Error installing Policy Agent

When installing policy agent I get an error: "No X11 DISPLAY variable was set".
I've tried running it with the -nodisplay option and have tried setting -Djava.awt.headless=true in the setup script to no avail.
Any help would be greatly appreciated.

If you have display environment(X server), you can set DISPLAY to local host and try tthe -nodisplay option.
If you don't have the X environment, you need to follow a different method. I don't know which agent you are installing. For example, for Sun web server 6.1 agent, you could do this:
1. pkgadd -d . SUNWames6
2. cd /opt/SUNWam/agents/es6/bin/
3. invoke config script there: ./config . This configures you web server instance, setup AMAgent.properties and debug directories etc.
4. Restart web server instance.
thanks,
shivaram

Similar Messages

Problem Installing Policy Agent 2.2 on Apache 2.2.3

Hi all,
I'm trying to configure policy agent 2.2 on apache 2.2.3 on linux platform CentOS (red hat 5.1).
The configuration and the installation seem to work properly, in effect in the log file install.log you can find :
[06/10/2008 16:38:49:865 CEST] Creating directory layout and configuring Agent file for Agent_001 instance ...SUCCESSFUL.
[06/10/2008 16:38:49:936 CEST] Reading data from file /opt/web_agents/apache22_agent/passwordFile and encrypting it ...SUCCESSFUL.
[06/10/2008 16:38:49:937 CEST] Generating audit log file name ...SUCCESSFUL.
[06/10/2008 16:38:50:022 CEST] Creating tag swapped AMAgent.properties file for instance Agent_001 ...SUCCESSFUL.
[06/10/2008 16:38:50:026 CEST] Creating a backup for file /etc/httpd/conf/httpd.conf ...SUCCESSFUL.
[06/10/2008 16:38:50:031 CEST] Adding Agent parameters to /opt/web_agents/apache22_agent/Agent_001/config/dsame.conf file ...SUCCESSFUL.
[06/10/2008 16:38:50:032 CEST] Adding Agent parameters to /etc/httpd/conf/httpd.conf file ...SUCCESSFUL.
But, when I try to restart Apache it gives me an error and in the error.log file in Apache you can read:
[Tue Jun 10 16:57:33 2008] [notice] suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Tue Jun 10 16:57:34 2008] [notice] Digest: generating secret for digest authentication ...
[Tue Jun 10 16:57:34 2008] [notice] Digest: done
[Tue Jun 10 16:57:34 2008] [alert] Policy web agent configuration failed: NSPR error
Configuration Failed
Well, I found in the Sun documentation a well known bug about the NSPR and NSS library :
Error message issued during installation of Policy Agent 2.2 on Linux systems
When the Linux operating system is installed, specific components can be selected. Occasionally the specific components of the operating system selected lack the libraries necessary for Policy Agent 2.2 to function. When the complete Linux operating system is installed, all the required libraries are available. The libraries that are required for the agent to function are as follows: NSPR, NSS, and libxml2.
Workaround: If the Linux operating system you are using is not complete, install the latest versions of these libraries as described in the steps that follow:
At the time this note was added, the latest version of the NSPR library packages was NSPR 4.6.x , while the latest version of the NSS library package was NSS 3.11.x.
To Install Missing Libraries for Policy Agent 2.2 on Linux Systems
*+
Install the NSS, and libxml2 libraries. These libraries are usually available as part of Linux installation media. NSPR and NSS are available as part of Mozilla binaries/development packages. You can also check the following sites:
o
NSPR: http://www.mozilla.org/projects/nspr/
o
NSS: http://www.mozilla.org/projects/security/pki/nss/
So, I checked my libraries but they are upgraded to the latest version.
If I comment the line that includes the libamapc22.so in the apache configuration file
LoadModule dsame_module /opt/web_agents/apache22_agent/lib/libamapc22.so
Apache can restart but the agent is misconfigurated!
Any Idea?

thank you Subhodeep for your reply,
I didn't try to change the library file and I didn't find in licterature any information about library file changing in the Policy agent installation. Please, could you suggest me something more about which library to use instead of libamapc22.so?
ps. I am using red hat 5.1, and from the release note of the policy agent seems that the latest platform version supported is red hat enterprise linux 4.0 versions.....
this one could definitely be the reason of the misconfiguration.

