18.3 Upgrading Access Gateway Service

18.3.1 Prerequisites for Upgrading Access Gateway Service

  • Manually back up tomcat.conf and the server.xml files from /opt/novell/nam/mag/conf.

    The ag_upgrade.sh script takes care of backing up the remaining customized files automatically. These files get automatically backed up at the /root/nambkup folder and includes apache configuration and error pages.

  • (Applicable for RHEL) When more than 60 proxy services are configured, Apache fails to start after upgrade. RHEL has 128 semaphore arrays by default which is inadequate for more than 60 proxy services. Apache 2.4 requires a semaphore array for each proxy service.

    You must increase the number of semaphore arrays depending on the number of proxy services you are going to use. Perform the following steps to increase the number of semaphore arrays to the recommended value:

    1. Open /etc/sysctl.conf

    2. Add kernel.sem = 250 256000 100 1024

      This creates the following:

      Maximum number of arrays = 1024 (number of proxy services x 2)

      Maximum semaphores per array = 250

      Maximum semaphores system wide = 256000 (Maximum number of arrays x Maximum semaphores per array)

      Maximum ops per semop call = 100

    3. Use command sysctl -p to update the changes

    4. Start Apache.

18.3.2 To Upgrade Access Gateway Service

  1. Download the AM_50_AccessGatewayService_Linux_64.tar.gz file from the Micro Focus download site and extract it by using the following command:

    tar -xzvf <AM_50_AccessGatewayService_Linux_64.tar.gz>

  2. Run the ag_upgrade.sh script from the folder to start the upgrade.

  3. Specify the following information:

    User ID: Specify the name of the administration user for Administration Console.

    Password and Re-enter Password: Specify and re-enter the password for the administration user account.

    Access Gateway Service is upgraded. The following message is displayed when upgrade is complete:

    Starting Access Manager services...
    Backup of customized files are available at /root/nambkup. Restore them if required. 
  4. View the log files. The install logs are located in the /tmp/novell_access_manager/ directory.

  5. Restore any customized files from the backup taken earlier as part of steps in Prerequisites for Upgrading Access Gateway Service.

    Restore the customized files from the backup taken earlier. For information about how to add or merge files using the Configuration Files page, see Managing Configuration Files in the NetIQ Access Manager 5.0 Administration Guide.

    Old File Locations

    New File Location

    /root/novell_access_manager/apache2/(contains apache var files)

    /opt/novell/apache2/share/apache2/error

    /root/novell_access_manager/nesp/ (contains modified error pages)

    /var/opt/novell/tomcat/webapps/nesp/jsp/

    server.xml:

    If you have modified any elements or attributes in the 4.4.x environment the corresponding changes will need to be applied to the 4.5 server.xml file.Typical changes done to the server.xml include modifying the 'Address=' to restrict the IP address the application will listen on, or 'maxThreads=' attributes to modify the number of threads.

    In the following example, 4.4.x has customized maxThreads value.

    <<Connector port="9009" enableLookups="false" redirectPort="8443" protocol="AJP/1.3" address="127.0.0.1" minSpareThreads="25" maxThreads="700" backlog="0" connectionTimeout="20000, ... ../>

    Make a note of the customizations and merge the changed values to the 4.5 server.xml file

    tomcat.conf:

    Copy any elements or attributes that you have customized in the tomcat8.conf file to the tomcat.conf file.For example, if you have included the environment variable to increase the heap size by using -Xmx/Xms/Xss attributes in the tomcat8.conf file, copy this variable to the 4.5 /opt/novell/nam/idp/conf/tomcat.conf file.

  6. Modify the required properties in /opt/novell/nam/mag/webapps/agm/WEB-INF/agm.properties using back up file /root/novell_access_manager/agm/agm.properties. If you have customized the agm.properties file from the backup taken in 4.4.x, ensure that you apply the same to the new 4.5 /opt/novell/nam/mag/webapps/agm/WEB-INF/agm.properties file. An example below shows the how to enable the backend webserver's web page caching and the cache location.

    apache.disk.cache.enabled=yes

    apache.disk.cache.root=/var/cache/novell-apache2

  7. Change the ownerships of the following files (with read access to tomcat user) using the following commands:

    chown -R novlwww:novlwww /var/opt/novell/tomcat/webapps/nesp/jsp/

    chown -R novlwww:novlwww /opt/novell/nam/mag/webapps/agm/WEB-INF/agm.properties

  8. On the newly added Access Gateway Service, restart Tomcat using the /etc/init.d/novell-mag restart or systemctl restart novell-mag.service command.

NOTE:If you have customized the Java settings in the /opt/novell/nam/idp/conf/tomcat.conf file, then after the upgrade, you must copy the customized setting to the new file.