Novell ACCESS MANAGER 3.1 SP1 - ADMINISTRATION User manual

Novell®

www.novell.com

novdocx (en) 17 September 2009

AUTHORIZED DOCUMENTATION

Linux Access Gateway on Red Hat* Installation Guide

Access Manager

3.1 SP1

July 23, 2009

Linux Access Gateway on Red Hat* Installation Guide

novdocx (en) 17 September 2009

Legal Notices

Novell, Inc., makes no representations or warranties with respect to the contents or use of this documentation, and

specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose.

Further, Novell, Inc., reserves the right to revise this publication and to make changes to its content, at any time,

without obligation to notify any person or entity of such revisions or changes.

Further, Novell, Inc., makes no representations or warranties with respect to any software, and specifically disclaims

any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc.,

reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to

notify any person or entity of such changes.

Any products or technical information provided under this Agreement may be subject to U.S. export controls and the

trade laws of other countries. You agree to comply with all export control regulations and to obtain any required

licenses or classification to export, re-export or import deliverables. You agree not to export or re-export to entities on

the current U.S. export exclusion lists or to any embargoed or terrorist countries as specified in the U.S. export laws.

You agree to not use deliverables for prohibited nuclear, missile, or chemical biological weaponry end uses. See the

Novell International Trade Services Web page (http://www.novell.com/info/exports/) for more information on

exporting Novell software. Novell assumes no responsibility for your failure to obtain any necessary export

approvals.

stored on a retrieval system, or transmitted without the express written consent of the publisher.

Novell, Inc., has intellectual property rights relating to technology embodied in the product that is described in this

document. In particular, and without limitation, these intellectual property rights may include one or more of the U.S.

patents listed on the Novell Legal Patents Web page (http://www.novell.com/company/legal/patents/) and one or

more additional patents or pending patent applications in the U.S. and in other countries.

Novell, Inc.

404 Wyman Street, Suite 500

Waltham, MA 02451

U.S.A.

www.novell.com

Online Documentation: To access the latest online documentation for this and other Novell products, see

the Novell Documentation Web page (http://www.novell.com/documentation).

novdocx (en) 17 September 2009

Novell Trademarks

For Novell trademarks, see the Novell Trademark and Service Mark list (http://www.novell.com/company/legal/

trademarks/tmlist.html).

Third-Party Materials

All third-party trademarks are the property of their respective owners.

4Linux Access Gateway on Red Hat* Installation Guide

novdocx (en) 17 September 2009

Contents 5

Contents

novdocx (en) 17 September 2009

About This Guide 7

1 Installing and Configuring Linux Access Gateway on RHEL 9

1.1 System Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

1.1.1 Hardware Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

1.1.2 Linux Access Gateway Network Requirements. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

1.2 Installing and Configuring the Linux Access Gateway on RHEL . . . . . . . . . . . . . . . . . . . . . . . 10

2 Upgrading the Linux Access Gateway on RHEL 13

3 Additional Information on Installing And Configuring 15

3.1 Before You Begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

3.2 Installation and Disk Layout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

3.3 Installing the Linux Access Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

3.4 Configuring Hardware and System Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

3.5 Verifying the Linux Access Gateway Installation on RHEL . . . . . . . . . . . . . . . . . . . . . . . . . . . 34

3.6 Configuring the Linux Access Gateway to Boot from RHEL . . . . . . . . . . . . . . . . . . . . . . . . . . 35

3.7 Starting the Linux Access Gateway from RHEL. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36

3.8 Configuring the Linux Access Gateway after It Is Installed on RHEL. . . . . . . . . . . . . . . . . . . . 37

3.8.1 Configuring the New Network Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37

3.8.2 Configuring a Secondary IP Address. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38

4 Troubleshooting 39

4.1 Health Status Displays NTP Check Failed Error . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39

A Additional Information 41

A.1 Differences between the Linux Access Gateway on RHEL and the Linux Access Gateway

Appliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41

A.2 Configuring the Linux Access Gateway to Load the Red Hat Boot Loader . . . . . . . . . . . . . . . 41

6Linux Access Gateway on Red Hat* Installation Guide

novdocx (en) 17 September 2009

About This Guide 7

novdocx (en) 17 September 2009

About This Guide

This guide describes the installation procedure and prerequisites to install the Novell®Access

Manager Linux Access Gateway on Red Hat Enterprise Linux Server (RHEL). This guide has the

following sections:

Chapter 1, “Installing and Configuring Linux Access Gateway on RHEL,” on page 9

Chapter 2, “Upgrading the Linux Access Gateway on RHEL,” on page 13

Chapter 3, “Additional Information on Installing And Configuring,” on page 15

Chapter 4, “Troubleshooting,” on page 39

Appendix A, “Additional Information,” on page 41

Audience

This guide is intended for administrators who want to install the Novell Access Manager Linux

Access Gateway on an existing RHEL Server.

Additional Documentation

This guide should be considered as an addendum to the existing Novell Access Manager

documentation, which is available at the Access Manager documentation Web site (http://

www.novell.com/documentation/novellaccessmanager31/index.html).

