[x]
Posted via EE Mobile

Search, ask, and monitor your questions on the go with EE Mobile. Visit Experts Exchange from your mobile device and never be out of touch again.

Question
[x]
Attachment Details
[x]
The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

  • The Grade of the Solution
  • The Zone Rank of the Expert Providing the Solution
  • The Number of Author and Expert Comments
  • The Number of Experts Contributing
  • The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!

5.8

Problem fixing SSL Certificates in NW 6.5

Asked by 2mrchio in Novell Netware Network Software

Tags: netware

NW 6.5 server, SP8

In an attempt to install more user licenses on this server, we were led to TID 7000769, that states the following:

--------------------------------
To install a new unlimited license into a tree where stratified NetWare licenses already exist, there are a couple steps to follow:

If you have only one version of the NetWare operating system in your tree (i.e. NetWare 6.5 servers only), you will need to first remove all stratified licenses, this includes both user and server licenses:

1) Load iManager (https://ip address/nps/servlet/webacc).  
2) Select Licenses
3) Select Delete a License
4) Browse for a license and delete it. All previously installed licenses, both user and server, need to be removed. The new unlimited licenses cannot coexist in the tree with stratified licenses.

If you have a mixed tree, you will need to remove all stratified licenses for whichever operating system your additional user licenses entitle you to. For example, let's say you have several NetWare 5.1 servers with licenses that service 250 users, a couple NetWare 6.0 servers with licenses for 100 users, and several NetWare 6.5 servers with 500 user licenses. You just ordered and received a quantity of 1-User licenses for NW6.5. You received a certificate for those users and an unlimited NW6.5 license.  You do not need to worry about the NetWare 5.1 or 6.0 licenses. You will, however, need to remove all licenses for NetWare 6.5 before the unlimited licenses will work properly.

Hint: If you have a large number of licenses to delete, you might want to use the old NWADMIN32.EXE to delete them, as it is much quicker than iManager (which requires that you search for, and delete, one license at a time). However, it is recommended that you do all licenses installations from within iManager.

Now you need to install the new licenses:
1) Load iManager (https://ip address/nps/servlet/webacc).  
2) Select Licenses
3) Select Install a License
4) Click Browse and search for the license file (*.NLF)
5) Select Next
6) Check the box next to the license you want to install (UNLIMITED UNIT NetWare 6 Server LICENSE - SN:xxxxxxxx) and hit Next
7) Then you must browse for the location in the tree where you want the license installed
8) Click Install

You should see a message stating the installation was successful.  In order for the new license to be consumed, the server(s) will need to be rebooted.
--------------------------------

First problem, the server never had iManager installed.  So I proceeded to install iManager, Apache, and Tomcat, and everything else required to run iManager.  This was done successfully.  However, once I try to run AP2WEBUP, it reports "<NLM has terminated; press any key to close screen.>"  The logger screen reports:

--------------------------------
Loading module APACHE2.NLM
  Apache Web Server 2.0.63
  Version 2.00.63   April 25, 2008
  Copyright 2006 The Apache Software Foundation. Licensed under the Apache License Version 2.0.
  Auto-Loading Module APRLIB.NLM
  Auto-loading module APRLIB.NLM
  Apache Portability Runtime Library 0.9.17
  Version 0.09.17   April 25, 2008
  Licensed under the Apache License Version 2.0
Module APRLIB.NLM load status OK
Module APACHE2.NLM load status OK
Use of key SSL CertificateDNS failed
Use of key SSL CERTIFICATEIP failed
--------------------------------

I did some research that mentioned I needed to run PKIDiag.  I downloaded the latest version, switched to fix mode, and this happens:

---------------------------------------------------------------------------
PKIDiag 2.78 --  (compiled Feb 01 2007 17:06:17).
     (Check the end of the log for the last repair results)
Current Time: Wed Aug 19 15:11:38 2009
User logged-in as: admin.OU.
Fixing mode
Rename and create mode
Always Re-key

--> Server Name = '{ServerName}'
---------------------------------------------------------------------------

Step 1  Verifying the Server's link to the SAS Service Object.
   Server '{ServerName}.OU' points to SAS Service object 'SAS Service - {ServerName}.OU'
Step 1 succeeded.

Step 2  Verifying the SAS Service Object
   SAS Service object 'SAS Service - {ServerName}.OU' is backlinked to server '{ServerName}.OU'.
Step 2 succeeded.

Step 3  Verifying the links to the KMOs
   Reading the links for SAS Service object 'SAS Service - {ServerName}.OU'.
--> No KMOs are linked to Service object 'SAS Service - {ServerName}.OU'.
Step 3 succeeded.

Step 4  Verifying the KMOs
Step 4 succeeded.

Step 5  Re-verifying the links to the KMOs
   Reading the links for SAS Service object 'SAS Service - {ServerName}.OU'.
--> No KMOs are linked to Service object 'SAS Service - {ServerName}.OU'.
Step 5 succeeded.

Step 6  Creating IP and DNS Certificates if necessary.
--> Number of Server IP addresses = 2
--> The default IP address is: 10.0.0.2
PROBLEM: A SSL CertificateIP does not exist
FIXING: Creating SSL CertificateIP (10.0.0.2)
Pausing for 5 seconds because of error 49695
ERROR 49695 creating SSL CertificateIP.
--> Number of Server DNS names for the IP address 10.0.0.2 = 1
--> The server's default DNS name is:
      ns1.aisn.net
PROBLEM: A SSL CertificateDNS does not exist
FIXING: Creating SSL CertificateDNS (ns1.aisn.net)
Pausing for 5 seconds because of error 49695
ERROR 49695 creating SSL CertificateDNS.
Step 6 failed 49695.

Note: Occasionally multiple problems will be solved with a single fix.

Fixable problems found:     2
Problems fixed:             0
Un-fixable problems found:  0
--------------------------------

Now I am at a dead end.  Any help will be appreciated.
[+][-]08/19/09 11:53 PM, ID: 25139811Accepted Solution

View this solution now by starting your 30-day free trial. Setting up your free trial is quick, easy, and secure. We will return you to this solution, unlocked, when you're done.

About this solution

Zone: Novell Netware Network Software
Tags: netware
Sign Up Now!
Solution Provided By: deroode
Participating Experts: 2
Solution Grade: A
 
[+][-]08/20/09 09:26 AM, ID: 25144412Author Comment

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 30-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]08/20/09 11:53 PM, ID: 25149581Expert Comment

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 30-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]08/21/09 10:32 AM, ID: 25153959Expert Comment

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 30-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]08/26/09 03:14 PM, ID: 25192835Author Comment

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 30-day free trial to view this Author Comment or ask the Experts your question.

 
 
Loading Advertisement...
20091111-EE-VQP-92 - Hierarchy / EE_QW_3_20080625