Troubleshooting
Problem
WebSEAL is configured to a Policy Server which no longer exists. Attempts to unconfigure WebSEAL fail because the pdconfig utility cannot contact the Policy Server and remove the WebSEAL server definition. Attempts to uninstall WebSEAL software fails because the pre-uninstall script reports the software is still configured. This also applies to a WebSEAL instance that is corrupt in some manner and cannot be unconfigured.
Symptom
Attempts to unconfigure WebSEAL fail.
Cause
A corrupted WebSEAL instance or pdconfig cannot contact the Policy Server.
Resolving The Problem
** WARNING **
This can potentially remove all WebSEAL instances and their associated configuration files. We recommend that you have a valid backup before proceeding.
Remove these files and directory structures for each instance to be manually unconfigured.
UNIX
/opt/pdweb/etc/webseald-instance.conf
/opt/pdweb/etc/webseald-instance.conf.obf
/opt/pdweb/etc/amwebbackup-instance.lst
/opt/pdweb/etc/pdinfo-pdweb-instance.lst
/opt/pdweb/www-instance/*
## Do not delete the /var/pdweb/db directory if removing just one instance.
/var/pdweb/db/webseald-instance*
/var/pdweb/keytab-instance/*
/var/pdweb/log/*instance*
/var/pdweb/www-instance/*
Delete this file if you want to remove the WebSEAL software:
/opt/pdweb/.configure
Do not delete this file if there are other working WebSEAL instances.
WINDOWS
C:\Program Files\Tivoli\PDWeb\etc\webseald-instance.conf
C:\Program Files\Tivoli\PDWeb\etc\webseald-instance.conf.obf
C:\Program Files\Tivoli\PDWeb\etc\amwebbackup-instance.lst
C:\Program Files\Tivoli\PDWeb\etc\pdinfo-pdweb-instance.lst
C:\Program Files\Tivoli\PDWeb\www-instance\*
## Do not delete the C:\Program Files\Tivoli\PDWeb\db directory if removing just one instance.
C:\Program Files\Tivoli\PDWeb\db\webseald-instance*
C:\Program Files\Tivoli\PDWeb\keytab-instance\*
C:\Program Files\Tivoli\PDWeb\log\*instance*
Change this Windows Registry entry from "Yes" to "No" if you want to remove the WebSEAL software:
HKEY_LOCAL_MACHINE\SOFTWARE\Tivoli\Access Manager WebSEAL\V.R.M\Configured
Do not change this Windows Registry entry if there are other working WebSEAL instances.
The WebSEAL instance has been removed. You can now configure a new WebSEAL instance or configure WebSEAL into a new Policy Server or remove the WebSEAL software.
If you want to configure into a new Policy Server use the pdconfig command to reconfigure the Access Manager Runtime (before configuring WebSEAL).
Product Synonym
TAM ISAM
Was this topic helpful?
Document Information
Modified date:
16 June 2018
UID
swg21669984