Unable to install policy agent 2.2 for Webserver 6.1 on Windows 2003

Hi everybody,
I've installed Java Enterprise Server (last version) on Windows 2003 with these components:
- Directory Server
- Access Manager
- Webserver
- Administration Server
Everything works good, I can access all those components.
Now I want to use Policy Agent 2.2. So I've downloaded it and I've tried to install...
But during the installation process, an error message appear when I select the Web Server instance directory to protect.
It says: "invalid web server instance - on windows, Access Manager Policy Agent only supports Web Server 6.0 and 6.1.....".
The problem is that I work with WebServer 6.1....
I really don't know what to do now... This message prevent me to go further.
What's the problem? How can I avoid this?
Thanks for your help!
Adrien

Okay, here's what it says:
"The upgrade patch cannot be installed by the Windows Installer service because the program to be upgraded may be missing, ot the updgrade pathc may update a different version of the program. Verify that the program to be upgraded exists on your computer and that you have the correct update patch".
I don't even know what program I'm supposed to have.
Ideas, anyone?

Installing Policy Agent gives Invalid empty password

Hello All
I am gettting this error when installing AM 2.2. I want to configure the Policy Agent with IBM WAS 6
Copy agent.jar,amclientsdk.jar to
/opt/IBM/WebSphere/AppServer/lib/ext...DONE.
Creating directory layout and configuring AMAgent.properties file for
agent_001 instance ...DONE.
Reading data from file /opt/sun/policyagent/file/passwordfile and
encrypting it ...
*** ERROR: Installation failed due to the following error - (Invalid empty
password specified.).
The file exists in that path, and writeable (mod 777)
The content of the file is "password."
Does anyone have an idea why I am getting this error ??
Thanks in advance

I also am experiencing this error message when installing the AM v2.2 agent for WAS on linux. It looks like the Agent can't find the SUN security provider class and therefore can't run the encryption routine.
The agentadmin logs show:
EncryptionKeyGenerator.generateRandomNumber() : threw exception :
java.security.NoSuchProviderException: no such provider: SUNWould adding "security.provider.SUN" to /opt/WebSphere/AppServer/java/jre/lib/security/java.security do the trick? I assume not by itself since the reference actually wouldn't be there.
Thoughts?
/Jed

