16.6 Troubleshooting Access Gateway Import

When you install Access Gateway, it is automatically imported into Administration Console you specified during installation. If Access Gateway does not appear in the server list, you need to repair the import.

If the repair option does not resolve the problem, see the following sections:

16.6.1 Repairing an Import

If Access Gateway does not appear in Administration Console within ten minutes of installing an Access Gateway, perform the following steps:

  1. If a firewall separates Administration Console and Access Gateway, ensure that the required ports are opened. See Table 1-3.

  2. Click Devices > Access Gateways.

  3. Wait for a few minutes, then click Refresh.

  4. If the device import fails, a message similar to the following appears at the bottom of the table:

    Server gateway-<name> is currently importing. If it has been several minutes after installation, click repair import to fix it.
  5. Click repair import.

  6. If the device still does not appear or you do not receive a repair import message, continue with Triggering an Import Retry.

  7. If triggering an import retry does not solve the problem, reinstall the device.

16.6.2 Troubleshooting the Import Process

If the import process does not complete successfully, the device does not show up in the Access Gateway list. The following sections describe the import process, where to find the log files, and how to use them to determine where the failure occurred:

Understanding the Import Process

The following operations are performed during the import process:

  1. A user specifies the IP address for Administration Console during installation.

  2. A Java process called “JCC” (Java Communication Channel) detects that Administration Console IP address or port has changed between its own configuration and the CLI-updated settings.

  3. An import message is sent to Administration Console, notifying it of the IP, port, and ID of Access Gateway.

  4. Administration Console then connects to the Access Gateway device to fetch its configuration and version information. The Access Gateway import process is now complete.

  5. As a separate asynchronous operation, the Embedded Service Provider (ESP) of Access Gateway connects and registers itself with the JCC.

  6. When the ESP connects to the JCC, a similar import message is sent to Administration Console notifying it to import into the system.

  7. Administration Console connects to the JCC, asking for the ESP configuration and version information. On Administration Console, an LDIF (Lightweight Directory Interchange Format) file containing the default configuration for the ESP is applied on the local eDirectory configuration store.

  8. Administration Console then makes a link between the ESP and its configuration.

  9. If the entire process completed properly, Access Gateway appears in the list of Access Gateways in Administration Console.

Locating the Log Files

Various Access Manager components produce log files. Use the following logs on Administration Console or Access Gateway:

  • Administration Console log:

    Linux: /opt/novell/devman/share/logs/app_sc.0.log

    Windows Server 2012: \Program Files\Novell\log\app_sc.0.log

  • Tomcat Log on Administration Console:

    Linux: /opt/novell/nam/device name/logs/catalina.out

    The device name can be idp, mag, or adminconsole.

    Windows Server 2012: \Program Files\Novell\Tomcat\logs\stdout.log and \Program Files\Novell\Tomcat\logs\stderr.log

  • JCC log on Access Gateway:

    Linux Appliance or Service: /opt/novell/devman/jcc/logs/

    Windows Service: \Program Files\Novell\devman\jcc\logs

Triggering an Import Retry

  1. Go to the directory:

    Linux: /opt/novell/devman/jcc/

    Windows: \Program Files\Novell\devman\jcc

  2. Run the following script:

    Linux: sh conf/reimport_ags.sh jcc

    Windows: conf\reimport_ags.bat jcc

    Specify details against the following prompts:

    • Choose a local listener IP address [x.x.x.x]:

    • (Optional) Choose a local NAT IP address [optional]:

    • Choose Administration Console’s IP address []:

    • Enter Admin User’s DN [cn=admin,o=novell]:

    • Enter Admin Password: *****

      Wait for a few minutes for the configuration to finish.

  3. Run the following script:

    Linux: sh conf/reimport_ags.sh agm

    Windows: conf\reimport_ags.bat agm <username>

    For example, if the username is admin, then run conf\reimport_ags.bat agm admin

    Specify details against the following prompts:

    • (Linux) Do you want to import the device with current configuration or initial configuration after installation (Enter C for current configuration, I for initial configuration).

    • (Linux) Enter Admin User’s DN [cn=admin,o=novell]:

    • Enter Admin password: