Novell ACCESS MANAGER 3.1 SP1 - ADMINISTRATION User manual

Novell®
www.novell.com
novdocx (en) 17 September 2009
AUTHORIZED DOCUMENTATION
Linux Access Gateway on Red Hat* Installation Guide
Access Manager
3.1 SP1
July 23, 2009
Linux Access Gateway on Red Hat* Installation Guide

novdocx (en) 17 September 2009
Legal Notices
Novell, Inc., makes no representations or warranties with respect to the contents or use of this documentation, and
specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose.
Further, Novell, Inc., reserves the right to revise this publication and to make changes to its content, at any time,
without obligation to notify any person or entity of such revisions or changes.
Further, Novell, Inc., makes no representations or warranties with respect to any software, and specifically disclaims
any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc.,
reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to
notify any person or entity of such changes.
Any products or technical information provided under this Agreement may be subject to U.S. export controls and the
trade laws of other countries. You agree to comply with all export control regulations and to obtain any required
licenses or classification to export, re-export or import deliverables. You agree not to export or re-export to entities on
the current U.S. export exclusion lists or to any embargoed or terrorist countries as specified in the U.S. export laws.
You agree to not use deliverables for prohibited nuclear, missile, or chemical biological weaponry end uses. See the
Novell International Trade Services Web page (http://www.novell.com/info/exports/) for more information on
exporting Novell software. Novell assumes no responsibility for your failure to obtain any necessary export
approvals.
Copyright © 2009 Novell, Inc. All rights reserved. No part of this publication may be reproduced, photocopied,
stored on a retrieval system, or transmitted without the express written consent of the publisher.
Novell, Inc., has intellectual property rights relating to technology embodied in the product that is described in this
document. In particular, and without limitation, these intellectual property rights may include one or more of the U.S.
patents listed on the Novell Legal Patents Web page (http://www.novell.com/company/legal/patents/) and one or
more additional patents or pending patent applications in the U.S. and in other countries.
Novell, Inc.
404 Wyman Street, Suite 500
Waltham, MA 02451
U.S.A.
www.novell.com
Online Documentation: To access the latest online documentation for this and other Novell products, see
the Novell Documentation Web page (http://www.novell.com/documentation).

novdocx (en) 17 September 2009
Novell Trademarks
For Novell trademarks, see the Novell Trademark and Service Mark list (http://www.novell.com/company/legal/
trademarks/tmlist.html).
Third-Party Materials
All third-party trademarks are the property of their respective owners.

4Linux Access Gateway on Red Hat* Installation Guide
novdocx (en) 17 September 2009

Contents 5
Contents
novdocx (en) 17 September 2009
About This Guide 7
1 Installing and Configuring Linux Access Gateway on RHEL 9
1.1 System Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
1.1.1 Hardware Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
1.1.2 Linux Access Gateway Network Requirements. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
1.2 Installing and Configuring the Linux Access Gateway on RHEL . . . . . . . . . . . . . . . . . . . . . . . 10
2 Upgrading the Linux Access Gateway on RHEL 13
3 Additional Information on Installing And Configuring 15
3.1 Before You Begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
3.2 Installation and Disk Layout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
3.3 Installing the Linux Access Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
3.4 Configuring Hardware and System Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
3.5 Verifying the Linux Access Gateway Installation on RHEL . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
3.6 Configuring the Linux Access Gateway to Boot from RHEL . . . . . . . . . . . . . . . . . . . . . . . . . . 35
3.7 Starting the Linux Access Gateway from RHEL. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36
3.8 Configuring the Linux Access Gateway after It Is Installed on RHEL. . . . . . . . . . . . . . . . . . . . 37
3.8.1 Configuring the New Network Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
3.8.2 Configuring a Secondary IP Address. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38
4 Troubleshooting 39
4.1 Health Status Displays NTP Check Failed Error . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39
A Additional Information 41
A.1 Differences between the Linux Access Gateway on RHEL and the Linux Access Gateway
Appliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41
A.2 Configuring the Linux Access Gateway to Load the Red Hat Boot Loader . . . . . . . . . . . . . . . 41

6Linux Access Gateway on Red Hat* Installation Guide
novdocx (en) 17 September 2009

