Installing IDM 4.5 - Error installing NMAS Login Methods

[rs_0]

Has anyone ran into an issue with NMAS Login Methods erroring on install
of IDM 4.5 Standard? I have listed the error, and my current setup
below.

OS: RHEL 7.1
*EDIRECTORY:* 8.8.8 PATCH 7 CURRENTLY INSTALLED ON THE SERVER
*IDM INSTALLER:* 4.5 STANDARD LINUX
*ISSUE:* IDM INSTALLED SUCCESSFULLY BUT WITH ERRORS. ERRORS FROM THE
INSTALL LOG BELOW...

ERROR:
== Install NMAS login method - Challenge Response ==

Install NMAS Login Methods
Status: ERROR
Additional Notes: ERROR - Failed to Install
NMAS Login Methods

Custom Action: com.novell.idm.install.InstallNMASObjects
Status: ERROR
Additional Notes: ERROR - class
com.novell.idm.install.InstallNMASObjects NonfatalInstallException
Failed to Install NMAS Login Methods


--
stampsr
------------------------------------------------------------------------
stampsr's Profile: https://forums.netiq.com/member.php?userid=7353
View this thread: https://forums.netiq.com/showthread.php?t=55593

[ScorpionSting]

It's a "Non Fatal" exception....you might want to check your directory (NMAS Methods in iManager or cn=Authorized Login Methods,cn=Security in LDAP Browser) to see if the Challenge Response method exists (which is what failed)....also check for the SAML Assertion method as this is required by the OSP.

If it doesn't exist, you can install it manually with the nmasinst command line and the bundle (incl. config.txt) for the method(s)...

USAGE:
nmasinst -i <adminDN> <treeName> [-h hostname[:port]] [-w pwd]
nmasinst -addmethod <adminDN> <treeName> <configFile> [-h hostname[:port]] [-w pwd] [-checkversion]

[rs_0]

The Challenge Response object under cn=Security does exist. I currently
have IDM 4.0.2 installed in this environment. I went to check their
install logs, and they show NMAS Login Method as being successful. No
errors. This server in particular is a fresh build, not an upgrade on
top of the current IDM 4.0.2.


--
stampsr
------------------------------------------------------------------------
stampsr's Profile: https://forums.netiq.com/member.php?userid=7353
View this thread: https://forums.netiq.com/showthread.php?t=55593

[ScorpionSting]

Does your new server have NCP access (524) to the eDirectory?

I do remember a while back that this was a requirement to install NMAS methods....not sure if the installer can do it all over LDAP(s) now or not...

[al_b]

stampsr;266257 Wrote:
> I went to check their install logs, and they show NMAS Login Method as
> being successful. No errors.
It can be good enouph! 🙂


--
If you find this post helpful, please show your appreciation by clicking
on the star below :cool:
------------------------------------------------------------------------
al_b's Profile: https://forums.netiq.com/member.php?userid=209
View this thread: https://forums.netiq.com/showthread.php?t=55593

[al_b]

If you want to check installed NMAS version, you can try

rpm -qa | grep novell-nmas


--
If you find this post helpful, please show your appreciation by clicking
on the star below :cool:
------------------------------------------------------------------------
al_b's Profile: https://forums.netiq.com/member.php?userid=209
View this thread: https://forums.netiq.com/showthread.php?t=55593

[dgersic]

On Tue, 22 Mar 2016 21:24:01 +0000, stampsr wrote:

> The Challenge Response object under cn=Security does exist. I currently
> have IDM 4.0.2 installed in this environment. I went to check their
> install logs, and they show NMAS Login Method as being successful. No
> errors. This server in particular is a fresh build, not an upgrade on
> top of the current IDM 4.0.2.

The NMAS methods are Tree wide, not server specific. So if your IDM402
server installed the method, it makes some sense that your new install of
IDM45 on a different server would error trying to install a method that's
already installed.


--
--------------------------------------------------------------------------
David Gersic dgersic_@_niu.edu
Knowledge Partner http://forums.microfocus.com

Please post questions in the forums. No support provided via email.
If you find this post helpful, please click on the star below.

[rsimonsatidentr]

Just a quick note I ran into this error, and it came back to bite me with UserApp. The UserApp logins were failing because the SAML Assertion did not exists under the TREE-NAME => Security => Authorized Login Methods => SAML Assertion. The environment was exactly as the OP had described, RHEL servers and was upgrading from IDM v4.0.2. For me I got around the problem by re-installing IDM v4.5.

Some details to explain my problem is described in the Cool Solutions document, Troubleshooting OSP in IDM 4.5 – Part 2 by geoffc.

[geoffc]

On 6/22/2016 11:46 AM, rsimonsatidentropy wrote:
>
> Just a quick note I ran into this error, and it came back to bite me
> with UserApp. The UserApp logins were failing because the SAML Assertion
> did not exists under the TREE-NAME => Security => Authorized Login
> Methods => SAML Assertion. The environment was exactly as the OP had
> described, RHEL servers and was upgrading from IDM v4.0.2. For me I got
> around the problem by re-installing IDM v4.5.
>
> Some details to explain my problem is described in the Cool Solutions
> document, 'Troubleshooting OSP in IDM 4.5 � Part 2'
> (https://www.netiq.com/communities/cool-solutions/troubleshooting-osp-idm-4-5-part-2/)
> by geoffc.

Glad to see that article helped, send fish. (I like herring, and kosher
herring is very available commercially in most places. Schmaltz
preferred).

This is a poorly documented element of the product, which once you
understand is easy. But if you did not even know it exists is very hard
to see what is going wrong.