14.7 Issues Related to Upgrade

14.7.1 Upgrade Fails with the Error Message “MongoDB authentication failed”

Issue: The upgrade process fails when it is not able to authenticate the MongoDB database.

Workaround: Modify the Change Guardian admin user password.

To modify the password:

  1. Shut down Change Guardian server

    rcsentinal stop

  2. Run the configure.sh script from the /opt/novell/sentinal/setup directory:./configure.sh

  3. Specify 1 to perform a standard configuration of Change Guardian

  4. Specify 2 to create a new password and confirm the new password.

    The Change Guardian server starts.

  5. (Conditional) If you are upgrading a Change Guardian appliance, perform the following steps:

    • Remove the migration.offset file:

      rm -rf/var/opt/novell/sentinal/log/migration.offset

    • Run the Change Guardian migration script:

      ./cg6000_appliance_configuration.sh

14.7.2 Deploying Alert Rules Fail

Issue: Deploying an alert rule fails when you create, modify, or delete an alert rule after an upgrade. Although Deployment Status shows Success, the Alert Rule Deployment Status window displays an error that deployment has failed.

Workaround:

To resolve the issue:

  1. Comment the IP address 127.0.0.2 in the /etc/hosts file.

  2. Restart the Change Guardian server:

    /opt/netiq/cg/scripts/cg_services.sh restart

14.7.3 Change Guardian Configuration Fails after Appliance Installation Completes

Issue: After appliance installation, configuration of Change Guardian might fail to complete with the following error message:

Change Guardian configuration has failed. Check /var/opt/novell/sentinel/log/config_cg_onboot.log.

In such a case Agent Manager and javos services might fail to start.

Workaround: Reconfigure Change Guardian.

To reconfigure Change Guardian:

  1. Verify if Change Guardian service (8443) is running using the command:

    netstat -an | grep "8443" | grep "LISTEN"

  2. (Conditional) If Change Guardian service (8443) is not running, start Change Guardian service (8443):

    /opt/netiq/cg/scripts/cg_services.sh start

  3. Reconfigure Change Guardian:

    /opt/novell/sentinel/setup/configure.sh

14.7.4 Cleaning Up Data From PostgreSQL When Migration Fails

Issue: Database migration to PostgreSQL fails

Workaround: Delete the data that was partially moved to the PostgreSQL database.

To clear PostgreSQL:

  1. Ensure that the PostgreSQL database is running.

  2. Log in to the Change Guardian server as root and switch to novell user.

  3. Go to the location where you have extracted the Change Guardian installer or the migration utility.

  4. Delete the migrated data:

    ./db_migration_failure_cleanup.sh

  5. (Conditional) If you are performing a traditional upgrading, upgrade Change Guardian.

  6. (Conditional) If you are upgrading an appliance, run the appliance configuration utility.

14.7.5 Exception After Changing Keystore Password with Specific Special Characters

Issue: When you upgrade Change Guardian to 5.1 or later and change the keystore database password with specific special characters, the following exception are displayed: Failed to initialize Communicator (Defect 172329)

Workaround: None.

14.7.6 Error Message timedatectl command is not found is Displayed During an Upgrade

Issue: While upgrading from Change Guardian 5.2 to 6.1 on RHEL 6.10, you might receive an error message: timedatectl command is not found.

Workaround: You can ignore this error message. RHEL 6.1 does not support the timedatectl command.

14.7.7 Applying Updates on Change Guardian Appliance Fails With an Error Message

Issue: When you restart the Change Guardian services during an appliance update, the following error messages might be displayed:

Exception in thread "main" java.lang.NoSuchMethodError: org.apache.http.impl.client.HttpClientBuilder.setSSLHostnameVerifier(Ljavax/net/ssl/HostnameVerifier;)Lorg/apache/http/impl/client/HttpClientBuilder;
  at esecurity.ccs.comp.event.visualization.ESRestUtil.<init>(ESRestUtil.java:112)
  at esecurity.ccs.comp.event.visualization.ESRestUtil.getInstance(ESRestUtil.java:121)
  at esecurity.ccs.comp.event.visualization.ESRestUtil.main(ESRestUtil.java:136)

Workaround: Perform the following steps:

  1. Switch to the directory /<installation-path>/opt/novell/sentinel/bin/

  2. Open the elasticsearch.sh file.

  3. Change LIB_LOCATION="${ESEC_HOME}/lib/*:. " to LIB_LOCATION="${ESEC_HOME}/lib/ccsapp*.jar ".

  4. Open the following files and perform step 3:

    • create_kibana_index_pattern.sh

    • elasticsearch_index_template.sh

    • elasticsearchRestClient.sh

    • load_kibana_data.sh

    • reSyncAlert.sh