new RP2470

[Eric Bursley]

I recently setup our new RP2470 server w/ HP-UX 11i Enterprise OE preinstalled. After configuring the GSP and HPUX for IP address and configuration settings, I noticed that I'm getting errors during the init process. After the system has finished booting, I can not list any software or access the SW depot.
I'll attach my /etc/rc.log for your review. Any assistance would be helpful. Thank you.

[Steven E. Protter]

I did this to a system at least once.

There is probably a typo in the networking section of /etc/rc.config.d/netconf

An extra dot can do it. Go through it line by line and look for a typo, then boot.

Still reading the log.

SEP

[Geoff Wild]

Also, don't have backup files in /etc/rc.config.d

IE: netconf.bak, etc...

If you want to keep a backup, put them in another directory - like /root or something.

Rgds...Geoff

[Eric Bursley]

Thanks for your replies, I have checked out the netconf file and found no extra dots or extra lines. Also I have not made any backup files and didn't see any backup files in the /etc/rc.config.d directory.

Thank you

[Michael Steele_2]

Rerun 'set_parms initial' if this fails reinstall the O/S. (* which should only take a couple of hours anyway. *)

[Robert-Jan Goossens]

Hi,

Take a look at this document

http://www2.itrc.hp.com/service/cki/docDisplay.do?docLocale=en_US&docId=200000062910478
Hope it helps,

Robert-Jan.

[Helen French]

What errors are you getting during init process? Can you post it? After you get the prompt, will you be able to see the network properly?

# ioscan -fnC lan
# nslookup IP_address/hostname

Is the swagent daemon running? Any error message on the system log file?

[Eric Bursley]

The errors I get are the following:
Output from "/sbin/rc2.d/S870swagentd start":
----------------------------
Running /usr/lib/sw/mx/configure to reset hostname.
ERROR: Failed to package AgentConfig into /var/opt/mx/depot11.
swpackage did not run or produced no output.
ERROR: Failed to package AgentConfig into /var/opt/mx/depot10.
swpackage did not run or produced no output.
WARNING: Could not properly configure SD into ServiceControl.
You may try again later by running /usr/lib/sw/mx/configure.
"/sbin/rc2.d/S870swagentd start" FAILED

swagent does not start. I know this is my problem. I can access the network, and I have configured this server as a NIS domain client and that is working w/o issue.

I have run through the set_params initial again and everything was fine with it. I then rebooted.

I can attach any log you want.

Thnak you,

[Steven E. Protter]

Output of /var/adm/syslog/syslog.log would be VERY helpful.

Do the directories exist?

/sbin/init.d/swagentd -r > /tmp/swagent.txt

Post it.

These guys deserve points for trying to help you. Please consider it.

SEP

[Helen French]

Are you using SCM (Service control manager)? If you don't use them remove it from the system. If you do, then check it's configuration, files and reconfigure if needed.

Also, make sure that you have all latest SD patch loaded on the system.

[Helen French]

Again, You may get more idea about SCM from www.docs.hp.com and also by reading the startup script:
/sbin/init.d/swagentd

Make proper changes to the configuration if needed. The SCM part on the script will run if the hostname has been changed since the last run of mx configure script. This will happen when you change the temp. hostname of a cold ignited system.

[Eric Bursley]

I would like to thank you all. I have check the hostname. Originally it was hpsan02.sanity.nos.dell.com. I changed that to hpsan02 and rebooted. hostname is set correctly and I do have network access and NIS access. I can list sofware in the SWdepot and I can't install patches. The document link about swlist helped me understand what the problem is but not a resolution. My hostname is set properly.
I have included my /var/adm/syslog/syslog.log and well as the output of the /sbin/init.d/swagentd.

thank you

[Eric Bursley]

here is the syslog.

[Steven E. Protter · Accepted solution]

I do not think the hostname switch is critical. So long as the various sections of the hostname are less than 8 characters, HP-UX does not care.

Your issues seem to be centered around SCM.

If you aren't using it , rip it out. If you plan to use it, swremove it and swinstall it back in again.

Might I ask, what this machine is supposed to do for you(your company)?

