Environment
Novell Access Management 3 Access Administration
Novell Access Management 3 Linux Access Gateway
Novell Access Management 3 Netware Access Gateway
Novell Access Management 3 Support Pack 2 applied
Novell Access Management setup with multiple Administration Servers defined
Situation
Novell Access Manager setup with two Administration Servers, two
Novell Identity servers and two Linux Access Gateway servers. The
Administration Servers and Identity Servers were running on SLES
10. The entire setup worked fine for a period of months. After
making updates to the underlying SLES 10 OS'es, any changes that
were applied to the Linux Access Gateway setup would result in a
popup error appearing in the Admin Console with the following
message:
""The time is not synchronized between the different Device Manager datastore servers"
Looking at the time on both the Administration servers, it would appear that all was correct. Running a dsrepair on these two servers also returned success.
""The time is not synchronized between the different Device Manager datastore servers"
Looking at the time on both the Administration servers, it would appear that all was correct. Running a dsrepair on these two servers also returned success.
Resolution
Make sure that NTP is running on all Access Manager devices and
that they point to the same time source. Turned out that the NTP
client was disabled on one of the Administration Servers in the
case above.
Issuing an 'xntpdc -p' command at the server console would return a'connection refused' message. Manually executing an 'ntpdate -u (ip address of ntp)' updated the time and meant that we got the correct response from xntpdc -p. As soon as this occured, all updated to the Linux Access Gateway would get applied immediately without error.
Issuing an 'xntpdc -p' command at the server console would return a'connection refused' message. Manually executing an 'ntpdate -u (ip address of ntp)' updated the time and meant that we got the correct response from xntpdc -p. As soon as this occured, all updated to the Linux Access Gateway would get applied immediately without error.