Access Manager custom login
Ok, so I create a new jsp, example.jsp, with my company logo on it and place it in the same place as the default login.jsp. How do I then tell my proxy service to use it? It's was so obvi | | 8 | 5 | 4/2/2009 2:26:02 PM |
Upgrading (303 SP3, 304 SP4, 304 SP4 IR2)
Greetings,
We were running version Access Manager 3.0.3 SP3 and just upgraded to 3.0.4 SP4 and then again to 3.0.4 SP4 IR2.
Prior to the upgrade, -Auditing -> Troublesho | | 6 | 5 | 4/2/2009 2:06:02 PM |
NTP is disabled, yet it is running.
Admin console shows "NTP is disabled, yet it is running. " Other clusters in our config have ntp properly enabled. This one doesn't seem to want to. We're running version 3.0. | | 1 | 1 | 4/2/2009 1:56:01 PM |
Windows Admin Console - tomcat 100% CPU
Hi All,
I have run up a test AM 3.1 environment under ESX 3.5 using: 1x Windows Admin Console 1x Windows Identity Server 1x Linux Access Gateway
I can create a rever | | 1 | 7 | 4/2/2009 11:38:47 AM |
logging
I am moving from ichan to nam and was wondering how others are getting the logs off of nam. In ichain you can download them from the interface but in nam I can't see how this can be done | | 3 | 3 | 4/2/2009 11:38:04 AM |
AM 3.1 SP 1
Good morning I had a question about the speed of the refresh on the IDP server for AM 3.1 SP 1. When we click the 'Update All' on the IDP server it seems that it takes almost 3 minutes fo | | 3 | 0 | 4/1/2009 3:46:01 PM |
Intermittent 504 gateway timeout error
We have a proxy setup that occationally returns a 504 gateway timeout error. We are currently using the default TCP values in our configuration. Is there a configuration change that can b | | 4 | 2 | 4/1/2009 1:36:02 PM |
Common Loggin - syslog / log4j
Hey Guys,
Just wondering if anyone has any ideas on how to get the common logging sent to a syslog daemon.
I was maybe thinking tomcat log4j config on the nesp.
I | | 3 | 3 | 3/31/2009 4:14:36 AM |
LAG Rewriter logs
Hey,
I'm missing something simple and hopefully one of y'all can put me right.
I'm trying to debug a rewriter behavior on LAG 3.0 SP4.
Following the instructions, o | | 2 | 6 | 3/30/2009 6:36:01 PM |
Identity Server not listed in Admin console
Hi,
I'm setting up a test environment for AM in VMware. I've got two seperate VMs (so far) one for the Admin Console and one for an Identity Server. Everything installs fine, wit | | 5 | 1 | 3/28/2009 8:56:06 AM |
J2EE Agent on other containers
We run an application server that is not one of the supported servers, but would like to explore using J2EE Agents and JAAS. Does anyone accomplished this and have reference materials to | | 1 | 5 | 3/27/2009 9:56:07 PM |
NAM 3.1.1 and DNS
I had a question about DNS resolution and NAM. When we were testing the wget http://imaps.dfg.ca.gov/nesp/idff/metadata (from the IDP server) we were not able to get that to resolve , whe | | 1 | 3 | 3/27/2009 2:01:16 AM |
Taking a Step back
When our NAM system was working here are the steps we followed to protect a resource, Using NAM Open Lab 4: Basic Configuration of the Access Gateway, we created a reverse proxy, making n | | 5 | 6 | 3/26/2009 10:34:04 PM |
Mobile Access
We have a requirement to support mobile devices, specifically Blackberry's. Has anyone successfully used NAM from a mobile device?
-- tmcollard ------------------------ | | 5 | 5 | 3/26/2009 1:46:01 PM |
The requested URL could not be retrieved
I am following the Novell AM 3.1 Setup Guide to setup trusted authentication. On page 23-25 it discusses how to setup basic Name/Password authentication. I set "/*" to use &qu | | 16 | 3 | 3/26/2009 11:38:16 AM |
Delete Certificate from keystore
Hi I know this may seem a silly question, but how do you delete a certificate from the Keystore? I go to the keystore in iManager and select the certificate and select remove but get the | | 4 | 3 | 3/25/2009 10:36:01 PM |
AM31IR1 SSLVPN not redirecting for Citrix
Hi all,
Am I missing something when configuring the SSLVPN together with Citrix?
