Symantec IGA

Hi IDM Guru’s - 

  I am trying to install CA IDM14.1 (also tried with 14.0) Provisioning Directory in RHEL 7.4 on AWS ec2 instance and running into the following error. It seems that the installer is not able to create .db file for impd-main.

Did anyone tried installing on RHEL on AWS ec2 instance? Can I get some pointers.

Installed all the libraries

• glibc.i686, libXext.i686, libXtst.i686, ncurses-devel.i686, ksh

(Mar 3, 2018 12:27:49 AM), Install, com.ibm.wizard.platform.linux.LinuxProductServiceImpl, msg1, installing ETA Install Repository Setup (installRepositoryAction)
(Mar 3, 2018 12:27:49 AM), Install, com.ca.etrust.install.adminrepository.product.ETAInstallRepositorySetup, msg1, ETAInstallRepositorySetup:install() - begin
(Mar 3, 2018 12:27:49 AM), Install, com.ca.etrust.install.adminrepository.product.ETAInstallRepositorySetup, msg1, Installing Provisioning Directory Setup...
(Mar 3, 2018 12:27:49 AM), Install, com.ca.etrust.install.adminrepository.product.ETAInstallRepositorySetup, msg1, Extracting Provisioning Directory setup files...
(Mar 3, 2018 12:27:49 AM), Install, com.ca.etrust.install.adminrepository.product.ETAInstallRepositorySetup, msg1, ETAInstallRepositorySetup:install() - end
(Mar 3, 2018 12:27:49 AM), Install, com.ibm.wizard.platform.linux.LinuxProductServiceImpl, msg1, installing ETA Upgrade Repository Schema (upgradeRepositorySchemaAction)
(Mar 3, 2018 12:27:49 AM), Install, com.ca.etrust.install.adminrepository.product.ETAUpgradeRepositorySchema, msg1, ETAUpgradeRepositorySchema:install() - begin
(Mar 3, 2018 12:27:49 AM), Install, com.ca.etrust.install.adminrepository.product.ETAUpgradeRepositorySchema, msg1, Upgrading Provisioning Directory Schema...
(Mar 3, 2018 12:27:49 AM), Install, com.ca.etrust.install.adminrepository.product.ETAUpgradeRepositorySchema, msg1, Extracting Provisioning Directory schema files...
(Mar 3, 2018 12:27:49 AM), Install, com.ca.etrust.install.InstallUtils, msg1, Is OOTB Certificate ? : false
(Mar 3, 2018 12:27:49 AM), Install, com.ca.etrust.install.InstallUtils, msg1, ETAUpgradeRepositorySchema: Is OOTB certificate : false
(Mar 3, 2018 12:27:49 AM), Install, com.ca.etrust.install.adminrepository.product.ETAUpgradeRepositorySchema, msg1, ETAUpgradeRepositorySchema:install() - end
(Mar 3, 2018 12:27:49 AM), Install, com.ibm.wizard.platform.linux.LinuxProductServiceImpl, msg1, installing ETA Configure Repository (etaconfigureRepositoryAction)
(Mar 3, 2018 12:27:49 AM), Install, com.ca.etrust.install.adminrepository.product.ETAConfigureRepository, msg1, ETAConfigureRepository:install() - begin
(Mar 3, 2018 12:27:50 AM), Install, com.ca.etrust.install.adminrepository.InstallETDUtils, msg1, Found DSA(s): ip-172-31-39-84-impd-main,ip-172-31-39-84-impd-co,ip-172-31-39-84-impd-inc,ip-172-31-39-84-impd-notify
(Mar 3, 2018 12:27:50 AM), Install, com.ca.etrust.install.InstallUtils, msg1, Delete: no such file or directory: /opt/CA/Directory/dxserver/config/servers/impd-main.dxi.indexing
(Mar 3, 2018 12:27:50 AM), Install, com.ca.etrust.install.InstallUtils, msg1, Delete: no such file or directory: /opt/CA/Directory/dxserver/config/servers/impd-co.dxi.indexing
(Mar 3, 2018 12:27:50 AM), Install, com.ca.etrust.install.InstallUtils, msg1, Delete: no such file or directory: /opt/CA/Directory/dxserver/config/servers/impd-inc.dxi.indexing
(Mar 3, 2018 12:27:50 AM), Install, com.ca.etrust.install.InstallUtils, msg1, Delete: no such file or directory: /opt/CA/Directory/dxserver/config/servers/impd-notify.dxi.indexing
(Mar 3, 2018 12:27:50 AM), Install, com.ca.etrust.install.InstallUtils, msg1, Creating Provisioning Directory Datastore... ip-172-31-39-84-impd-main
(Mar 3, 2018 12:27:50 AM), Install, com.ca.etrust.install.InstallUtils, msg1, Creating Provisioning Directory Datastore... ip-172-31-39-84-impd-main [Start Service]
(Mar 3, 2018 12:27:51 AM), Install, com.ca.etrust.install.InstallUtils, msg1, ---- BEGIN LOG FILES ----
(Mar 3, 2018 12:27:51 AM), Install, com.ca.etrust.install.InstallUtils, msg1, /opt/CA/Directory/dxserver/logs/ip-172-31-39-84-impd-main_alarm.log: [64] 20180303.002751.613 DSA_E1280 Error in initialization files
(Mar 3, 2018 12:27:51 AM), Install, com.ca.etrust.install.InstallUtils, msg1, /opt/CA/Directory/dxserver/logs/ip-172-31-39-84-impd-main_alarm.log: [64] 20180303.002751.613 DSA_I1240 DSA shutting down
(Mar 3, 2018 12:27:51 AM), Install, com.ca.etrust.install.InstallUtils, msg1, /opt/CA/Directory/dxserver/logs/ip-172-31-39-84-impd-main_trace.log: ? [64] 20180303.002751.475 WARN : 'clear schema;' has been disabled as it is not required
(Mar 3, 2018 12:27:51 AM), Install, com.ca.etrust.install.InstallUtils, msg1, /opt/CA/Directory/dxserver/logs/ip-172-31-39-84-impd-main_trace.log: ? [64] 20180303.002751.610 WARN : max-local-ops has no effect
(Mar 3, 2018 12:27:51 AM), Install, com.ca.etrust.install.InstallUtils, msg1, /opt/CA/Directory/dxserver/logs/ip-172-31-39-84-impd-main_trace.log: ? [64] 20180303.002751.613 WARN : Loading cache
