Re: PAM Kerberos error message issue

Chui Kock You_1 · ‎05-21-2012

Hi Dennis,

Any solution on the swjob log error message.

Regards,

Chui

Dennis Handly · ‎05-21-2012

>Any solution on the swjob log error message.

I'm waiting for you to rescan the swjob output for errors in that fileset, for libkrb5.so.

Otherwise lots of swverify errors are bogus, due to sloppy packaging.

Or redo the swverify to reduce the number of filesets:

swverify -x autoselect_dependencies=false KRB5CLIENT

Chui Kock You_1 · ‎05-21-2012

Hi Dennis,

The answer is in red.

Regards,

Chui

======= 05/22/12 09:13:09 SST BEGIN swverify SESSION

(non-interactive) (jobid=uxkulh04-0107)

* Session started for user "root@uxkulh04".

* Beginning Selection

* Target connection succeeded for "uxkulh04:/".

* Software selections:

KRB5CLIENT,r=E.1.6.2.09,a=HP-UX_B.11.31_IA/PA,v=HP

krb5client.KRB5-64SLIB-A,l=/,r=E.1.6.2.09,a=HP-UX_B.11.31_IA/PA,v=HP,fr=E.1.6.2.09,fa=HP-UX_B.11.31_IA

krb5client.KRB5-E-A-MAN-A,l=/,r=E.1.6.2.09,a=HP-UX_B.11.31_IA/PA,v=HP,fr=E.1.6.2.09,fa=HP-UX_B.11.31_IA/PA

krb5client.KRB5-J-E-MAN-A,l=/,r=E.1.6.2.09,a=HP-UX_B.11.31_IA/PA,v=HP,fr=E.1.6.2.09,fa=HP-UX_B.11.31_IA/PA

krb5client.KRB5-J-S-MAN-A,l=/,r=E.1.6.2.09,a=HP-UX_B.11.31_IA/PA,v=HP,fr=E.1.6.2.09,fa=HP-UX_B.11.31_IA/PA

krb5client.KRB5-PRG-A,l=/,r=E.1.6.2.09,a=HP-UX_B.11.31_IA/PA,v=HP,fr=E.1.6.2.09,fa=HP-UX_B.11.31_IA/PA

krb5client.KRB5-RUN-A,l=/,r=E.1.6.2.09,a=HP-UX_B.11.31_IA/PA,v=HP,fr=E.1.6.2.09,fa=HP-UX_B.11.31_IA

krb5client.KRB5-SHLIB-A,l=/,r=E.1.6.2.09,a=HP-UX_B.11.31_IA/PA,v=HP,fr=E.1.6.2.09,fa=HP-UX_B.11.31_IA

krb5client.KRB5IA32SLIB-A,l=/,r=E.1.6.2.09,a=HP-UX_B.11.31_IA/PA,v=HP,fr=E.1.6.2.09,fa=HP-UX_B.11.31_IA

krb5client.KRB5IA64SLIB-A,l=/,r=E.1.6.2.09,a=HP-UX_B.11.31_IA/PA,v=HP,fr=E.1.6.2.09,fa=HP-UX_B.11.31_IA

* Selection succeeded.

* Beginning Analysis

* Session selections have been saved in the file

"/.sw/sessions/swverify.last".

* The analysis phase succeeded for "uxkulh04:/".

* Verification succeeded.

NOTE: More information may be found in the agent logfile using the

command "swjob -a log uxkulh04-0107 @ uxkulh04:/".

======= 05/22/12 09:13:12 SST END swverify SESSION (non-interactive)

(jobid=uxkulh04-0107)

root@uxkulh04> (/) $ swjob -a log uxkulh04-0107 @ uxkulh04:/

======= 05/22/12 09:13:10 SST BEGIN verify AGENT SESSION (pid=15203)

(jobid=uxkulh04-0107)

* Agent session started for user

"root@uxkulh04.kul.intecbilling.com". (pid=15203)

* Beginning Analysis Phase.

* Target: uxkulh04:/

* Target logfile: uxkulh04:/var/adm/sw/swagent.log

* Reading source for file information.

