Common problems and solutions for troubleshooting the Access Gateway upgrade process.
Upgrade from 2019.2.0
When updating from Access Gateway 2019.2.0, first you must remove the oracle-instantclient18.3-basic package.
To remove the package:
- Sign in to Access Gateway Management console.
- Select the System menu.
- Select Remove Package.
- Remove oracle-instantclient18.3-basic.
- Return to the System menu and select Update.
- Proceed with the update as usual.
yum.oag.okta.com is unreachable
If the Access Gateway yum repository is unreachable, an upgrade error resembling the following appears:
Ensure that the repository yum.oag.okta.com is reachable from the Access Gateway node being upgraded. You can test access using various commands.
Using the Access Gateway Management console, go to Network, choose d, and then enter yum.oag.okta.com. For example:Access Gateway Administration ... 1 - Network ... Choice: 1 [cr] Access Gateway Network Setup . . . 1 - Manage network interfaces . . . d - DNS Lookup Choice: d [cr] IP Address/Hostname to lookup: yum.oag.okta.com [cr] IP Address/Hostname of DNS server: 22.214.171.124 [cr] Server: 126.96.36.199 Address: 188.8.131.52 Non-authoritative answer: yum.oag.okta.com canonical name = yumalb-531408569.us-west-2.elb.amazonaws.com. Name: yumalb-531408569.us-west-2.elb.amazonaws.com Address: 184.108.40.206 Name: yumalb-531408569.us-west-2.elb.amazonaws.com Address: 220.127.116.11
Using traceroute ensures that there's a route to yum.oag.okta.com from inside the network hosting Access Gateway. traceroute isn't able to trace a complete route to yum.oag.okta.com due to limitations of AWS EC2 configuration. For example:traceroute yum.oag.okta.com . . . traceroute to yum. . . .amazonaws.com (. . . ), 64 hops max, 52 byte packets 1 10.0.0.1 (10.0.0.1) 5.436 ms 2.345 ms 1.925 ms 2 18.104.22.168 (22.214.171.124) 25.870 ms 11.372 ms 11.922 ms 3 126.96.36.199 (188.8.131.52) 11.035 ms 12.135 ms 11.204 ms 4 be-319-ar01.needham.ma.boston.comcast.net (184.108.40.206) 20.129 ms 13.427 ms 14.012 ms 5 be-32031-cs03.newyork.ny.ibone.comcast.net (220.127.116.11) 22.085 ms 6 be-32021-cs02.newyork.ny.ibone.comcast.net (18.104.22.168) 22.305 ms . . . <ctrl-c>
The traceroute command isn't installed on Access Gateway nodes by default.