About This Guide 7
novdocx (en) 17 September 2009
About This Guide
This guide describes the installation procedure and prerequisites to install the Novell®Access
Manager Linux Access Gateway on Red Hat Enterprise Linux Server (RHEL). This guide has the
following sections:
Chapter 1, “Installing and Configuring Linux Access Gateway on RHEL,” on page 9
Chapter 2, “Upgrading the Linux Access Gateway on RHEL,” on page 13
Chapter 3, “Additional Information on Installing And Configuring,” on page 15
Chapter 4, “Troubleshooting,” on page 39
Appendix A, “Additional Information,” on page 41
Audience
This guide is intended for administrators who want to install the Novell Access Manager Linux
Access Gateway on an existing RHEL Server.
Additional Documentation
This guide should be considered as an addendum to the existing Novell Access Manager
documentation, which is available at the Access Manager documentation Web site (http://
www.novell.com/documentation/novellaccessmanager31/index.html).
Novell Access Manager 3.1 Installation Guide (http://www.novell.com/documentation/
novellaccessmanager31/installation/?page=/documentation/novellaccessmanager31/
installation/data/bookinfo.html)
Novell Access Manager 3.1 Basic Setup Guide (http://www.novell.com/documentation/
novellaccessmanager31/basicconfig/?page=/documentation/novellaccessmanager31/
basicconfig/data/bookinfo.html)
Novell Access Manager 3.1 Access Gateway Guide (http://www.novell.com/documentation/
novellaccessmanager31/accessgateway/?page=/documentation/novellaccessmanager31/
accessgateway/data/bookinfo.html)
Novell Access Manager 3.1 Identity Server Guide (http://www.novell.com/documentation/
novellaccessmanager31/identityserver/?page=/documentation/novellaccessmanager31/
identityserver/data/bookinfo.html)
Novell Access Manager 3.1 Administration Console Guide (http://www.novell.com/
documentation/novellaccessmanager31/adminconsole/?page=/documentation/
novellaccessmanager31/adminconsole/data/bookinfo.html)
Documentation Conventions
In Novell documentation, a greater-than symbol (>) is used to separate actions within a step and
items in a cross-reference path.
A trademark symbol (®, TM, etc.) denotes a Novell trademark. An asterisk (*) denotes a third-party
trademark.

8Linux Access Gateway on Red Hat* Installation Guide
novdocx (en) 17 September 2009
When a single pathname can be written with a backslash for some platforms or a forward slash for
other platforms, the pathname is presented with a backslash. Users of platforms that require a
forward slash, such as Linux or UNIX , should use forward slashes as required by your software.

Installing and Configuring Linux Access Gateway on RHEL
1
9
novdocx (en) 17 September 2009
1
Installing and Configuring Linux
Access Gateway on RHEL
The Novell®Access Manager Linux Access Gateway is a software appliance designed on the
SUSE®Linux Enterprise Server (SLES) 9 SP3 kernel. In the standard installation procedure, Linux
Access Gateway re-images the hard drive, embeds the Linux operating system, then configures the
embedded operating system for optimal performance. However, when you have an existing RHEL
server on which you want to install the Novell Access Manager Linux Access Gateway, the
installation is performed against a free hard disk partition on the existing RHEL server.
The following sections describe the procedure to install Linux Access Gateway in the advanced
installation mode on RHEL 5.1. For detailed instructions, see Chapter 3, “Additional Information
on Installing And Configuring,” on page 15.
Section 1.1, “System Requirements,” on page 9
Section 1.2, “Installing and Configuring the Linux Access Gateway on RHEL,” on page 10
1.1 System Requirements
This section explains the requirements for installing the Novell Access Manager Linux Access
Gateway:
Section 1.1.1, “Hardware Requirements,” on page 9
Section 1.1.2, “Linux Access Gateway Network Requirements,” on page 9
1.1.1 Hardware Requirements
3 GB memory
Hard disk with a free partition of 100 GB--other than the / (root) partition--either as
unformatted and unallocated free space or as an additional partition in the existing server.
3.0 GHz processor or better recommended, with 2.0 GHz as the minimum.
1.1.2 Linux Access Gateway Network Requirements
The Linux Appliance runs on SLES 9 SP3. The Linux Appliance has no software requirements.
Before proceeding with the installation, make sure you have a static IP address for your Linux
Access Gateway server and an assigned DNS name (host name and domain name). You need to
know the following about your network:
The subnet mask that corresponds to the IP address of the Access Gateway.
The IP address of the default gateway.
The IP addresses of the DNS servers on your network. These DNS servers need to be
configured to resolve the DNS name of the Access Gateway to the IP address that you assign to
it.
The IP address or DNS name of a MCP server, if you have one in your local environment.

