Skip to content

Blog

Restrictions on valid hostnames on WAM

WAM Does not support the hostname when it starts with 0 (Digit).

Example:

0EVIDIAN-01, 00EVIDIAN-02

Specification RFC 952

The original specification of hostnames in RFC 952, mandated that labels could not start with a digit or with a hyphen, and must not end with a hyphen.

Specification RFC 1123

However, a subsequent specification (RFC 1123) permitted hostname labels to start with digits. No other symbols, punctuation characters, or white space are permitted.

Evidian WAM constrained valid hostname starts with 0 (Digit) is restricted for the following reasons:

   1. To simplify parsing, avoid confusion between hostnames and IP addresses. 
   2. Ensure human readability. 
   3. Support legacy systems and backward compatibility.

WAM Installation with OpenDJ

ARTICLE TYPE
How to

TITLE
WAM Installation with OpenDJ

ANSWER
WAM Installation with OpenDJ

Prerequisite

Make sure you have a required Java environment installed and OpenDJ software requires Java 7 or 8, specifically at least the Java Standard Edition runtime environment.

  1. Install Java (For the WAM it is recommended to restrict to Java-8)
  2. Set JAVA_HOME

OpenDJ Learning & Docs

Install OpenDJ

  1. Install OpenDJ
  2. You must create and start your Web Access Manager directory instance with the two following mandatory base suffixes.
o=lpfroot.
o=lpfuserroot

Install WAM

First Installation

Webam-8.0.6.x-os-Setup -mode console -path "installation path" -server "Directory server name" -domain "Directory server domain" -protocol "Directory protocol" -port "port_number" -dn "distinguishedName" -pwd "password" -lpfadminpwd "adminPassword" [-gw "gatewayUrl"]

SafeKit Console Connection Error

ARTICLE TYPE
Troubleshooting

TITLE
Evidian SafeKit Console Connection Error

PRODUCT
Safekit

ANSWER
Troubleshooting Steps

Connect the Safekit using IP or FQDN

## An Example 
http://172.168.203.10:9010 or http://acme.com:9010
https://172.168.203.10:9453 or https://acme.com:9453)

Browser check

Check a supported browser and its level (Chrome works better than Internet Explorer in many environments)

Browser state clear

  • Clear the browser cache

  • Clear the browser SSL cache if HTTPS is used

  • Look at advanced settings for the browser and search for SSL cache

Server check

Check safeadmin and safewebserver services are started on the server or not

Conf Check

  • Log in as administrator/root

  • Open a PowerShell /shell console

  • Change directory to SAFE

    Windows SAFE = c:/safekit if %SYSTEMDRIVE% =c:
    Linux SAFE= /opt/safekit
    

  • run command :

./safekit cluster confinfo

Looking forward to hearing from you

WAM does not want to Start-Restart

ARTICLE TYPE
Troubleshooting

TITLE

WAM does not want to Start/Restart

Product:
WAM

SYMPTOMS

Attempting to start WAM main Apache server.

Attempting to start WAM main Apache server...
Error:  [-]
Error:  [-] The following messages have been generated by Apache:
Error:  [-]
Error:  [-]     Directory list created
Error:  [-]
Error:  [-] The following lines have been generated in the Apache error log:
Error:  [-]
Error:  [-]     [Mon Jul 22 08:21:22.451134 2024] [:warn] [pid 3702675:tid 140123787631616] MOD_AUTH_CAS: CASValidateURL should be HTTPS.
Error:  [-]     [Mon Jul 22 08:22:51.285217 2024] [lbmethod_heartbeat:notice] [pid 3707044:tid 140123787631616] AH02282: No slotmem from mod_heartmonitor

ANSWER

Please verify the ipcs value in your WAM Server.

Troubleshooting Steps

ipcs help command

[root@oracle ~]# ipcs --h
ipcs: option '--h' is ambiguous; possibilities: '--human' '--help'
Try 'ipcs --help' for more information.
[root@oracle ~]# ipcs --help

Usage:
 ipcs [resource-option...] [output-option]
 ipcs -m|-q|-s -i <id>

Show information on IPC facilities.

Options:
 -i, --id <id>  print details on resource identified by <id>
 -h, --help     display this help
 -V, --version  display version

Resource options:
 -m, --shmems      shared memory segments
 -q, --queues      message queues
 -s, --semaphores  semaphores
 -a, --all         all (default)

Output options:
 -t, --time        show attach, detach and change times
 -p, --pid         show PIDs of creator and last operator
 -c, --creator     show creator and owner
 -l, --limits      show resource limits
 -u, --summary     show status summary
     --human       show sizes in human-readable format
 -b, --bytes       show sizes in bytes

For more details see ipcs(1).

