i4lbfind -q GBL servers

[Simon Jespersen]

Hi!
We have a product installed on our hpux 11.11i under /opt/ifor which contains
/opt/ifor/ls/*

README bin dll os
VERSION.ARK conf doc res

We are running cfg2html on the server and that script makes a call
/opt/ifor/ls/bin/i4lbfind -q #searching for GBL servers. Which we are not running, however this call creates a file /tmp/last_uuid with perm 666 which can be a gab in the security. (google reports security risks)

My question is, what prodeuct are the i4lbfind a port, can it be uninstalled and which pachage is it.

Thanks.

[Peter Godron]

Simon,
congratulations on tracking down your /temp/last_uuid file from:
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=1078401

Were our answers of any help (No points)?

To check what package:
swlist -l file | grep i4lbfind

If you are not using it, it can be un-installed. If it is un-installed it it not going to use any ports.

[Simon Jespersen]

Hi, i fact i did manage to track down the last_uuid file.

I wrote a script using lsof and ps to se exacly which processes running the moment the file was created and i found that our cfg2html did a call to i4lbfind for seach og gbl servers. I have assigned point to you.

Ive found out that i4lbfind is part of a peace of software called LSSRV. Which are some kind og license daemon. It was standard on hpux until 11.23 i beleave. We uninstalled it on a test system, now we try to uninstall it on the production system.

[Peter Godron]

Simon,
could you please complete the thread by awarding points to helpful answers and summarising the solution for you.
This will help resolution of similar problems in the future.