Common problems and solutions for troubleshooting the Access Gateway upgrade process.
When updating from Access Gateway 2019.2.0, first you must remove the oracle-instantclient18.3-basic package.
To remove the package:
- Sign in to Access Gateway Management console.
- Select the System menu.
- Select Remove Package.
- Remove oracle-instantclient18.3-basic.
- Return to the System menu and select Update.
- Proceed with the update as usual.
Ensure that the repository yum.oag.okta.com is reachable from the Access Gateway node being upgraded. You can test access using a variety of commands.
Using the Access Gateway Management console, go to Network, choose d, and then enter yum.oag.okta.com. For example:Access Gateway Administration ... 1 - Network ... Choice: 1 [cr] Access Gateway Network Setup . . . 1 - Manage network interfaces . . . d - DNS Lookup Choice: d [cr] IP Address/Hostname to lookup: yum.oag.okta.com [cr] IP Address/Hostname of DNS server: 126.96.36.199 [cr] Server: 188.8.131.52 Address: 184.108.40.206 Non-authoritative answer: yum.oag.okta.com canonical name = yumalb-531408569.us-west-2.elb.amazonaws.com. Name: yumalb-531408569.us-west-2.elb.amazonaws.com Address: 220.127.116.11 Name: yumalb-531408569.us-west-2.elb.amazonaws.com Address: 18.104.22.168
Using traceroute ensures that there's a route to yum.oag.okta.com from inside the network hosting Access Gateway. traceroute isn't able to trace a complete route to yum.oag.okta.com due to limitations of AWS EC2 configuration. For example:traceroute yum.oag.okta.com . . . traceroute to yum. . . .amazonaws.com (. . . ), 64 hops max, 52 byte packets 1 10.0.0.1 (10.0.0.1) 5.436 ms 2.345 ms 1.925 ms 2 22.214.171.124 (126.96.36.199) 25.870 ms 11.372 ms 11.922 ms 3 188.8.131.52 (184.108.40.206) 11.035 ms 12.135 ms 11.204 ms 4 be-319-ar01.needham.ma.boston.comcast.net (220.127.116.11) 20.129 ms 13.427 ms 14.012 ms 5 be-32031-cs03.newyork.ny.ibone.comcast.net (18.104.22.168) 22.085 ms 6 be-32021-cs02.newyork.ny.ibone.comcast.net (22.214.171.124) 22.305 ms . . . <ctrl-c>
The traceroute command is not installed on Access Gateway nodes by default.