RHEL7 pre-requisites for Policy Server and WAOP

book

Article ID: 207939

calendar_today

Updated On:

Products

CA Single Sign On Federation (SiteMinder)

Issue/Introduction

 

We're planning to install Policy Server 12.8SP2 and Web Agent Option
Pack 12.52SP1CR11 on RedHat 7 and we'd like to know the Linux
Pre-Requisites which are required to be present on the host before
attempting to install Policy server.

Could you precise them ?

 

Environment

 

Policy Server 12.8 on RedHat 7;
Web Agent Option Pack 12.52SP1 on RedHat 7;

 

Resolution

 

At first glance, the prerequisites are described here for Policy
Server 12.8 :

  Install Required KornShell Package

    The Korn shell (ksh) is required during Policy Server installation
    and upgrade on Linux platforms. Verify that the relevant Korn shell
    library is present.

  [...]

  Verify Required Linux Libraries

    If your Red Hat environment supports X11, no additional library files
    are required for Policy Server. If your Red Hat environment does not
    support X11 (for example, a headless environment), install the
    libraries that are required to support X11.

  https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/siteminder/12-8/installing/install-a-policy-server/install-policy-server-on-unix/prepare-for-the-policy-server-installation.html

The support of X11 is described here :

  Minimal number of X11 packages to support X forwarding on Redhat 7 for Policyserver

    # yum install "@X Window System"

  https://knowledge.broadcom.com/external/article/112200/minimal-number-of-x11-packages-to-suppor.html

For the Web Agent Option Pack, follow the documentation here :

  Required Linux Libraries
  https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/siteminder/12-52-01/installing/install-agents/web-agent-option-pack/web-agent-option-pack-installation-requirements.html

For the Policy Server 12.8 on RedHat 7, you only have to install ksh,
and "X Window System" as mentioned previously.

Second, if the Web Agent Option Pack and its application server are
64bit, you have only to add the libraries for 64bit (x86_64) as stated
in this KD :

  Looking for RHEL7 Webagent Option Pack

    [...]

    To install and verify the prerequistes :

      Web Agent Option Pack

 The following topics provide information on how to install the Web
 Agent Option Pack and deploy the Federation web services

      https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/siteminder/12-52-01/installing/install-agents/web-agent-option-pack.html

    which link includes the following requirements :

      Web Agent Option Pack Installation Requirements

  Red Hat 7.x:

  The following packages are required to install 64-bit Web Agent
  Option Pack on Red Hat 7.x 64-bit:

    libstdc++-4.8.3-9.el7.i686
    libidn-1.28-3.el7.i686
    libXext-1.3.2-2.1.el7.i686
    libXrender-0.9.8-2.1.el7.i686
    libidn.so.11.rpm
    libXtst-1.2.2-2.1.el7.i686
    ncurses-5.9-13.20130511.el7.i686
    ncurses-libs-5.9-13.20130511.el7.i686
    ncurses-base-5.9-13.20130511.el7.i686

      https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/siteminder/12-52-01/installing/install-agents/web-agent-option-pack/web-agent-option-pack-installation-requirements.html

    From the above list, as the Application Server and Web Agent Option
    Pack are 64bit, you should replace "i686" with "x86_64" for the
    package name

    [...]

  https://knowledge.broadcom.com/external/article?articleId=200880

And as per documentation, for Web Agent Option Pack 12.52SP1 64bit on
RedHat 7, you do need to install :

  libidn-1.28-3.el7.x86_64

From RedHat 7 on date of Jan 2021 this version has been upgraded to :

  libidn-1.28-4.el7.x86_64

So if the Web Agent Option Pack and its Application Server are 64 bit,
then you don't need to install the .686 packages.

The libidn is library to handle domain names in URL. So it's
needed. On RedHat 7, run the following :

  # yum search libidn

should return :

  [...]

  libidn.x86_64 : Internationalized Domain Name support library

  [...]

Then you'll install it as :

  # yum install libidn.x86_64

Make sure that the system is fully updated before : 

  # yum upgrade

Note that "libidn.x86_64" package will provides libidn.so.11. So
there's no need to search libidn.so.11.rpm.