Novell ACCESS MANAGER 3.1 SP1 - ADMINISTRATION Manual de usuario

Novell®

www.novell.com

novdocx (en) 17 September 2009

AUTHORIZED DOCUMENTATION

Linux Access Gateway on Red Hat* Installation Guide

Access Manager

3.1 SP1

July 23, 2009

Linux Access Gateway on Red Hat* Installation Guide

novdocx (en) 17 September 2009

Legal Notices

Novell, Inc., makes no representations or warranties with respect to the contents or use of this documentation, and

specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose.

Further, Novell, Inc., reserves the right to revise this publication and to make changes to its content, at any time,

without obligation to notify any person or entity of such revisions or changes.

Further, Novell, Inc., makes no representations or warranties with respect to any software, and specifically disclaims

any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc.,

reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to

notify any person or entity of such changes.

Any products or technical information provided under this Agreement may be subject to U.S. export controls and the

trade laws of other countries. You agree to comply with all export control regulations and to obtain any required

licenses or classification to export, re-export or import deliverables. You agree not to export or re-export to entities on

the current U.S. export exclusion lists or to any embargoed or terrorist countries as specified in the U.S. export laws.

You agree to not use deliverables for prohibited nuclear, missile, or chemical biological weaponry end uses. See the

Novell International Trade Services Web page (http://www.novell.com/info/exports/) for more information on

exporting Novell software. Novell assumes no responsibility for your failure to obtain any necessary export

approvals.

stored on a retrieval system, or transmitted without the express written consent of the publisher.

Novell, Inc., has intellectual property rights relating to technology embodied in the product that is described in this

document. In particular, and without limitation, these intellectual property rights may include one or more of the U.S.

patents listed on the Novell Legal Patents Web page (http://www.novell.com/company/legal/patents/) and one or

more additional patents or pending patent applications in the U.S. and in other countries.

Novell, Inc.

404 Wyman Street, Suite 500

Waltham, MA 02451

U.S.A.

www.novell.com

Online Documentation: To access the latest online documentation for this and other Novell products, see

the Novell Documentation Web page (http://www.novell.com/documentation).

novdocx (en) 17 September 2009

Novell Trademarks

For Novell trademarks, see the Novell Trademark and Service Mark list (http://www.novell.com/company/legal/

trademarks/tmlist.html).

Third-Party Materials

All third-party trademarks are the property of their respective owners.

4Linux Access Gateway on Red Hat* Installation Guide

novdocx (en) 17 September 2009

Contents 5

Contents

novdocx (en) 17 September 2009

About This Guide 7

1 Installing and Configuring Linux Access Gateway on RHEL 9

1.1 System Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

1.1.1 Hardware Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

1.1.2 Linux Access Gateway Network Requirements. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

1.2 Installing and Configuring the Linux Access Gateway on RHEL . . . . . . . . . . . . . . . . . . . . . . . 10

2 Upgrading the Linux Access Gateway on RHEL 13

3 Additional Information on Installing And Configuring 15

3.1 Before You Begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

3.2 Installation and Disk Layout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

3.3 Installing the Linux Access Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

3.4 Configuring Hardware and System Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

3.5 Verifying the Linux Access Gateway Installation on RHEL . . . . . . . . . . . . . . . . . . . . . . . . . . . 34

3.6 Configuring the Linux Access Gateway to Boot from RHEL . . . . . . . . . . . . . . . . . . . . . . . . . . 35

3.7 Starting the Linux Access Gateway from RHEL. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36

3.8 Configuring the Linux Access Gateway after It Is Installed on RHEL. . . . . . . . . . . . . . . . . . . . 37

3.8.1 Configuring the New Network Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37

3.8.2 Configuring a Secondary IP Address. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38

4 Troubleshooting 39

4.1 Health Status Displays NTP Check Failed Error . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39

A Additional Information 41

A.1 Differences between the Linux Access Gateway on RHEL and the Linux Access Gateway

Appliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41

A.2 Configuring the Linux Access Gateway to Load the Red Hat Boot Loader . . . . . . . . . . . . . . . 41

6Linux Access Gateway on Red Hat* Installation Guide

novdocx (en) 17 September 2009

About This Guide 7

novdocx (en) 17 September 2009

About This Guide

This guide describes the installation procedure and prerequisites to install the Novell®Access

Manager Linux Access Gateway on Red Hat Enterprise Linux Server (RHEL). This guide has the

following sections:

Chapter 1, “Installing and Configuring Linux Access Gateway on RHEL,” on page 9

Chapter 2, “Upgrading the Linux Access Gateway on RHEL,” on page 13

Chapter 3, “Additional Information on Installing And Configuring,” on page 15

Chapter 4, “Troubleshooting,” on page 39

Appendix A, “Additional Information,” on page 41

Audience

This guide is intended for administrators who want to install the Novell Access Manager Linux

Access Gateway on an existing RHEL Server.

Additional Documentation

This guide should be considered as an addendum to the existing Novell Access Manager

documentation, which is available at the Access Manager documentation Web site (http://

www.novell.com/documentation/novellaccessmanager31/index.html).

