IBM Security Guardium

 View Only
Expand all | Collapse all

Failed to active GIM client

  • 1.  Failed to active GIM client

    Posted Wed June 02, 2021 04:40 PM
    Hello Experts,

    I have a GIM client installed in listener mode, i received the error message below when i try to deploy S-TAP agent 

    "Failed to activate GIM clients at the specified IP addresses"

    I am running a standalone (collector) version 10.6.0

    Kindly assist.

    ------------------------------
    benlinux
    ------------------------------


  • 2.  RE: Failed to active GIM client

    Posted Wed June 02, 2021 09:37 PM
    Hi Benlinux,

    Have you activate the gim client? Please refer to https://www.ibm.com/support/pages/gim-server-allocation-install-gim-listener-mode-and-remotely-connect-pre-installed-and-inactive-not-connected-any-collector-gim-agent
    I suppose you need activate gim client first. Hope it helps.

    ------------------------------
    Jonathan LU
    Security Support Engineer
    IBM
    ------------------------------



  • 3.  RE: Failed to active GIM client

    Posted Thu June 03, 2021 03:24 AM
    Edited by benlinux Thu June 03, 2021 03:41 AM
      |   view attached
    Hello Jonathan,

    Thank you it is now active, but I am unable to deploy the S-TAP bundle to the GIM client server, checking the status, it changed from Pending-instal-->IP--->Failed. See screen shot.
    kindly assist.

    ------------------------------
    benlinux
    ------------------------------



  • 4.  RE: Failed to active GIM client

    Posted Thu June 03, 2021 11:59 PM
    Hi Benlinux,

    It seems it is not able to connect to guardium10.yourcompany.com. The host name may be not resolved. Did you specify collector's IP address as guardium10.yourcompany.com? What if you set it as collector's IP? Thanks.

    ------------------------------
    Jonathan LU
    Security Support Engineer
    IBM
    ------------------------------



  • 5.  RE: Failed to active GIM client

    Posted Fri June 04, 2021 08:02 AM
    Hello Jonathan,

    Thank you for the response.

    Kindly ignore the screen shot referring to guardium10.yourcompany.com. I am using a standard mode, but when i try to install the STAP, it failed. 

    see the first screen shot below, with status as "Failed".



    Regards,


    ------------------------------
    benlinux
    ------------------------------



  • 6.  RE: Failed to active GIM client

    Posted Sun June 06, 2021 11:28 AM
    Edited by benlinux Sun June 06, 2021 11:30 AM
    Hello Experts,

    Kindly assist with the above issue, i am new to Guardium.

    How do i troubleshoot this issue.

    Regards,

    ------------------------------
    benlinux
    ------------------------------



  • 7.  RE: Failed to active GIM client

    Posted Sun June 06, 2021 11:39 AM
    The GIM client name is not resolving.
    On your Guardium collector, connect to CLI
    >: support store hosts <your gim client ip> <your gim client fqdn>

    From cli, ping <your gim client fqdn>

    If this succeeds, push the S-TAP agent again

    ------------------------------
    Jody Hair
    Data Security Architect
    Sirius Computer Solutions
    ------------------------------



  • 8.  RE: Failed to active GIM client

    Posted Sun June 06, 2021 11:58 AM
    Hello Jody,

    I can ping the database server from my guardium instance, how do i obtain the gim client fqdn?

    Regards,

    ------------------------------
    benlinux
    ------------------------------



  • 9.  RE: Failed to active GIM client

    Posted Sun June 06, 2021 05:30 PM

    ping -a <gim client ip>

     

     

     

    Jody Hair
    Data Security Architect
    Sirius Computer Solutions

    This message (including any attachments) is intended only for the use of the individual or entity to which it is addressed and may contain information that is non-public, proprietary, privileged, confidential, and exempt from disclosure under applicable law or may constitute as attorney work product. If you are not the intended recipient, you are hereby notified that any use, dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, notify us immediately by telephone and (i) destroy this message if a facsimile or (ii) delete this message immediately if this is an electronic communication. Thank you.





