Environment
NetIQ Access Manager 4.1
NetIQ Access Manager Access Gateway (AG)
Upgrade from Access Manager 3.2.3
NetIQ Access Manager Access Gateway (AG)
Upgrade from Access Manager 3.2.3
Situation
Upgraded Access Manager from 3.2.3 to 4.1 - Admin Console and Identity server components upgraded fine and users could authenticate without issues.
After upgrading the Access Gateway Appliances, the Proxy could not be accessed and the healthcheck in Admin Console for this AG reported the following error in /var/log/novell-apache2/rcnovell-apache2.out:
httpd: Syntax error on line 495 of /etc/opt/novell/apache2/conf/httpd.conf:
Syntax error on line 23 of /etc/opt/novell/ag/ag_hook.conf:
Syntax error on line 6 of /etc/opt/novell/ag/mod_novell_ag.conf: Cannot load /opt/novell/ag/lib/mod_novell_ag.so
into server: /opt/novell/ag/lib/mod_novell_ag.so: undefined symbol: ap_get_sb_worker
After upgrading the Access Gateway Appliances, the Proxy could not be accessed and the healthcheck in Admin Console for this AG reported the following error in /var/log/novell-apache2/rcnovell-apache2.out:
httpd: Syntax error on line 495 of /etc/opt/novell/apache2/conf/httpd.conf:
Syntax error on line 23 of /etc/opt/novell/ag/ag_hook.conf:
Syntax error on line 6 of /etc/opt/novell/ag/mod_novell_ag.conf: Cannot load /opt/novell/ag/lib/mod_novell_ag.so
into server: /opt/novell/ag/lib/mod_novell_ag.so: undefined symbol: ap_get_sb_worker
Resolution
1. Remove /opt/novell/apache2/cacerts and /opt/novell/apache2/certs
2. create symlink again for the two files above
nam41sba:/etc/opt/novell/apache2/conf # l /opt/novell/apache2/cacerts
lrwxrwxrwx 1 root root 36 Oct 15 13:00 /opt/novell/apache2/cacerts -> /etc/opt/novell/apache2/conf/cacerts/
nam41sba:/etc/opt/novell/apache2/conf # l /opt/novell/apache2/certs
lrwxrwxrwx 1 root root 34 Oct 15 13:00 /opt/novell/apache2/certs -> /etc/opt/novell/apache2/conf/certs/
3. Manually upgrade novell-nacm-apache-2.2.24-400023.x86_64.rpm
rpm -Uvh ./mag/rpms/novell-nacm-apache-2.2.24-400023.x86_64.rpm --force --nodeps
2. create symlink again for the two files above
nam41sba:/etc/opt/novell/apache2/conf # l /opt/novell/apache2/cacerts
lrwxrwxrwx 1 root root 36 Oct 15 13:00 /opt/novell/apache2/cacerts -> /etc/opt/novell/apache2/conf/cacerts/
nam41sba:/etc/opt/novell/apache2/conf # l /opt/novell/apache2/certs
lrwxrwxrwx 1 root root 34 Oct 15 13:00 /opt/novell/apache2/certs -> /etc/opt/novell/apache2/conf/certs/
3. Manually upgrade novell-nacm-apache-2.2.24-400023.x86_64.rpm
rpm -Uvh ./mag/rpms/novell-nacm-apache-2.2.24-400023.x86_64.rpm --force --nodeps
Cause
The install never upgraded the novell-nacm-apache-2.2.24-400023 package (rpm database included the old 2.2.22 version). Manually upgrading showed the following error:
rpm -Uvh ./mag/rpms/novell-nacm-apache-2.2.24-400023.x86_64.rpm
Preparing... ########################################### [100%]
1:novell-nacm-apache warning: /etc/opt/novell/apache2/conf/httpd.conf created as /etc/opt/novell/apache2/conf/httpd.conf.rpmnew
########################################### [100%]
error: unpacking of archive failed on file /opt/novell/apache2/cacerts: cpio: rename failed - Is a directory
By removing and recreating the symbolic links, the install went through fine. The --force --nodeps options would probably have worked around the issue too.
rpm -Uvh ./mag/rpms/novell-nacm-apache-2.2.24-400023.x86_64.rpm
Preparing... ########################################### [100%]
1:novell-nacm-apache warning: /etc/opt/novell/apache2/conf/httpd.conf created as /etc/opt/novell/apache2/conf/httpd.conf.rpmnew
########################################### [100%]
error: unpacking of archive failed on file /opt/novell/apache2/cacerts: cpio: rename failed - Is a directory
By removing and recreating the symbolic links, the install went through fine. The --force --nodeps options would probably have worked around the issue too.