Novell ACCESS MANAGER 3.1 SP1 - ADMINISTRATION User manual

Novell®
www.novell.com
novdocx (en) 17 September 2009
AUTHORIZED DOCUMENTATION
Linux Access Gateway on Red Hat* Installation Guide
Access Manager
3.1 SP1
July 23, 2009
Linux Access Gateway on Red Hat* Installation Guide

novdocx (en) 17 September 2009
Legal Notices
Novell, Inc., makes no representations or warranties with respect to the contents or use of this documentation, and
specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose.
Further, Novell, Inc., reserves the right to revise this publication and to make changes to its content, at any time,
without obligation to notify any person or entity of such revisions or changes.
Further, Novell, Inc., makes no representations or warranties with respect to any software, and specifically disclaims
any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc.,
reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to
notify any person or entity of such changes.
Any products or technical information provided under this Agreement may be subject to U.S. export controls and the
trade laws of other countries. You agree to comply with all export control regulations and to obtain any required
licenses or classification to export, re-export or import deliverables. You agree not to export or re-export to entities on
the current U.S. export exclusion lists or to any embargoed or terrorist countries as specified in the U.S. export laws.
You agree to not use deliverables for prohibited nuclear, missile, or chemical biological weaponry end uses. See the
Novell International Trade Services Web page (http://www.novell.com/info/exports/) for more information on
exporting Novell software. Novell assumes no responsibility for your failure to obtain any necessary export
approvals.
Copyright © 2009 Novell, Inc. All rights reserved. No part of this publication may be reproduced, photocopied,
stored on a retrieval system, or transmitted without the express written consent of the publisher.
Novell, Inc., has intellectual property rights relating to technology embodied in the product that is described in this
document. In particular, and without limitation, these intellectual property rights may include one or more of the U.S.
patents listed on the Novell Legal Patents Web page (http://www.novell.com/company/legal/patents/) and one or
more additional patents or pending patent applications in the U.S. and in other countries.
Novell, Inc.
404 Wyman Street, Suite 500
Waltham, MA 02451
U.S.A.
www.novell.com
Online Documentation: To access the latest online documentation for this and other Novell products, see
the Novell Documentation Web page (http://www.novell.com/documentation).

novdocx (en) 17 September 2009
Novell Trademarks
For Novell trademarks, see the Novell Trademark and Service Mark list (http://www.novell.com/company/legal/
trademarks/tmlist.html).
Third-Party Materials
All third-party trademarks are the property of their respective owners.

4Linux Access Gateway on Red Hat* Installation Guide
novdocx (en) 17 September 2009

Contents 5
Contents
novdocx (en) 17 September 2009
About This Guide 7
1 Installing and Configuring Linux Access Gateway on RHEL 9
1.1 System Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
1.1.1 Hardware Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
1.1.2 Linux Access Gateway Network Requirements. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
1.2 Installing and Configuring the Linux Access Gateway on RHEL . . . . . . . . . . . . . . . . . . . . . . . 10
2 Upgrading the Linux Access Gateway on RHEL 13
3 Additional Information on Installing And Configuring 15
3.1 Before You Begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
3.2 Installation and Disk Layout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
3.3 Installing the Linux Access Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
3.4 Configuring Hardware and System Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
3.5 Verifying the Linux Access Gateway Installation on RHEL . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
3.6 Configuring the Linux Access Gateway to Boot from RHEL . . . . . . . . . . . . . . . . . . . . . . . . . . 35
3.7 Starting the Linux Access Gateway from RHEL. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36
3.8 Configuring the Linux Access Gateway after It Is Installed on RHEL. . . . . . . . . . . . . . . . . . . . 37
3.8.1 Configuring the New Network Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
3.8.2 Configuring a Secondary IP Address. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38
4 Troubleshooting 39
4.1 Health Status Displays NTP Check Failed Error . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39
A Additional Information 41
A.1 Differences between the Linux Access Gateway on RHEL and the Linux Access Gateway
Appliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41
A.2 Configuring the Linux Access Gateway to Load the Red Hat Boot Loader . . . . . . . . . . . . . . . 41

6Linux Access Gateway on Red Hat* Installation Guide
novdocx (en) 17 September 2009

About This Guide 7
novdocx (en) 17 September 2009
About This Guide
This guide describes the installation procedure and prerequisites to install the Novell®Access
Manager Linux Access Gateway on Red Hat Enterprise Linux Server (RHEL). This guide has the
following sections:
Chapter 1, “Installing and Configuring Linux Access Gateway on RHEL,” on page 9
Chapter 2, “Upgrading the Linux Access Gateway on RHEL,” on page 13
Chapter 3, “Additional Information on Installing And Configuring,” on page 15
Chapter 4, “Troubleshooting,” on page 39
Appendix A, “Additional Information,” on page 41
Audience
This guide is intended for administrators who want to install the Novell Access Manager Linux
Access Gateway on an existing RHEL Server.
Additional Documentation
This guide should be considered as an addendum to the existing Novell Access Manager
documentation, which is available at the Access Manager documentation Web site (http://
www.novell.com/documentation/novellaccessmanager31/index.html).
Novell Access Manager 3.1 Installation Guide (http://www.novell.com/documentation/
novellaccessmanager31/installation/?page=/documentation/novellaccessmanager31/
installation/data/bookinfo.html)
Novell Access Manager 3.1 Basic Setup Guide (http://www.novell.com/documentation/
novellaccessmanager31/basicconfig/?page=/documentation/novellaccessmanager31/
basicconfig/data/bookinfo.html)
Novell Access Manager 3.1 Access Gateway Guide (http://www.novell.com/documentation/
novellaccessmanager31/accessgateway/?page=/documentation/novellaccessmanager31/
accessgateway/data/bookinfo.html)
Novell Access Manager 3.1 Identity Server Guide (http://www.novell.com/documentation/
novellaccessmanager31/identityserver/?page=/documentation/novellaccessmanager31/
identityserver/data/bookinfo.html)
Novell Access Manager 3.1 Administration Console Guide (http://www.novell.com/
documentation/novellaccessmanager31/adminconsole/?page=/documentation/
novellaccessmanager31/adminconsole/data/bookinfo.html)
Documentation Conventions
In Novell documentation, a greater-than symbol (>) is used to separate actions within a step and
items in a cross-reference path.
A trademark symbol (®, TM, etc.) denotes a Novell trademark. An asterisk (*) denotes a third-party
trademark.

