topic Re: swremove not working in Operating System - HP-UX

swremove not working

Jayraj — Tue, 03 Mar 2009 09:16:27 GMT

Hi,
I have a package Tripwire in my server I have to remove But when I used swremove Tripwire its not working pls help me..

swlist | grep -i trip
# Initializing...
# Contacting target "chflbm23"...
#
# Target: chflbm23:/
#

# Tripwire 4.0 Tripwire for Servers (HP-UX 11.x)
Tripwire.FILES 4.0 Tripwire for Servers FILES (HP-UX 11.x)

This is the out put of swremove

======= 03/03/09 04:10:15 EST BEGIN swremove SESSION
(non-interactive) (jobid=chflbm23-0143)

* Session started for user "root@chflbm23".

* Beginning Selection
ERROR: RPC exception: "Communications failure (dce / rpc)" 03/03/09
04:10:51 EST
ERROR: A Remote Procedure Call to a daemon has failed. Could not
start a management session for "chflbm23:/". Make sure the
host is accessible from the network, and that its daemon,
swagentd, is running.
* Target connection failed for "chflbm23:/".
ERROR: More information may be found in the daemon logfile on this
target (default location is
chflbm23:/var/adm/sw/swagentd.log).
* Selection had errors.

======= 03/03/09 04:10:51 EST END swremove SESSION (non-interactive)
(jobid=chflbm23-0143)

Re: swremove not working

Avinash20 — Tue, 03 Mar 2009 09:20:38 GMT

Do a

# swagentd -r

and then check

Also check that the nslookup to the host works fine

# nslookup chflbm23

Also in /etc/nsswitch.conf file entry should be files first

hosts: files dns

If nsswitch.conf files does not exist, copy it from

# cp /etc/nsswitch.files /etc/nsswitch.conf
# swagentd -r

Please assign points

Re: swremove not working

Duncan Edmonstone — Tue, 03 Mar 2009 09:21:56 GMT

first thing to try would be to restart swagentd and then try again:

swagentd -r

Also look in the mentioned log:

/var/adm/sw/swagentd.log

HTH

Duncan

Re: swremove not working

Sridhar R — Tue, 03 Mar 2009 09:22:07 GMT

Hi Swaraj,

Did you check the /etc/hosts entry of your server.

Try restarting the swagentd daemon and execute swremove again.

Thanks & Regards
Sridhar

Re: swremove not working

Jayraj — Tue, 03 Mar 2009 09:34:58 GMT

Thank you for quick responce..
Hi have restarted the deamon
#

Here is the output of /etc/nsswitch.conf file
# cat /etc/nsswitch.conf
hosts: files [NOTFOUND=continue UNAVAIL=continue TRYAGAIN=continue] dns [NOTFOUND=return UNAVAIL=continue TRYAGAIN=return]

However still I am unable to remove
#swremove Tripwire

# swremove Tripwire

======= 03/03/09 04:26:31 EST BEGIN swremove SESSION
(non-interactive) (jobid=chflbm23-0145)

* Session started for user "root@chflbm23".

* Beginning Selection
ERROR: RPC exception: "Communications failure (dce / rpc)" 03/03/09
04:27:06 EST
ERROR: A Remote Procedure Call to a daemon has failed. Could not
start a management session for "chflbm23:/". Make sure the
host is accessible from the network, and that its daemon,
swagentd, is running.
* Target connection failed for "chflbm23:/".
ERROR: More information may be found in the daemon logfile on this
target (default location is
chflbm23:/var/adm/sw/swagentd.log).
* Selection had errors.

======= 03/03/09 04:27:06 EST END swremove SESSION (non-interactive)
(jobid=chflbm23-0145)

Re: swremove not working

Jayraj — Tue, 03 Mar 2009 09:35:53 GMT

This is the entry in etc/hosts

153.6.112.16 chflbm23 ch-flor-bm23

Re: swremove not working

Avinash20 — Tue, 03 Mar 2009 09:39:01 GMT

# nslookup chflbm23
# netstat -in

Does chflbm23 resolve to the IP address

Re: swremove not working

Jayraj — Tue, 03 Mar 2009 09:45:53 GMT

Hi here is the nslookup and netstat -in outputs

nslookup

Using /etc/hosts on: chflbm23

looking up FILES
Name: chflbm23
Address: 153.6.112.16
Aliases: ch-flor-bm23

#netstat -in

# netstat -in
Name Mtu Network Address Ipkts Ierrs Opkts Oerrs Coll
lan0 1500 153.6.112.0 153.6.112.16 4072271 0 624842 0 0
lo0 4136 127.0.0.0 127.0.0.1 10285 0 10285 0 0

Re: swremove not working

Avinash20 — Tue, 03 Mar 2009 09:45:57 GMT

Hi,

Please post the output of

# nslookup chflbm23
# nslookup
# hostname
# netstat -in

Thanks

Re: swremove not working

Jayraj — Tue, 03 Mar 2009 09:52:38 GMT

Hi here is the other two outputs
# nslookup 153.6.112.16
Using /etc/hosts on: chflbm23

looking up FILES
Name: chflbm23
Address: 153.6.112.16
Aliases: ch-flor-bm23

# hostname
chflbm23

Re: swremove not working

Avinash20 — Tue, 03 Mar 2009 09:56:27 GMT

netstat -in

Ist line output with the IP address.
I am asking since wanted to confirm if that IP address resolves to the same host,

Re: swremove not working

Avinash20 — Tue, 03 Mar 2009 10:05:17 GMT

Also could you post the swagent.log and swagentd.log (/var/adm/sw)

Re: swremove not working

Avinash20 — Tue, 03 Mar 2009 10:06:16 GMT

Also note that

ifconfig lan0' and '/etc/hosts' IP's description are same.

Re: swremove not working

Jayraj — Tue, 03 Mar 2009 10:07:17 GMT

Hi..
I think swagentd is not getting stopped
when I used sbin/init.d/swagentd stop
it is giving that deamon has stopped
However it still there..

# ps -ef | grep -i swagent*
root 9507 1 0 04:24:00 ? 0:00 swagentd -r
root 12489 7913 0 05:02:02 pts/4 0:00 grep -i swagent*

Re: swremove not working

Avinash20 — Tue, 03 Mar 2009 10:11:06 GMT

# /usr/sbin/swagentd -k
# ps -ef| grep swagentd
# /usr/sbin/swagentd
# ps -ef| grep swagentd
root 9112 1 0 21:03:11 ? 0:00 /usr/sbin/swagentd

Could you answers the above reply please

Re: swremove not working

Avinash20 — Tue, 03 Mar 2009 10:14:42 GMT

Post the last few lines of the swagent.log and swagentd.log (/var/adm/sw)

Re: swremove not working

Jayraj — Tue, 03 Mar 2009 10:19:21 GMT

hi swagent is ok now.. so wt info should I give...

Re: swremove not working

Avinash20 — Tue, 03 Mar 2009 10:24:54 GMT

LAst 100 lines of

tail -n 100

/var/adm/sw/swagent.log
/var/adm/sw/swagentd.log