Environment
NetIQ Access Manager 4.4
Situation
curl/zypper on SLES 12 SP1, SP2 with NAM 4.2.2 working fine. After upgrading to NAM 4.4 which comes with eDirectory 9.0.3, these commands fail with DEFAULT_SUSE error.
44sles12sp2:~ # curl https://www.google.com
curl: (59) failed setting cipher list: DEFAULT_SUSE
44sles12sp2:~ # zypper up
Refreshing service 'SUSE_Linux_Enterprise_Server_12_SP2_x86_64'.
Problem retrieving the repository index file for service 'SUSE_Linux_Enterprise_Server_12_SP2_x86_64':
Download (curl) error for 'https://scc.suse.com/access/services/1346/repo/repoindex.xml?cookies=0&credentials=SUSE_Linux_Enterprise_Server_12_SP2_x86_64':
Error code: Curl error 59
Error message: failed setting cipher list: DEFAULT_SUSE
Resolution
This is a bug and below workaround could be used to address it:
a. Remove /etc/ld.so.conf.d/ntls.conf or comment out the line in the file.
b. Run #ldconfig –v
c. Now the commands would run without any issue
d. At this point, if you run amdiagcfg.sh or ambkup.sh or amrestore.sh scripts which are in /opt/novell/devman/bin, you’ll see the error :
./ambkup.sh: line 152: 7966 Aborted ${JAVA} -Djava.library.path=/opt/novell/lib64 -jar certtool.jar -edirTree ${EDIR_TREE} -edirIP ${IP_ADDR} -edirServer ${EDIR_SERVER_DN_DOT} -edirUser ${DS_ADMIN_DN_DOT} -edirPwd ${DS_ADMIN_PWD} -bkup -file "${BKUP_DIR}/${BKUP_FILE}.zip" -pwd "${CERT_ENC_PWD}" -trcontainer trustedRoots.accessManagerContainer.novell -caName "${EDIR_CA}" >> ${LOG_FILE} 2>&1
e. To resolve this, please follow the steps in TID 7022106