How to check ipcs Value

ipcs -l
[root@oracle ~]# ipcs -l

------ Messages Limits --------
max queues system wide = 32000
max size of message (bytes) = 8192
default max size of queue (bytes) = 16384

------ Shared Memory Limits --------
max number of segments = 4096
max seg size (kbytes) = 18014398509465599
max total shared memory (kbytes) = 18446744073709551612
min seg size (bytes) = 1

------ Semaphore Limits --------
max number of arrays = 32000
max semaphores per array = 32000
max semaphores system wide = 1024000000
max ops per semop call = 500
semaphore max value = 32767

For WAM the advice is:

$ cat /proc/sys/kernel/sem
250 128000 32 512

This allows more web agents or portals to be configured.

It is possible to modify or add the following line in the sysctl.conf file (in /etc folder):

kernel.sem = 250 128000 32 512

(if the kernel.sem does not appear in the file, you can add it at the end of the file.

Then execute the following command to load it:

$ sysctl -p
Check it by:
$ cat /proc/sys/kernel/sem
NB: To keep these modifications at each boot on SUSE Linux activate boot.sysctl command. (On Red Hat Linux the script rc.sysinit reads the file /etc/sysctl.conf automatically).

Kindly check the below FAQ:

Lack of ipcs Value

List of ports used by Evidian WAM

ARTICLE TYPE
FAQ

TITLE
List of ports used by Evidian Web Access Manager

ANSWER

The following are the default ports used for Evidian Web Access Manager (WAM).

WAM Web Server / Components Port TCP/UDP
Security Gateway Administration Server 9119 TCP
Portal JSP Welcome Server 8150 TCP
AJP Port of Tomcat Server 9160 TCP
Port for the shutdown command for Tomcat Server 9165 TCP
Welcome Page Server 9140 TCP
Tutorial Server 1 9180 TCP
Tutorial Server 2 9190 TCP
Authentication Server 9130 TCP
Browsing Administration Assistant for Portal 9170 TCP
Security Gateway for local Web Agent 9120 TCP

Apart from these, additional ports may be used depending on your specific config.

Product Version
WAM 9.0.9 , WAM 9.0.10

Keywords
Evidian WAM , Ports , WAM

Related articles:

Access may interfer with replication

Log Message:

| 2024-03-11 11:34:31:409000 |  nfsboxv3 | D | WARNING : Process 1912 [ notepad++.exe ] access may interfer with replication, possible stopstart ahead

| 2024-03-11 11:34:31:410000 |       log | D | Last message repeated     2 times

| 2024-03-11 11:35:15:989000 |  nfsboxv3 | D | WARNING : Process 11560 [ notepad++.exe ] access may interfer with replication, possible stopstart ahead

This means that processes access the replicated directories on the secondary. This is strongly discouraged as it can lead to data corruption or reintegration errors.

Ensure that no process accesses these directories when the server is secondary and If it is an anti-virus, exclude the replicated directories of this anti-virus.

Safekit cluster

Safekit state command

PS C:\safekit> hostname
ML01
PS C:\safekit> ./safekit state -v
--------------------- milestone State ---------------------

  Local  (127.0.0.1)    : ALONE (Service : Available)(Color : Green)


Resources

        Name            State           Since
state.local             ALONE           2024-07-15 11:21:06
state.remote            UNKNOWN         2024-07-15 11:22:02
usersetting.failover            on              2024-01-08 13:28:26
proc.sqlservr.exe               up              2024-07-15 09:27:24
proc.heart.exe          up              2024-01-08 13:28:26
proc.circlog.exe                up              2024-01-08 13:28:26
proc.nfsadmin.exe               up              2024-01-08 13:53:51
proc.nfsbox.exe         up              2024-01-08 13:53:51
proc.syncedcheck.exe            init            2023-12-16 11:30:01
proc.arpreroute.exe             up              2024-01-08 13:53:51
proc.vipd.exe           init            2023-12-16 11:30:01
usersetting.errd                on              2024-01-08 13:28:25
rfs.uptodate            up              2024-01-08 13:54:06
rfs.lastprimstate               down            2024-01-08 13:53:49
rfs.swapping            down            2024-01-08 13:28:26
rfs.degraded            down            2024-01-08 13:28:26
rfs.responding          up              2024-01-08 13:28:26
rfs.namespace           up              2024-01-08 13:53:50
rfs_bandwidth.replication                   3 KB/s              2024-07-15 11:27:25
rfs_bandwidth.reintegration                 0 KB/s              2024-07-15 10:16:10
rfs.rfssync             up              2024-01-08 13:28:25
usersetting.rfssyncmode         default         2024-01-08 13:28:25
usersetting.rfssyncrole         default         2024-01-08 13:28:25
usersetting.rfssyncuid          default         2024-01-08 13:28:25
intf.192.168.203.0              up              2024-01-08 13:28:50
ip.192.168.203.201              up              2024-07-15 09:27:23
usersetting.checker             on              2024-01-08 13:28:26
proc.intfcheck.exe.192.168.203.0                up              2024-01-08 13:28:52
proc.ipcheck.exe.192.168.203.201                up              2024-07-15 09:27:24
encryption.encryption           off             2024-01-08 13:28:25
heartbeatlocaladdr.flow         up              2024-01-08 13:53:49
heartbeat.flow          down            2024-07-15 11:22:02