I set it up just as I would do with AM30 (made a couple earlier), just that I am using | | 2 | 6 | 3/25/2009 2:26:01 PM |
Providing authentication to external website
Hi All,
I currently running AG in our DMZ providing Auth & SSO to our internal web servers.
The company that designs and hosts our external website wants to provide | | 10 | 6 | 3/25/2009 8:09:59 AM |
IDP Server Not Starting
Start unsucessful: Reason: Configuration to load could not be found in the directory. This came about after we were updating our SSL Ceritificates on the IDP server. When we restarted Tom | | 9 | 4 | 3/24/2009 11:24:25 PM |
Page isn't redirecting properly
I have successfully installed all Access Manager components and configured a function reverse proxy with a public protected resource following the steps in the basic config guide. The pr | | 6 | 4 | 3/24/2009 9:46:02 AM |
Loadbalancing AG using Software LVS
Was just wondering if anyone is using Linux Virtual Server, or any other free software to load balance their Access Gateway cluster as mentioned in the docs. I've had in our test environm | | 3 | 4 | 3/23/2009 10:06:01 AM |
Novell Access Manager is not supported with Teaming
a Quote form the Groupwise 7 manual
"25.2 Using Novell Access Manager for Authenticating to Teaming or Conferencing Novell Access Manager is not currently supported for use | | 12 | 4 | 3/23/2009 4:29:57 AM |
ESP SSLVPN and Port Translation
I have the ESP SSLVPN installed on an AM 3.1 Identity Server. This server has 2 nics. One NIC bound with a Public IP and one NIC bound to the LAN. I am running a port translation script o | | 5 | 3 | 3/22/2009 8:16:01 PM |
NullPointerException at NIDPAuthenticatedSession.A(y:744) while trying to a uthenticate
Hi!
We have Access Manager 3.1 configured to authenticate to AD. It was working fine until today when it started throwing null pointer exception everytime we tried to authenticat | | 13 | 5 | 3/21/2009 7:27:16 AM |
Hiding authentication cards
Hello all,
I have set a contract to be "Satisfiable by a contract of equal or higher level." This works fine if I'm already authenticated to the higher security site a | | 10 | 4 | 3/21/2009 7:25:30 AM |
What other solutions have people looked at?
--____IDHLJCWSZWFGHROYJXCE____ Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: base64 Content-Disposition: inline; modification-date="Thu, 18 Mar 2009 16:54:21 | | 10 | 3 | 3/20/2009 11:39:47 AM |
Cannot get Access Gateway restarted
We tried to remove the certificates from the LAG and now we cannot get the Gateway to start. It simply remains in a pending state. I have deleted the command from the Command Status but w | | 7 | 5 | 3/20/2009 1:08:50 AM |
SSL and Certificates
The first question is once a certificate has been imported into the Keystore is there a way to remove it? We are struggling with getting the Authentication piece to fuction correctly and | | 2 | 5 | 3/19/2009 3:56:02 PM |
SSL-VPN Closing after 81 minutes
And this is the entry in the /var/opt/novell/tomcat4/webapps/sslvpn/servlet.log: -2/26/09 10:26 AM [thread:SSLVPN_Session_Maintenace_Thread] Maximum Keepalive timeout reached for the | | 7 | 3 | 3/18/2009 9:56:01 PM |
Unable to load NPKIAPI - library could not be found
After configuring a reverse proxy on AM3.1 (on a clustered LAG and IDS configuration) the update process of the LAGs never came back on 3 out of 4 LAGs, so I removed them from the cluste | | 1 | 4 | 3/18/2009 6:56:02 PM |
Authentication Error
When I tried to setup authentication to my previously opened web site I received the following error number 100101044-esp-E9BD0AF58FE13B3D looking through the Documentation it is looking | | 5 | 4 | 3/18/2009 2:25:10 AM |
how to retrieve the credentials using getCredentials()
Hi, I'm trying to develop some sort of authentication class. For debug reasons, I need to get the LdapCredentials values.
Unfortunately, the getCredentials() is poorly documented | | 8 | 3 | 3/17/2009 9:55:20 PM |
Reverse Proxies
What are the proper steps for removing a reverse proxy from the access gateway? When I have tried to select the proxy that I am wanting to delete, I am able to select that proxy and delet | | 1 | 3 | 3/17/2009 9:50:37 PM |
Trying to make sense of this..