Novell Access Manager 3.1 Installation Guide (http://www.novell.com/documentation/

novellaccessmanager31/installation/?page=/documentation/novellaccessmanager31/

installation/data/bookinfo.html)

Novell Access Manager 3.1 Basic Setup Guide (http://www.novell.com/documentation/

novellaccessmanager31/basicconfig/?page=/documentation/novellaccessmanager31/

basicconfig/data/bookinfo.html)

Novell Access Manager 3.1 Access Gateway Guide (http://www.novell.com/documentation/

novellaccessmanager31/accessgateway/?page=/documentation/novellaccessmanager31/

accessgateway/data/bookinfo.html)

Novell Access Manager 3.1 Identity Server Guide (http://www.novell.com/documentation/

novellaccessmanager31/identityserver/?page=/documentation/novellaccessmanager31/

identityserver/data/bookinfo.html)

Novell Access Manager 3.1 Administration Console Guide (http://www.novell.com/

documentation/novellaccessmanager31/adminconsole/?page=/documentation/

novellaccessmanager31/adminconsole/data/bookinfo.html)

Documentation Conventions

In Novell documentation, a greater-than symbol (>) is used to separate actions within a step and

items in a cross-reference path.

A trademark symbol (®, TM, etc.) denotes a Novell trademark. An asterisk (*) denotes a third-party

trademark.

8Linux Access Gateway on Red Hat* Installation Guide

novdocx (en) 17 September 2009

When a single pathname can be written with a backslash for some platforms or a forward slash for

other platforms, the pathname is presented with a backslash. Users of platforms that require a

forward slash, such as Linux or UNIX , should use forward slashes as required by your software.

Installing and Configuring Linux Access Gateway on RHEL

novdocx (en) 17 September 2009

Installing and Configuring Linux

Access Gateway on RHEL

The Novell®Access Manager Linux Access Gateway is a software appliance designed on the

SUSE®Linux Enterprise Server (SLES) 9 SP3 kernel. In the standard installation procedure, Linux

Access Gateway re-images the hard drive, embeds the Linux operating system, then configures the

embedded operating system for optimal performance. However, when you have an existing RHEL

server on which you want to install the Novell Access Manager Linux Access Gateway, the

installation is performed against a free hard disk partition on the existing RHEL server.

The following sections describe the procedure to install Linux Access Gateway in the advanced

installation mode on RHEL 5.1. For detailed instructions, see Chapter 3, “Additional Information

on Installing And Configuring,” on page 15.

Section 1.1, “System Requirements,” on page 9

Section 1.2, “Installing and Configuring the Linux Access Gateway on RHEL,” on page 10

1.1 System Requirements

This section explains the requirements for installing the Novell Access Manager Linux Access

Gateway:

Section 1.1.1, “Hardware Requirements,” on page 9

Section 1.1.2, “Linux Access Gateway Network Requirements,” on page 9

1.1.1 Hardware Requirements

3 GB memory

Hard disk with a free partition of 100 GB--other than the / (root) partition--either as

unformatted and unallocated free space or as an additional partition in the existing server.

3.0 GHz processor or better recommended, with 2.0 GHz as the minimum.

1.1.2 Linux Access Gateway Network Requirements

The Linux Appliance runs on SLES 9 SP3. The Linux Appliance has no software requirements.

Before proceeding with the installation, make sure you have a static IP address for your Linux

Access Gateway server and an assigned DNS name (host name and domain name). You need to

know the following about your network:

The subnet mask that corresponds to the IP address of the Access Gateway.

The IP address of the default gateway.

The IP addresses of the DNS servers on your network. These DNS servers need to be

configured to resolve the DNS name of the Access Gateway to the IP address that you assign to

it.

The IP address or DNS name of a MCP server, if you have one in your local environment.

10 Linux Access Gateway on Red Hat* Installation Guide

novdocx (en) 17 September 2009

You are prompted to enter this information during the install.

1.2 Installing and Configuring the Linux Access

Gateway on RHEL

1Install Linux Access Gateway in the Advanced Installation mode.

2(Conditional) If you are installing Linux Access Gateway on an existing partition, other than

the / (root) partition in RHEL, remove the existing partition.

3Create a new extended partition with the End Cylinder value as 100 GB. Create the following

partitions:

/ (root) partition with Ext3 File system and End cylinder value of 30 GB.

var partition with Ext3 file system and End Cylinder value of 20 GB.

COS partition that uses the remaining space (50GB) on the hard disk. Select 0x68 Novell

COS as the File System ID.

For more information on removing or creating partition, see Section 3.3, “Installing the Linux

Access Gateway,” on page 16.

4Complete the installation of Linux Access Gateway. For more information, see Section 3.3,

“Installing the Linux Access Gateway,” on page 16.

When the installation is completed, the hard disk is formatted, removing all data, and the

partitions are created. After all the packages are installed, the system reboots in SUSE®Linux

Enterprise Server (SLES) 9, and finishes the installation.

5The system reboots with SLES 9.

