RSA Apache Web Agent 5.3 on Linux - New Pin failure.
2 years ago
Originally Published: 2007-05-21
Article Number
000058504
Applies To
RSA SecurID Apache Web Agent 5.3
Red Hat Enterprise Server 4.0
Issue
Attempting to get new pin functionality with Apache Web Agent 5.3 on Linux.
Users in new pin never see new pin prompt. "New Pin Deferred" message reported in aceserver log.
Cause
During installation you must specify the path to the httpd that you will be running. Inadvertently the /usr/sbin/httpd.worker process was selected.

Checking for compiled modules on the two, httpd and httpd.worker:


/usr/sbin/httpd -l
Compiled in Modules:
core.c
prefork.c
http_core.c
mod_so.c

/usr/sbin/httpd.worker -l
Compiled in Modules:
core.c
worker.c
http_core.c
mod_so.c

When the prefork.c is not found as one of the components the rsa rpc api is not installed. The file is renamed from ace_api_server to ace_api_server.org and the service does not run. Without this service new pin procedure will fail.

Resolution
Reinstallation of the RSA Apache Web Agent specifying the correct httpd process, /usr/sbin/httpd rectified the situation. Also NOTE, the rpc portmapper service must be running on the Linux box.