Common Proxy CASA Repair Tool

0 Likes
Overview:
A tool to troubleshoot and fix the system created CASA key: common-proxy-casa

Symptom:
Can not install a product because the oes common proxy user fails to authenticate.
The oes common proxy user's password was set/changed in iManager and now services dependent on the proxy user fail to start.
The oes common proxy user's password was set/changed in iManager and the CASA key needs to be updated.
Starting Novell-DNS reports "Unable to login Error code:-223"

Details:
With this script you will be able to validate the password stored in CASA for the oes common proxy user is the same password in the directory.

You will have the opportunity to set the password for the oes common proxy user in iManager, then update the common-proxy-casa CASA key

The script will:

  • determine if the proxy user stored in the common-proxy-casa CASA key is the same listed in the /etc/sysconfig/novell/oes-ldap

  • display the name of the common proxy user

  • validate the password stored in CASA for the oes common proxy user is the same password in the directory

  • allow you to set a new password for the oes common proxy user with iManager and then update the common-proxy-casa CASA key

  • allow you to set a random password for the oes common proxy user and then update the common-proxy-casa CASA key


If the user is not listed in the /etc/opt/novell/proxymgmt/proxy_users.conf a random password can not be set, so a prompt to add the oes common proxy user to the proxy_users.conf will be displayed.  Choose yes and the proxy_users.conf will be updated and the random password set.

Install:
Download novell_common_proxy_casa_repair-1.0.0-0.noarch.rpm
Install the rpm:
novell_common_proxy_casa_repair-1.0.0-0.noarch.rpm

Usage:
To run the tool type: novell_common_proxy_casa_repair

Example of fixing the CASA Credentials:
The Proxy user is displayed and the credentials checked.  In this example the password is incorrect.

casa_repair1

Choosing yes to set a new password with iManager will pause the script to allow you time to set a new password in iManager.

casa_repair2Once the password has been set press the Enter key to continue and enter the new password at the prompt
The CASA key will be updated and validated with some delays to allow for the password in eDirectory to sync.

casa_repair3

Depending on eDirectory sync more time might need to be allowed. If the password check returns as not good, run the script 5 minutes later to validate the password again.

casa_repair4

Then set a random password if desired.
If a random password is set, the random password is validated to ensure the oes proxy user's password and the common-proxy-casa CASA key are insync.

casa_repair5

This script is meant to fix the common-proxy-casa CASA key and not other CASA keys. If the server is running a service that is using the oes common proxy user they might need to be updated.

Labels:

How To-Best Practice
Collateral
Comment List
Related
Recommended