Signiant Support

Authentication services unavailable Print


Symptoms:

Problems with the SSLeay library can manifest in two ways:
  1. When trying to send a package using Media Exchange on an agent running on RHEL5 the error "Authentication services unavailable" occurs.

  2. This problem also affects the Certificate Alarms job in the Signiant Manager (Administration->Manager->Certificate Alarms). When running the Certificate Alarms job, the following error appeasr:

"Can't load '/usr/ddsperl/lib/site_perl/5.8.0/i686-linux-thread-multi/auto/Crypt/SSLeay/SSLeay.so' for module Crypt::SSLeay: /usr/ddsperl/lib/site_perl/5.8.0/i686-linux-thread-multi/auto/Crypt/SSLeay/SSLeay.so: cannot restore segment prot after reloc: Permission denied at /usr/ddsperl/lib/5.8.0/i686-linux-thread-multi/DynaLoader.pm line 229."

If setroublshoot is enabled, the following will appear in /var/log/messages

setroubleshoot: SELinux is preventing /usr/signiant/dds/bin/perl/bin/perl from loading /usr/signiant/dds/bin/perl/lib/site_perl/5.8.0/i686-linux-thread-multi/auto/Crypt/SSLeay/SSLeay.so which requires text relocation.      For complete SELinux messages. run sealert -l 14d3fa86-9755-4ffe-98e0-24e224fdb19a

Resolution:

The configuration settings for SELinux is preventing the SSL library (SSLeay.so) from loading.  Run the following command to resolve the issue:
 
chcon -t textrel_shlib_t /usr/signiant/dds/bin/perl/lib/site_perl/5.8.0/i686-linux-thread-multi/auto/Crypt/SSLeay/SSLeay.so
sealert -l 14d3fa86-9755-4ffe-98e0-24e224fdb19a