SecurePath 3.0e install failed on HP-UX 11.11

[joe wong_2]

I have examined and experimented with the 3.0E kit in detail. There are two major components in the kit, a tar file for support of VA & XP and a tar file for support of HSx (which is what I needed for connecting to EVA). Each tar file has multiple depots in it for different versions of HP-UX, e.g. 11.0, 11.11 etc. The install script will check a number of things and then invoke swinstall to install one of the depot that fits the environment. It is during swinstall when a problem occured causing the agent to die with signal 11, hence the management process complained about not being able to connect and suggested for checking the network connection.

I've tried out swinstall manually with other depots including a depot from the SecurePath 3.0D kit and it could go through the analysis phase without problem. That seems to suggest that my system and network is ok. It is only when I do swinstall with the 3.0E depot that the problem arises! Can someone who has installed 3.0E successfully on HP-UX 11.11 (Dec 2004 release) with MCOE to support EVA please respond! I'd like to know if there are patches other than those recommended in the Release Notes that can make a difference.

[Dave Hutton · Accepted solution]

Theres a known bug with 3.0E if you have a specific patch on your server look at doc KBRC00016523:

Or here it is snipped:
When installing (or upgrading to) SecurePath version 3.0E using the provided
install.sh script, the following error might be displayed on the screen :

Installing 64 bit Secure Path 3.0E Service Pack 00F Patch 00F on 11.11...

======= 03/11/05 14:15:54 CST BEGIN swinstall SESSION
(non-interactive) (jobid=hpdev1-0046)

* Session started for user "root@hpdev1".

* Beginning Selection
* Target connection succeeded for "hpdev1:/".
ERROR: RPC exception: "Connection closed (dce / rpc)" 03/11/05
14:15:58 CST
ERROR: A Remote Procedure Call to an agent has failed. Could not
start a management session for
"hpdev1:/tmp/SecurePath/CPQswsp.11_11_64.3.0E.00F.00F.patch.depot".
Make sure the host is accessible from the network.
* Source connection failed for
"hpdev1:/tmp/SecurePath/CPQswsp.11_11_64.3.0E.00F.00F.patch.depot".

WARNING: More information may be found in the daemon logfile on this
target (default location is hpdev1:/var/adm/sw/swagentd.log).
* Selection had errors.



======= 03/11/05 14:15:58 CST END swinstall SESSION (non-interactive)
(jobid=hpdev1-0046)

ERROR: swinstall has failed. Aborting the installation. Please check the sw
logs for details.

Additionaly swagent dies with a signal 11 and creates a core file in /.
CONFIGURATION
Operating System - HP-UX
Version - B.11.X
Other - SecurePath 3.0E



RESOLUTION

This issue, which is caused by a packaging problem in the SecurePath depot,
only manifests on SD-UX versions from the December 2004 and later OE media and
on systems with the latest SD-UX patch, PHCO_32116.

The next SD-UX patch will resolve the issue but its release date has not been
determined yet at the time of this writing (March 2005).

In the meantime follow these instructions to create a properly packaged depot
for the appropriate (bitsize, etc.) SP depot in /tmp/SecurePath. The given
example is for the depot /tmp/SecurePath/CPQswsp.11_11_64.3.0E.00F.00F.depot
(11.11 64bit full version), if you downloaded the upgrade only version of the
product the depot is called CPQswsp.11_11_64.3.0E.00F.00F.patch.depot


As root, create the following directories:

# mkdir /tmp/CPQ
# mkdir /tmp/products

Untar the Secure Path depot:

# cd /tmp/CPQ
# tar -xvf /tmp/SecurePath/CPQswsp.11_11_64.3.0E.00F.00F.depot
# cd catalog
# touch swlock

Now repackage the depot in /tmp/CPQ:

# swpackage -x media_type=tape -s /tmp/CPQ
@ /tmp/products/CPQ_11_11_64_3.depot

(Note : the above is one single line with spaces around the @ sign)

Finally manually install from the new depot:

# swinstall -x autoreboot=true -x mount_all_filesystems=false -
s /tmp/products/CPQ_11_11_64_3.depot CPQswsp

(Again this is one single line)

Once the installation completes, build a new kernel and reboot:

# cd /stand/build
# cp ../system system
# mk_kernel -s system
# kmupdate
# cd /
# shutdown -r 0


If you need further assistance with this procedure please contact your local
HP Response Center.

[John Payne_2]

Joe,

I have installed SecurePath 3.0E on a number of machines without problem. (I don't have the updated SD patches.) I actually built a depot with the SecurePath drivers and the Patch set for Secure Path together, and install them both at the same time. (So that there is only one reboot...) If it matters, I completely skipped 3.0D in production, we didn't like it'slook and feel...

John

[joe wong_2]

Dave had it right! I got the same answer via E-mail from someone in the HP-UX community. The depot for 11.11 needs to be repacked for it to work. Thanks everyone!

[joe wong_2]

Problem solved by repackaging the depot manually.