(Mar 3, 2018 12:27:51 AM), Install, com.ca.etrust.install.InstallUtils, msg1, /opt/CA/Directory/dxserver/logs/ip-172-31-39-84-impd-main_trace.log: ? [64] 20180303.002751.613 WARN : Cannot find file /opt/CA/Directory/dxserver/data/ip-172-31-39-84-impd-main/ip-172-31-39-84-impd-main.db in /opt/CA/Directory/dxserver
(Mar 3, 2018 12:27:51 AM), Install, com.ca.etrust.install.InstallUtils, msg1, /opt/CA/Directory/dxserver/logs/ip-172-31-39-84-impd-main_trace.log: ? [64] 20180303.002751.613 ERROR : Cannot open database file '/opt/CA/Directory/dxserver/data/ip-172-31-39-84-impd-main/ip-172-31-39-84-impd-main.db' - exists?
(Mar 3, 2018 12:27:51 AM), Install, com.ca.etrust.install.InstallUtils, msg1, /opt/CA/Directory/dxserver/logs/ip-172-31-39-84-impd-main_trace.log: ? [64] 20180303.002751.613 WARN : Cannot memory map file
(Mar 3, 2018 12:27:51 AM), Install, com.ca.etrust.install.InstallUtils, msg1, /opt/CA/Directory/dxserver/logs/ip-172-31-39-84-impd-main_trace.log: * [64] 20180303.002751.613 DSA_E1280 Error in initialization files
(Mar 3, 2018 12:27:51 AM), Install, com.ca.etrust.install.InstallUtils, msg1, /opt/CA/Directory/dxserver/logs/ip-172-31-39-84-impd-main_trace.log: * [64] 20180303.002751.613 DSA_I1240 DSA shutting down
(Mar 3, 2018 12:27:51 AM), Install, com.ca.etrust.install.InstallUtils, msg1, /opt/CA/Directory/dxserver/logs/ip-172-31-39-84-impd-main_trace.log: ? [64] 20180303.002751.614 WARN : Disabling cache prior to exit
(Mar 3, 2018 12:27:51 AM), Install, com.ca.etrust.install.InstallUtils, msg1, /opt/CA/Directory/dxserver/logs/ip-172-31-39-84-impd-main_warn_20180303.log: [64] 20180303.002751.475 WARN : 'clear schema;' has been disabled as it is not required
(Mar 3, 2018 12:27:51 AM), Install, com.ca.etrust.install.InstallUtils, msg1, /opt/CA/Directory/dxserver/logs/ip-172-31-39-84-impd-main_warn_20180303.log: [64] 20180303.002751.610 WARN : max-local-ops has no effect
(Mar 3, 2018 12:27:51 AM), Install, com.ca.etrust.install.InstallUtils, msg1, /opt/CA/Directory/dxserver/logs/ip-172-31-39-84-impd-main_warn_20180303.log: [64] 20180303.002751.613 WARN : Loading cache
(Mar 3, 2018 12:27:51 AM), Install, com.ca.etrust.install.InstallUtils, msg1, /opt/CA/Directory/dxserver/logs/ip-172-31-39-84-impd-main_warn_20180303.log: [64] 20180303.002751.613 WARN : Cannot find file /opt/CA/Directory/dxserver/data/ip-172-31-39-84-impd-main/ip-172-31-39-84-impd-main.db in /opt/CA/Directory/dxserver
(Mar 3, 2018 12:27:51 AM), Install, com.ca.etrust.install.InstallUtils, msg1, /opt/CA/Directory/dxserver/logs/ip-172-31-39-84-impd-main_warn_20180303.log: [64] 20180303.002751.613 ERROR : Cannot open database file '/opt/CA/Directory/dxserver/data/ip-172-31-39-84-impd-main/ip-172-31-39-84-impd-main.db' - exists?
(Mar 3, 2018 12:27:51 AM), Install, com.ca.etrust.install.InstallUtils, msg1, /opt/CA/Directory/dxserver/logs/ip-172-31-39-84-impd-main_warn_20180303.log: [64] 20180303.002751.613 WARN : Cannot memory map file
(Mar 3, 2018 12:27:51 AM), Install, com.ca.etrust.install.InstallUtils, msg1, /opt/CA/Directory/dxserver/logs/ip-172-31-39-84-impd-main_warn_20180303.log: [64] 20180303.002751.614 WARN : Disabling cache prior to exit
(Mar 3, 2018 12:27:51 AM), Install, com.ca.etrust.install.InstallUtils, msg1, ---- END LOG FILES ----
(Mar 3, 2018 12:27:51 AM), Install, com.ca.etrust.install.adminrepository.product.ETAConfigureRepository, err, An error occurred and product installation failed. Look at the log file /tmp/imps_directory_install.log for details.
(Mar 3, 2018 12:27:51 AM), Install, com.ca.etrust.install.adminrepository.product.ETAConfigureRepository, err, ProductException: (error code = 200; message="Java error"; exception = [ProductException: (error code = -1; message="Failed to start DSA 'ip-172-31-39-84-impd-main'")])
STACK_TRACE: 13
ProductException: (error code = 200; message="Java error"; exception = [ProductException: (error code = -1; message="Failed to start DSA 'ip-172-31-39-84-impd-main'")])
at com.ca.etrust.install.adminrepository.product.ETAConfigureRepository.install(ETAConfigureRepository.java:147)
at com.installshield.product.service.product.PureJavaProductServiceImpl.installProductAction(PureJavaProductServiceImpl.java:1916)
at com.ibm.wizard.platform.linux.LinuxProductServiceImpl.installProductAction(LinuxProductServiceImpl.java:552)
at com.installshield.product.service.product.PureJavaProductServiceImpl$InstallProduct.getResultForProductAction(PureJavaProductServiceImpl.java:5195)
at com.installshield.product.service.product.InstallableObjectVisitor.visitComponent(InstallableObjectVisitor.java:369)
at com.installshield.product.service.product.InstallableObjectVisitor.visitInstallableComponents(InstallableObjectVisitor.java:333)
at com.installshield.product.service.product.InstallableObjectVisitor.visitProductBeans(InstallableObjectVisitor.java:133)
at com.installshield.product.service.product.PureJavaProductServiceImpl$InstallProduct.install(PureJavaProductServiceImpl.java:4563)
at com.installshield.product.service.product.PureJavaProductServiceImpl$Installer.execute(PureJavaProductServiceImpl.java:3758)
at com.installshield.wizard.service.AsynchronousOperation.run(AsynchronousOperation.java:41)
at java.lang.Thread.run(Thread.java:745)

