IDM Provisioning Server : Uncompressing Tar: /bin/gtar: /tmp/imps-router.tar.exclude_list: Permission denied

Products

• CA Identity Manager

Issue/Introduction

You have made sure Provisioning Directory on a remote host is installed properly and DSAs are running.
You have made sure you are installing Provisioning Server on this problem host as a 'root' user.
You have also made sure following prerequisites are met.

1) Move random file to other location or rename and make a new symbolic link as:

mv /dev/random /dev/random.orig 
ln -s /dev/urandom /dev/random 

2) You have made sure SELINUX is set to permissive and rebooted the node.

3) You have made sure the sysctl.conf file has following at the end of the file: 
kernel.sem = 250 32000 32 260 

After all that, when trying to install the CA Identity Manager 14.4 Provisioning Server on a Red Hat 7.x/8.x server, the installer fails with following information reported in imps_server_install.log:

(Mar 21, 2022 11:36:07 AM), Install, com.ibm.wizard.platform.linux.LinuxProductServiceImpl, msg1, installing ETA Install Repository Router (provisioningRouter)
(Mar 21, 2022 11:36:07 AM), Install, com.ca.etrust.install.admin.ETAInstallRepositoryRouter, msg1, ETAInstallRepositoryRouter:install() - begin
(Mar 21, 2022 11:36:08 AM), Install, com.ca.etrust.install.adminrepository.InstallETDUtils, msg1, Failed getting list of DSA(s): No DSA's exist
(Mar 21, 2022 11:36:08 AM), Install, com.ca.etrust.install.admin.ETAInstallRepositoryRouter, msg1, Extracting Router DSA files...
(Mar 21, 2022 11:36:09 AM), Install, com.ca.etrust.install.admin.ETAInstallRepositoryRouter, msg1, Uncompressing Tar: /bin/gtar: /tmp/imps-router.tar.exclude_list: Permission denied
(Mar 21, 2022 11:36:09 AM), Install, com.ca.etrust.install.admin.ETAInstallRepositoryRouter, msg1, Uncompressing Tar: /bin/gtar: Error is not recoverable: exiting now
(Mar 21, 2022 11:36:09 AM), Install, com.ca.etrust.install.admin.ETAInstallRepositoryRouter, msg1, Extracting Router DSA files...
(Mar 21, 2022 11:36:09 AM), Install, com.ca.etrust.install.admin.ETAInstallRepositoryRouter, msg1, Uncompressing Tar: /bin/gtar: /tmp/imps-schema.tar.exclude_list: Permission denied
(Mar 21, 2022 11:36:09 AM), Install, com.ca.etrust.install.admin.ETAInstallRepositoryRouter, msg1, Uncompressing Tar: /bin/gtar: Error is not recoverable: exiting now

Environment

Release : 14.4

Component : IdentityMinder(Identity Manager)

Resolution

The problem could be you having umask value set to 0027, thinking the higher the value... higher permissions it has. That would be wrong. Try 'umask 0022' and attempt to install again. This should resolve the 'Permission denied' issue while extracting/uncompressing the required tar files and the install should continue further. 

Basically, when the umask is set to 0027, the file permissions will be set to 640. This is preferred for security reasons because this will restrict others not to read/write/execute that file/folder. When the umask is set to 0022, the file permissions will be set to 644 and for folders, it will be 755.

You can search more on this topic of "umask" on Google.

If the install fails at some other place after bypassing this 'Permission denied' error, other references that might help are:

https://knowledge.broadcom.com/external/article?articleId=33190

https://knowledge.broadcom.com/external/article?articleId=215181