* Configured krb5client.KRB5-64SLIB-A,l=/,r=E.1.6.2.09

* Configured krb5client.KRB5-E-A-MAN-A,l=/,r=E.1.6.2.09

* Configured krb5client.KRB5-J-E-MAN-A,l=/,r=E.1.6.2.09

* Configured krb5client.KRB5-J-S-MAN-A,l=/,r=E.1.6.2.09

* Configured krb5client.KRB5-PRG-A,l=/,r=E.1.6.2.09

* Configured krb5client.KRB5-RUN-A,l=/,r=E.1.6.2.09

* Configured krb5client.KRB5-SHLIB-A,l=/,r=E.1.6.2.09

* Configured krb5client.KRB5IA32SLIB-A,l=/,r=E.1.6.2.09

* Configured krb5client.KRB5IA64SLIB-A,l=/,r=E.1.6.2.09

* Summary of Analysis Phase:

Verified KRB5CLIENT,l=/,r=E.1.6.2.09

Verified krb5client.KRB5-64SLIB-A,l=/,r=E.1.6.2.09

Verified krb5client.KRB5-E-A-MAN-A,l=/,r=E.1.6.2.09

Verified krb5client.KRB5-J-E-MAN-A,l=/,r=E.1.6.2.09

Verified krb5client.KRB5-J-S-MAN-A,l=/,r=E.1.6.2.09

Verified krb5client.KRB5-PRG-A,l=/,r=E.1.6.2.09

Verified krb5client.KRB5-RUN-A,l=/,r=E.1.6.2.09

Verified krb5client.KRB5-SHLIB-A,l=/,r=E.1.6.2.09

Verified krb5client.KRB5IA32SLIB-A,l=/,r=E.1.6.2.09

Verified krb5client.KRB5IA64SLIB-A,l=/,r=E.1.6.2.09

* 9 of 9 filesets had no Errors or Warnings.

* The Analysis Phase succeeded.

======= 05/22/12 09:13:12 SST END verify AGENT SESSION (pid=15203)

(jobid=uxkulh04-0107)

Dennis Handly · ‎05-22-2012

>9 of 9 filesets had no Errors or Warnings.

Well this is unexpected. :-(

What does this show: (Perhaps it isn't in the KRB5CLIENT fileset.)

swlist -l file | fgrep libkrb5.so

Chui Kock You_1 · ‎05-22-2012

Hi Dennis,

The answer is in red.

Regards,

Chui

root@uxkulh04> (/) $ swlist -l file | fgrep libkrb5.so

KRB5-Client.KRB5-ENG-A-MAN: /usr/share/man/man3.Z/libkrb5.so.3

KRB5-Client.KRB5-ENG-A-MAN: /opt/krb5core/share/man/man3.Z/libkrb5.so.3

KRB5-Client.KRB5-IA32SLIB: /opt/krb5core/lib/hpux32/libkrb5.so.1

KRB5-Client.KRB5-IA32SLIB: /usr/lib/hpux32/libkrb5.so

KRB5-Client.KRB5-IA32SLIB: /usr/lib/hpux32/libkrb5.so.1

KRB5-Client.KRB5-IA64SLIB: /opt/krb5core/lib/hpux64/libkrb5.so.1

KRB5-Client.KRB5-IA64SLIB: /usr/lib/hpux64/libkrb5.so

KRB5-Client.KRB5-IA64SLIB: /usr/lib/hpux64/libkrb5.so.1

KRB5-Client.KRB5-JPN-E-MAN: /usr/share/man/ja_JP.eucJP/man3.Z/libkrb5.so.3

KRB5-Client.KRB5-JPN-E-MAN: /opt/krb5core/share/man/ja_JP.eucJP/man3.Z/libkrb5.so.3

KRB5-Client.KRB5-JPN-S-MAN: /usr/share/man/ja_JP.SJIS/man3.Z/libkrb5.so.3

KRB5-Client.KRB5-JPN-S-MAN: /opt/krb5core/share/man/ja_JP.SJIS/man3.Z/libkrb5.so.3

PHSS_41775.KRB5-ENG-A-MAN: /opt/krb5core/share/man/man3.Z/libkrb5.so.3

PHSS_41775.KRB5-IA32SLIB: /opt/krb5core/lib/hpux32/libkrb5.so.1

PHSS_41775.KRB5-IA64SLIB: /opt/krb5core/lib/hpux64/libkrb5.so.1

PHSS_41775.KRB5-JPN-E-MAN: /opt/krb5core/share/man/ja_JP.eucJP/man3.Z/libkrb5.so.3