8Linux Access Gateway on Red Hat* Installation Guide
novdocx (en) 17 September 2009
When a single pathname can be written with a backslash for some platforms or a forward slash for
other platforms, the pathname is presented with a backslash. Users of platforms that require a
forward slash, such as Linux or UNIX , should use forward slashes as required by your software.

Installing and Configuring Linux Access Gateway on RHEL
1
9
novdocx (en) 17 September 2009
1
Installing and Configuring Linux
Access Gateway on RHEL
The Novell®Access Manager Linux Access Gateway is a software appliance designed on the
SUSE®Linux Enterprise Server (SLES) 9 SP3 kernel. In the standard installation procedure, Linux
Access Gateway re-images the hard drive, embeds the Linux operating system, then configures the
embedded operating system for optimal performance. However, when you have an existing RHEL
server on which you want to install the Novell Access Manager Linux Access Gateway, the
installation is performed against a free hard disk partition on the existing RHEL server.
The following sections describe the procedure to install Linux Access Gateway in the advanced
installation mode on RHEL 5.1. For detailed instructions, see Chapter 3, “Additional Information
on Installing And Configuring,” on page 15.
Section 1.1, “System Requirements,” on page 9
Section 1.2, “Installing and Configuring the Linux Access Gateway on RHEL,” on page 10
1.1 System Requirements
This section explains the requirements for installing the Novell Access Manager Linux Access
Gateway:
Section 1.1.1, “Hardware Requirements,” on page 9
Section 1.1.2, “Linux Access Gateway Network Requirements,” on page 9
1.1.1 Hardware Requirements
3 GB memory
Hard disk with a free partition of 100 GB--other than the / (root) partition--either as
unformatted and unallocated free space or as an additional partition in the existing server.
3.0 GHz processor or better recommended, with 2.0 GHz as the minimum.
1.1.2 Linux Access Gateway Network Requirements
The Linux Appliance runs on SLES 9 SP3. The Linux Appliance has no software requirements.
Before proceeding with the installation, make sure you have a static IP address for your Linux
Access Gateway server and an assigned DNS name (host name and domain name). You need to
know the following about your network:
The subnet mask that corresponds to the IP address of the Access Gateway.
The IP address of the default gateway.
The IP addresses of the DNS servers on your network. These DNS servers need to be
configured to resolve the DNS name of the Access Gateway to the IP address that you assign to
it.
The IP address or DNS name of a MCP server, if you have one in your local environment.

10 Linux Access Gateway on Red Hat* Installation Guide
novdocx (en) 17 September 2009
You are prompted to enter this information during the install.
1.2 Installing and Configuring the Linux Access
Gateway on RHEL
1Install Linux Access Gateway in the Advanced Installation mode.
2(Conditional) If you are installing Linux Access Gateway on an existing partition, other than
the / (root) partition in RHEL, remove the existing partition.
3Create a new extended partition with the End Cylinder value as 100 GB. Create the following
partitions:
/ (root) partition with Ext3 File system and End cylinder value of 30 GB.
var partition with Ext3 file system and End Cylinder value of 20 GB.
COS partition that uses the remaining space (50GB) on the hard disk. Select 0x68 Novell
COS as the File System ID.
For more information on removing or creating partition, see Section 3.3, “Installing the Linux
Access Gateway,” on page 16.
4Complete the installation of Linux Access Gateway. For more information, see Section 3.3,
“Installing the Linux Access Gateway,” on page 16.
When the installation is completed, the hard disk is formatted, removing all data, and the
partitions are created. After all the packages are installed, the system reboots in SUSE®Linux
Enterprise Server (SLES) 9, and finishes the installation.
5The system reboots with SLES 9.
6Login to the Novell Access Manager Administration Console and verify that the Linux Access
Gateway is imported. For more information, seeSection 3.5, “Verifying the Linux Access
Gateway Installation on RHEL,” on page 34.
7Complete the following hardware and system services configuration:
Network Interface Configuration: If you do not configure the network interface, the
Linux Appliance setup fails. Make sure that Network configuration matches the RHEL
configuration.
Administration Console Configuration: In the Administration Console Configuration
screen, specify the IP address of the RHEL server as the Access Gateway IP address.
For more information on configuring, see Section 3.4, “Configuring Hardware and System
Services,” on page 27.
8After the installation of Linux Access Gateway, the machine starts in SUSE Linux Enterprise
Server (SLES) 9 SP3. To boot the machine from Red Hat, copy boot entries for Red Hat to the
Linux Access Gateway machine. For more information, see Section 3.6, “Configuring the
Linux Access Gateway to Boot from RHEL,” on page 35.
9To start the Linux Access Gateway in RHEL, login to RHEL machine as root, then do the
following:
9a Set SELinux to Permissive mode.
9b Disable firewall.
9c Copy the
rhel-lag.tar.gz file to the RHEL machine.
9d Untar the files and run the
/opt/novell/access-gateway/scripts/configure-
lag.sh
script. This script mounts the partition and modifies fstab entry and syslog.