000029551 - Unable to find the nss-pam-ldapd package on smcupdate.emc.com in RSA Security Analytics

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 22, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000029551
Applies ToRSA Product Set: Security Analytics
RSA Product/Service Type: Security Analytics Server
RSA Version/Condition: 10.4
Platform: CentOS
O/S Version: EL6
 
IssueWhen attempting to install nss-pam-ldapd package from the command line on the Security Analytics server using the syntax yum install nss-pam-ldapd, nothing is found or returned.
The update account and password function correctly, smcupdate.emc.com resolves without issue from the command line, and the command curl -v https://<live username>:<live password>@smcupdate.emc.com/nw10/rpm also returns no errors.
In addition, a the commands yum clean all and rpm --rebuilddb have already been issued.
Despite the configuration for updates working, yum cannot locate the RPM package.

In addition, the following error is logged in the /var/lib/netwitness/uax/logs/sa.log file while attempting to run a reposync in the Security Analytics UI:
 
2015-02-02 19:15:28,003 [Yum Sync Daemon 2092898519] ERROR com.rsa.smc.sa.admin.service.DefaultYumFileManager - Failed to remove old rpm files
2015-02-02 19:25:25,219 [Yum Sync Daemon 1383154487] ERROR com.rsa.smc.sa.admin.service.DefaultYumFileManager - /var/netwitness/srv/www/rsa/updates/repodata/repomd.xml (No such file or
directory)
               at
com.rsa.smc.sa.admin.service.DefaultYumFileManager.getFileListChecksum(DefaultYumFileManager.java:1019)
               at
com.rsa.smc.sa.admin.service.DefaultYumFileManager.access$600(DefaultYumFileManager.java:115)
               at
com.rsa.smc.sa.admin.service.DefaultYumFileManager$3.run(DefaultYumFileManager.java:707)
2015-02-02 19:25:25,222 [Yum Sync Daemon 1383154487] ERROR com.rsa.smc.sa.admin.service.DefaultYumFileManager - Unable to determine current update status for notification
com.rsa.smc.sa.admin.exception.YumOperationException: Unable to determine current update status for notification
               at
com.rsa.smc.sa.admin.service.DefaultYumFileManager.getFileListChecksum(DefaultYumFileManager.java:1024)
               at
com.rsa.smc.sa.admin.service.DefaultYumFileManager.access$600(DefaultYumFileManager.java:115)
               at
com.rsa.smc.sa.admin.service.DefaultYumFileManager$3.run(DefaultYumFileManager.java:707)
2015-02-02 19:25:25,324 [Yum Sync Daemon 1383154487] ERROR com.rsa.smc.sa.admin.service.DefaultYumFileManager - Failed to remove old rpm files

 

 
CauseThis issue occurs because the yum configuration file /etc/yum.repos.d/sa.repo is not present in the /etc/yum.repos.d directory.
 
ResolutionIn order to resolve the issue, recreate the sa.repo file as shown below in /etc/yum.repos.d and verify that the permissions and ownership are set to 644 root:root.  
After creating the file, issue the command yum install nss-pam-ldapd which should locate and install the package.
NotesThe file should look appear as follows:
[root@SA-Server yum.repos.d]# cat sa.repo

[sa]

name=SA Yum Repo

baseurl = https://<live_username>:<live_user_password>@smcupdate.emc.com/nw10/rpm

enabled = 1

protect = 0

gpgcheck = 1

sslVerify = 1

sslcacert = /etc/pki/CA/certs/RSACorpCAv2.pem

metadata_expire = 1d

failovermethod=priority



The permissions should appear as the example below.
-rw-r--r--. 1 root root 235 Feb  3 15:15 sa.repo

Attachments

    Outcomes