I think there is a bug in Identity Console 1.8 installer (Linux, non-docker). It costed me several hours to figure that out, so maybe this is useful for someone else.
I installed on OES 24.3, without OSP integration, with CA certificate import, with and without "generate the Server Certificate
". I always saw this at the end of the installation:
Error opening file: /etc/opt/novell/eDirAPI/cert/keys.pfx err = -1 [ERROR] Wrong server certificate password. Exiting.
I finally found that "Wrong server certificate password
" is not true, while "Error opening file
" is true. This is because the installer runs as root, but parts of the process and Identity Console itself are running as user "nds".
Workaround: create /etc/opt/novell/eDirAPI/cert/keys.pfx
with owner nds before running the installer.
x:/ins/IdentityConsole_180_Linux # md /etc/opt/novell/eDirAPI/cert/ x:/ins/IdentityConsole_180_Linux # cp /root/keys.pfx /etc/opt/novell/eDirAPI/cert/keys.pfx x:/ins/IdentityConsole_180_Linux # chown -R nds:nds /etc/opt/novell/eDirAPI/ x:/ins/IdentityConsole_180_Linux # ll /etc/opt/novell/eDirAPI/cert/ total 4 -rw------- 1 nds nds 4018 Sep 6 11:23 keys.pfx x:/ins/IdentityConsole_180_Linux # ./identityconsole_install .. [INFO] Identity Console 1.8.0.0000 installed Successfully. [INFO] Identity Console can be accessed at https://x....:9000/identityconsole/#/ and logs can be found at identityconsole_install.log