New Ranks & Badges For The Community!
Notice something different? The ranks and associated badges have gone "Star Fleet". See what they all mean HERE
Highlighted
Captain
Captain
1815 views

Installing IDM 4.5 - Error installing NMAS Login Methods


Has anyone ran into an issue with NMAS Login Methods erroring on install
of IDM 4.5 Standard? I have listed the error, and my current setup
below.

OS: RHEL 7.1
*EDIRECTORY:* 8.8.8 PATCH 7 CURRENTLY INSTALLED ON THE SERVER
*IDM INSTALLER:* 4.5 STANDARD LINUX
*ISSUE:* IDM INSTALLED SUCCESSFULLY BUT WITH ERRORS. ERRORS FROM THE
INSTALL LOG BELOW...

ERROR:
== Install NMAS login method - Challenge Response ==

Install NMAS Login Methods
Status: ERROR
Additional Notes: ERROR - Failed to Install
NMAS Login Methods

Custom Action: com.novell.idm.install.InstallNMASObjects
Status: ERROR
Additional Notes: ERROR - class
com.novell.idm.install.InstallNMASObjects NonfatalInstallException
Failed to Install NMAS Login Methods


--
stampsr
------------------------------------------------------------------------
stampsr's Profile: https://forums.netiq.com/member.php?userid=7353
View this thread: https://forums.netiq.com/showthread.php?t=55593

Labels (1)
0 Likes
8 Replies
Highlighted
Absent Member.
Absent Member.

It's a "Non Fatal" exception....you might want to check your directory (NMAS Methods in iManager or cn=Authorized Login Methods,cn=Security in LDAP Browser) to see if the Challenge Response method exists (which is what failed)....also check for the SAML Assertion method as this is required by the OSP.

If it doesn't exist, you can install it manually with the nmasinst command line and the bundle (incl. config.txt) for the method(s)...

USAGE:
nmasinst -i <adminDN> <treeName> [-h hostname[:port]] [-w pwd]
nmasinst -addmethod <adminDN> <treeName> <configFile> [-h hostname[:port]] [-w pwd] [-checkversion]

Visit my Website for links to Cool Solution articles.
0 Likes
Highlighted
Captain
Captain


The Challenge Response object under cn=Security does exist. I currently
have IDM 4.0.2 installed in this environment. I went to check their
install logs, and they show NMAS Login Method as being successful. No
errors. This server in particular is a fresh build, not an upgrade on
top of the current IDM 4.0.2.


--
stampsr
------------------------------------------------------------------------
stampsr's Profile: https://forums.netiq.com/member.php?userid=7353
View this thread: https://forums.netiq.com/showthread.php?t=55593

0 Likes
Highlighted
Absent Member.
Absent Member.

Does your new server have NCP access (524) to the eDirectory?

I do remember a while back that this was a requirement to install NMAS methods....not sure if the installer can do it all over LDAP(s) now or not...

Visit my Website for links to Cool Solution articles.
0 Likes
Highlighted
Knowledge Partner Knowledge Partner
Knowledge Partner


stampsr;266257 Wrote:
> I went to check their install logs, and they show NMAS Login Method as
> being successful. No errors.

It can be good enouph! 🙂


--
If you find this post helpful, please show your appreciation by clicking
on the star below :cool:
------------------------------------------------------------------------
al_b's Profile: https://forums.netiq.com/member.php?userid=209
View this thread: https://forums.netiq.com/showthread.php?t=55593

0 Likes
Highlighted
Knowledge Partner Knowledge Partner
Knowledge Partner


If you want to check installed NMAS version, you can try

rpm -qa | grep novell-nmas


--
If you find this post helpful, please show your appreciation by clicking
on the star below :cool:
------------------------------------------------------------------------
al_b's Profile: https://forums.netiq.com/member.php?userid=209
View this thread: https://forums.netiq.com/showthread.php?t=55593

0 Likes
Highlighted
Knowledge Partner Knowledge Partner
Knowledge Partner

On Tue, 22 Mar 2016 21:24:01 +0000, stampsr wrote:

> The Challenge Response object under cn=Security does exist. I currently
> have IDM 4.0.2 installed in this environment. I went to check their
> install logs, and they show NMAS Login Method as being successful. No
> errors. This server in particular is a fresh build, not an upgrade on
> top of the current IDM 4.0.2.


The NMAS methods are Tree wide, not server specific. So if your IDM402
server installed the method, it makes some sense that your new install of
IDM45 on a different server would error trying to install a method that's
already installed.


--
--------------------------------------------------------------------------
David Gersic dgersic_@_niu.edu
Knowledge Partner http://forums.microfocus.com

Please post questions in the forums. No support provided via email.
If you find this post helpful, please click on the star below.
0 Likes
Highlighted
Absent Member.
Absent Member.

Just a quick note I ran into this error, and it came back to bite me with UserApp. The UserApp logins were failing because the SAML Assertion did not exists under the TREE-NAME => Security => Authorized Login Methods => SAML Assertion. The environment was exactly as the OP had described, RHEL servers and was upgrading from IDM v4.0.2. For me I got around the problem by re-installing IDM v4.5.

Some details to explain my problem is described in the Cool Solutions document, Troubleshooting OSP in IDM 4.5 – Part 2 by geoffc.
0 Likes
Highlighted
Knowledge Partner Knowledge Partner
Knowledge Partner

On 6/22/2016 11:46 AM, rsimonsatidentropy wrote:
>
> Just a quick note I ran into this error, and it came back to bite me
> with UserApp. The UserApp logins were failing because the SAML Assertion
> did not exists under the TREE-NAME => Security => Authorized Login
> Methods => SAML Assertion. The environment was exactly as the OP had
> described, RHEL servers and was upgrading from IDM v4.0.2. For me I got
> around the problem by re-installing IDM v4.5.
>
> Some details to explain my problem is described in the Cool Solutions
> document, 'Troubleshooting OSP in IDM 4.5 � Part 2'
> (https://www.netiq.com/communities/cool-solutions/troubleshooting-osp-idm-4-5-part-2/)
> by geoffc.


Glad to see that article helped, send fish. (I like herring, and kosher
herring is very available commercially in most places. Schmaltz
preferred).

This is a poorly documented element of the product, which once you
understand is easy. But if you did not even know it exists is very hard
to see what is going wrong.



0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.