I'm going through the SETUP GUIDE and get to this paragraph on pg. 19:
This first reverse proxy is used for authentication. You need to configure the proxy service to use the DNS nam | | 3 | 2 | 3/16/2009 4:46:03 PM |
Kerberos Authentcation Problem
I'm trying to setup a new lab/test/demo environment using Access Manager 3.1. I have an existing AM 3.1 setup with a W2K3 DC doing Kerberos integrated authentcation, and it works great. | | 1 | 4 | 3/14/2009 8:39:33 AM |
New to NAM
Good morning, I am still getting my feet wet with NAM, I have used BM 3.x but this is a new beast. We do currently have iChain in place, what is the best method to start migrating those s | | 15 | 3 | 3/13/2009 4:36:46 AM |
Identity server status shows pending
hi all,
After I started access manger (identity server, lag) servers, identity server status shows pending. when I click on health, it says Server is not reporting. I can abl | | 9 | 5 | 3/12/2009 9:16:02 PM |
NAM 3.1 -- VIA Header customization possible similar to iChain? With iChain, you could modify the VIA header by editing the sys:etc\proxy\proxy.cfg and under a section like the following:
[http headers] viaheaderhostname=My Custom String
| | 2 | 1 | 3/12/2009 6:57:36 PM |
Access Gateway not appearing in the Console
I'm using v3.1. I didn't notice any errors during the install of the AG. Where should I start to look? Anyone else have this problem?
Thanks..
-- rsmccain - | | 10 | 3 | 3/12/2009 5:26:01 PM |
Session Timeout and ajax
How are you guys working around Novells new and 10 steps backward in my opinion session timeout.
It has a hard and soft time out. If I set the timeout for 90 minutes its roughl | | 1 | 4 | 3/12/2009 12:56:02 PM |
IDserver port 443 redirection with iptables not working
Hi all, I have a problem with the script for the Identity Server use to redirect port 443 to 8443.
My environment is:
2 identity servers (SLES 10.2, NAM 3.1) in the same clu | | 9 | 3 | 3/11/2009 11:35:34 PM |
100101043 error... where's my metadata?
Hello again =)
I have all the Access Manager pieces installed and working up to about 99%, then when I finally get to test out a basic auth protection, i get the 100101043 error | | 12 | 3 | 3/11/2009 11:28:28 PM |
LAG 3.1 upg
Hi,
Please can someone point me in the right direction for upgrading my LAG's to 3.1. They are currently on 3.04.60 and i've managed to upgrade both the AC and IDP to 3.1 using t | | 6 | 4 | 3/11/2009 8:46:01 AM |
Updating LAG
Good afternoon, I am fresh to NAM and I am getting myself more into the product, it was something that was already in place when I arrived I have now been tasked with getting the product | | 6 | 3 | 3/10/2009 8:26:02 PM |
ActiveX application timeout problems?
Hi,
We are having session timeout problems in Access Manager (3.0.71) with ActiveX application (HP Quality Center).
Normal http applications are working properly i.e. time | | 2 | 3 | 3/10/2009 5:46:01 PM |
Novell Access Manager Installation
Hello Novell Gurus, I am new to NAM and trying to setup an environment. Do we need to install the Novell Access Gateway in to the NAM infrastructure? If yes does it have a Windows ver | | 8 | 6 | 3/10/2009 5:17:06 PM |
Tabbed browsing in Firefox has issues with logouts
I've only noticed this with Firefox so far (only because I don't use IE7 and therefore have no tabbed browsing in IE).
If I click on the logout link for our portal (which logs us out | | 11 | 5 | 3/10/2009 4:26:02 PM |
LAG Download location?
Hello all =)
Could someone please help me out and point me to the ISO download for the Linux Access Gateway ISO file?
I've looked under the downloads area under "Linux | | 5 | 2 | 3/9/2009 4:58:20 PM |
Shibboleth2 SP and AM3.1 IDP
Hi all, I am trying to get a Shibboleth2 SP implementation talk to our AM3.1 IDP. I manage to add the SP into AM and import the metadata. This configuration succeeds on the shibboleth | | 4 | 3 | 3/9/2009 7:46:01 AM |
Post login to IDP using custom contract
I've seen that you can post a login to the IDP using the following in a form"
<form action="https://idp_domain_com/nidp/app/login" method="post"> & | | 6 | 3 | 3/8/2009 2:57:02 AM |