Export configuration using Code Promotion returns an error "Export Configuration Failed"

  • 7018876
  • 04-May-2017
  • 31-May-2017

Environment

NetIQ Access Manager 4.3

Situation

Admin Console is installed on a stand-alone server. When trying to export a configuration for the IDP or AG, it returns an error message:
"Export Configuration Failed" Followed by "Failed to export keystores and policies. See tomcat log for details."
The Tomcat log shows a "java.net.ConnectException: Connection refused." error. When tracing internally on the AC-server, it shows the address the AC tries to connect to is 127.0.0.1 (localhost).

Resolution

The "/opt/novell/nam/adminconsole/conf/server.xml" file contains a "<Connector "NIDP_Name=connector" >" element.
This connector contains a parameter 'address' the value of this parameter is the IP-address of the Admin Console server.
There are two possible solutions to this problem.
      1) remove address parameter
      2) extend address parameter like: address="10.10.11.12;127.0.0.1"


ad1) Removing the 'address' parameter allows the Connector to listen on any IP-address configured in the system,
        which can be a security issue or a clash with another service listening on port 8443 on another NIC of
        the same server.
ad2) Adding the '127.0.0.1' will limit the connector to listen on port 8443 for only these two IP-addresses.
        This might be preferential above removing the 'address' parameter.

Cause

As the 'address' parameter contains only the assigned IP-address of the server, there is no process listening on 127.0.0.1:8443 and the CP-export fails.

Additional Information

This issue has been reported to Engineering.