16.7 Issues Related to Upgrade

16.7.1 Policy Set Editor does not Allow Active Directory and Group Policy to be Selected

Issue: Post upgrade to Change Guardian 6.3, when you try to add policies to a policy set, the Active Directory and Group Policy options are not available for selection.

Workaround: Re-import the specific module license from the Configuration dashboard and check for policy addition to policy set in Policy Editor.

16.7.2 When you update the OS, Packages that are Not Signed by Red Hat are Found

Issue: When you upgrade supported RHEL Operating System from version 7.x to 8.x, a warning message appears for the CG packages that are not signed by Red Hat.

Workaround: Ignore the warning messages. Take a snapshot/ backup before upgrading the OS. You can delete the backup when the update is completed and the product functionality is working as expected or is intact.

16.7.3 Deploying Alert Rules Fail

Issue: Deploying an alert rule fails when you create, modify, or delete an alert rule after an upgrade. Although Deployment Status shows Success, the Alert Rule Deployment Status window displays an error that deployment has failed.

Workaround:

To resolve the issue:

  1. Comment the IP address 127.0.0.2 in the /etc/hosts file.

  2. Restart the Change Guardian server:

    /opt/netiq/cg/scripts/cg_services.sh restart

16.7.4 Change Guardian Configuration Fails after Appliance Installation Completes

Issue: After appliance installation, configuration of Change Guardian might fail to complete with the following error message:

Change Guardian configuration has failed. Check /var/opt/novell/sentinel/log/config_cg_onboot.log.

In such a case, agent management and javos services might fail to start.

Workaround: Reconfigure Change Guardian.

To reconfigure Change Guardian:

  1. Verify if Change Guardian service (8443) is running using the command:

    netstat -an | grep "8443" | grep "LISTEN"

  2. (Conditional) If Change Guardian service (8443) is not running, start Change Guardian service (8443):

    /opt/netiq/cg/scripts/cg_services.sh start

  3. Reconfigure Change Guardian:

    /opt/novell/sentinel/setup/configure.sh

16.7.5 Cleaning Up Data From PostgreSQL When Migration Fails

Issue: Database migration to PostgreSQL fails.

Workaround: Delete the data that was partially moved to the PostgreSQL database.

To clear PostgreSQL:

  1. Ensure that the PostgreSQL database is running.

  2. Log in to the Change Guardian server as root and switch to novell user.

  3. Go to the location where you have extracted the Change Guardian installer or the migration utility.

  4. Delete the migrated data:

    ./db_migration_failure_cleanup.sh

  5. (Conditional) If you are performing a traditional upgrading, upgrade Change Guardian.

  6. (Conditional) If you are upgrading an appliance, run the appliance configuration utility.

16.7.6 Exception After Changing Keystore Password with Specific Special Characters

Issue: When you upgrade Change Guardian to 5.1 or later and change the keystore database password with specific special characters, the following exception are displayed: Failed to initialize Communicator (Defect 172329)

Workaround: None.