Operating System - HP-UX
1833668 Members
3754 Online
110062 Solutions
New Discussion

Re: ipsec_mgr not in depot?

 
PatrikS
Occasional Contributor

ipsec_mgr not in depot?

I've just installed HP-UX IPSec but the depot file does not seem to contain the GUI to configure it (ipsec_mgr).

According to swinstall, the depot file just creates a directory /var/adm/ipsec_gui but not any files.

Should this ipsec_mgr tool be optained from a separate depot file?

https://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=J4256AA
4 REPLIES 4
Viktor Balogh
Honored Contributor

Re: ipsec_mgr not in depot?

you can view the files in the depot like this:

# swlist -l file -s /path/to/yourdepot.depot

****
Unix operates with beer.
PatrikS
Occasional Contributor

Re: ipsec_mgr not in depot?

Yes, I had checked contents in the depot in swinstall and swlist confirms that the depot does _not_ contain the ipsec_mgr binary but only a directory where I assume that ipsec_mgr should be.

# IPSec.IPSEC2-GUI A.03.00 IPSec GUI
IPSec.IPSEC2-GUI: /var/adm/ipsec_gui
# IPSec.IPSEC2-GUI A.03.00 IPSec GUI
IPSec.IPSEC2-GUI: /var/adm/ipsec_gui

The IPSec documentation does not give any information about this or that ipsec_mgr should be installed using any other depot file.

So, my conclusion is that the official depot file J4256AA_A.03.00_HP-UX_B.11.23_IA_PA.depot is incomplete.

Is there any other way of retrieving ipsec_mgr for 11.1v2?
It seems to be the only way to configure rules/policys...
PatrikS
Occasional Contributor

Re: ipsec_mgr not in depot?

Hmmm....
It seems that the graphical configuration gui was removed in the latest version of HP-UX IPSec (A.03) for some reason, although not completely as the directory ipsec_gui is still created.

Any ideas as to why it was removed?

Manual configuration of IPSec policys is quite difficult and can easily result in typo errors etc.
Dennis Handly
Acclaimed Contributor

Re: ipsec_mgr not in depot?

>Manual configuration of IPSec policies is quite difficult and can easily result in typo errors etc.

It would seem that's why you use scripting and CLIs.