PHSS_41775.KRB5-JPN-S-MAN: /opt/krb5core/share/man/ja_JP.SJIS/man3.Z/libkrb5.so.3

krb5client.KRB5-E-A-MAN-A: /opt/krb5client/share/man/man3.Z/libkrb5.so.3

krb5client.KRB5-J-E-MAN-A: /opt/krb5client/share/man/ja_JP.eucJP/man3.Z/libkrb5.so.3

krb5client.KRB5-J-S-MAN-A: /opt/krb5client/share/man/ja_JP.SJIS/man3.Z/libkrb5.so.3

krb5client.KRB5IA32SLIB-A: /opt/krb5client/lib/hpux32/libkrb5.so.1

krb5client.KRB5IA64SLIB-A: /opt/krb5client/lib/hpux64/libkrb5.so.1

root@uxkulh04> (/) $

Dennis Handly · ‎05-22-2012

>KRB5-Client.KRB5-IA32SLIB: /usr/lib/hpux32/libkrb5.so

This is very strange. This is the SD product that I have. But you seem to have this AND krb5client.

What does this show:

swverify -x autoselect_dependencies=false KRB5-Client

Chui Kock You_1 · ‎05-23-2012

Hi Dennis,

The answer is in red.

Regards,

Chui

root@uxkulh04> (/usr) $ swverify -x autoselect_dependencies=false KRB5-Client

======= 05/23/12 15:18:48 SST BEGIN swverify SESSION

(non-interactive) (jobid=uxkulh04-0112)

* Session started for user "root@uxkulh04".

* Beginning Selection

* Target connection succeeded for "uxkulh04:/".

* Software selections:

KRB5-Client.KRB5-64SLIB,l=/,r=B.11.31,a=HP-UX_B.11.31_IA/PA,v=HP,fr=B.11.31,fa=HP-UX_B.11.31_IA

KRB5-Client.KRB5-ENG-A-MAN,l=/,r=B.11.31,a=HP-UX_B.11.31_IA/PA,v=HP,fr=B.11.31,fa=HP-UX_B.11.31_IA/PA

KRB5-Client.KRB5-IA32SLIB,l=/,r=B.11.31,a=HP-UX_B.11.31_IA/PA,v=HP,fr=B.11.31,fa=HP-UX_B.11.31_IA

KRB5-Client.KRB5-IA64SLIB,l=/,r=B.11.31,a=HP-UX_B.11.31_IA/PA,v=HP,fr=B.11.31,fa=HP-UX_B.11.31_IA

KRB5-Client.KRB5-JPN-E-MAN,l=/,r=B.11.31,a=HP-UX_B.11.31_IA/PA,v=HP,fr=B.11.31,fa=HP-UX_B.11.31_IA/PA

KRB5-Client.KRB5-JPN-S-MAN,l=/,r=B.11.31,a=HP-UX_B.11.31_IA/PA,v=HP,fr=B.11.31,fa=HP-UX_B.11.31_IA/PA

KRB5-Client.KRB5-PRG,l=/,r=B.11.31,a=HP-UX_B.11.31_IA/PA,v=HP,fr=B.11.31,fa=HP-UX_B.11.31_IA/PA

KRB5-Client.KRB5-RUN,l=/,r=B.11.31,a=HP-UX_B.11.31_IA/PA,v=HP,fr=B.11.31,fa=HP-UX_B.11.31_IA

KRB5-Client.KRB5-SHLIB,l=/,r=B.11.31,a=HP-UX_B.11.31_IA/PA,v=HP,fr=B.11.31,fa=HP-UX_B.11.31_IA

* Selection succeeded.

* Beginning Analysis

* Session selections have been saved in the file

"/.sw/sessions/swverify.last".

ERROR: "uxkulh04:/": 4 files had errors during this operation.

* The analysis phase failed for "uxkulh04:/".

* Verification had errors.

NOTE: More information may be found in the agent logfile using the

command "swjob -a log uxkulh04-0112 @ uxkulh04:/".

======= 05/23/12 15:18:50 SST END swverify SESSION (non-interactive)

(jobid=uxkulh04-0112)

root@uxkulh04> (/usr) $ swjob -a log uxkulh04-0112 @ uxkulh04:/

======= 05/23/12 15:18:48 SST BEGIN verify AGENT SESSION (pid=18140)

(jobid=uxkulh04-0112)

* Agent session started for user

"root@uxkulh04.kul.intecbilling.com". (pid=18140)

* Beginning Analysis Phase.

