IBM Security Guardium

 View Only
  • 1.  KTAP Installation Failed on RHEL 7

    Posted Tue April 27, 2021 08:30 AM
    Edited by Akashkumar Parmar Wed April 28, 2021 02:46 AM
    Hello Seniors, Hope all is well.

    I have one scenario , where we already had STAP(10.6) running on RHEL 7 (kernel 3.10.0-1160.15.2.el7.x86_64), then, we installed GIM "GIM-11.2.0.10_r109349_1" ,

    and then we tried to Install STAP on this machine but we  ended up with failure.

    I am not sure what to do next, also, we were not sure if already STAP was running and if we want to push STAP on same machine to make STAP GIM Driven , what are the steps we need to take. Request if anyone can help me here.

    All the failure logs , i have mentioned below. Please help me to fix it. Thanks much.

    "Client [] :
    Status : OK
    *** KTAP MODULE INSTALLER PLATFORM CHECKS MESSAGE ***"

    "Client [ ]:
    Status : FAILED
    GIM - Failure point : start (Can't start KTAP-11.2.0.10_r109349_3-1619162826 :
    db_type=oracle
    guard_ktap_loader: /opt/guardium/modules/KTAP/11.2.0.10_r109349_3-1619162826/guard_ktap_loader update 108055 109349 /opt/guardium/modules/KTAP/11.2.0.10_r109349_3-1619162826
    guard_ktap_loader: Updating from ktap version 108055 to 109349 using /opt/guardium/modules/KTAP/11.2.0.10_r109349_3-1619162826
    Searching for modules in /opt/guardium/modules/KTAP/11.2.0.10_r109349_3-1619162826/modules-*.tgz
    guard_ktap_loader: Module ktap-109349-rhel-7-linux-x86_64-xCUSTOMxmysql-3.10.0-1160.15.2.el7.x86_64-x86_64-SMP.ko selected for kernel 3.10.0-1160.15.2.el7.x86_64.
    guard_ktap_loader: Extracted module ktap-109349-rhel-7-linux-x86_64-xCUSTOMxmysql-3.10.0-1160.15.2.el7.x86_64-x86_64-SMP.ko from /opt/guardium/modules/KTAP/11.2.0.10_r109349_3-1619162826/modules-11.2.0.10_r109349_v11_2_3.tgz
    guard_ktap_loader: Retpoline kernel and module - OK
    guard_ktap_loader: Cannot install ktap at this time, please contact IBM.
    Unable to update to new KTAP 109349 (exit_code : 1) at /opt/guardium/modules/KTAP/current/rc line 990. (errno: 255)
    Failure location : at /opt/guardium/modules/GIM/11.2.0.10_r109349_1-1619161754/GIM.pm line 800.). Recovered successfully"


  • 2.  RE: KTAP Installation Failed on RHEL 7

    Posted Tue April 27, 2021 03:07 PM
    Seems like the OS Kernel is not compatible with the Guardium KTAP. 

    Please check OS kernel is listed here. https://www.securitylearningacademy.com/mod/data/view.php?id=20751

    If not raise a case with IBM support. They should be able to help to build the custom KTAP based on your environment.

    ------------------------------
    Rohit Goyal
    ------------------------------



  • 3.  RE: KTAP Installation Failed on RHEL 7

    Posted Wed April 28, 2021 02:53 AM
    Hi Akashkumar,

    The message does not indicate it is failed to find the ktap module. It seems it is hitting: https://www.ibm.com/support/pages/ibm-security-guardium-ktap-module-causing-stap-install-failure-oracle-exadata-environment
    Please try to verify and check if it can be fixed.
    Thanks.

    ------------------------------
    XIAO XING LU
    ------------------------------