Common problems and solutions for troubleshooting the Access Gateway upgrade process.
When updating from Access Gateway 2019.2.0, first you must remove the oracle-instantclient18.3-basic package.
To remove the package:
- Sign in to Access Gateway Management console.
- Select the System menu.
- Select Remove Package.
- Remove oracle-instantclient18.3-basic .
- Return to the System menu and select Update.
- Proceed with the update as usual.
If the Access Gateway yum repository is unreachable, you receive an upgrade error resembling:
Ensure that the repository, yum.oag.okta.com, is reachable from the Access Gateway node being upgraded. You can test access using a variety of commands.
Using the Access Gateway Management console, go to Network, choose d, and then enter yum.oag.okta.com.
Access Gateway Administration ... 1 - Network ... Choice: 1 [cr] Access Gateway Network Setup . . . 1 - Manage network interfaces . . . d - DNS Lookup Choice: d [cr] IP Address/Hostname to lookup: yum.oag.okta.com [cr] IP Address/Hostname of DNS server: 18.104.22.168 [cr] Server: 22.214.171.124 Address: 126.96.36.199 Non-authoritative answer: yum.oag.okta.com canonical name = yumalb-531408569.us-west-2.elb.amazonaws.com. Name: yumalb-531408569.us-west-2.elb.amazonaws.com Address: 188.8.131.52 Name: yumalb-531408569.us-west-2.elb.amazonaws.com Address: 184.108.40.206
Using traceroute ensure that there is a route to yum.oag.okta.com from inside the network hosting Access Gateway.
Note that traceroute isn't able to trace a complete route to yum.oag.okta.com due to limitations of AWS EC2 configuration.
traceroute yum.oag.okta.com . . . traceroute to yum. . . .amazonaws.com (. . . ), 64 hops max, 52 byte packets 1 10.0.0.1 (10.0.0.1) 5.436 ms 2.345 ms 1.925 ms 2 220.127.116.11 (18.104.22.168) 25.870 ms 11.372 ms 11.922 ms 3 22.214.171.124 (126.96.36.199) 11.035 ms 12.135 ms 11.204 ms 4 be-319-ar01.needham.ma.boston.comcast.net (188.8.131.52) 20.129 ms 13.427 ms 14.012 ms 5 be-32031-cs03.newyork.ny.ibone.comcast.net (184.108.40.206) 22.085 ms 6 be-32021-cs02.newyork.ny.ibone.comcast.net (220.127.116.11) 22.305 ms . . . <ctrl-c>
The traceroute command is not installed on Access Gateway nodes by default.