16.4 Troubleshooting Identity Server Import and Installation

16.4.1 Importing Identity Server into Administration Console Fails

Ensure that the following requirements are met if you have installed Administration Console and Identity Server on different machines:

  • The following ports are opened between the machines:

    • 8444
    • 1443
    • 1289
    • 524
    • 636
  • Ports 8080 and 8443 must be open between the server and the clients for the clients to log in to Identity Server. For more information, see Setting Up Firewalls.

  • Time is synchronized between the two machines. Ensure that both machines are configured to use a Network Time Protocol server.

If firewalls and time synchronization do not solve the problem, run the reimport script. See Reimporting Identity Server.

16.4.2 Reimporting Identity Server

  1. Verify that Administration Console is up by logging in to Administration Console.

  2. Verify that you can communicate with Administration Console. From the command line of Identity Server machine, enter a ping command with the IP address of Administration Console.

    If the ping command is unsuccessful, fix the network communication problem before continuing.

  3. In Administration Console, delete Identity Server.

    For more information about how to delete Identity Server in Administration Console, see Identity Server Advanced Configuration in the Access Manager 4.5 Administration Guide.

  4. On the Identity Server machine, change to the jcc directory:

    Linux: /opt/novell/devman/jcc

    Windows: \Program Files\Novell\devman\jcc

  5. Run the following script to configure jcc:

    Linux: ./conf/reimport_nidp.sh jcc

    Windows: conf\reimport_nidp.bat jcc

  6. Run the following reimport script:

    Linux: ./conf/reimport_nidp.sh nidp

    Windows: conf\reimport_nidp.bat nidp <admin>

    Replace <admin> with the name of your administrator for Administration Console.

  7. If these steps do not work, reinstall the device.

16.4.3 Check the Installation Logs

If Identity Server installation fails, check the installation logs warning and error messages.

Linux Installation Logs

Installation logs are located in the /tmp/novell_access_manager directory.

Table 16-1 Installation Log Files for the Linux Identity Server

Log File

Description

install_idp_<date&time>.log

Contains the messages generated for Identity Server module.

install_main_<date&time>.log

Contains the Tomcat messages generated during the installation.

install_jcc_<date&time>.log

Contains the messages generated for the communications module.

Windows Installation Logs

Installation logs are located in the \Program Files\Novell\Tomcat\webapps \nps\WEB-INF\logs\install directory.

Table 16-2 Installation Log Files for the Windows Identity Server

Log File

Description

basejar_InstallLog.log

Contains the messages generated when installing Identity Server JAR files.

base_InstallLog.log

Contains the messages generated when installing Identity Server.

nauditjar_InstallLog.log

Contains the messages generated when installing Novell Audit JAR files.

nauditjar_InstallLog.log

Contains the messages generated for the auditing components.

NIDS_Pluginjar_InstallLog.log

Contains the messages generated when installing Identity Server plug-in JAR.

NIDS_Plugin_InstallLog.log

Contains the messages for the plug-in component.

NMASjar_InstallLog.log

Contains the messages generated when installing NMAS JAR files.

NMAS_InstallLog.log

Contains the messages for the NMAS component.