  • 10.  RE: Failed to active GIM client

    Posted Mon June 07, 2021 02:58 AM
    Hi benlinux,

    This topic seems very confusing. The thread title is "Failed to active GIM client" and you wrote "Failed to activate GIM clients at the specified IP addresses", but can we guess the issue was resolved and you're having a problem in installing Win S-TAP via GIM?

    If yes, here is my suggestion:

    1. Logon to Guardium GUI, and navigate to Manage > Module Installation > Set up by Client.
    2. Select the DB server (GIM client) where you'd like to install Win S-TAP, and press "View Installed Modules" to see if GIM and COMMON are installed.
    3. Try installing Windows S-TAP through the GUI again. See if a new install log is created at "C:\IBM Windows S-TAP.ctl" on the DB server. If it's created, read the log and find the root cause. If it's not created, check %GIM_DIR%\GIM\Current\GIM.log and %GIM_DIR%\central_logger.log.

    If there is any difficulty in reading these log files, I'd suggest to open a support ticket. You'll be guided to collect Must Gather from the DB server as well as gimserver.log at the collector, then the assigned technical support engineer will advise you how to resolve the issue. Hope it helps.

    Thanks,
    Satoshi

    ------------------------------
    SATOSHI KAWASE
    ------------------------------



  • 11.  RE: Failed to active GIM client

    Posted Mon June 07, 2021 03:49 AM
      |   view attached
    Hello Satoshi,

    Thank you for the response. I am completely new to Guardium.

    I installed Guardium on my lab environment, I cant open a support case.

    GIM module is installed, while COMMON has a Failed status. I have attached the C:\IBM Windows S-TAP.ctl file below. Viewing the log, I can see the below line.

    2021-06-07T07:41:14.219 Finish: Install Aborted: [System.ApplicationException: Unable to create a system service or driver service.] 

    Regards,


    ------------------------------
    benlinux
    ------------------------------

    Attachment(s)

    txt
    W-STAP.ctl.txt   61 KB 1 version


  • 12.  RE: Failed to active GIM client

    Posted Mon June 07, 2021 04:27 AM

    Hi benlinux,

    Please do not attach any log file because it may contain personal information.

    If COMMON is failed, I'd suggest to fix it first, but looks like the installation of Win S-TAP was somehow started. It means, you should be able to reproduce the issue without GIM.

    If the error is related to the service account of Database Monitor service, I'd suggest to use the Win S-TAP that are currently available on Fix Central. For example, if you need to stay on V10.6, you can download V10.6.0.300, that has an improvement of the service account of Database Monitor service. We have newer versions of Guardium such as V11.3, V11.2, V11.1,... If you're new to Guardium and no need to stay on V10.6, I'd suggest to use the new one.

    If the installation issue persists with V10.6.0.300 or newer versions of Guardium Windows S-TAP, we'd need to review must gather. In this case, can you please find someone in your team who can open a support ticket? Then we can officially receive must gather in fully secured way and troubleshoot the issue with the diagnostic files.

    Thanks,
    Satoshi



    ------------------------------
    SATOSHI KAWASE
    ------------------------------



  • 13.  RE: Failed to active GIM client

    Posted Mon June 07, 2021 08:08 PM
    Hi Benlinux,

    It seems like a permission issue. Which user did you use to install GIM? Please make sure system administrator account was used for the installation. And choose "Run as Administrator" while launching GIM installer.

    ------------------------------
    Jonathan LU
    Security Support Engineer
    IBM
    ------------------------------



  • 14.  RE: Failed to active GIM client

    Posted Tue June 08, 2021 03:07 AM
    Edited by benlinux Tue June 08, 2021 03:12 AM
    Hello Jonathan,

    Thank you for your assistance to resolving this issue, unfortunately it failed despite installing the GIM client using "Run as admin".

