Article Number
000038060
Applies To
RSA Product Set: SecurID
RSA Product/Service Type: Authentication Manager
RSA Version/Condition: 8.3
Issue
When updating to RSA Authentication Manager 8.3 patch 6 from Authentication Manager 8.3 the screen freezes and does not change. The consoles are not accessible, the machine itself is not accessible . The Advanced Status view freezes at following lines:
[exec] modprobe: Module thermal not found.
[exec] WARNING: no dependencies for kernel module 'thermal' found.
[exec] modprobe: Module processor not found.
[exec] WARNING: no dependencies for kernel module 'processor' found
[exec] modprobe: Module fan not found.
[exec] WARNING: no dependencies for kernel module 'fan' found.
[exec] modprobe: Module mptspi not found.
[exec] WARNING: no dependencies for kernel module 'mptspi' found.
[exec] Kernel Modules: usb-common usbcore ehci-hcd ohci-hcd uhci-hcd xhci-hcd mbcache jbd ext3
[exec] Features: acpi block [exec] 25427 blocks
Cause
The permissions for these files and directories are not set to their correct values. The sticky bit for more than one directory is not set. The SGID (
Se
t Group ID) is not set for the files in /usr/bin. This causes an issue for the update because it seems that the modules were not found because of this.
SGID (Set Group ID) is a special type of file permission given to a file/directory. Normally in Linux/Unix when a program runs, it inherits access permissions from the logged in user. SGID is defined as giving temporary permissions to a user to run a program/file with the permissions of the file group permissions to become member of that group to execute the file.
Changing the permissions of these files to the correct one shown in the Advanced Status View enables the update to find the modules and finish as expected.
[exec] setting /etc/crontab to root:root 0644. (wrong permissions 0600)
[exec] setting /usr/src/packages/SOURCES/ to root:root 1777. (wrong permissions 0755)
[exec] setting /usr/src/packages/BUILD/ to root:root 1777. (wrong permissions 0755)
[exec] setting /usr/src/packages/RPMS/ to root:root 1777. (wrong permissions 0755)
[exec] setting /usr/src/packages/RPMS/x86_64/ to root:root 1777. (wrong permissions 0755)
[exec] setting /usr/src/packages/RPMS/noarch/ to root:root 1777. (wrong permissions 0755)
[exec] setting /usr/src/packages/SPECS/ to root:root 1777. (wrong permissions 0755)
[exec] setting /usr/src/packages/SRPMS/ to root:root 1777. (wrong permissions 0755)
[exec] setting /usr/bin/wall to root:tty 2755. (wrong permissions 0755)
[exec] setting /usr/bin/write to root:tty 2755. (wrong permissions 0755)
Resolution
To resolve this issue,
- Restore RSA Authentication Manager 8.3 from a snapshot.
- Launch an SSH client, such as PuTTY.
- Login to the primary Authentication Manager server as rsaadmin and enter the operating system password.
Note that during Quick Setup another user name may have been selected. Use that user name to login.
login as: rsaadmin
Using keyboard-interactive authentication.
Password: <enter operating system password>
Last login: Tue Oct 8 13:22:31 2019 from jumphost.vcloud.local
RSA Authentication Manager Installation Directory: /opt/rsa/am
- Elevate to root:
rsaadmin@am83p:~> sudo su
rsaadmin's password: <enter operating system password>
am83p:/home/rsaadmin #
- Run chmod on the following files,setting the permissions as noted:
chmod 0644 /etc/crontab
chmod 1777 /usr/src/packages/SOURCES/
chmod 1777 /usr/src/packages/BUILD/
chmod 1777 /usr/src/packages/RPMS/
chmod 1777 /usr/src/packages/RPMS/x86_64/
chmod 1777 /usr/src/packages/RPMS/noarch/
chmod 1777 /usr/src/packages/SPECS/
chmod 1777 /usr/src/packages/SRPMS/
chmod 2755 /usr/bin/wall
chmod 2755 /usr/bin/write
- Run the update to RSA Authentication Manager 8.3 patch 6 again.
