Environment
Novell Identity Manager Driver-
Situation
Problems with Platform Services on AIX 4.3.3 ML10 with the
random number generator
After a successful installation of Platform Services on AIX
4.3.3 ML10, running
/usr/local/ASAM/bin/PlatformServices/PlatformServicesProcess/asampsp
results in various errors on module /usr/lib/libc.a.
This error does not occur on AIX version 5.x.
Installed some patches recommended by IBM, but error still remains:
xlC.adt.include.6.0.0.0
xlC.aix43.rte.6.0.0.0
xlC.aix43.rte.6.0.0.18
xlsmp.aix43.rte.1.5.0.0
xlsmp.aix43.rte.1.5.0.4
Installed some patches recommended by IBM, but error still remains:
xlC.adt.include.6.0.0.0
xlC.aix43.rte.6.0.0.0
xlC.aix43.rte.6.0.0.18
xlsmp.aix43.rte.1.5.0.0
xlsmp.aix43.rte.1.5.0.4
Tried running "prngd /etc/entropy/"
Used the prngd.conf delivered with the installation package of the Platform Service for AIX
Tried it with both the prngd binary shipped with the platform services and with one form the IBM ftp site (version 0.9.23- 3)
Effects:
the prngd daemon starts with non errors when we tray to configure the Platform with /usr/local/ASAM/bin/PlatformServices/plat- config, (and all needed parameters) we just get "SSL not configured".
Used the prngd.conf delivered with the installation package of the Platform Service for AIX
Tried it with both the prngd binary shipped with the platform services and with one form the IBM ftp site (version 0.9.23- 3)
Effects:
the prngd daemon starts with non errors when we tray to configure the Platform with /usr/local/ASAM/bin/PlatformServices/plat- config, (and all needed parameters) we just get "SSL not configured".
Resolution
The line in asamplat.conf is:
ENTROPY /etc/entropy
Also, when your daemon is running, check to see if it is pointed to /etc/entropy? The prngd that ships with the driver should be run as follows (if installed to /bin):
/bin/prngd /etc/entropy
If this doesn't work, run the following, to help troubleshoot this then contact Novell support:
ls - l /etc/entropy
ps - ef | grep prngd
The platform services uses OpenSSL, which uses a variety of files and sources for entropy by default.
ENTROPY /etc/entropy
Also, when your daemon is running, check to see if it is pointed to /etc/entropy? The prngd that ships with the driver should be run as follows (if installed to /bin):
/bin/prngd /etc/entropy
If this doesn't work, run the following, to help troubleshoot this then contact Novell support:
ls - l /etc/entropy
ps - ef | grep prngd
The platform services uses OpenSSL, which uses a variety of files and sources for entropy by default.