Trouble getting iManager to run

[VinceF]

I'm having problems getting iManager to run. I've gone thru a number of TIDs and have found that SSL is not configured properly.

The public key expired so using PKIDiag I was able to fix that, still when I try to run HTTPSTK /SSL or SSLALWAYS it returns a Module Initialization Error and does not load.

TCPCON does not show SSL bound to any ports.

I've re-installed iManager twice and all the config files look good, but SSL is definitely not running.

I am on SP3 for NetWare 6. NDS id 8.7 and PKI is 2.2.3. I also have the latest NICI installed.

Thanks,

Vince

 

[Provogeek]

HTTPSTK is not an iManager module.

Are you actually talking about Remote Manager?

In TCPCON, check for ports 8008 and 8009, those are the remote manager ports. iManager runs on the Apache web server with the Tomcat java servlet and will use port 2200. You start it up by using the NVXADMUP command, bring it down using the NVXADMDN command.



=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
Brent Schmidt Certified nut case
Senior Network Engineer

http://www.kiscc.com

 

[VinceF]

Thank You Provogeek,

Let me clarify. I am indeed talking about iManager. iManager uses SSL, and that must be enabled. TCPCON shows that SSL on 443 is not enabled. Trying to enable it using httpopenport returns the error SSL is disabled in HTTPSTK and the /SSL switch can not be used. So I went to HHTPSTK /SSL and hence the error I posted.

I can access the server with remote manager using ports 8008, and 8009 as required. I can not access the server using port 2200 (secure)

Thanks again

 

[Provogeek]

If you can access Remote Manager via port 8009, then your SSL is working.

Check your SYS\Apache\conf\adminserv.conf file. Check the # Start Apache Services Port Configuration section; it should look like;

# Start Apache Services Port Configuration
Port 80
Listen 10.0.0.10:80
<IfModule mod_tls.c>
    SecureListen 10.0.0.10:443 &quot;SSL CertificateDNS&quot;
</IfModule>
# End Apache Services Port Configuration

I have seen in some cases when you install the NetWare Enterprise Web Server the ports get set to something like 50080 and 500443.

Also check the section # NetWare Web Manager config starts It should look like;

# NetWare Web Manager config starts

Listen 10.0.0.10:2211
<IfModule mod_tls.c>
    SecureListen 10.0.0.10:2200 &quot;SSL CertificateDNS&quot;
#   Listen 10.0.0.10:2200

I have also seen this get the ports configured to 52200 and 52211 when the Enterprise Web server is installed.

If you did not install the Enterprise web server, still check these sections in your adminserv.conf file.

Also, double check using PKIDIAG in diag mode to ensure your SSL certificates are indead good. You can, if you want, delete the certificates and run PKI diag to recreate them. Besure the names are exact as they are listed in the adminserv.conf file.

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
Brent Schmidt Certified nut case
Senior Network Engineer

http://www.kiscc.com

 

[terry712]

in your autoexec

what's the httpstk line
should be something like httpstk /ssl "ip certificate"
does this load or do you get unresolved

this and portal should be right at bottom in order to allow nile time to load

it must load before portal as well or you cant have ssl

 

[VinceF]

Thank You both Provogeek and Terry712, your tips were very helpful. I have been thru several TIDs and conf files without any luck. Both the apache conf and autoexec.ncf have the correct entries, but maybe not.

They both show SSL CertificateDNS and SSL CertificateIP, but in NDS they are listed SSL CertificateDNS-servername.OU.O nad SSL CertificateIP-servername.ou.o.

I'm now wondering if this is the issue, that they should have the servername and ou and o just like it is in NDS.

I will give this a try in the morning to see how it works out.

Any other suggestions?

Thanks

 

[VinceF]

Well, I didn't have to change the name of the SSL Certificates. It looks like SSL is running fine.

I still can not access iManager...I am at a loss. All the config files look good, and the web server launches with out any errors. I can not even access the pages locally. I think there is a permissions issue now, probably in the nwapache.config file.

Any suggestions would be appreciated.