4.3 Upgrading Access Manager Appliance 3.2 SP2 Using the Patch Process

You can upgrade the following versions of Access Manager using the patch process:

  • 3.2 SP2 to 3.2 SP2 IR1

  • 3.2 SP2 or 3.2 SP2 IR1 to 3.2 SP2 IR2

The patch helps you upgrade to the latest Access Manager Appliance patches with ease. Instead of downloading tar files that contain the entire set of binaries, you can download a .zip file that contains incremental changes in the form of a patch file. This patch file can be used to update all your Access Manager Appliance components.

IMPORTANT:In a cluster setup, ensure that you install the patch on each node of the Access Manager setup.

4.3.1 Prerequisites

  • Before upgrading, back up your current configuration. If the upgrade fails for any reason, you can use the backup file to recover your configuration.

    To back up your Access Manager Appliance configuration, do the following on the primary Administration Console go to the /opt/novell/devman/bin directory. Run ambkup.sh script

  • To use the patch to upgrade to the latest Access Manager Appliance patches, verify the installed product version is as per the latest release.

    1. In the Administration Console, click Access Manager > Auditing > Troubleshooting > Version.

    2. Examine the value of the Version field to see if it displays as follows:

      • 3.2 SP2: 3.2.2-77

      • 3.2 SP2 IR1:3.2.2-77 + IR1-107

4.3.2 Downloading the Patch

To download the patch

  1. Go to download.novell.com/patch/finder and specify AM_32_SP2_IR2.zip in the Keywords field and click Search.

  2. Download and save the file to the server running Access Manager Appliance. If you have multiple servers in your set up, ensure that you copy this .zip file to all the servers.

  3. Unzip the file using the AM_32_SP2_IR2.zip command.

  4. After extraction, the following files and folders are created in the AM_32_SP2_IR2 folder:

File/Folder Name

Description

rpm

Contains rpm files for the patch to run on a Linux server.

Patchtool

Contains logging properties file and files necessary for the patch to run on a Windows server.

installPtool.sh

Script to install the patch and patch on Linux server.

installPatch.sh

Script to install this IR patch tool and the updated binaries on a Linux server.

installPtool.cmd

Script to install patch on a Windows server.

AM_32_SP2_IR2-117.patch

The patch file. Name of the patch file changes for each IR release.

4.3.3 Installing the Patch

Install the patch after extracting files from the AM_32_SP2_IR2.zip file.

  1. Log in as the root user.

  2. Go to the location where you have extracted the patch files.

  3. Run the sh installPatch.sh command.

    This command installs the patch and the bundled binaries.

    HINT:To manage the Access Manager Appliance patch file, go to /opt/novell/nam/patching/bin folder.

If the patch is already installed, the installer exits with a message.

4.3.4 Administering Patches

After the patch is installed, go to the /opt/novell/nam/patching/bin folder.

Use the following options to administer the Access Manager Appliance patch file.

Option

Description

Command on Linux server

-qa

Lists all the installed patches.

./patch -qa

-q

Lists the details of a patch that is installed.

./patch –q

Example: If you have installed AM_32_SP2_IR1-107.patch, use the following command:./patch –q IR2-117

-i

Installs a patch. During installation of the patch, all running services are stopped temporarily. After the patch is installed, all the services are restarted and details of the operation are written to log files.

./patch –i <location and name of the patch>

Example:./patch –i /tmp/.patch AM_32_SP2_IR2-117.patch

-e

Removes a patch. Use this option to remove an installed patch. The patch maintains content relationship between patches. So, if you have installed patch 1 and patch 2, patch 1 cannot be removed without removing patch 2. This is because patch 2 contains details of patch 1 as well. During the patch process, all the running services are stopped temporarily.

./patch –e <patch name>

Example:./patch –e IR2-117

-qpl

Lists details of a patch that is not installed. If you want to view the changes that are included in the patch file without installing it on your server, use this option

./patch –qpl <location and name of the patch>

Example:./patch –qpl /tmp/AM_32_SP2_IR2-117.patch

-v

Verifies a patch. Use this option to verify the integrity of a patch file.

./patch –v <location and name of the patch>

Example:./patch –v /tmp/.patch AM_32_SP2_IR2-117.patch

-t

Verifies if services can be restored by the installer.

./patch –t <location and name of the patch>

Example:./patch –t /tmp/.patch AM_32_SP2_IR2-117.patch