Ultrapower
发现系统中有两个/usr/xpg4/bin/ls 和/usr/bin/ls,出问题的是/usr/bin/ls, 用
usr/xpg4/bin/ls 替换掉/usr/bin/ls,重新安装,成功。
1.5 在SuSE linux上安装patrolagent出现问题
patrol 版本:9211 OS版本: AIX 问题描述:
在SuSE linux上安装patrolagent出现问题,已经对错误进行截图,日志收集 日志:
原因分析: 版本问题:
Patrol Installater will check etc/*-release for Linux OS version checking. Please see the following resolution with more details: Resolution 194105
Problems with making modifications to /etc/*release on Linux systems.
The Common Installer, which is used to install BMC products, uses the contents of /etc/*release on Linux systems to determine the OS characteristics in order to determine what should be installed. The reason for this is that the 'uname -a' command, which is used on other OSs, doesn't return vendor & release information on Linux systems.
Editing this file can result in a failed installation on the system if certain rules aren't followed. The files for the different Linux distributions and the contents that BMC requires in them are: ################## SuSE - /etc/SuSE-release
The first line must begin with: \
The second line must be of the format:
VERSION = X.Y.Z (case sensitive, X = major version, Y = minor version of SuSE, Z = release (optional)) ##################
Mandrake - /etc/mandrake-release First line must begin with: Mandrake?(case insensitive)
And must contain the word \the version number in the same X.Y.Z format listed earlier. ################## Fedora - /etc/fedora-release First line must begin with: \
And must contain the word \the version number in the same X.Y.Z format listed above.
Note that Patrol doesn't support Fedora. This entry only exists detailing what the Common Installer requires.
28357950.doc 11/32
Ultrapower
################## RedHat - /etc/redhat-release First line must begin with:
\line must contain the words \must contain the string \
The line must also contain the string \version number in the same X.Y.Z format. =======
解决办法:
如果确认版本没有问题,可以修改/etc/*release为标准格式。
1.6 删除安装的patrol for unix agent后重新安装失败
patrol 版本: OS版本: 问题描述:
patrol for unix改变安装目录,删除安装的patrolagent后重新安装失败 日志:
原因分析:
Considering this error message, old path seems to remain in /etc/patrol.d/security_policy_v3.0/*. 解决办法:
重新安装前,删除 /etc/patrol.d BMC还给了个说明:
find . -type f -exec grep \directory from the machine that the tar was created).
1.7 安装patrol for unix and linux出现错误
patrol 版本:9211
OS版本: RedHat AS4 Update3 问题描述:
RedHat AS4 Update3平台下安装patrol for unix and linux,出现了错误提示(见附件),root用户密码及安装介质本身可以确定没有任何问题。 [15:37:14] install_RunActions:Attempting to run script [root@/home/ap/patrol/Patrol3/copy_config.sh /home/ap/patrol/ Patrol3 bak FALSE] 28357950.doc 12/32
Ultrapower
[15:37:14] install_RunScript:Attempting to run script root@/home/ap/patrol/Patrol3/copy_config.sh /home/ap/patrol/ Patrol3 bak FALSE [15:37:14] log_ProcessProductLogToken:Processed directive '[PRODUCT_LOG];cfg_sec_prms_unix;CI_ROOT_BAD_PASSWD;Unable to run script [/home/ap/patrol/Patrol3/copy_config.sh] as user [root] because of invalid password. The script has to be run manually later as root.'. [15:37:14] RunExpectTool: Warning: Skip running script '/home/ap/patrol/Patrol3/copy_config.sh /home/ap/patrol/ Patrol3 bak FALSE' because previous root login failed. [15:37:14] install_RunScript:Error: Failed to run script [/home/ap/patrol/Patrol3/copy_config.sh], err=[RunExpectTool: Warning: Skip running script '/home/ap/patrol/Patrol3/copy_config.sh /home/ap/patrol/ Patrol3 bak FALSE' because previous root login failed.] 日志:
原因分析:
A potential reason that /etc/patrol.d isn't getting updated by
agent_configure.sh was that the \(keys, certificates and trusted roots)\installation. 解决办法:
Edit the ./Patrol3/agent_configure.sh script file and look for the following lines:
CUSTOMER_SECURITY_LEVEL=0 SECURITY_OVERWRITE=FALSE
If SECURITY_OVERWRITE is set to FALSE, make a backup copy of the original agent_configure.sh file, change FALSE to TRUE, save the file, and execute it as ROOT: ./agent_configure.sh -d
If SECURITY_OVERWRITE=TRUE already, execute as ROOT the ./agent_configure.sh -d script
1.8 Patrol 安装100%却失败-root用户在安装中的作用
patrol 版本:9300 OS版本: AIX 5.2 问题描述1:
Patrol 安装100%却失败,BMC给的说明,都与root权限有关系。后面是两个案例,1.1里面也介绍的root的另一个用处。基本包含1.7,5.8
原因分析1:
What are the post-installation scripts to run if root access is not supplied in PATROL for Unix v9.2.x or v9.3x?