heartplug plugin

 Processes
        Name            Pid             Pilot port
        safeadmin               4020            49745
        heart           7884            62298
        circlog         2188            62293


checkplug plugin

 Processes
        Name            Pid             Pilot port
        intf.192.168.203.0              5296            62364
        ip.192.168.203.201              2984            51603


userplug plugin


rfsplug plugin

 Processes
        Name            Pid             Pilot port
        nfsadmin                7036            63931
        nfsbox          8044            63932
        syncedcheck             -               -


vipplug plugin

 Processes
        Name            Pid             Pilot port
        arpreroute              7632            63921
        vipd            -               -


errdplug plugin

 Processes
        Name            Pid             Pilot port
        errd            6084            62303

List of the ports used by SafeKit

Process         Ports
heart
        port    UDP 8888
rfs
        safenfs_port    TCP 5600

PS C:\safekit>

Safekit port

How to verify Safekit port 5600 is listening from remote adress
(When remote machine module is stopped)

Hostname

PS C:\safekit> hostname
ML01

safekit cluster state -v

PS C:\safekit> ./safekit state -v
--------------------- milestone State ---------------------

  Local  (127.0.0.1)    : ALONE (Service : Available)(Color : Green)


Resources

        Name            State           Since
state.local             ALONE           2024-07-15 11:21:06
state.remote            UNKNOWN         2024-07-15 11:22:02
usersetting.failover            on              2024-01-08 13:28:26
proc.sqlservr.exe               up              2024-07-15 09:27:24
proc.heart.exe          up              2024-01-08 13:28:26
proc.circlog.exe                up              2024-01-08 13:28:26
proc.nfsadmin.exe               up              2024-01-08 13:53:51
proc.nfsbox.exe         up              2024-01-08 13:53:51
proc.syncedcheck.exe            init            2023-12-16 11:30:01
proc.arpreroute.exe             up              2024-01-08 13:53:51
proc.vipd.exe           init            2023-12-16 11:30:01
usersetting.errd                on              2024-01-08 13:28:25
rfs.uptodate            up              2024-01-08 13:54:06
rfs.lastprimstate               down            2024-01-08 13:53:49
rfs.swapping            down            2024-01-08 13:28:26
rfs.degraded            down            2024-01-08 13:28:26
rfs.responding          up              2024-01-08 13:28:26
rfs.namespace           up              2024-01-08 13:53:50
rfs_bandwidth.replication                   3 KB/s              2024-07-15 11:27:25
rfs_bandwidth.reintegration                 0 KB/s              2024-07-15 10:16:10
rfs.rfssync             up              2024-01-08 13:28:25
usersetting.rfssyncmode         default         2024-01-08 13:28:25
usersetting.rfssyncrole         default         2024-01-08 13:28:25
usersetting.rfssyncuid          default         2024-01-08 13:28:25
intf.192.168.203.0              up              2024-01-08 13:28:50
ip.192.168.203.201              up              2024-07-15 09:27:23
usersetting.checker             on              2024-01-08 13:28:26
proc.intfcheck.exe.192.168.203.0                up              2024-01-08 13:28:52
proc.ipcheck.exe.192.168.203.201                up              2024-07-15 09:27:24
encryption.encryption           off             2024-01-08 13:28:25
heartbeatlocaladdr.flow         up              2024-01-08 13:53:49
heartbeat.flow          down            2024-07-15 11:22:02



heartplug plugin

 Processes
        Name            Pid             Pilot port
        safeadmin               4020            49745
        heart           7884            62298
        circlog         2188            62293


checkplug plugin

 Processes
        Name            Pid             Pilot port
        intf.192.168.203.0              5296            62364
        ip.192.168.203.201              2984            51603


userplug plugin


rfsplug plugin

 Processes
        Name            Pid             Pilot port
        nfsadmin                7036            63931
        nfsbox          8044            63932
        syncedcheck             -               -


vipplug plugin

 Processes
        Name            Pid             Pilot port
        arpreroute              7632            63921
        vipd            -               -


errdplug plugin

 Processes
        Name            Pid             Pilot port
        errd            6084            62303

List of the ports used by SafeKit

Process         Ports
heart
        port    UDP 8888
rfs
        safenfs_port    TCP 5600

PS C:\safekit>

Browsing Administration Assistant

The Advanced tabbed page of the Portal and Web Agent objects edition window contains the following elements:

Browsing Administration Assistant Port

The BAA needs a specific port; which is different from that used by the portal or the web agent. A BAA is present on all machines on which the portal is deployed.

Link Security Gateway and BAA

This option activates or deactivates the BAA. When this option is:

  • Selected, the BAA is started or restarted when the configuration is applied or when lpfstart/lpfrestart commands are launched.

  • Not selected, the BAA remains active, but is stopped when the configuration is applied or when lpfstart/lpfstop/lpfrestart commands are launched.