Upgrade of PAMSC on a Linux endpoint fails when existing version is installed to a custom directory

Products

• CA Privileged Access Manager - Server Control (PAMSC)

Issue/Introduction

Trying to run the upgrade of PAMSC it fails stating CAeAC is already installed even though this is an upgrade.

[user1@server /tmp]$ sudo rpm -Uvh CAeAC-1410-80.24.x86_64.rpm
Verifying...                          ################################# [100%]
Preparing...                          ################################# [100%]

                    Copyright © 2009-2024 Broadcom.
                          All rights reserved                          
                                                                       
CAeAC is already installed in /opt/CA/AccessControl
error: %prein(CAeAC-1410-80.24.x86_64) scriptlet failed, exit status 1
error: CAeAC-1410-80.24.x86_64: install failed
error: CAeAC-1410-70.108.x86_64: erase skipped

Cause

This fails because the rpm is built with specific installation directories in order to maintain consistency. If the installed package directory does not match the directory defined in the rpm the upgrade cannot be done.

Resolution

Using the customize_eac_rpm command to update either the directory name (using the -p switch) and the base install directory (using the -u switch) will repackage the rpm to allow it to use the original installation directory for the upgrade.

[user1@server /tmp]$ sudo ./customize_eac_rpm -u /opt/CA -p AccessControl  -t /var/tmp/PAMSC CAeAC-1410-80.24.x86_64.rpm 
productpath is set to /opt/CA/AccessControl.
Temp directory is set to /var/tmp/PAMSC
Repacking the CAeAC rpm package...
Copying a repacked rpm package into <CAeAC-1410-80.24.x86_64-AltDir.rpm>.

 

[user1@server /tmp]$sudo rpm -Uvh CAeAC-1410-80.24.x86_64.rpm 
Verifying...                          ################################# [100%]
Preparing...                          ################################# [100%]

                    Copyright © 2009-2024 Broadcom.
                          All rights reserved                          
                                                                        
Updating / installing...
   1:CAeAC-1410-80.24                 ################################# [ 50%]
Installation complete.
Check seos.ini file for the right configuration.
Installation process messages have been logged in /opt/CA/AccessControl/install.log.
 
                            ==  Legal Notice  == 
CA Privileged Access Manager Server Control 1410 may use Wildfly Application Server v.8.2.1
and Wildfly v.12.0.0 service scripts, which are licensed under the Lesser General Public
License (LGPL).  Copies of Wildfly Application Server v.8.2.1, Wildfly v.12.0.0 service
scripts and the LGPL are provided by a separate installation.  Use of Wildfly Application
Server v.8.2.1 and Wildfly v.12.0.0 service scripts is subject to the terms of the LGPL as
set forth in such installation.
 
Transferring token settings from the pre-upgrade seos.ini file

NOTICE:  In case cgroups are enabled and CPU allocations are used, please make sure
         that the /usr/bin/cgexec binary is present on the system so that seosd can
         be started to run at real-time scheduling priority.

Successfully updated LOGINAPPL SYSTEMD
Successfully updated LOGINAPPL GNOME-TERMINAL
Successfully updated PROGRAM /opt/CA/AccessControl/bin/uxpatcher
Successfully updated FILE /opt/CA/PAMSCShared/data/patches.ini
Successfully added root via PROGRAM /opt/CA/AccessControl/bin/uxpatcher to /opt/CA/PAMSCShared/data/patches.ini's PACL
Please refer to the log file for full information.
uavc:  op=load_policy lsm=selinux seqno=2 res=1Cleaning up / removing...
   2:CAeAC-1410-70.108                ################################# [100%]