Dani's Middleware

Problem [root@srv1234 PolicyDirector]# java com.tivoli.pd.jcfg.SvrSslCfg -action config -admin_id sec_master -admin_pwd ******** -appsvr_id tim2tam -appsvr_pwd secret -host srv1234 -mode remote -port 999 -policysvr srv1235.mycompany.com:7135:1 -authzsvr srv1235.mycompany.com:7136:1 -cfg_file /opt/PolicyDirector/conf/srv1235.conf -key_file /opt/PolicyDirector/conf/keystore_srv1235.ks -domain Default -cfg_action create Exception in thread "main" [java.lang.IllegalStateException: HPDAZ0602E   Corrupted file: Insufficient information to contact a Policy Server. ] Wrappered Exception: java.lang.IllegalStateException: HPDAZ0602E   Corrupted file: Insufficient information to contact a Policy Server.         at com.tivoli.pd.jadmin.PDAppSvrConfig.configureAppSvr(PDAppSvrConfig.java:195)         at com.tivoli.pd.jcfg.SvrSslCfg.config(SvrSslCfg.java:179)         ...

[root@srvapp sbin]# java com.tivoli.pd.jcfg.SvrSslCfg -action config -admin_id sec_master -admin_pwd ********* -appsvr_id tim2tam -appsvr_pwd ******** -host srvapp -mode remote -port 999 -policysvr srvtam.mycompany.com:7135:1 -authzsvr srvtam.mycompany.com:7136:1 -cfg_file /opt/PolicyDirector/conf/srvtam.conf -key_file /opt/PolicyDirector/conf/keystore_srvtam.ks -cfg_action create Problem : Exception in thread "main" [java.io.IOException: No such file or directory ] Wrappered Exception: java.io.IOException: No such file or directory at com.tivoli.pd.jadmin.PDAppSvrConfig.configureAppSvr(PDAppSvrConfig.java:528) at com.tivoli.pd.jcfg.SvrSslCfg.config(SvrSslCfg.java:335) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:64) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:615) at com.tivo...

cmd> server task cnt-1a-webseald-hst7127 create -f -t tcp -h -v hst7105 -p 80 -w /ICB DPWWA1203E Permission denied pdadmin sec_master> object list /WebSEAL/hst7127-cnt-1a DPWAD0312E Object list failed: Forbidden The reason for this behaviour was that somehow my container /WebSEAL in the object space got the ACL default-root instead of default-webseal by the installation. pdadmin sec_master> object listandshow /WebSEAL Name: /WebSEAL/hst7127-cnt-1a Description: WebSEAL Server Object Type: 5 (Junction) Is Policy Attachable: Yes Extended Attributes: Attached ACL: Attached POP: Attached AuthzRule: Effective Extended Attributes: Effective ACL: default-root Effective POP: Effective AuthzRule: Name: /WebSEAL/hst7127-mas-01 Description: WebSEAL Server Object Type: 5 (Junction) Is Policy Attachable: Yes Extended Attributes: Attached ACL: ...

Imagine some funny guys installed some weird servers or anything connecting to your policy director and you do not know why and who and they are long gone and you assume that the servers have no purpose anymore. Or you have an old Web Portal Manager (amwpm) installation, but the server where it was installed is long gone. So, how to get rid of those servers in your list? pdadmin sec_master> server list si2tty-hst1116.dada.com amwpm-hst2128 hirsch.emea.dadacorp.net-localhost # touch /tmp/null.conf # svrsslcfg -unconfig -f /tmp/null.conf -n amwpm -h hst2128 -P ******* -A sec_master Unconfiguration of application "amwpm" for host "hst2128" is in progress. This might take several minutes. SSL unconfiguration for application "amwpm" has completed successfully. # svrsslcfg -unconfig -f /tmp/null.conf -n si2tty -h hst1116.dada.com -P ******* -A sec_master Unconfiguration of application "si2tam" for host "hst1116.dada.com" is in ...

