Hello Wendy,
thank you for welcoming me and trying to help me.
Unfortunately, you are wrong when you think I don't read documentation. I am not that ignorant... ;-)
"Consolidated installer" issue:
===============================
- look at https://www.ibm.com/docs/en/guardium/12.x?topic=iuugclus-installing-gim-other-packages-linux-servers-by-using-consolidated-installer
- look into consolidated_installer.sh file (*) at line 397 (what is BUNDLE_CAS from consolidated_installer.sh view point ?):
cas_installer=`ls guard-bundle-CAS*.sh 2> /dev/null`;
(*) for example, Guardium_12.0.3.0_GIM_Ubuntu_r117209.zip file contains consolidated_installer.sh shell script file ...
- download latest CAS ZIP archive from FixCentral (for example for Ubuntu): Guardium_12.0.0.0_CAS_Ubuntu_r115418.zip
- show list of files in CAS ZIP archove file:
unzip -l Guardium_12.0.0.0_CAS_Ubuntu_r115418.zip
Archive: Guardium_12.0.0.0_CAS_Ubuntu_r115418.zip
Length Date Time Name
--------- ---------- ----- ----
0 2023-11-30 22:10 Guardium_12.0.0.0_CAS_Ubuntu_r115418/
0 2023-09-15 07:28 Guardium_12.0.0.0_CAS_Ubuntu_r115418/GIM_Packages/
146492994 2023-09-15 02:44 Guardium_12.0.0.0_CAS_Ubuntu_r115418/GIM_Packages/guard-bundle-CAS-12.0.0.0_r115418_v12_0_1-ubuntu-14.04-linux-x86_64.gim
146499154 2023-09-15 02:14 Guardium_12.0.0.0_CAS_Ubuntu_r115418/GIM_Packages/guard-bundle-CAS-12.0.0.0_r115418_v12_0_1-ubuntu-18.04-linux-x86_64.gim
146494265 2023-09-15 03:01 Guardium_12.0.0.0_CAS_Ubuntu_r115418/GIM_Packages/guard-bundle-CAS-12.0.0.0_r115418_v12_0_1-ubuntu-16.04-linux-x86_64.gim
146503204 2023-09-15 02:01 Guardium_12.0.0.0_CAS_Ubuntu_r115418/GIM_Packages/guard-bundle-CAS-12.0.0.0_r115418_v12_0_1-ubuntu-20.04-linux-x86_64.gim
146503454 2023-09-15 02:08 Guardium_12.0.0.0_CAS_Ubuntu_r115418/GIM_Packages/guard-bundle-CAS-12.0.0.0_r115418_v12_0_1-ubuntu-22.04-linux-x86_64.gim
1170 2023-09-15 08:10 Guardium_12.0.0.0_CAS_Ubuntu_r115418/MD5SUMS
0 2023-09-15 07:29 Guardium_12.0.0.0_CAS_Ubuntu_r115418/Shell_Installers/
146379028 2023-09-14 21:25 Guardium_12.0.0.0_CAS_Ubuntu_r115418/Shell_Installers/guard-cas-12.0.0.0_r115418_v12_0_1-ubuntu-16.04-linux-x86_64.sh
146386593 2023-09-14 21:22 Guardium_12.0.0.0_CAS_Ubuntu_r115418/Shell_Installers/guard-cas-12.0.0.0_r115418_v12_0_1-ubuntu-20.04-linux-x86_64.sh
146386181 2023-09-14 21:24 Guardium_12.0.0.0_CAS_Ubuntu_r115418/Shell_Installers/guard-cas-12.0.0.0_r115418_v12_0_1-ubuntu-22.04-linux-x86_64.sh
146376899 2023-09-14 21:25 Guardium_12.0.0.0_CAS_Ubuntu_r115418/Shell_Installers/guard-cas-12.0.0.0_r115418_v12_0_1-ubuntu-14.04-linux-x86_64.sh
146382599 2023-09-14 21:25 Guardium_12.0.0.0_CAS_Ubuntu_r115418/Shell_Installers/guard-cas-12.0.0.0_r115418_v12_0_1-ubuntu-18.04-linux-x86_64.sh
460092 2023-11-30 21:10 Guardium_12.0.0.0_CAS_Ubuntu_r115418/ustap_release_notes_12.0.pdf
--------- -------
1464865633 15 files
A file with name matching the guard-bundle-CAS*.sh pattern does not exist in given zip archive => consolidated installer cannot install CAS module.
Yes, I can install it another way, but in the case of the "consolidated installer" method, the documentation is incorrect.
Howgh.;-)
"Custom K-TAP" issue
====================
- I have downloaded latest K-TAP module from FixCentral, of course: Guardium_KTAP_12.0_ubuntu-22-linux-x86-64_r115418_2024-05-10.zip
- I have used parameter "--ktap_allow_module_combos" with consolidated_installer.sh
Unfortunately, the K-TAP installation process finished with message (you can find it in attachment of my first post... near to end of ktap_install.log file):
"We cannot provide a module for the running kernel and no close fitting combination was found."
- GNU C compiler, make utility and kernel headers are installed, of course...
Unsuccessful process of custom K-TAP module creation does finish with error (also mentioned in my first post...):
/opt/IBM/Guardium12/modules/KTAP/12.0.0.0_r115418_7-1715874936/custom/obj/x86_64-fentry-retpo-wrapper-hardened/.linux_ktap_export.o.cmd: No such file or directory
where /opt/IBM/Guardium12 is Guardium modules installation (root) directory.
The reason of non-existence ".linux_ktap_export.o.cmd" file is unknown to me... and what about it the author of "custom K-TAP module" build process?
"ifxguard" issue
================
- unfortunately, the "Segmentation fault (core dumped)" message is just consequence of a programmer "awkward" error.
The author of ifxguard source code should look for uninitialized variable or access into unallocated memory.
This is not about Guardium 12 documentation reading...
WBR "no-cost tester" Libor ;-)
------------------------------
Libor Hohos
------------------------------
Original Message:
Sent: Fri May 24, 2024 02:24 PM
From: Wendy Zemba
Subject: Guardium 12 troubles
Hi @Libor Hohos,
Welcome to the community!
There's a lot to unpackage here, but I'll do my best to help steer you in a direction, at least.
- There's only one GIM. In other words, you will use the same GIM for S-TAP as you will for CAS.
- Her are a some helpful resources/options for dealing with K-TAP:
- Use the S-TAP parameter KTAP_ALLOW_MODULE_COMBOS=Y
- Obtain a K-TAP module from Fix Central that contains a matching Kernel, use the following link: https://ibm.github.io/guardium-ktap/index.html
- Create your own K-TAP: https://www.ibm.com/docs/en/guardium/11.5?topic=tap-linux-unix-s-compilation-k
- Request a K-TAP from IBM: https://www.ibm.com/docs/en/guardium/11.5?topic=tap-linux-unix-requesting-k-module
I don't have a lot of experience with Informix and I'm not sure at what point these errors are appearing. Here's a help document that may help: https://www.ibm.com/docs/en/guardium/11.5?topic=libraries-linux-unix-configuring-informix-exit
------------------------------
Wendy Zemba
Sr. Consultant, Data Protection
wendy.zemba@convergetp.com
Converge Technology Solutions
Need help with your Guardium deployment? Contact me directly to discuss engagement opportunities. Currently serving North America.
------------------------------