    The GIM client is v 10.6.300, while the S-TAP bundle is v10.6.201, I want to make both files to be exactly the same version.

    Regards,

    ------------------------------
    benlinux
    ------------------------------



  • 15.  RE: Failed to active GIM client

    Posted Tue June 08, 2021 07:21 AM
    Edited by benlinux Tue June 08, 2021 07:25 AM
    Hello Experts,

    I have upgraded my stand-alone guardium to 11.3.0_r110289_v11_3_upgrade_1-el76-20210406_1738, yet the issue still persists, I am using v11.2.0.250 for both GIM agent and S-TAP bundle.





    This is frustrating for me as a beginner :(

    Kindly assist!!!


    ------------------------------
    benlinux
    ------------------------------



  • 16.  RE: Failed to active GIM client

    Posted Tue June 08, 2021 09:32 AM
    Hi Benlinux,

    Did you see same error in stap.ctl? You can try to the solution in https://www.ibm.com/support/pages/ibm-security-guardium-guardium-database-monitor-service-failed-start and let us know it makes any difference. What is your windows version? What is the OS user you are login? Is it local administrator user or domain user?  Thanks.


    ------------------------------
    Jonathan LU
    Security Support Engineer
    IBM
    ------------------------------



  • 17.  RE: Failed to active GIM client

    Posted Tue June 08, 2021 02:35 PM
    Hello Jonathan,

    Thank you for the link, but it appears that the error is not visible in the stap.ctl file, also in this file i get the below message.

    Services: Unable to open correlator DLL stop event
    `I 2021-06-08T12:11:18.407 Folders: Created root installation folder C:\Program Files\IBM\Windows S-TAP
    `I 2021-06-08T12:11:18.414 Folders: Created sub-folder Staging
    `I 2021-06-08T12:11:18.424 Folders: Created sub-folder Bin
    `I 2021-06-08T12:11:18.424 Folders: Created sub-folder Data
    `I 2021-06-08T12:11:18.441 Folders: Created sub-folder Logs
    `I 2021-06-08T12:11:18.455 Folders: Created sub-folder Bin\AutoDiscovery
    `I 2021-06-08T12:11:18.471 Folders: Created sub-folder swidtag
    `I 2021-06-08T12:11:18.487 FileOp: Copied C:\Program Files (x86)\Guardium\Guardium Installation Manager\WINSTAP\current\Files\x64\WfpMonitor.sys to C:\Program Files\IBM\Windows S-TAP\Staging\WfpMonitor.sys

    My Windows version is 2012R2, and i am login as local admin.

    Regards,

    ------------------------------
    benlinux
    ------------------------------



  • 18.  RE: Failed to active GIM client

    Posted Wed June 09, 2021 02:29 AM

    Hi benlinux,

    We discussed the issue within our team, including Johnathan.

    The error 'System.ApplicationException: Unable to create a system service or driver service.' is mostly due to missing permission on your Windows, which means, the issue depends on your Windows settings. We really don't know how your Windows OS is configured. Johnathan was trying to help you based on our experiences but looks like it's getting endless try&error.

    Could you please find someone in your team who has an official contract and ask the person to open a support ticket? I believe someone around you have a support contract because you can access to Guardium collector. We're willing to investigate your issue with your must gather and we can also have a Webex if the must gather isn't enough to identify the root cause.

    Thank you,
    Satoshi



    ------------------------------
    SATOSHI KAWASE
    ------------------------------



  • 19.  RE: Failed to active GIM client

    Posted Wed June 09, 2021 02:42 AM
    Hello Satoshi,

    I will open a case today.

    Thank You.

    ------------------------------
    benlinux
    ------------------------------



  • 20.  RE: Failed to active GIM client

    Posted Wed June 09, 2021 03:06 AM
    Glad to hear that. Thank you, benlinux!

    ------------------------------
    SATOSHI KAWASE
    ------------------------------