsd and then stop/start the AC and all is now functional.

On the AG, the novell-apache2 service shows "dead". Log /var/log/novell-apache2/rcnovell-apache2.out shows the following:

"/opt/novell/apache2/sbin/httpd: error while loading shared libraries: libpcre.so.0: cannot open shared object file: No such file or directory"

Resolution

run "ndsconfig upgrade" after the upgrade to SLES12 on Admin Console. This will generate the necessary template files that ndsmanage requires. After this, the following NAM changes must be done on each NAM component specified:

AC:

        cp novell-ac.service /etc/systemd/system/

        cp novell-snmpd.service /etc/systemd/system/

        systemctl daemon-reload

        systemctl enable novell-ac.service

        systemctl enable novell-snmpd.service

 

IDP:

                cp novell-jcc.service /etc/systemd/system/

        cp novell-idp.service /etc/systemd/system/

        systemctl daemon-reload

        systemctl enable novell-jcc.service

        systemctl enable novell-idp.service

 

MAG:

                cp novell-activemq.service /etc/systemd/system/

                cp novell-apache2.service /etc/systemd/system/

                cp novell-agscd.service /etc/systemd/system/

                cp novell-jcc.service /etc/systemd/system/

                cp novell-mag.service /etc/systemd/system/

        systemctl daemon-reload

        systemctl enable novell-activemq.service

        systemctl enable novell-apache2.service

        systemctl enable novell-agscd.service

        systemctl enable novell-jcc.service

        systemctl enable novell-mag.service