Installing policy agent 2.1.1 for app server 7

Hi,
I've been trying to install the policy agent on app server7. I read that the policy agent had to be installed on a different instance of the app server than the one where the portal is running (portal runs on instance server1). How can you make sure of that?
I'd like to use the agent to only control the access to a webapp that is deployed on server1 instance. I don't want it to interfere with the portal but at the moment it does.
Now I can't use the webapp (access forbidden) and the portal ("Authentication Service is not initialized").
all the components of JES but the gateway are installed on a single machine called crpbioweb.crp-sante.healthnet.lu
here is the statefile of the installation
[STATE_BEGIN Sun ONE Identity Server Policy Agent a15672cb9a086c93b865dd58c4e72641d908cc91]
OS_NAME = SunOS
PACKAGE_ZIP_FILE = am_as70_agent.zip
PACKAGE_ID = SUNWamas
PACKAGE_VERSION = 2.1
COMPONENT_NAME = Sun ONE Identity Server Policy Agent for Sun ONE Application Server 7.0
AGENT_TYPE = as70
defaultInstallDirectory = /opt
currentInstallDirectory = /opt/agent
SERVER_HOST = crpbioweb.crp-sante.healthnet.lu
SERVER_PORT = 58080
SERVER_PROTO = http
SERVER_DEPLOY_URI = /amserver
CONSOLE_HOST = crpbioweb.crp-sante.healthnet.lu
CONSOLE_PORT = 58080
CONSOLE_PROTO = http
CONSOLE_DEPLOY_URI = /amconsole
ENCADMINPASSWD = password
LDAPUSERPASSWD = amldapuser
DIRECTORY_HOST = crpbioweb.crp-sante.healthnet.lu
DIRECTORY_PORT = 389
DIRECTORY_SSL_ENABLED = false
ROOT_SUFFIX = dc=crp-sante,dc=healthnet,dc=lu
ORG_BASE = dc=crp-sante,dc=healthnet,dc=lu
CONFIG_LOAD_INTEREVAL = 10
ENABLE_NEL_CACHE = false
NEL_CACHE_SIZE = 1000
NEL_CACHE_TIME = 60
PREF_PROTOCOL = http
PREF_PORT = 80
PRIMARY_CTX_PATH = /mailtracker
AGENT_HOST = crpbioweb.crp-sante.healthnet.lu
FILTER_MODE = ALL
ACCESS_DENIED_URI =
LOGIN_ATTEMPT_LIMIT = 5
JAVA_HOME = /usr/jdk/entsys-j2se
JSSE_INSTALLED = true
JCE_INSTALLED = true
AS70_BIN_DIR = /opt/SUNWappserver7/bin
AS70_ADMIN_USER = admin
AS70_ADMIN_PASSWD = password
AS70_ADMIN_PORT = 4848
AS70_INSTANCE_CONFIG_DIR = /var/opt/SUNWappserver7/domains/domain1/server1/config
[STATE_DONE Sun ONE Identity Server Policy Agent a15672cb9a086c93b865dd58c4e72641d908cc91]
There are 2 things I'd like to know:
How can I make sure the agent is installed on server2 instance and not on server1?
How do you choose to install the agent on server2?
If I correctly installed the agent on server2, then why does it block the webapp and the portal on server1?

Before installing the agent I already manually created a second instance of the app server on port 81. the problem is that I don't know how to install the agent on server2 instance. the only parameter that has something to do with port or instance is the "PREF_PORT". but according to the doc http://docs.sun.com/source/816-6884-10/chapter2.html#wp20595
it says that the Preferred protocol listening port is the preferred port number on which the application server provides its services.
I'm not quite sure what this means. Do I have to enter the port of the instance where I want to install the agent or the port I want to protect with the agent?
Another way to check if I installed it at the right place would be to check in the app server admin console. the installation created a new item in App server instance > server 1 > security > Realms. Do you know if this is the correct place to appear? or should it be in server2?
thanks

Error installing DPM Agent in Update Rollup 5 for System Center 2012 R2 Data Protection Manager

I have updated my main DPM server to Update Rollup 5 for System Center 2012 R2 Data Protection Manager and all went well.
All Protected servers updated and rebooted and continued protection - EXCEPT one;
Physical Windows Server 2012 R2 Datacenter.
Tried Manual install - no luck
Removed Protection Agent / rebooted / re-installed - no luck
Installed all updates / re-install - no luck
this seems to be the only indicated problem in MSDPMAgentInstall.LOG.....
Property(S): PATCHMediaSrcProp = C:\Windows\Microsoft Data Protection Manager\DPM\ProtectionAgents\RA\4.2.1292.0\DPMProtectionAgent_KB3021791.msp
MSI (s) (04:34) [09:24:23:772]: Product: Microsoft System Center 2012 R2 DPM Protection Agent - Update 'Microsoft System Center 2012 R2 DPM Protection Agent Update - KB3021791' could not be installed. Error code 1603. Additional information is available in
the log file C:\Windows\\Temp\MSDPMAgentInstall.LOG.
MSI (s) (04:34) [09:24:23:772]: Windows Installer installed an update. Product Name: Microsoft System Center 2012 R2 DPM Protection Agent. Product Version: 4.2.1292.0. Product Language: 1033. Manufacturer: Microsoft Corporation. Update Name: Microsoft System
Center 2012 R2 DPM Protection Agent Update - KB3021791. Installation success or error status: 1603.
MSI (s) (04:34) [09:24:23:772]: Note: 1: 1729
MSI (s) (04:34) [09:24:23:772]: Note: 1: 2205 2: 3: Error
MSI (s) (04:34) [09:24:23:772]: Note: 1: 2228 2: 3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 1729
MSI (s) (04:34) [09:24:23:772]: Note: 1: 2205 2: 3: Error
MSI (s) (04:34) [09:24:23:772]: Note: 1: 2228 2: 3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 1709
MSI (s) (04:34) [09:24:23:772]: Product: Microsoft System Center 2012 R2 DPM Protection Agent -- Configuration failed.
MSI (s) (04:34) [09:24:23:772]: Windows Installer reconfigured the product. Product Name: Microsoft System Center 2012 R2 DPM Protection Agent. Product Version: 4.2.1292.0. Product Language: 1033. Manufacturer: Microsoft Corporation. Reconfiguration success
or error status: 1603.
Any help would be greatly appreciated.