28357950.doc
13/32
Ultrapower
-
During Unix installations, a window comes up called \Account Properties\
password for the root account. If it is desired to continue without specifying the root password, then enter a bogus entry in the root password fields and select Next. The installation program should get to 100%, but may report \complete the installation, certain scripts will need to be executed as root. -
NOTE: Check the PATROL solution version as the post-installation scripts have changed. 解决办法1:
In PATROL for Unix and Linux v9.2.x or v9.3x, run the following scripts as root to complete root configuration:
1. ./agent_configure.sh -d
This script is used to set permissions and ownership of PATROL binaries (PatrolAgent & snmpmagt) and also runs the sec_configure.sh script. It is located in the Patrol3 directory (BMC_ROOT/Patrol3) and has replaced configure.sh, used in previous versions of PATROL for Unix.
2. ./b1config*.sh
In PATROL for Unix v9.1.01, b1config.sh changed to b1config7140.sh. In PATROL for Unix v9.2.10 - 9.2.15, b1config.sh changed to b1config7210.sh.
In PATROL for Unix v9.2.20 & v9.3.00, the script is called b1config7300.sh. This script is located in the Patrol3 directory (BMC_ROOT/Patrol3)
and configures the Perform bgscollect collector to work with the kernel.
3. ./sec_configure.sh
This script is only needed if \configuration\
The script places the security level, files, and policy in \
For PATROL for UNIX and Linux versions 9.2.10 and above, the script is located in the BMC_ROOT/common/security/config_v3.0 directory.
For PATROL for UNIX and Linux versions prior to 9.2.10, the script is located in $BMC_ROOT/common/security/config directory.
For Basic Security the value is \
Example:
# ./sec_configure.sh /opt/bmc/Patrol3 0 ===
问题描述2:
Wed Aug 08 11:57:06 2007: ESS Error: ESS_Policy_BootStrapEE() failed >-1< Wed Aug 08 11:57:06 2007: ESS Error: PolicyLoad failed -1 >-1< 28357950.doc 14/32
Ultrapower
Wed Aug 08 11:57:06 2007: ESS: exiting...
原因分析2:
首先查看
/etc/patrol.d/security_policy_v3.0> ll total 20
drwxr-xr-x 4 root root 512 Apr 20 09:59 .. drwxr-xr-x 2 root root 512 Apr 20 09:59 bak -rw-r--r-- 1 root root 1495 Apr 20 09:59 site.plc -rw-r--r-- 1 root root 561 Apr 20 09:59 esi.plc -rw-r--r-- 1 root root 40 Apr 20 09:59 signer.plc -rw-r--r-- 1 root root 46 Apr 20 09:59 verifier.plc -rw-r--r-- 1 root root 232 Apr 20 09:59 client.plc drwxr-xr-x 3 root root 512 Apr 20 09:59 .
-rw-rw-rw- 1 root root 869 Apr 20 09:59 agent.plc
报错的问题是/etc/patrol.d/security_policy_v3.0目录下的这些文件有问题
解决问题2:
我们所要做的就是从新创建这些文件~ 创建方式:
1、以ROOT用户登陆
2、进入$PATROL_HOME common/security/config_v3.0/
3、执行./p7_change_security_level.sh -c AGENT_CON -l 0 -n BOTH -d Patrol3 -v _v3.0
执行完成后
4、su 到 patrol用户PatrolAgent &启动正常问题解决~
问题描述3: 11:55:30] RunExpectTool: Warning: Skip running script '/opt/bmc/Patrol3//bin/PtDLLSecurity /opt/bmc/Patrol3/' because previous root login failed. [11:55:30] install_RunScript:Error: Failed to run script [/opt/bmc/Patrol3//bin/PtDLLSecurity], err=[RunExpectTool: Warning: Skip running script '/opt/bmc/Patrol3//bin/PtDLLSecurity /opt/bmc/Patrol3/' because previous root login failed.] [11:55:30] install_Products:PostInstall action(s) failed. 提示root用户登陆失败 28357950.doc 15/32