Problem: The WebSEAL server list in the pdadmin: pdadmin> server list shows the server, but it does not exist anymore, i.e. because the host has been disassembled without unconfiguring the WebSEAL instance. Solution: 1.) Delete the instance in the LDAP under: SecAuthority=Default - cn=securitygroup - cn=webseal-servers - cn=secmgrd-servers 2.) Configure the instance again, which will lead to an error, because it seems to be installed already. Configuring WebSEAL instance 'DO-06'...HPDMG0453E A server with the same name already exists.DPWCF0473E The WebSEAL instance 'DO-06' failed to configure. 3.) Unconfigure the instance, which will show errors, but remove the instance totally. # amwebcfg -action unconfig -inst_name DO-06 -admin_id sec_master -admin_pwd ********* Unconfiguring WebSEAL instance 'DO-06'... 2008-10-28-15:30:10.158+01:00I----- 0x389D51F2 amwebcfg ERROR wcf Error WebCfgAdminApi.cpp 84 0x002198d0 DPWCF0498E The user 'DO-06-webseald/srv1252...

HPDBF0084E Unable to perform SvrSslCfg configuration for Tivoli Access Manager Web Portal Manager. # /opt/PolicyDirector/sbin/amwpmcfg -host -port 7135 -action unconfig -admin_id sec_master -admin_pwd ********** Unconfiguration of Access Manager Web Portal Manager is in progress. This might take several minutes. HPDBF0084E Unable to perform SvrSslCfg configuration for Tivoli Access Manager Web Portal Manager. Unconfiguration of Access Manager Web Portal Manager completed successfully. /var/PolicyServer/msg__amwpmcfg.log: Performing SvrSslCfg configuration for Web Portal Manager /usr/WebSphere/AppServer/java/jre/bin/java com.tivoli.pd.jcfg.SvrSslCfg -action unconfig -admin_id sec_master -admin_pwd ***** -appsvr_id amwpm -policysvr :7135:1 -cfg_file /opt/PolicyDirector/java/export/pdwpm/pdwpm.properties HPDBF0084E Unable to perform SvrSslCfg configuration for Tivoli Access Manager Web Portal Manager. Deleting pdwpm.conf and its contents Deleting amwpmcfg.properties and its contents Worka...

Exception in thread "main" java.lang.NoClassDefFoundError: com/ibm/crypto/provider/IBMJCE and com/ibm/misc/CharacterEncoder Description: When trying to unconfigure the WPM (TAM Web Portal Manager) from V5.1 it did not find these clases: Tivoli Access Manager Unconfiguration Menu 1. Access Manager Web Portal Manager Unconfiguration 2. Access Manager Runtime for Java Unconfiguration 3. Access Manager Authorization Server Unconfiguration 4. Access Manager Policy Server Unconfiguration 5. Access Manager Runtime Unconfiguration x. Return to the Tivoli Access Manager Setup Menu Select the menu item [x]: 1 Enter the hostname of the Access Manager policy server machine [ ]: Enter the port number of the Access Manager policy server machine [7135]: Enter the name for Tivoli Access Manager administrator [sec_master]: Enter the password for Tivoli Access Manager administrator: Exception in thread "main" java.lang.NoClassDef...

Error: HPDMG0764E An internal error has occurred. (status 0x14c012fc) pdadmin sec_master> user create dg1234 uid=dg1234,cn=team1,cn=users,o=company lala lala ********** Could not perform the administration request Error: HPDMG0764E An internal error has occurred. (status 0x14c012fc) Description: After the upgrade from Policy Director (policy server) V5.1 to V6.0 the errors above occured when trying to write to the registry. Solution: The task of updating the ldap schema did not work well for some reason. After doing it again the errors did not occur again: # ivrgy_tool -d -h ldap_host -p port -D ldap_admin -w pwd schema