Hotfix for known issue with Update Rollup 5 for System Center 2012 R2 Data Protection Manager
http://www.microsoft.com/en-us/download/details.aspx?id=45914&WT.mc_id=rss_alldownloads_all
Have a nice day !!!
DPM 2012 R2: Remove Recovery Points

Policy Agent Install - Tomcat problems

Hello,
After trying to install policy agent on many different OS with no success, I had to finally ask here:
I followed the instructions and did the following on Debian, Fedora, and Win server 2003:
1.downloaded the policy agent for tomcat
2.stopped tomcat
3.decompressed the j2ee agents folder to the root of the system,
4 run the agentadmin -install
5. put the agentapp folder in the webapps directory
6. started tomcat...
get the same error on three OS about it not finding AMRealm,
I found someone pointing out that setagentclasspath could fix this,
but I see all the classpaths there, so I went I start moving some classes to the tomcat/lib dir
then the AMRealm error went away but many others came in.
What I'm doing wrong !!

I'm having the same problem with windows 2003 server Enterprise Edition. (installer complains about web server instance directory, is not 6.0 or 6.1...)
You said that "Policy Agent 2.1 does *NOT* work with MS Windows 2003 Server Enterprise edition". But does Policy Agent 2.2 work with Windows 2003 Server Enterprise edition?
Thanks for your help!!!

Policy Agent 2.1 for IBM WebSphere Application Server 5.0 can't install

I install Policy Agent 2.1 for IBM WebSphere Application Server 5.0
But Can't install success
resone:
Base Installation completed Successfully
WebSphere 5.0 Agent ClassPath : C:/Sun/IdentityServer/j2ee_agents/lib/am_sdk.jar;C:/Sun/IdentityServer/j2ee_agents/lib/am_services.jar;C:/Sun/IdentityServer/j2ee_agents/lib/am_sso_provider.jar;C:/Sun/IdentityServer/j2ee_agents/lib/am_logging.jar;C:/Sun/IdentityServer/j2ee_agents/config/F__Program Files_WebSphere_AppServer_config_cells_tmbsp103_nodes_tmbsp103_servers_server1;C:/Sun/IdentityServer/j2ee_agents/locale
WebSphere 5.0 Agent Boot ClassPath : C:/Sun/IdentityServer/j2ee_agents/lib/jdk_logging.jar
WebSphere 5.0 Agent JVM options : -Damconfig=AMAgent -Dmax_conn_pool=10 -Dmin_conn_pool=1 -Dcom.iplanet.coreservices.configpath=C:/Sun/IdentityServer/j2ee_agents/config/F__Program Files_WebSphere_AppServer_config_cells_tmbsp103_nodes_tmbsp103_servers_server1/ums -Djava.util.logging.manager=com.sun.identity.log.LogManager -Djava.util.logging.config.file=C:/Sun/IdentityServer/j2ee_agents/config/F__Program Files_WebSphere_AppServer_config_cells_tmbsp103_nodes_tmbsp103_servers_server1/AMAgent.properties -Djava.protocol.handler.pkgs=com.ibm.net.ssl.internal.www.protocol -Dws.ext.dirs=C:/Sun/IdentityServer/j2ee_agents/lib
The server.policy file was configured successfully.
Global Security Settings Configured Successfully.
sas.client.props file Configuration FAILED.
soap.client.props file Configuration FAILED.
sas.client.props /soap.client.props two file how to Configuration ??

