5 Replies Latest reply on Jul 7, 2008 9:47 AM by 807573

    Problem Installing Policy Agent 2.2 on Apache 2.2.3

    807573
      Hi all,
      I'm trying to configure policy agent 2.2 on apache 2.2.3 on linux platform CentOS (red hat 5.1).
      The configuration and the installation seem to work properly, in effect in the log file install.log you can find :

      [06/10/2008 16:38:49:865 CEST] Creating directory layout and configuring Agent file for Agent_001 instance ...SUCCESSFUL.
      [06/10/2008 16:38:49:936 CEST] Reading data from file /opt/web_agents/apache22_agent/passwordFile and encrypting it ...SUCCESSFUL.
      [06/10/2008 16:38:49:937 CEST] Generating audit log file name ...SUCCESSFUL.
      [06/10/2008 16:38:50:022 CEST] Creating tag swapped AMAgent.properties file for instance Agent_001 ...SUCCESSFUL.
      [06/10/2008 16:38:50:026 CEST] Creating a backup for file /etc/httpd/conf/httpd.conf ...SUCCESSFUL.
      [06/10/2008 16:38:50:031 CEST] Adding Agent parameters to /opt/web_agents/apache22_agent/Agent_001/config/dsame.conf file ...SUCCESSFUL.
      [06/10/2008 16:38:50:032 CEST] Adding Agent parameters to /etc/httpd/conf/httpd.conf file ...SUCCESSFUL.

      But, when I try to restart Apache it gives me an error and in the error.log file in Apache you can read:

      [Tue Jun 10 16:57:33 2008] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
      [Tue Jun 10 16:57:34 2008] [notice] Digest: generating secret for digest authentication ...
      [Tue Jun 10 16:57:34 2008] [notice] Digest: done
      [Tue Jun 10 16:57:34 2008] [alert] Policy web agent configuration failed: NSPR error
      Configuration Failed

      Well, I found in the Sun documentation a well known bug about the NSPR and NSS library :

      Error message issued during installation of Policy Agent 2.2 on Linux systems

      When the Linux operating system is installed, specific components can be selected. Occasionally the specific components of the operating system selected lack the libraries necessary for Policy Agent 2.2 to function. When the complete Linux operating system is installed, all the required libraries are available. The libraries that are required for the agent to function are as follows: NSPR, NSS, and libxml2.

      Workaround: If the Linux operating system you are using is not complete, install the latest versions of these libraries as described in the steps that follow:

      At the time this note was added, the latest version of the NSPR library packages was NSPR 4.6.x , while the latest version of the NSS library package was NSS 3.11.x.

      To Install Missing Libraries for Policy Agent 2.2 on Linux Systems

      *+

      Install the NSS, and libxml2 libraries. These libraries are usually available as part of Linux installation media. NSPR and NSS are available as part of Mozilla binaries/development packages. You can also check the following sites:
      o

      NSPR: http://www.mozilla.org/projects/nspr/
      o

      NSS: http://www.mozilla.org/projects/security/pki/nss/



      So, I checked my libraries but they are upgraded to the latest version.
      If I comment the line that includes the libamapc22.so in the apache configuration file

      LoadModule dsame_module /opt/web_agents/apache22_agent/lib/libamapc22.so

      Apache can restart but the agent is misconfigurated!

      Any Idea?