* Target: uxkulh04:/

* Target logfile: uxkulh04:/var/adm/sw/swagent.log

* Reading source for file information.

* Configured KRB5-Client.KRB5-SHLIB,l=/,r=B.11.31

* Configured KRB5-Client.KRB5-64SLIB,l=/,r=B.11.31

* Configured KRB5-Client.KRB5-ENG-A-MAN,l=/,r=B.11.31

* Configured KRB5-Client.KRB5-IA32SLIB,l=/,r=B.11.31

* Configured KRB5-Client.KRB5-IA64SLIB,l=/,r=B.11.31

* Configured KRB5-Client.KRB5-JPN-E-MAN,l=/,r=B.11.31

* Configured KRB5-Client.KRB5-JPN-S-MAN,l=/,r=B.11.31

* Configured KRB5-Client.KRB5-PRG,l=/,r=B.11.31

* Configured KRB5-Client.KRB5-RUN,l=/,r=B.11.31

ERROR: Cannot read symlink value for file

"/usr/lib/hpux32/gss/libgssapi_krb5.so".

ERROR: Cannot read symlink value for file

"/usr/lib/hpux32/libcom_err.so".

ERROR: Cannot read symlink value for file

"/usr/lib/hpux32/libk5crypto.so".

ERROR: Cannot read symlink value for file

"/usr/lib/hpux32/libkrb5.so".

ERROR: Fileset "KRB5-Client.KRB5-IA32SLIB,l=/,r=B.11.31" had file

errors.

* Summary of Analysis Phase:

Verified KRB5-Client.KRB5-SHLIB,l=/,r=B.11.31

Verified KRB5-Client.KRB5-64SLIB,l=/,r=B.11.31

Verified KRB5-Client.KRB5-ENG-A-MAN,l=/,r=B.11.31

ERROR: Verify failed KRB5-Client.KRB5-IA32SLIB,l=/,r=B.11.31

Verified KRB5-Client.KRB5-IA64SLIB,l=/,r=B.11.31

Verified KRB5-Client.KRB5-JPN-E-MAN,l=/,r=B.11.31

Verified KRB5-Client.KRB5-JPN-S-MAN,l=/,r=B.11.31

Verified KRB5-Client.KRB5-PRG,l=/,r=B.11.31

Verified KRB5-Client.KRB5-RUN,l=/,r=B.11.31

ERROR: 1 of 9 filesets had Errors.

* 8 of 9 filesets had no Errors or Warnings.

ERROR: The Analysis Phase had errors. See the above output for

details.

======= 05/23/12 15:18:50 SST END verify AGENT SESSION (pid=18140)

(jobid=uxkulh04-0112)

Dennis Handly · ‎05-23-2012

>ERROR: Cannot read symlink value for file "/usr/lib/hpux32/gss/libgssapi_krb5.so".

>ERROR: Cannot read symlink value for file "/usr/lib/hpux32/libcom_err.so".

>ERROR: Cannot read symlink value for file "/usr/lib/hpux32/libk5crypto.so".

>ERROR: Cannot read symlink value for file "/usr/lib/hpux32/libkrb5.so".

Finally! This confirms my conclusion above about the bad file vs a symlink:

>-rwxr-xr-x 1 bin bin 1523952 Jun 18 2005 /usr/lib/hpux32/libkrb5.so
>lr-xr-xr-x 1 bin bin 14 Sep 9 2009 /usr/lib/hpux64/libkrb5.so -> ./libkrb5.so.1

The first is more likely to be your problem. It has a date of 2005 instead of 2009. Move it aside and create the symlink:

ln -s ./libkrb5.so.1 libkrb5.so

You may have to do this for all 4 shlibs.

Chui Kock You_1 · ‎05-24-2012

Hi Dennis,

Thank for the help

No more errors for the swverify. I’ve recreate the soft link as per advised.

root@uxkulh04> (/usr/lib/hpux32) $ swverify -x autoselect_dependencies=false KRB5-Client

======= 05/24/12 16:21:33 SST BEGIN swverify SESSION

(non-interactive) (jobid=uxkulh04-0118)