From your description, since the agent installs file with a different JRE, I would suspect it has something to do with the availability of JCE provider in the first JRE. By default, WebSphere's JRE is equipped with IBM JCE provider which is what the agent uses to encrypt the necessary
information. If this provider is not configured correctly it could result in the error that you are seeing. Please check the WebSphere installation and make sure that the JRE used by it has the necessary IBM JCE provider configured. The java.security file for this should contain something like:
security.provider.1=sun.security.provider.Sun
security.provider.2=com.ibm.crypto.provider.IBMJCE
security.provider.3=com.ibm.jsse.IBMJSSEProvider
security.provider.4=com.ibm.security.cert.IBMCertPath
security.provider.5=com.ibm.crypto.pkcs11.provider.IBMPKCS11
Also, make sure that when you are installing the agent you specify the Java Home as prompted by the agent to point to the location where this JRE is installed. Typically this is under WebSphere/AppServer/java directory. HTH, Jerry

Setup-Problem while installing AM Policy Agent 2.1 on Solaris 10

I'm new with AccessManager and try to get it working on Solaris 10 on a Sparc.
I'm using LDAP-Server, WEB-Server 6.1 and AccessManager from the software-paket: "Sun Java System Access Manager 6 2005Q1" .
While trying to install policy-agents on the Sparc (by starting setup program), I've got the message: "The installer ist intended for Solaris Operating System only".
The agent-software I'm trying to install is "Access Manager Policy Agent 2.1 for Sun Java System Web Server 6.1" From there I choosed "Solaris SPARC 8".
(so I've got the paket "S1WebServer_6[1].1_agent_2.1_sparc-sun-solaris2.8.tar.gz").
In my opinion, it must be correct. Ist there anything i'done wronge?
thanks, Paul

Even when there is no agent available for Solaris 10 now:
If you don't have any doubt to use an unsupported configuration, at
least the apache agent is installable.
You have to extract the packages "SUNWamapc" and "SUNWcom"
from the tar-archive and install it using pkgadd.
Then, you have to configure it manually ("include" in "httpd.conf",
"AMAgent.properties").
Maybe, it is possible to do something similiar with the agent for
SUN webserver.
Be aware that noone will guarantee that such unsupported
installations won't raise any problems.
Juergen

Policy Agent

hi all
i have installed policy agent for web server successfully. Afterthat is there any post configuration have to do? How to run the policy agent in web server?
please help me
Thanks in Advance

An Access Manager policy agent? Check out the appropriate forums here:
http://swforum.sun.com/jive/category.jspa?categoryID=15

Policy Agent Installation : Path to password file to identify the agent ???

Hi,
I am trying to install Policy Agent 2.2 on Sun App Server 9.1 which was installed via "Java EE5 SDK Update2" (java tools bundle) on Windows XP Pro.
In the installation process, I have reached a question to which I want to know the answer.
"Enter the path to a file that contains the password to be used for identifying the Agent."
Could someone pls tell me the exact name of the file to find in the server hierarchy?, whose path I can search for.
My AM is installed at location:
"D:\Sun\SDK\domains\domain1\applications\j2ee-modules\amserver"
Thanks in advance.
Rahul A Honrao