10 Linux Access Gateway on Red Hat* Installation Guide
novdocx (en) 17 September 2009
You are prompted to enter this information during the install.
1.2 Installing and Configuring the Linux Access
Gateway on RHEL
1Install Linux Access Gateway in the Advanced Installation mode.
2(Conditional) If you are installing Linux Access Gateway on an existing partition, other than
the / (root) partition in RHEL, remove the existing partition.
3Create a new extended partition with the End Cylinder value as 100 GB. Create the following
partitions:
/ (root) partition with Ext3 File system and End cylinder value of 30 GB.
var partition with Ext3 file system and End Cylinder value of 20 GB.
COS partition that uses the remaining space (50GB) on the hard disk. Select 0x68 Novell
COS as the File System ID.
For more information on removing or creating partition, see Section 3.3, “Installing the Linux
Access Gateway,” on page 16.
4Complete the installation of Linux Access Gateway. For more information, see Section 3.3,
“Installing the Linux Access Gateway,” on page 16.
When the installation is completed, the hard disk is formatted, removing all data, and the
partitions are created. After all the packages are installed, the system reboots in SUSE®Linux
Enterprise Server (SLES) 9, and finishes the installation.
5The system reboots with SLES 9.
6Login to the Novell Access Manager Administration Console and verify that the Linux Access
Gateway is imported. For more information, seeSection 3.5, “Verifying the Linux Access
Gateway Installation on RHEL,” on page 34.
7Complete the following hardware and system services configuration:
Network Interface Configuration: If you do not configure the network interface, the
Linux Appliance setup fails. Make sure that Network configuration matches the RHEL
configuration.
Administration Console Configuration: In the Administration Console Configuration
screen, specify the IP address of the RHEL server as the Access Gateway IP address.
For more information on configuring, see Section 3.4, “Configuring Hardware and System
Services,” on page 27.
8After the installation of Linux Access Gateway, the machine starts in SUSE Linux Enterprise
Server (SLES) 9 SP3. To boot the machine from Red Hat, copy boot entries for Red Hat to the
Linux Access Gateway machine. For more information, see Section 3.6, “Configuring the
Linux Access Gateway to Boot from RHEL,” on page 35.
9To start the Linux Access Gateway in RHEL, login to RHEL machine as root, then do the
following:
9a Set SELinux to Permissive mode.
9b Disable firewall.
9c Copy the
rhel-lag.tar.gz file to the RHEL machine.
9d Untar the files and run the
/opt/novell/access-gateway/scripts/configure-
lag.sh
script. This script mounts the partition and modifies fstab entry and syslog.

Installing and Configuring Linux Access Gateway on RHEL 11
novdocx (en) 17 September 2009
For more information, see Section 3.7, “Starting the Linux Access Gateway from RHEL,”
on page 36. The Linux Access Gateway service is automatically started when the machine
is rebooted.
9e Specify the following command to start Linux Access Gateway:
/etc/init.d/novell-am-gateway start
10 Configure the Linux Access Gateway after it is installed on RHEL. For information on
configuring the gateway, see the Novell Access Manager 3.1 SP1 Access Gateway Guide (http:/
/www.novell.com/documentation/novellaccessmanager31/accessgateway/?page=/
documentation/novellaccessmanager31/accessgateway/data/bookinfo.html).
NOTE: If you want to add or modify the network configuration for Linux Access Gateway
installed on RHEL, the procedure is different from the Linux Access Gateway installed on
SUSE®Linux Enterprise Server (SLES). For more information, see Section 3.8.1,
“Configuring the New Network Interface,” on page 37.

