on Jun 14, 2016Article Content
| Article Number | 000029551 |
| Applies To | RSA Product Set: Security Analytics RSA Product/Service Type: Security Analytics Server RSA Version/Condition: 10.4 Platform: CentOS O/S Version: EL6 |
| Issue | When attempting to install nss-pam-ldapd package from the command line on the Security Analytics server using the syntax yum install nss-pam-ldapd, nothing is found or returned. The update account and password function correctly, smcupdate.emc.com resolves without issue from the command line, and the command curl -v https://<live username>:<live password>@smcupdate.emc.com/nw10/rpm also returns no errors. In addition, a the commands yum clean all and rpm --rebuilddb have already been issued. Despite the configuration for updates working, yum cannot locate the RPM package. In addition, the following error is logged in the /var/lib/netwitness/uax/logs/sa.log file while attempting to run a reposync in the Security Analytics UI: 2015-02-02 19:15:28,003 [Yum Sync Daemon 2092898519] ERROR com.rsa.smc.sa.admin.service.DefaultYumFileManager - Failed to remove old rpm files 2015-02-02 19:25:25,219 [Yum Sync Daemon 1383154487] ERROR com.rsa.smc.sa.admin.service.DefaultYumFileManager - /var/netwitness/srv/www/rsa/updates/repodata/repomd.xml (No such file or directory) at com.rsa.smc.sa.admin.service.DefaultYumFileManager.getFileListChecksum(DefaultYumFileManager.java:1019) at com.rsa.smc.sa.admin.service.DefaultYumFileManager.access$600(DefaultYumFileManager.java:115) at com.rsa.smc.sa.admin.service.DefaultYumFileManager$3.run(DefaultYumFileManager.java:707) 2015-02-02 19:25:25,222 [Yum Sync Daemon 1383154487] ERROR com.rsa.smc.sa.admin.service.DefaultYumFileManager - Unable to determine current update status for notification com.rsa.smc.sa.admin.exception.YumOperationException: Unable to determine current update status for notification at com.rsa.smc.sa.admin.service.DefaultYumFileManager.getFileListChecksum(DefaultYumFileManager.java:1024) at com.rsa.smc.sa.admin.service.DefaultYumFileManager.access$600(DefaultYumFileManager.java:115) at com.rsa.smc.sa.admin.service.DefaultYumFileManager$3.run(DefaultYumFileManager.java:707) 2015-02-02 19:25:25,324 [Yum Sync Daemon 1383154487] ERROR com.rsa.smc.sa.admin.service.DefaultYumFileManager - Failed to remove old rpm files |
| Cause | This issue occurs because the yum configuration file /etc/yum.repos.d/sa.repo is not present in the /etc/yum.repos.d directory. |
| Resolution | In order to resolve the issue, recreate the sa.repo file as shown below in /etc/yum.repos.d and verify that the permissions and ownership are set to 644 root:root. After creating the file, issue the command yum install nss-pam-ldapd which should locate and install the package. |
| Notes | The file should look appear as follows: [root@SA-Server yum.repos.d]# cat sa.repo [sa] name=SA Yum Repo baseurl = https://<live_username>:<live_user_password>@smcupdate.emc.com/nw10/rpm enabled = 1 protect = 0 gpgcheck = 1 sslVerify = 1 sslcacert = /etc/pki/CA/certs/RSACorpCAv2.pem metadata_expire = 1d failovermethod=priority The permissions should appear as the example below. -rw-r--r--. 1 root root 235 Feb 3 15:15 sa.repo |