IBM Guardium

IBM Guardium

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  P6501

    Posted Wed November 01, 2023 08:14 PM

    Hello everyone

    I have the following problem when applying the patch SqlGuard_11.0p6501_October-Security-Patch_V11.5 (Documentation updated 2023-11-01)

    I get the following error when I finish applying the patch

    6501 CLI Monthly Security Patch 2023-11-01 16:46:08 ERROR: Patch Installation Failed - Recovery and revert from pre patch backup Failed

    show system patch status

    Latest patch status log: /var/IBM/Guardium/log/diag/depot/status-11.0p6501_20231101165940.log

    ----------------------------------------------------------------------

    2023-11-01 16:59:40: Started patch 11.0p6501 installation.

    2023-11-01 16:59:41: Validating patch and system requirements.

    2023-11-01 16:59:42: Stopping services: ecosystem, rds, snif, sender, nanny, snif-bufusage, classifier, tomcat, insights, guard-uc

    2023-11-01 17:01:05: Executing pre-install actions.

    2023-11-01 17:01:07: Applying updates.

    2023-11-01 17:01:07: POST: Executing post-install actions.

    2023-11-01 17:01:07: POST: IMPORTANT: Do not reboot appliance during patch installation. If patch appears to be stuck contact Guardium support.

    2023-11-01 17:01:14: POST: Stopping mysql.

    2023-11-01 17:01:43: POST: Upgrading and installing new rpms.

    2023-11-01 17:01:48: POST: Starting mysql.

    2023-11-01 17:03:11: POST: Starting services.

    2023-11-01 17:03:53: POST: ERROR: Patch 11.0p6501 installation failed.

    ----------------------------------------------------------------------


    the collector still works, but as such according to the message the patch was not applied correctly.

    the version of the collector is a guardium 11.5 p530 

    Now my question is the following, what to do next?



    ------------------------------
    Daniel Chinas Vega
    ------------------------------


  • 2.  RE: P6501

    Posted Thu November 02, 2023 07:55 AM

    Hi Daniel,
    Greetings for the day. Hope this message finds you well. 

    1. Did you apply latest health check patch before trying to install p6501?
    Note: In the patch release notes, under "Prerequisites" it is not mentioned. But if you observe the "Notes", it says to install latest health check first. 

    2. If you have applied latest healt check, did it go through without any issues?

    3. If Yes to #2, run support must_gather patch_install_issues and check the logs. You might get to know about what is stopping p6501 installation.

    4. If No to #2, please install latest health check first. If there are any issues, resolve them, reapply health check again. Only when you see health check is successful, then proceed to install p6501.

    Hope this helps. 

    Regards,



    ------------------------------
    GIRISH RAMESH BABU
    ------------------------------



  • 3.  RE: P6501

    Posted Thu November 02, 2023 07:55 AM

    Hi Daniel,
    Greetings for the day. Hope this message finds you well. 

    1. Did you apply latest health check patch before trying to install p6501?
    Note: In the patch release notes, under "Prerequisites" it is not mentioned. But if you observe the "Notes", it says to install latest health check first. 

    2. If you have applied latest healt check, did it go through without any issues?

    3. If Yes to #2, run support must_gather patch_install_issues and check the logs. You might get to know about what is stopping p6501 installation.

    4. If No to #2, please install latest health check first. If there are any issues, resolve them, reapply health check again. Only when you see health check is successful, then proceed to install p6501.

    Hope this helps. 

    Regards,



    ------------------------------
    GIRISH RAMESH BABU
    ------------------------------



  • 4.  RE: P6501

    Posted Wed November 08, 2023 06:24 AM

    Hi Daniel,

    I have the exact same issue, P9997 runs through with no problems but P6501 fails as you describe

    Paul 



    ------------------------------
    Paul Harney
    ------------------------------



  • 5.  RE: P6501

    Posted Wed November 08, 2023 11:22 AM

    Hi Paul

    I raised the case with IBM Support, they found the problem but did not provide a solution.

    I don't know in which cases it happens, but at least in our cases it is a problem.

    the issue is with a specific rpm during the p6501 patch installation process. 
    ./solr-1.0-55.e17.noarch.rpm



    ------------------------------
    Daniel Chinas Vega
    ------------------------------



  • 6.  RE: P6501

    Posted Wed November 08, 2023 11:15 AM

    Hello

    According to what you advised me to prove in another collector to which I applied first the last health check and then the P6501 with the same result, it ends with the same error.

    So we proceeded to raise the case with IBM Support, adding as evidence the result of the command support must_gather patch_install_issues, their response was ambiguous since they detected the problem but did not give a solution to the problem.

    which makes me suppose that it is a problem specific to the p6501, issue that is not known ... for cases similar to the installation of guardium on my servers.

    the issue is with a specific rpm during the p6501 patch installation process.
    ./solr-1.0-55.e17.noarch.rpm

    Regards



    ------------------------------
    Daniel Chinas Vega
    ------------------------------