12 Linux Access Gateway on Red Hat* Installation Guide
novdocx (en) 17 September 2009

Upgrading the Linux Access Gateway on RHEL
2
13
novdocx (en) 17 September 2009
2
Upgrading the Linux Access
Gateway on RHEL
To upgrade the Linux Access Gateway installed on RHEL:
1Log in to the RHEL machine as root .
2Specify the following command to chroot to the mount point of the Linux Access Gateway in
the current operating system:
chroot <mount point>
For example, if /lag is the mount point of Linux Access Gateway, then specify chroot /lag
3Use the following following:
/chroot/lag/opt/novell/bin/lagupgrade.sh --url <protocol>://<hostname>/
<path>/<packageName>
<protocol> refers to the protocol to use when downloading the RPM packages. It can be HTTP
or FTP.
<hostname> refers to the address of the server from where the RPM packages can be
downloaded. Enter either the IP address or the DNS hostname of the server at the prompt.
<path> refers to the path to the RPM packages.
<packageName> refers to the RPM package name.
For example, enter the following command:
/chroot/lag/opt/novell/bin/lagupgrade.sh --url http://10.10.10.1/publish/
upgrades/accessgateway/31sp1/lagrpms.tar.gz
For more information on upgrading Linux Access Gateway, see “Upgrading Novell Access
Manager Components” in the Novell Access Manager 3.1 SP1 Installation Guide (http://
www.novell.com/documentation/novellaccessmanager31/installation/?page=/documentation/
novellaccessmanager31/installation/data/bookinfo.html).
You might see the following error after the upgrade is completed:
Novell Linux Access Gateway Virtualization Controller Status..running
vmcontroller is not running
Failed to start novell-vmc.
Postupgrade script failed
Ignore this message.
4Specify the following command to exit
chroot :
exit
5To run the post upgrade script, change to the directory and run the script as follows:
To change directory:
cd /opt/novell/access-gateway/scripts/
To run the script:
sh post-lagupgrade.

14 Linux Access Gateway on Red Hat* Installation Guide
novdocx (en) 17 September 2009

Additional Information on Installing And Configuring
3
15
novdocx (en) 17 September 2009
3
Additional Information on
Installing And Configuring
This section describes in detail the procedure to install and configure the Linux Access Gateway on
RHEL. Use these section as a reference to install and configure Linux Access Gateway on RHEL.:
Section 3.1, “Before You Begin,” on page 15
Section 3.2, “Installation and Disk Layout,” on page 15
Section 3.3, “Installing the Linux Access Gateway,” on page 16
Section 3.4, “Configuring Hardware and System Services,” on page 27
Section 3.5, “Verifying the Linux Access Gateway Installation on RHEL,” on page 34
Section 3.6, “Configuring the Linux Access Gateway to Boot from RHEL,” on page 35
Section 3.7, “Starting the Linux Access Gateway from RHEL,” on page 36
Section 3.8, “Configuring the Linux Access Gateway after It Is Installed on RHEL,” on
page 37
3.1 Before You Begin
1Before you begin the installation, make sure that the minimum system requirements are met.
For more information, see Section 1.1, “System Requirements,” on page 9.
2Execute the following commands to note the hard disk partition entries on the RHEL server:
mount
fdisk -l
df -h
3(Conditional) If you are installing the Linux Access Gateway on an existing partition, comment
out the entries in
/etc/fstab for the /lag partition selected for the installation.
For example, the
df -h command displays the following output, which shows /lag as the
existing partition where you would install the Linux Access Gateway:
Filesystem Size Used Avail Use% Mounted on
/dev/sda1 10G 1.9G 8.1G 20% /
/dev/sda3 100G 173M 99.8G 1% /lag
tmpfs 506M 0 506M 0% /dev/shmf -h
3.2 Installation and Disk Layout
The hard disk layout before and after the Linux Access Gateway is installed on RHEL 5.1 is shown
in Figure 3-1 on page 16:

16 Linux Access Gateway on Red Hat* Installation Guide
novdocx (en) 17 September 2009
Figure 3-1 Linux Access Gateway installation on RHEL
3.3 Installing the Linux Access Gateway
1Restart the system. Insert the Linux Access Gateway installation CD.
The boot screen appears.
2Use the down-arrow key and select Advanced Installation.
3If an error message on continuing the text mode of installation is displayed, press Oto continue
with the installation.
Existing RHEL
OS Partition
RHEL 5.1
Linux Access
Gateway
Linux Access
Gateway Installation
Existing RHEL
OS Partition
Before After
RHEL 5.1
I00 GB
Additional RHEL
Partiton or Free
Hard Disk Space

Additional Information on Installing And Configuring 17
novdocx (en) 17 September 2009
The Linux kernel loads, and the advanced installation starts and displays the Linux Access
Gateway splash screen followed by the License Agreement screen.
4Read the agreement, then select I Agree to proceed.

18 Linux Access Gateway on Red Hat* Installation Guide
novdocx (en) 17 September 2009
5Select English (US) on the Language selection screen, then select Accept.

Additional Information on Installing And Configuring 19
novdocx (en) 17 September 2009
6Select New installation, then select OK.
7Select Change, then select Partitioning.

20 Linux Access Gateway on Red Hat* Installation Guide
novdocx (en) 17 September 2009
8Select Custom Partitioning Setup, then tab to Next.