Thanks

DP

Hi Durga,

For running Identity Suite on AWS, we highly recommend using the CA Identity Suite Virtual Appliance (vApp) which officially supports AWS-deployments. We can provide you access to the AMI.

This is much easier than running the product installers, and allows spinning up a production-grade Identity Suite system in <30 minutes.

As for the specific issue you are having, it looks to me like the CA Provisioning Directory installer cannot start the Provisioning Directory DSA's, and the underlying reason should be seen in the CA Directory log files (common reasons include bad name resolution and corrupted/missing installation of the capki libraries).

I recommend to check whether the CA Directory installation is considered functional, by creating a temporary DSA and attempting to start it, for example:

dxnewdsa -t data -s 50 test-dsa 1389 dc=security,dc=com

dxserver -d start test-dsa

Please reach out to me directly for access to the vApp AMI, let me know your AWS account number, the desired AWS region and product version (14.0 GA, 14.1 GA or 14.2 pre-release). We can provide you access to multiple regions and versions, if needed.

Yoav Drori

Thanks for your inputs Yoav for vApp, there are various reasons behind customer opting out of vApp.

BTW, able to resolve the issue by installing C-Shell which was not available in AWS provided RHEL Ec2 instance. Without C-shell, installer was not able to create .db file and eventually failed to initialize DSA.