Operating System - HP-UX
1748095 Members
5759 Online
108758 Solutions
New Discussion юеВ

Re: Security hardening hpux 11.23 itanium

 
SOLVED
Go to solution
Donald Thaler
Super Advisor

Re: Security hardening hpux 11.23 itanium

after i was able to run the genclnth successfully as root i had to go in and change the owner of the files to oracle:ointall... how do i go about finding all the symbolic links in a directory/subdirectory and if that's not possible what would the script look like to find all the files owned by
root in a given directory/subdirectories..
Donald Thaler
Super Advisor

Re: Security hardening hpux 11.23 itanium

i created a new user oracle1 and i was able to create a new oracle home without any problems..(the genclntsh process worked). how would i compare the users oracle and oracle1 to see what the differences are ??
Suraj K Sankari
Honored Contributor

Re: Security hardening hpux 11.23 itanium

Hi,
>>how would i compare the users oracle and oracle1 to see what the differences are

What are the things you want to compare ?

you can run these commands to see the differences

#finger oracle oracle1

login with oracle and run
env
set

same for oracle1 take the output into a file
then run diff or comm command

compare .profile for both users.

Suraj
Dennis Handly
Acclaimed Contributor

Re: Security hardening hpux 11.23 itanium

>how do I go about finding all the symbolic links in a directory/subdirectory

find $* -type l

>find all the files owned by root in a given directory/subdirectories.

find $* -user root
Donald Thaler
Super Advisor

Re: Security hardening hpux 11.23 itanium

the problem previously mentioned was an inability to run the oracle linking process,we discovered that if we create a new oracle user,oracle1, and run the linking process as that user, it works... are there any other varaibles other than the 'env' variable that we could compare against to see why one oracle user is different from the other one ??

TTr
Honored Contributor

Re: Security hardening hpux 11.23 itanium

If you look in the genclntsh script, the error

"Failed to link libclntsh.so.10.1"

appears after the following statement

${LD} ${LD_RUNTIME} ${LD_OPT} ${LD_OUT} ${LD_SELF_CONTAINED} ${OCLIENT_ON} \
${DEF_ON} ${NAUTAB} ${NAETAB} ${NAEDHS} ${SYMS_XDK} ${SYMS_SQL} \
${SYMS_PLSQL} ${SYMS_OCIC} ${SYMS_LDAP} ${SYMS_NETWORK} ${SYMS_XNET} ${OLIBS} \
${SYSLIBS} ${USRLIBS} > ${MAPFILE} 2>&1

If you notice the "> ${MAPFILE}" at the end of the long LD statement, this is where the library file libclntsh.so.10.1 is created. I still claim that the file libclntsh.so.10.1 exists and it is owned by root, that's why
the subsequent genclntsh commands when run as oracle fail.

So, if you have not yet checked for an existing libclntsh.so.10.1 file that is owned by root, do so. It would take you only a few seconds. The file should be in
$ORACLE_HOME/lib/libclntsh.so.10.1
and
$ORACLE_HOME/lib32/libclntsh.so.10.1

PS. The genclntsh script is in $ORACLE_HOME/bin
Dennis Handly
Acclaimed Contributor

Re: Security hardening hpux 11.23 itanium

>are there any other variables other than the 'env' variable that we could compare against to see why one oracle user is different from the other one?

env(1) is a command that lists the exported variables.

To compare two users, you should sort then compare:
env | sort > user_A.env
...
comm -3 user_A.env user_B.env
Jasdeep Pawar
New Member

Re: Security hardening hpux 11.23 itanium

Did somebody find solution to this ?. I also have same type of problem for PRO*C program compilaton. My libclntsh.so file is ZERO bytes and there is no libclntsh.so.10.1 file in ORACLE_HOME.