Troubleshooting v9

Suggest edits

Server installation errors

RHEL 8

While installing the PEM server on RHEL 8, if you see this error:

[root@etpgxlt firstuser]# dnf install edb-pem
Updating Subscription Management repositories.
Last metadata expiration check: 0:01:33 ago on Wed 30 Mar 2022 01:28:16 AM EDT.
Error: 
 Problem: problem with installed package python3-mod_wsgi-4.6.4-4.el8.s390x
  - package python39-mod_wsgi-4.7.1-4.module+el8.4.0+9822+20bf1249.s390x conflicts with python3-mod_wsgi provided by python3-mod_wsgi-4.6.4-4.el8.s390x
  - package python39-mod_wsgi-4.7.1-4.module+el8.4.0+9822+20bf1249.s390x conflicts with python3-mod_wsgi provided by python3-mod_wsgi-4.6.4-3.el8.s390x
  - package edb-pem-server-8.4.0-7.rhel8.s390x requires python39-mod_wsgi >= 4.7, but none of the providers can be installed
  - package edb-pem-8.4.0-7.rhel8.s390x requires edb-pem-server = 8.4.0-7.rhel8, but none of the providers can be installed
  - cannot install the best candidate for the job
(try to add '--allowerasing' to command line to replace conflicting packages or '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages)
[root@etpgxlt firstuser]#

Remove the python3-mod_wsgi package first:

dnf remove python3-mod_wsgi

Try installing the PEM server again.

RHEL 7 ppc64le

After installing the PEM server on RHEL 7 ppc64le, you may see the following cipher error in the worker log file:

WARNING: ConnectToPEM: unable to connect to PEM database: could not create SSL context: library has no ciphers

To resolve this error, if you intend to stay on PostgreSQL version 12, upgrade to the latest available version. Then, restart the PEM agent.

Reconfiguring the PEM server

In some situations, you might need to uninstall the PEM server, reinstall it, and then configure the server again. To do so:

  1. Remove the PEM server configuration and uninstall:

    /usr/edb/pem/bin/configure-pem-server.sh –un

  2. Remove the PEM packages:

    yum erase edb-pem-server

  3. Drop the pem database:

    DROP DATABASE pem

  4. Move the certificates from /root/.pem/ to another location:

    mv /root/.pem/* <new_location>

  5. Move the agent.cfg file from /usr/edb/pem/agent/etc/agent.cfg to another location:

    mv /usr/edb/pem/agent/etc/agent.cfg <new_location>

  6. Then, configure the PEM server again:

    /usr/edb/pem/bin/configure-pem-server.sh

PEM web client not loading

If the PEM web client isn't loading, check the HTTPD log in the /var/log/httpd/error_log file.

If you see the following message in the log:

Truncated or oversized response headers received from daemon process 'edbpem': /usr/edb/pem/web/pem.wsgi

Add the following statement at the bottom of the Apache httpd.conf file located in the /etc/httpd/conf folder:

WSGIApplicationGroup %{GLOBAL}

Restart the HTTPD server after adding the statement:

sudo systemctl restart httpd.service