systemctl and Web Agent startup settings for Red Hat Apache Web Server 2.4.x

Document ID:  TEC1340867
Last Modified Date:  06/23/2017
{{active ? 'Hide' : 'Show'}} Technical Document Details

Products

  • CA Single Sign-On

Components

  • SITEMINDER -WEB AGENT FOR APACHE:SMAPC
Issue:

Red Hat Enterprise Linux 7 (RHEL 7) introduced systemctl command to start and stop a service program. Here is a command line to start Red Hat Apache 2.4 Web Server.

 

# systemctl start httpd.service

 

How do you set up Web Agent for Red Hat Apache 2.4 Web Server?

 

In RHEL 6, /etc/sysconfig/httpd may contain the below statement to source ”ca_wa_env.sh” script file.

 

. /opt/CA/webagent/ca_wa_env.sh

 

However, in RHEL 7, the source statement does not work.

Environment:
OS: Red Hat Enterprise Linux 7 (RHEL 7) Web Server: Red Hat Apache 2.4 Web Server
Cause:

In RHEL 7 /etc/sysconfig/httpd, only environment variable may be defined and the source statement does not work.

Resolution:

The resolution is to include the content of ”ca_wa_env.sh” script file in /etc/sysconfig/httpd. Beware that ${VARIABLE} must be replaced with the actual value. Especially for ${LD_LIBRARY_PATH} and ${PATH}, see these values by ‘env’ command beforehand and be sure to add it. This modification to the httpd file should be logically equal to sourcing the shell script.

Please note that the MIT Kerberos module was updated in the newer webagent agent versions. In the older agents (as recent as 12.52 SP1 CR06), the Kerberos module is outdated if you use RedHat7.  If this is the case, modify LD_LIBRARY_PATH to include /lib64 in front of the webagent paths. This ensures that the Apache/RedHat 7 kerberos module gets loaded before the webagent's module.  The change is already included in the below example.  If this is not done, you may see errors relating to Kerberos modules failing to load.  For more information about the error, please review TEC1859038.

 

Example:

Here is an example of the contents of ”ca_wa_env.sh” which should be included in /etc/sysconfig/httpd. (Bold is effective and others are commented out)

 

NETE_WA_ROOT=/opt/CA/webagent
#export NETE_WA_ROOT

NETE_WA_PATH=/opt/CA/webagent/bin
#NETE_WA_PATH=${NETE_WA_ROOT}/bin
#export NETE_WA_PATH


CAPKIHOME=/opt/CA/webagent/CAPKI
#export CAPKIHOME


LD_LIBRARY_PATH=/lib64:/opt/ca/webagent/bin:/opt/ca/webagent/bin/thirdparty:/opt/CA/SharedComponents/lib:/opt/CA/CAlib:/opt/CA/DSM/caf/lib
#LD_LIBRARY_PATH=${NETE_WA_ROOT}/bin:${NETE_WA_ROOT}/bin/thirdparty:${LD_LIBRARY_PATH}
#export LD_LIBRARY_PATH


PATH=/opt/ca/webagent/bin:/usr/lib64/qt-3.3/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/opt/CA/SharedComponents/bin:/opt/CA/SharedComponents/ccs/cam/bin:/root/bin 
#PATH=${NETE_WA_PATH}:${PATH}
#export PATH

Additional Information:

TEC1859038 - Red Hat 7 Apache 2.4 startup fails when SSO Web Agent is installed - fails to load Kerberos module mod_auth_gssapi.so

Please help us improve!

Will this information enable you to resolve your issue?

Please tell us what we can do better.

{{feedbackText.length ? feedbackText.length : '0'}}/255

{{status}}

Not what you were looking for?

Search Again >

Product Information

Support by Product >

Communities

Join a Community >

Chat with CA

Just give us some brief information and we'll connect you to the right CA ExpertCA sales representative.

Our hours of availability are 8AM - 5PM CST.

All Fields Required

connecting

We're matching your request.

Unfortunately, we can't connect you to an agent. If you are not automatically redirected please click here.

  • {{message.agentProfile.name}} will be helping you today.

    View Profile


  • Transfered to {{message.agentProfile.name}}

    {{message.agentProfile.name}} joined the conversation

    {{message.agentProfile.name}} left the conversation

  • Your chat with {{$storage.chatSession.messages[$index - 1].agentProfile.name}} has ended.
    Thank you for your interest in CA.


    Rate Your Chat Experience.

    {{chat.statusMsg}}

agent is typing