Environment
NetIQ Access Manager 4.2
NetIQ Access Gateway Appliance and Service
NetIQ Access Gateway Appliance and Service
Situation
NAM
4.2.0 Access Gateway Service (AGS) running on SLES 11sp4 upgraded to NAM 4.2.1. Upgrade appeared to go through successfully but apache will not start. The rcnovell-apache2.out file reports the following error:
httpd: Syntax error on line 108 of /etc/opt/novell/apache2/conf/httpd.conf: Cannot load /opt/novell/apache2/libexec/mod_ssl.so into server: /opt/novell/apache2/libexec/mod_ssl.so: undefined symbol: SSLv2_client_method
Resolution
Need to do following instructions to that the correct libraries and certs are read:
1. Remove /opt/novell/apache2/cacerts and /opt/novell/apache2/certs
2. create symlink again for the two files above
nam42sba:/etc/opt/novell/apache2/conf # l /opt/novell/apache2/cacerts
lrwxrwxrwx 1 root root 36 Mar 22 10:14 /opt/novell/apache2/cacerts -> /etc/opt/novell/apache2/conf/cacerts/
nam42sba:/etc/opt/novell/apache2/conf # l /opt/novell/apache2/certs
lrwxrwxrwx 1 root root 34 Mar 22 10:14 /opt/novell/apache2/certs -> /etc/opt/novell/apache2/conf/certs/
3. Manually upgrade novell-nacm-apache-2.2.27-421004.x86_64.rpm
rpm -Uvh ./novell-nacm-apache-2.2.27-421004.x86_64.rpm --force --nodeps
Other possibility is that the /etc/ld.so.conf does not contain: /opt/novell/ssllib
If you type "ldconfig -v | tee out
View the out file and search for "ssllib" if there is not mention of /opt/novell/ssllib, then add "/opt/novell/ssllib" to bottom of /etc/ld.so.conf and then type "ldconfig -v | tee out" again and verify that libraries are loaded under /opt/novell/ssllib
1. Remove /opt/novell/apache2/cacerts and /opt/novell/apache2/certs
2. create symlink again for the two files above
nam42sba:/etc/opt/novell/apache2/conf # l /opt/novell/apache2/cacerts
lrwxrwxrwx 1 root root 36 Mar 22 10:14 /opt/novell/apache2/cacerts -> /etc/opt/novell/apache2/conf/cacerts/
nam42sba:/etc/opt/novell/apache2/conf # l /opt/novell/apache2/certs
lrwxrwxrwx 1 root root 34 Mar 22 10:14 /opt/novell/apache2/certs -> /etc/opt/novell/apache2/conf/certs/
3. Manually upgrade novell-nacm-apache-2.2.27-421004.x86_64.rpm
rpm -Uvh ./novell-nacm-apache-2.2.27-421004.x86_64.rpm --force --nodeps
Other possibility is that the /etc/ld.so.conf does not contain: /opt/novell/ssllib
If you type "ldconfig -v | tee out
View the out file and search for "ssllib" if there is not mention of /opt/novell/ssllib, then add "/opt/novell/ssllib" to bottom of /etc/ld.so.conf and then type "ldconfig -v | tee out" again and verify that libraries are loaded under /opt/novell/ssllib