This is the way I solved it:
1. copy default pkgadd to pkgadd.orig
cp /usr/sbin/pkgadd /usr/sbin/pkgadd.orig
2. create new pkgadd
cat > /usr/sbin/pkgadd
#!/bin/sh
/usr/sbin/pkgadd.orig -G $*
^D
3. Make /usr/sbin/pkgadd executable
chmod 755 /usr/sbin/pkgadd
Now install the agent.
HTH

SJWS 6.1 Policy Agent getting roles

Hi,
I've installed Policy Agent 2.2 in SJWS 6.1 and authentication is working properly. I've configured nativeRealm to get the user's principal from a web application (a servlet).
In this scenarios the user has two roles (it's working on WebLogic 8.1), but the Agent doesn't receive this roles from server, and in servlet the call to the function isUserInRoles doesn't work.
Anybody knows if is it possible working with roles, using J2EE security in servlets, with Sun Java WebServer 6.1 using Policy Agent 2.2 with Access Manager?
Thanks a lot
David

Have you also tried not to set JAVAHOME at all as mentioned in the docs?
-Bernhard

Problem: Protect Sun Web Proxy Server 4.0.5 with Policy Agent 2.2

We are trying to protect the Sun Web proxy Server 4.0.5 with policy agent 2.2 on solaris 10 machine.
We are using Access Manager 7.1 along with directory server 6.2
We are trying to protect the web proxy console url http://domain.example.com with that policy agent so that when we hit web proxy console url
it should through us access manager login page ie http://abc.com/amserver.
How can we achieve this.What all changes required in the AMAgent.properties file.Please suggest.

Hi subho,
problem is fixed. i have unistalled the policy agent and reinstalled it again. the problem i found is we didnt stop the webproxy instance when installing policy agent. Thanks for the reply

Policy Agent 2.2 with Tomcat connector (isapi_redirect.dll)?

Dear All,
We have installed Policy agent 2.2 for IIS6 to enable SSO with SUN Access Manager 7.1. Policy agent 2.2 was installed in IIS6 as wild card application mapping extension.
Our IIS6 also contains Apache tomcat connector (isapi_redirect.dll) as it needs to front JBOSS application server.
When we access protected resource Policy agent presents login screen. With the correct login details, policy agent authenticates successfully with SAM 7.1 and creates SSO token, which is good. But policyagent creates "goto" URL as /tomcat/isapi_redirect.dll rather than the original resource that user asked for as below?
2010-12-23 18:57:57.397 Info 3220:1e5b0d0 PolicyAgent: do_redirect(): redirect_header = Location: http://am-server.com:8080/amserver/login?goto=http%3A%2F%2Ftest-server%3A80%2Ftomcat%2Fisapi_redirect.dll
Any ideas on how to configure Policy agent for IIS6 when it has isapi_redirect.dll already installed on it.
Thanks,
Surya

Hello Surya
Did you find a solution for this issue? How did you solve it?
Thank you
Prashanth
Edited by: user8605028 on Jun 15, 2011 1:24 PM

Sun One Identity Server Policy Agent 2.0 for IIS 5.0

Hi,
I try to use Sun Indentity Server with IIS, so I installed policy agent 2.0 for IIS 5.0. my operating system is Windows 2000 professional. I can see the ISAPI fiiter is loaded, but when I try to test the installation by access a testing page, like http://localhost/test.asp, I can not go anywhere, the sun identity server log in page is not loaded. I checked the debug log file, there are just two warning message:
2003-02-12 11:11:52.314 Warning 1316:00A548E8 PolicyAgent: Invalid URL for property (com.sun.am.policy.agents.accessDeniedURL) specified
2003-02-12 11:11:52.798 Warning 1316:00A548E8 PolicyAgent: FqdnHandler::FqdnHandler() No value specified for fqdnMap.
Could someone help me out here? Any suggestion will be appreciated.
Thanks,
Harold Chen

Well, it's in the Agent's installation guide, section "Read me first", "Setting Fully Qualified Domain Name". :)

Error installing Policy Agent

Similar Messages

Maybe you are looking for