Novell Access Manager 3.1 Installation Guide (http://www.novell.com/documentation/

novellaccessmanager31/installation/?page=/documentation/novellaccessmanager31/

installation/data/bookinfo.html)

Novell Access Manager 3.1 Basic Setup Guide (http://www.novell.com/documentation/

novellaccessmanager31/basicconfig/?page=/documentation/novellaccessmanager31/

basicconfig/data/bookinfo.html)

Novell Access Manager 3.1 Access Gateway Guide (http://www.novell.com/documentation/

novellaccessmanager31/accessgateway/?page=/documentation/novellaccessmanager31/

accessgateway/data/bookinfo.html)

Novell Access Manager 3.1 Identity Server Guide (http://www.novell.com/documentation/

novellaccessmanager31/identityserver/?page=/documentation/novellaccessmanager31/

identityserver/data/bookinfo.html)

Novell Access Manager 3.1 Administration Console Guide (http://www.novell.com/

documentation/novellaccessmanager31/adminconsole/?page=/documentation/

novellaccessmanager31/adminconsole/data/bookinfo.html)

Documentation Conventions

In Novell documentation, a greater-than symbol (>) is used to separate actions within a step and

items in a cross-reference path.

A trademark symbol (®, TM, etc.) denotes a Novell trademark. An asterisk (*) denotes a third-party

trademark.

8Linux Access Gateway on Red Hat* Installation Guide

novdocx (en) 17 September 2009

When a single pathname can be written with a backslash for some platforms or a forward slash for

other platforms, the pathname is presented with a backslash. Users of platforms that require a

forward slash, such as Linux or UNIX , should use forward slashes as required by your software.

Installing and Configuring Linux Access Gateway on RHEL

novdocx (en) 17 September 2009

Installing and Configuring Linux

Access Gateway on RHEL

The Novell®Access Manager Linux Access Gateway is a software appliance designed on the

SUSE®Linux Enterprise Server (SLES) 9 SP3 kernel. In the standard installation procedure, Linux

Access Gateway re-images the hard drive, embeds the Linux operating system, then configures the

embedded operating system for optimal performance. However, when you have an existing RHEL

server on which you want to install the Novell Access Manager Linux Access Gateway, the

installation is performed against a free hard disk partition on the existing RHEL server.

The following sections describe the procedure to install Linux Access Gateway in the advanced

installation mode on RHEL 5.1. For detailed instructions, see Chapter 3, “Additional Information

on Installing And Configuring,” on page 15.

Section 1.1, “System Requirements,” on page 9

Section 1.2, “Installing and Configuring the Linux Access Gateway on RHEL,” on page 10

1.1 System Requirements

This section explains the requirements for installing the Novell Access Manager Linux Access

Gateway:

Section 1.1.1, “Hardware Requirements,” on page 9

Section 1.1.2, “Linux Access Gateway Network Requirements,” on page 9

1.1.1 Hardware Requirements

3 GB memory

Hard disk with a free partition of 100 GB--other than the / (root) partition--either as

unformatted and unallocated free space or as an additional partition in the existing server.

3.0 GHz processor or better recommended, with 2.0 GHz as the minimum.

1.1.2 Linux Access Gateway Network Requirements

The Linux Appliance runs on SLES 9 SP3. The Linux Appliance has no software requirements.

Before proceeding with the installation, make sure you have a static IP address for your Linux

Access Gateway server and an assigned DNS name (host name and domain name). You need to

know the following about your network:

The subnet mask that corresponds to the IP address of the Access Gateway.

The IP address of the default gateway.

The IP addresses of the DNS servers on your network. These DNS servers need to be

configured to resolve the DNS name of the Access Gateway to the IP address that you assign to

it.

The IP address or DNS name of a MCP server, if you have one in your local environment.

10 Linux Access Gateway on Red Hat* Installation Guide

novdocx (en) 17 September 2009

You are prompted to enter this information during the install.

1.2 Installing and Configuring the Linux Access

Gateway on RHEL

1Install Linux Access Gateway in the Advanced Installation mode.

2(Conditional) If you are installing Linux Access Gateway on an existing partition, other than

the / (root) partition in RHEL, remove the existing partition.

3Create a new extended partition with the End Cylinder value as 100 GB. Create the following

partitions:

/ (root) partition with Ext3 File system and End cylinder value of 30 GB.

var partition with Ext3 file system and End Cylinder value of 20 GB.

COS partition that uses the remaining space (50GB) on the hard disk. Select 0x68 Novell

COS as the File System ID.

For more information on removing or creating partition, see Section 3.3, “Installing the Linux

Access Gateway,” on page 16.

4Complete the installation of Linux Access Gateway. For more information, see Section 3.3,

“Installing the Linux Access Gateway,” on page 16.

When the installation is completed, the hard disk is formatted, removing all data, and the

partitions are created. After all the packages are installed, the system reboots in SUSE®Linux

Enterprise Server (SLES) 9, and finishes the installation.

5The system reboots with SLES 9.