6Login to the Novell Access Manager Administration Console and verify that the Linux Access

Gateway is imported. For more information, seeSection 3.5, “Verifying the Linux Access

Gateway Installation on RHEL,” on page 34.

7Complete the following hardware and system services configuration:

Network Interface Configuration: If you do not configure the network interface, the

Linux Appliance setup fails. Make sure that Network configuration matches the RHEL

configuration.

Administration Console Configuration: In the Administration Console Configuration

screen, specify the IP address of the RHEL server as the Access Gateway IP address.

For more information on configuring, see Section 3.4, “Configuring Hardware and System

Services,” on page 27.

8After the installation of Linux Access Gateway, the machine starts in SUSE Linux Enterprise

Server (SLES) 9 SP3. To boot the machine from Red Hat, copy boot entries for Red Hat to the

Linux Access Gateway machine. For more information, see Section 3.6, “Configuring the

Linux Access Gateway to Boot from RHEL,” on page 35.

9To start the Linux Access Gateway in RHEL, login to RHEL machine as root, then do the

following:

9a Set SELinux to Permissive mode.

9b Disable firewall.

9c Copy the

rhel-lag.tar.gz

file to the RHEL machine.

9d Untar the files and run the

/opt/novell/access-gateway/scripts/configure-

lag.sh

script. This script mounts the partition and modifies fstab entry and syslog.

Otros manuales para ACCESS MANAGER 3.1 SP1 - ADMINISTRATION

Tabla de contenidos

Otros manuales de Software de Novell

Novell

Novell ZENWORKS ENDPOINT SECURITY MANAGEMENT 4.0 -... Manual de usuario

Novell

Novell EDIRECTORY 8.8 SP3 Manual de usuario

Novell

Novell SUSE LINUX ENTERPRISE SERVER 10 STORAGE Manual de usuario

Novell

Novell PRIVILEGED USER MANAGER 2.2.1 - ADMINISTRATION GUIDE... Manual de instrucciones

Novell

Novell ACCESS MANAGER 3.1 SP1 - ADMINISTRATION Manual de usuario

Novell

Novell LINUX ENTERPRISE DESKTOP 10 SP2 Manual de usuario

Novell

Novell SENTINEL LOG MANAGER 1.0.0.5 - 03-31-2010 Manual de usuario

Novell

Novell GROUPWISE 8 - WEBACCESS Manual de usuario

Novell

Novell CLIENT LOGIN EXTENSION 3.7 - ADMINISTRATION Manual de instrucciones

Novell

Novell EDIRECTORY 8.8 - GUIDE Manual de usuario

Novell

Novell GROUPWISE 8 - MONITOR Manual de usuario

Novell

Novell EDIRECTORY 8.8 SP3 Manual de instrucciones

Novell

Novell SENTINEL RAPID DEPLOYMENT 6.1 - 06-15-2009 Manual de usuario

Novell

Novell CLIENT 1.0 FOR LINUX - README Manual de usuario

Novell

Novell APPARMOR 1.2 - QUICK GUIDE AND Hoja de datos

Novell

Novell GROUPWISE 8 - MONITOR Manual de usuario

Novell

Novell QUICKBOOKS - INSTALL Manual de usuario

Novell

Novell GROUPWISE 8 - MONITOR Manual de usuario

Novell

Novell eBook Reader Manual de instrucciones

Novell

Novell GROUPWISE 8 - USERS Manual de usuario

Novell

Novell IFOLDER 3.7 - SECURITY ADMINISTRATION Manual de instrucciones

Novell

Novell SENTINEL 6.1 SP2 - INSTALLATION GUIDE... Manual de usuario

Novell

Novell BUSINESS CONTINUITY CLUSTERING 1.2 -... Manual de instrucciones

Novell

Novell GROUPWISE 7 - CROSS-PLATFORM Manual de usuario

Manuales populares de Software de otras marcas

COMPRO

COMPRO COMPROFM Manual de usuario

Muratec

Muratec OFFICEBRIDGE ONLINE Manual de usuario

Oracle

Oracle Contact Center Anywhere 8.1 Manual de usuario

Adobe

Adobe 65007312 - Photoshop Lightroom Manual

Avaya

Avaya NULL One-X for RIM Blackberry Manual de usuario

HP ProLiant BL420c Manual de usuario

PS Audio

PS Audio PowerPlay Manual del propietario

Brady

Brady LOCKOUT PRO 3.0 Manual de servicio

Avaya

Avaya Interaction Center Manual de usuario

Texas Instruments

Texas Instruments TI-83 Plus Silver Edition Manual

Oracle

Oracle Application 9i Manual de usuario

Acer

Acer RDM Manual de usuario

Canon

Canon Vixia HF21 Manual de usuario

Canon

Canon ZR950 Manual de usuario

Samsung

Samsung Auto Backup Manual de usuario

Polycom

Polycom Vortex EF2201 Instrucciones de instalación y funcionamiento

Brocade Communications Systems

Brocade Communications Systems Brocade 8/12c Manual de usuario

Lexmark

Lexmark Apps Manual de servicio