|
Question : Problem fixing SSL Certificates in NW 6.5
|
|
NW 6.5 server, SP8
In an attempt to install more user licenses on this server, we were led to TID 7000769, that states the following:
--------------------------------
To install a new unlimited license into a tree where stratified NetWare licenses already exist, there are a couple steps to follow:
If you have only one version of the NetWare operating system in your tree (i.e. NetWare 6.5 servers only), you will need to first remove all stratified licenses, this includes both user and server licenses:
1) Load iManager (https://ip address/nps/servlet/webacc).
2) Select Licenses
3) Select Delete a License
4) Browse for a license and delete it. All previously installed licenses, both user and server, need to be removed. The new unlimited licenses cannot coexist in the tree with stratified licenses.
If you have a mixed tree, you will need to remove all stratified licenses for whichever operating system your additional user licenses entitle you to. For example, let's say you have several NetWare 5.1 servers with licenses that service 250 users, a couple NetWare 6.0 servers with licenses for 100 users, and several NetWare 6.5 servers with 500 user licenses. You just ordered and received a quantity of 1-User licenses for NW6.5. You received a certificate for those users and an unlimited NW6.5 license. You do not need to worry about the NetWare 5.1 or 6.0 licenses. You will, however, need to remove all licenses for NetWare 6.5 before the unlimited licenses will work properly.
Hint: If you have a large number of licenses to delete, you might want to use the old NWADMIN32.EXE to delete them, as it is much quicker than iManager (which requires that you search for, and delete, one license at a time). However, it is recommended that you do all licenses installations from within iManager.
Now you need to install the new licenses:
1) Load iManager (https://ip address/nps/servlet/webacc).
2) Select Licenses
3) Select Install a License
4) Click Browse and search for the license file (*.NLF)
5) Select Next
6) Check the box next to the license you want to install (UNLIMITED UNIT NetWare 6 Server LICENSE - SN:xxxxxxxx) and hit Next
7) Then you must browse for the location in the tree where you want the license installed
8) Click Install
You should see a message stating the installation was successful. In order for the new license to be consumed, the server(s) will need to be rebooted.
--------------------------------
First problem, the server never had iManager installed. So I proceeded to install iManager, Apache, and Tomcat, and everything else required to run iManager. This was done successfully. However, once I try to run AP2WEBUP, it reports "" The logger screen reports:
--------------------------------
Loading module APACHE2.NLM
Apache Web Server 2.0.63
Version 2.00.63 April 25, 2008
Copyright 2006 The Apache Software Foundation. Licensed under the Apache License Version 2.0.
Auto-Loading Module APRLIB.NLM
Auto-loading module APRLIB.NLM
Apache Portability Runtime Library 0.9.17
Version 0.09.17 April 25, 2008
Licensed under the Apache License Version 2.0
Module APRLIB.NLM load status OK
Module APACHE2.NLM load status OK
Use of key SSL CertificateDNS failed
Use of key SSL CERTIFICATEIP failed
--------------------------------
I did some research that mentioned I needed to run PKIDiag. I downloaded the latest version, switched to fix mode, and this happens:
---------------------------------------------------------------------------
PKIDiag 2.78 -- (compiled Feb 01 2007 17:06:17).
(Check the end of the log for the last repair results)
Current Time: Wed Aug 19 15:11:38 2009
User logged-in as: admin.OU.
Fixing mode
Rename and create mode
Always Re-key
--> Server Name = '{ServerName}'
---------------------------------------------------------------------------
Step 1 Verifying the Server's link to the SAS Service Object.
Server '{ServerName}.OU' points to SAS Service object 'SAS Service - {ServerName}.OU'
Step 1 succeeded.
Step 2 Verifying the SAS Service Object
SAS Service object 'SAS Service - {ServerName}.OU' is backlinked to server '{ServerName}.OU'.
Step 2 succeeded.
Step 3 Verifying the links to the KMOs
Reading the links for SAS Service object 'SAS Service - {ServerName}.OU'.
--> No KMOs are linked to Service object 'SAS Service - {ServerName}.OU'.
Step 3 succeeded.
Step 4 Verifying the KMOs
Step 4 succeeded.
Step 5 Re-verifying the links to the KMOs
Reading the links for SAS Service object 'SAS Service - {ServerName}.OU'.
--> No KMOs are linked to Service object 'SAS Service - {ServerName}.OU'.
Step 5 succeeded.
Step 6 Creating IP and DNS Certificates if necessary.
--> Number of Server IP addresses = 2
--> The default IP address is: 10.0.0.2
PROBLEM: A SSL CertificateIP does not exist
FIXING: Creating SSL CertificateIP (10.0.0.2)
Pausing for 5 seconds because of error 49695
ERROR 49695 creating SSL CertificateIP.
--> Number of Server DNS names for the IP address 10.0.0.2 = 1
--> The server's default DNS name is:
ns1.aisn.net
PROBLEM: A SSL CertificateDNS does not exist
FIXING: Creating SSL CertificateDNS (ns1.aisn.net)
Pausing for 5 seconds because of error 49695
ERROR 49695 creating SSL CertificateDNS.
Step 6 failed 49695.
Note: Occasionally multiple problems will be solved with a single fix.
Fixable problems found: 2
Problems fixed: 0
Un-fixable problems found: 0
--------------------------------
Now I am at a dead end. Any help will be appreciated.
|
Answer : Problem fixing SSL Certificates in NW 6.5
|
|
You can add and delete licenses with Nwadmin32 (sys:\public\win32\nwadmn32.exe)
Problems with certificates can often be repaired by reinstalling Certificate server. On the server console, select install from the GUI start menu, and make sure your NW65 CD is mounted.
|
|
|
|
|