6Login to the Novell Access Manager Administration Console and verify that the Linux Access

Gateway is imported. For more information, seeSection 3.5, “Verifying the Linux Access

Gateway Installation on RHEL,” on page 34.

7Complete the following hardware and system services configuration:

Network Interface Configuration: If you do not configure the network interface, the

Linux Appliance setup fails. Make sure that Network configuration matches the RHEL

configuration.

Administration Console Configuration: In the Administration Console Configuration

screen, specify the IP address of the RHEL server as the Access Gateway IP address.

For more information on configuring, see Section 3.4, “Configuring Hardware and System

Services,” on page 27.

8After the installation of Linux Access Gateway, the machine starts in SUSE Linux Enterprise

Server (SLES) 9 SP3. To boot the machine from Red Hat, copy boot entries for Red Hat to the

Linux Access Gateway machine. For more information, see Section 3.6, “Configuring the

Linux Access Gateway to Boot from RHEL,” on page 35.

9To start the Linux Access Gateway in RHEL, login to RHEL machine as root, then do the

following:

9a Set SELinux to Permissive mode.

9b Disable firewall.

9c Copy the

rhel-lag.tar.gz

file to the RHEL machine.

9d Untar the files and run the

/opt/novell/access-gateway/scripts/configure-

lag.sh

script. This script mounts the partition and modifies fstab entry and syslog.

Other manuals for ACCESS MANAGER 3.1 SP1 - ADMINISTRATION

Table of contents

Other Novell Software manuals

Novell

Novell EDIRECTORY 8.8 - GUIDE User manual

Novell

Novell BUSINESS CONTINUITY CLUSTERING 1.2.1 -... Instruction Manual

Novell

Novell GROUPWISE 7 - POST OFFICE AGENT User manual

Novell

Novell INTERNET STORAGE NAME SERVICE 1.0 -... User manual

Novell

Novell Open Enterprise Server 2 Instruction Manual

Novell

Novell SENTINEL LOG MANAGER 1.0.0.5 - 03-31-2010 User manual

Novell

Novell GROUPWISE 7 - INTEROPERABILITY GUIDE User manual

Novell

Novell ACCESS MANAGER 3.1 SP1 - ADMINISTRATION User manual

Novell

Novell SUPPORT ADVISOR 2.0.1 Instruction Manual

Novell

Novell IDENTITY MANAGER 3.6.1 - STAGING BEST PRACTICES GUIDE... User manual

Novell

Novell ACCESS MANAGER 3.1 SP1 - ADMINISTRATION User manual

Novell

Novell IFOLDER 3.6 - CROSS-PLATFORM User manual

Novell

Novell ACCESS MANAGER 3.1 SP2 - SSL VPN USER GUIDE... User manual

Novell

Novell QUICKBOOKS - INSTALL User manual

Novell

Novell DATA SYNCHRONIZER - 07-2010 User manual

Novell

Novell ZENWORKS ENDPOINT SECURITY MANAGEMENT 3.5 User manual

Novell

Novell LINUX ENTERPRISE SERVER 10 - ARCHITECTURE-SPECIFIC INFORMATION... Manual

Novell

Novell IDENTITY MANAGER 3.6.1 User manual

Novell

Novell ZENWORKS APPLICATION VIRTUALIZATION 8.0.1 -... User manual

Novell

Novell ZENWORKS 7.2 LINUX MANAGEMENT - SCENARIOS 1... User manual

Novell

Novell ZENWORKS APPLICATION VIRTUALIZATION 8.0 - INTEGRATION AND STREAMING GUIDE... User manual

Novell

Novell SP2 - S Instruction Manual

Novell

Novell ZENWORKS NETWORK ACCESS CONTROL 5.0 - INSTALLATION GUIDE... User manual

Novell

Novell ZENWORKS 10 CONFIGURATION MANAGEMENT SP3 - COMMAND LINE UTILITIES REFERENCE 10.3... User manual

Popular Software manuals by other brands

COMPRO

COMPRO COMPROFM manual

Muratec

Muratec OFFICEBRIDGE ONLINE user guide

Oracle

Oracle Contact Center Anywhere 8.1 installation guide

Adobe

Adobe 65007312 - Photoshop Lightroom Programmer's guide

Avaya

Avaya NULL One-X for RIM Blackberry user guide

HP ProLiant BL420c user guide

PS Audio

PS Audio PowerPlay Programming manual

Brady

Brady LOCKOUT PRO 3.0 Administrator's guide

Avaya

Avaya Interaction Center user guide

Texas Instruments

Texas Instruments TI-83 Plus Silver Edition Guide book

Oracle

Oracle Application 9i Configuration guide

Acer

Acer RDM user guide

Canon

Canon Vixia HF21 instruction manual

Canon

Canon ZR950 instruction manual

Samsung

Samsung Auto Backup user manual

Polycom

Polycom Vortex EF2201 Application note

Brocade Communications Systems

Brocade Communications Systems Brocade 8/12c user manual

Lexmark

Lexmark Apps Administrator's guide