Big picture, it is possible that there is a problem with the image that HP(?) used to preinstall the machine.

You might want to do a cold install and choose the components you want to install. I'd make sure you have any codewords and such handy before going that route.

I noticed from your syslog that you are running some of the insecure daemons.

Just as a reference, I'm pasting in my recommended package of security steps.

CIFS/9000

http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=B8725AA

Client
http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=B8724AA

Documentation:
http://www.docs.hp.com/hpux/onlinedocs/B8725-90003/B8725-90003.html

Security Post



Links:


security_patch_check: Checks your system and makes sure its up to date with security patches from HP
http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=B6834AA


Required Perl install

http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=PERL

Bastille: Security Hardening Tool

http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=B6849AA

TCP Wrappers

http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=TCPWRAP

Secure Shell: a replacement for rcp ftp and telnet that encrypts passwords

http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=T1471AA

http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=T1471AA

IDS/9000 Intrusion Detection System which can track security breaches and attempted security breaches.

http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=J5083AA

pam kerobos
http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=J5849AA

random number generator
http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=KRNG11I

Attaching a document on security hardening.


SEP

[Eric Bursley]

reimaging is an option, but will be a pain as this system has no CDROM, and no tape drive. I would need to setup an ingite ux server with my other hp-ux server that I have.
This server will be used in a lab environment as an hp-ux reference system and mission critical is not really important. However I do need to install EMC SAN based software on this server, but as of right now can't because of the problem with the swagent not running.
Do you have any guide lines for doing an easy install on this type of server w/o going over the network?
Thank you for your additional information about security. I will read them over and apply what we need.

[Steven E. Protter]

As a matter of fact, yes I do.

I'll give you an outline and then attach a doc.

The outline is:

The Ignite server and this machine now called the client machine must be hooked to the same subnet on their built in LAN cards.

In my example, the server is 192.168.0.4 the client is 192.168.0.10

How to set up the Ignite server will be in the doc, thats fun.

boot the client

Interupt at the 10 second prompt.

bo lan.192.168.0.4 install

If the boot is successful, you'll boot right into the Ignite Server you set up.

(btw, my guess is someone messed up the original install on this box).

Here are the docs you'll need to go further....

Creating on OS Archive

http://docs.hp.com/cgi-bin/fsearch/framedisplay?top=/hpux/onlinedocs/B2355-90772/B2355-90772_top.html&con=/hpux/onlinedocs/B2355-90772/00/00/33-con.html&toc=/hpux/onlinedocs/B2355-90772/00/00/33-toc.html&searchterms=Server%7cSetup%7cGolden%7cImage%7cIgnite&queryid=20030512-205438

An old one, but a good one...


Steps to create a golden system.

http://docs.hp.com/cgi-bin/fsearch/framedisplay?top=/hpux/onlinedocs/B2355-90153/B2355-90153_top.html&con=/hpux/onlinedocs/B2355-90153/00/00/61-con.html&toc=/hpux/onlinedocs/B2355-90153/00/00/61-toc.html&searchterms=Server%7cSetup%7cGolden%7cImage%7cIgnite&queryid=20030512-205438

The other chapters in that guide will be very helpful.

There are a few changes with Ignite 11i, so here is a more general doc that should lead to even more information.

http://docs.hp.com/cgi-bin/fsearch/framedisplay?top=/hpux/onlinedocs/B2355-90772/B2355-90772_top.html&con=/hpux/onlinedocs/B2355-90772/00/00/7-con.html&toc=/hpux/onlinedocs/B2355-90772/00/00/7-toc.html&searchterms=Golden%7cImage%7c11i%7cIgnite&queryid=20030512-205715

If you have specific questions go ahead and post them, Ignite is a tricky but powerful tool.

Also, don't install PHCO_26422

Its an update to pax allowing for packing of files between 2 and 8 Gig. pax_iux which unpacks them on the install side can't unpack files that big.

SEP

[Eric Bursley]

Just an FYI, I had mistyped the name of this server in DNS, which caused the swagentd not to find itself. Correcting the name in DNS and starting the swagentd resolved the issue.
thanks for you help.