Hello,
At this point, no need for external internet access from the machine, although you will need it for fetching updates.
As for your issue, for some reason, the tokens are not replaced.
Can you try:
# rm /opt/kaltura/app/base-config.lock
# rm /etc/httpd/conf.d/*kaltura*
# /opt/kaltura/bin/kaltura-base-config.sh /path/to/your/answer/file
and then make sure the @APP_DIR@ token was replaced in /opt/kaltura/app/configurations/apache/kaltura.conf and in /opt/kaltura/app/configurations/apache/kaltura.ssl.conf?
Once you verified they were indeed replaced, please run:
# /opt/kaltura/bin/kaltura-front-config.sh /path/to/your/answer/file
if there were not replaced, please run:
# bash -x /opt/kaltura/bin/kaltura-base-config.sh /path/to/your/answer/file 2> /tmp/kaltura-base.log
and email me at jess.portnoy kaltura.com since that has a lot of sensitive data you should paste here.