Viewing or importing trusted roots crashes Tomcat

  • 7005891
  • 03-May-2010
  • 26-Apr-2012

Environment

Novell Access Manager 3.1 SP1
Identity Server and Administration Console on separate Linux boxes.

Situation

When viewing or importing a trusted root using Access Manager iManager Console, Tomcat will crash and it will be necessary to restart it to recover. The following error is seen in the Administration Console catalina.out.

Novell JClient 1.5.1256-1.5.1277.  Copyright 1999 Novell Inc. All Rights Reserved.
java.net.SocketTimeoutException: connect timed out
    at java.net.PlainSocketImpl.socketConnect(Native Method)
    at java.net.PlainSocketImpl.doConnect(PlainSocketImpl.java:333)
    at java.net.PlainSocketImpl.connectToAddress(PlainSocketImpl.java:195)
    at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:182)
    at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:366)
    at java.net.Socket.connect(Socket.java:519)
    at sun.net.NetworkClient.doConnect(NetworkClient.java:158)
    at sun.net.www.http.HttpClient.openServer(HttpClient.java:394)
    at sun.net.www.http.HttpClient.openServer(HttpClient.java:529)
    at sun.net.www.http.HttpClient.<init>(HttpClient.java:233)
    at sun.net.www.http.HttpClient.New(HttpClient.java:306)
    at sun.net.www.http.HttpClient.New(HttpClient.java:323)
    at sun.net.www.protocol.http.HttpURLConnection.getNewHttpClient(HttpURLConnection.java:837)
    at sun.net.www.protocol.http.HttpURLConnection.plainConnect(HttpURLConnection.java:778)
    at sun.net.www.protocol.http.HttpURLConnection.connect(HttpURLConnection.java:703)
    at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1026)
    at com.novell.emframe.fw.FwUtils.getiManInputStreamBasedOnProxy(FwUtils.java:3382)
    at com.novell.emframe.fw.util.ModuleGet.downloadModuleDescriptorDocument(ModuleGet.java:823)
    at com.novell.emframe.fw.util.ModuleGet.access$000(ModuleGet.java:53)
    at com.novell.emframe.fw.util.ModuleGet$AsyncModuleDescriptorDownloader.run(ModuleGet.java:801)
    at java.lang.Thread.run(Thread.java:619)
#
# An unexpected error has been detected by Java Runtime Environment:
#
#  SIGSEGV (0xb) at pc=0xacf5aed7, pid=27021, tid=2908113824
#
# Java VM: Java HotSpot(TM) Server VM (11.0-b16 mixed mode linux-x86)
# Problematic frame:
# C  [libnpkiapi.so.3.3.1+0x41ed7]
#
# An error report file with more information is saved as:
# /var/opt/novell/novlwww/hs_err_pid27021.log
#
# If you would like to submit a bug report, please visit:
#   http://java.sun.com/webapps/bugreport/crash.jsp
# The crash happened outside the Java Virtual Machine in native code.
# See problematic frame for where to report the bug.
#
We are not in DHost. pid = -134674728

Resolution

Check the pki library versions with the following command

rpm ‑qa | grep ‑i pkia

In this case the Administration Console was running an older version of the following rpms:

novell-npkiapi.i386.rpm
novell-npkit.i386.rpm

Even though the Administration Console had been patched to 3.1 SP1, the rpms were still at 3.1 FCS.
Updating these packages to the versions shipped in 3.1 SP1 solved the problem.

Use the command:
rpm -Uhv novell-npkiapi.i386.rpm
to update each package and restart Tomcat with the command
/etc/init.d/novell-tomcat5 stop/start