Windows based Access Gateway Service reports tomcat 5.5.30 version after upgrade to SP4

  • 7009442
  • 27-Sep-2011
  • 26-Apr-2012

Environment

Novell Access Manager 3.1 Access Gateway Service
Novell Access Manager 3.1 Support Pack 4 applied
Access Gateway Service running on Windows 2008

Situation

Access Manager 3.1 setup and working fine with SP3 applied. The Administration Console, Identity server and Access Gateway are installed on seperate hosts, all running Windows 2008. After applying SP4 patch, everything appeared to run successfully. However after connecting to the Access Gateway Service host on Windows and navigating to C:\Program Files\Novell\bin\tomcat (Windows), the tomcat version was reported as 5.5.30. All other Access Manager coimponents were upgraded to 5.5.32 after the SP4 update.

Resolution

The fixes in the newer tomcat build are not required with the Access Gateway Service (AGS) ie. the vulnerabilities reported between the 5.5.30 and 5.5.32 tomcat builds do not effect the AGS.

If you need to update to the 5.5.32 to be in sync with all other components, run the following commands:

1. Connect to Windows based Access Gateway service

    Stop Apache tomcat service

2. Go to c:\Program Files\Novell\bin\tomcat in command prompt

3. run : apache-tomcat-5.5.32 /S

4. From directory  c:\Program Files\Apache Software Foundation\Tomcat 5.5 , copy "bin, common, server" directories

5. Put above copied directories in c:\Program Files\Novell\tomcat (Overwrite all existing files when it prompts)

6. RegEdit and go to

    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Apache Software Foundation\Procrun 2.0\Tomcat5\Parameters\Java\Options]

    change the value of data to  

    "-Dcatalina.home=C:\Program Files\Novell\Tomcat

    -Dcatalina.base=C:\Program Files\Novell\Tomcat

    -Djava.endorsed.dirs=C:\Program Files\Novell\Tomcat\common\endorsed

    -Djava.io.tmpdir=C:\Program Files\Novell\Tomcat\temp

    -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager

    -Djava.util.logging.config.file=C:\Program Files\Novell\Tomcat\conf\logging.properties

    -Djcc.dir=C:\Program Files\Novell\devman\jcc

    -Dsun.net.http.allowRestrictedHeaders=true"

7.  Regedit and Go to [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tomcat5\]

           Under Description, change the version from 5.5.30 to 5.5.32.

8. start Apache tomcat service.