Access Gateway Services on Linux stops working after upgrading from SP3 to SP4

  • 7009749
  • 16-Nov-2011
  • 26-Apr-2012

Environment


Access Gateway Service on Linux
Access Gateway Service on Linux Service Pack 3

Situation

  • Access Gateway installed in SLES11 does no longer respond after running after running a Service Pack 4 upgrade
  • OS (SLES11) starts swapping memory and slows down without being low on available memory
  • The "AccessGateway_InstallLog" does not report any problems. All listed "Install Action" items are reported with: "Status: SUCCESSFUL"
  • The aps_install log file reports an error for the "Apache Installation" section

    => Apache Installation
    Start Time: 2011-11-15_10:06:59

    Preparing...                ##################################################
    novell-nacm-apache          ##################################################
    error: unpacking of archive failed on file /opt/novell/apache2/certs: cpio: rename failed - Inappropriate ioctl for device

  • The Access Gateway Service had been re-installed some time ago due to a platform change without deleting the device from the configuration store. This will cause the configuration to be re-pushed during the AGS device import process
  • AGS devices which have never been reinstalled are working without any problems after running the Service Pack 4 upgrade process


Resolution

  • This issue has been addressed to engineering

  • Workaround:

    • ssh into your AGS service on Linux machine
    • cd into "/opt/novell/apache2"
    • move the "cacerts, certs, clientcerts" directories to "/etc/opt/novell/apach2"
      (overwriting existing directories and their conetent)
    • create the following softlinks
      lrwxrwxrwx 1 root root   36 2011-09-27 15:39 cacerts -> /etc/opt/novell/apache2/conf/cacerts
      lrwxrwxrwx 1 root root   34 2011-09-27 15:39 certs -> /etc/opt/novell/apache2/conf/certs
      lrwxrwxrwx 1 root root   40 2011-09-27 15:39 clientcerts -> /etc/opt/novell/apache2/conf/clientcert
    • run the SP4 upgrade process once more

Additional Information

The difference between the non working devices (which had been re-installed once w while ago) and devices which worked fine after the SP4 upgrade is the directory structure below the "/opt/novell/apach2" directory. The required folders / subdirs storing certificates have to softlinks:

lrwxrwxrwx 1 root root   36 2011-09-27 15:39 cacerts -> /etc/opt/novell/apache2/conf/cacerts
lrwxrwxrwx 1 root root   34 2011-09-27 15:39 certs -> /etc/opt/novell/apache2/conf/certs
lrwxrwxrwx 1 root root   40 2011-09-27 15:39 clientcerts -> /etc/opt/novell/apache2/conf/clientcert


The AGS devices which stopped working after the SP4 upgrade the above directories are real sub-directories