15.7 Issues Related to Upgrade

15.7.1 Upgrade Fails with the Error Message MongoDB authentication failed

Issue: The upgrade process fails when it is not able to authenticate the MongoDB database.

Workaround: Modify the Change Guardian admin user password.

To modify the password:

  1. Shut down Change Guardian server

    rcsentinel stop

  2. Run the configure.sh script from the /opt/novell/sentinel/setup directory:

    ./configure.sh

  3. Specify 1 to perform a standard configuration of Change Guardian.

  4. Specify 2 to create a new password and confirm the new password.

    The Change Guardian server starts.

  5. (Conditional) If you are upgrading a Change Guardian appliance, perform the following steps:

    1. Remove the migration.offset file:

      rm -rf /var/opt/novell/sentinel/log/migration.offset

    2. Run the Change Guardian migration script:

      ./cg6000_appliance_configuration.sh

15.7.2 When you update the OS, Packages that are Not Signed by Red Hat are Found

Issue: When you upgrade supported RHEL Operating System from version 7.x to 8.x, a warning message appears for the CG packages that are not signed by Red Hat.

Workaround: Ignore the warning messages. Take a snapshot/ backup before upgrading the OS. You can delete the backup when the update is completed and the product functionality is working as expected or is intact.

15.7.3 Deploying Alert Rules Fail

Issue: Deploying an alert rule fails when you create, modify, or delete an alert rule after an upgrade. Although Deployment Status shows Success, the Alert Rule Deployment Status window displays an error that deployment has failed.

Workaround:

To resolve the issue:

  1. Comment the IP address 127.0.0.2 in the /etc/hosts file.

  2. Restart the Change Guardian server:

    /opt/netiq/cg/scripts/cg_services.sh restart

15.7.4 Change Guardian Configuration Fails after Appliance Installation Completes

Issue: After appliance installation, configuration of Change Guardian might fail to complete with the following error message:

Change Guardian configuration has failed. Check /var/opt/novell/sentinel/log/config_cg_onboot.log.

In such a case Agent Manager and javos services might fail to start.

Workaround: Reconfigure Change Guardian.

To reconfigure Change Guardian:

  1. Verify if Change Guardian service (8443) is running using the command:

    netstat -an | grep "8443" | grep "LISTEN"

  2. (Conditional) If Change Guardian service (8443) is not running, start Change Guardian service (8443):

    /opt/netiq/cg/scripts/cg_services.sh start

  3. Reconfigure Change Guardian:

    /opt/novell/sentinel/setup/configure.sh

15.7.5 Cleaning Up Data From PostgreSQL When Migration Fails

Issue: Database migration to PostgreSQL fails.

Workaround: Delete the data that was partially moved to the PostgreSQL database.

To clear PostgreSQL:

  1. Ensure that the PostgreSQL database is running.

  2. Log in to the Change Guardian server as root and switch to novell user.

  3. Go to the location where you have extracted the Change Guardian installer or the migration utility.

  4. Delete the migrated data:

    ./db_migration_failure_cleanup.sh

  5. (Conditional) If you are performing a traditional upgrading, upgrade Change Guardian.

  6. (Conditional) If you are upgrading an appliance, run the appliance configuration utility.

15.7.6 Exception After Changing Keystore Password with Specific Special Characters

Issue: When you upgrade Change Guardian to 5.1 or later and change the keystore database password with specific special characters, the following exception are displayed: Failed to initialize Communicator (Defect 172329)

Workaround: None.

15.7.7 Applying Updates on Change Guardian Appliance Fails With an Error Message

Issue: When you restart the Change Guardian services during an appliance update, the following error messages might be displayed:

Exception in thread "main" java.lang.NoSuchMethodError: org.apache.http.impl.client.HttpClientBuilder.setSSLHostnameVerifier(Ljavax/net/ssl/HostnameVerifier;)Lorg/apache/http/impl/client/HttpClientBuilder;
  at esecurity.ccs.comp.event.visualization.ESRestUtil.<init>(ESRestUtil.java:112)
  at esecurity.ccs.comp.event.visualization.ESRestUtil.getInstance(ESRestUtil.java:121)
  at esecurity.ccs.comp.event.visualization.ESRestUtil.main(ESRestUtil.java:136)

Workaround: Perform the following steps:

  1. Switch to the directory /<installation-path>/opt/novell/sentinel/bin/

  2. Open the elasticsearch.sh file.

  3. Change LIB_LOCATION="${ESEC_HOME}/lib/*:. " to LIB_LOCATION="${ESEC_HOME}/lib/ccsapp*.jar ".

  4. Open the following files and perform step 3:

    • create_kibana_index_pattern.sh

    • elasticsearch_index_template.sh

    • elasticsearchRestClient.sh

    • load_kibana_data.sh

    • reSyncAlert.sh