[iManager 3.0.3.1] Plug-Ins Fail to Download

[Zygomax]

Hello,
I'm running iManager 3.0.3.1 on SLES 12 SP2. When I attempt to upgrade plugins, iManager immediately returns success. However, restarting tomcat and returning to the page shows the same plugins:



Looking into /var/opt/novell/iManager/nps/packages shows that 0-byte files have been created for the plugins in question. I have some log files in Google Drive viewable here: https://drive.google.com/open?id=0B2eYqHUyunPXV3dhWnlJWHJ2WE0.

The catalina.out file shows the "ZipFileException" when attempting to unzip the 0-byte files, but not why the modules failed to download.

Anyone know what's going on?

Thanks!
Sam

[aburgemeister]

I have an idea, and I've reported it to the company; in the meantime, just
download via your regular browser and then upload into iManager.

Just to verify, did you put your iManager instance in high security mode
during its install, SuiteB and all maybe even?

When I use a regular HTTP client like 'curl' to get the URLs present from
the XML file that feeds iManager its list of plugins ad their location I
see a redirect from HTTP to HTTPS and I am guessing that iManager, in some
configurations, is not following that, but instead things the data it
receives with that header (zero-length) is actually all it needs, so it
writes that (zero bytes) and then is done. Of course, the installer
(unzip and move files around) is confused.

--
Good luck.

If you find this post helpful and are logged into the web interface,
show your appreciation and click on the star below.

If you want to send me a private message, please let me know in the
forum as I do not use the web interface often.

[Zygomax]

Thanks for the help...

iManager is not in high security mode I don't believe. I just specified RSA encryption with no cipher suite.

I don't know what URLs to use to download the NPMs separately. I'll look for those.

-- Sam

[Zygomax]

Update: I downloaded iman_mod_desc.xml with the URLs for the packages.

I noticed that my iman_mod_desc.xml in /var/opt/novell/iManager/nps/packages has URLs that point back to my system, e.g.:

<module>
<moduleID>dsp</moduleID>
<filename>dsp.npm</filename>
<url>https://sssxps.***:8443/nps/packages/dsp.npm</url>
<title>NetIQ Identity Manager - Driver Specific Support</title>
<version>10.7.20170209</version>
<min-required-version>3.0.0</min-required-version>
<description>NetIQ Identity Manager 4.6 - Driver Specific Support Plug-ins</description>
</module>

(The *** is to obscure my domain.)

Don't know if that's normal or not.

-- Sam

[aburgemeister]

That's interesting; my all have 'localhost' in them, which happens to be
how I access this iManager server (SSH tunnel). As a result, I'm guessing
this is nothing in particular, since it's not even the XML file that
iManager should be using.


--
Good luck.

If you find this post helpful and are logged into the web interface,
show your appreciation and click on the star below.

If you want to send me a private message, please let me know in the
forum as I do not use the web interface often.

[Zygomax]

I was able to get the needed plugins installed, thanks!

[aburgemeister]

iManager uses this file to find out what is out there:

https://www.novell.com/products/consoles/imanager/iman_mod_desc.xml

It's a jumble of XML so be careful what you get from there and try to
apply to your new, shiny, iManager 3.x install, but what you need is in
there. In fact, here you go:

eDirectory
http://nu.novell.com/designer/imanager_plugins/303/eDir_IMANPlugins.npm

IDM 4.6
http://cdn.novell.com/cached/designer/imanager_plugins/IDM4.6/IDMPlugins_IMAN_3_0_IDM_4_6_0_0.npm

NMAS
http://nu.novell.com/designer/imanager_plugins/303/nmas.npm

Notice the '303' in the path to the actual NPM; that's probably a good
sign you're in the right place.

--
Good luck.

If you find this post helpful and are logged into the web interface,
show your appreciation and click on the star below.

If you want to send me a private message, please let me know in the
forum as I do not use the web interface often.

[shesser]

I did this for the issue your experiencing. It's a bug in the latest iManager patch.

https://forums.novell.com/showthread.php/503832-Facing-issues-with-iManager-2-7-7-patch7?p=2458233#post2458233

[aburgemeister]

It may be worth noting that it impacts older versions of iManager too,
including my iManager Workstation 2.7 version. As noted in that other
thread, I THINK a workaround is to point to a modified iman_mod_desc.xml
file that has all of the 'http' URIs changed to 'https'. I copied one
yesterday and put it on a box here for use in the meantime:

http://a2btech.com/tmp/iman_mod_desc.xml

Another option may be to setup Access Manager (NAM) to rewrite the
contents when accessing the real version via a locally-handled URL, so
going to http://your.company/iman_mod_desc.xml could then be a dynamically
rewritten version pulled from the real one. I have not tried this, but it
should be pretty simple to do, even using tools other than NAM.


--
Good luck.

If you find this post helpful and are logged into the web interface,
show your appreciation and click on the star below.

If you want to send me a private message, please let me know in the
forum as I do not use the web interface often.