Symantec Privileged Access Management

 View Only
  • 1.  how to install PAMSC14.1CP05 using rpm

    Posted May 19, 2024 11:53 PM
    Edited by MARUBUN SUPPORT May 20, 2024 02:24 AM

    Hi PAMSC Support team:

    I need your help.

    [Environment]

    Red Hat Enterprise Linux release 8.4

    CA PAMSC14.1CP05(1410-50.151)

    # rpm -q rpm
    rpm-4.14.3-13.el8.x86_64
    # rpm -q rpm-build
    rpm-build-4.14.3-13.el8.x86_64
    # rpm -q rpm-libs
    rpm-libs-4.14.3-13.el8.x86_64

    [Question]

    I tired to install PAMSC14.1CP05 latest version RPM package with root user like this.

    CAeAC-1410-50.151.x86_64.rpm, pre.tar and customize_eac_rpm are in /root/tmp/rpmpkg directory.

    #./customize_eac_rpm -g -f parameter1.txt -d /root/tmp/rpmpkg CAeAC-1410-50.151.x86_64.rpm

    After that, I modified the parameter1.txt file to enable a token.

    #./customize_eac_rpm -s -f parameter1.txt -d /root/tmp/rpmpkg CAeAC-1410-50.61.x86_64.rpm

    At this point, there is no error messages.

    However, the update date&time for the CAeAC-1410-50.61.x86_64.rpm was not updated.

    So the CAeAC-1410-50.61.x86_64.rpm was not repackaged.

    What do you think about it?

    Best regrads,

    Marubun,



  • 2.  RE: how to install PAMSC14.1CP05 using rpm

    Broadcom Employee
    Posted May 20, 2024 10:24 AM

    Any chance you don't have enought disk space?  Please check that first and do clean up if you are running short.

    The steps themselves are correct and I have just verified that they work fine, though, I did it using CAeAC-1410-60.97.x86_64.rpm, which should not matter since there were no changes in that area for a while.   Can you extract parameters from the current rpm, and see if it is there,  i.e.,

    ./customize_eac_rpm -g  -f param3.txt -d /root/tmp/rpmpkg CAeAC-1410-50.61.x86_64.rpm

    diff  parameter1.txt  param3.txt

    Dmitry




  • 3.  RE: how to install PAMSC14.1CP05 using rpm

    Posted May 20, 2024 07:52 PM

    HI Dmitry,

    Thank you for your update.

    Yes, the desk space is no problem.

    Also, I checked the output file between 14.10-50 (151) and 14.10-50 (61).

    # diff parameter1.txt param3.txt
    7c7
    < # VeRsIoN: 14.10-50 (151)
    ---
    > # VeRsIoN: 14.10-50 (61)
    #

    So the output file is no problem.

    About my testbox(Red Hat Enterprise Linux release 8.4):

    The box is on AWS.

    I cannot use Linux boxes on VMware or VirtualBOX.

    Can you test the steps on AWS?

    Best regards.

    Marubun.




  • 4.  RE: how to install PAMSC14.1CP05 using rpm

    Posted May 21, 2024 01:12 AM

    HI Dmitry,

    I tried to test the same steps another Linux box on AWS.
    Red Hat Enterprise Linux Server release 7.9 (Maipo)
    # rpm -q rpm
    rpm-4.11.3-48.el7_9.x86_64
    # rpm -q rpm-build
    rpm-build-4.11.3-48.el7_9.x86_64
    # rpm -q rpm-libs
    rpm-libs-4.11.3-48.el7_9.x86_64

    In this box, it worked properly.
    # ./customize_eac_rpm -g -f parameter2.txt -d /home/media/PAMSC141CP5/RPM14.10.50.151 CAeAC-1410-50.151.x86_64.rpm
    Extracted  into <parameter2.txt>.
    # ./customize_eac_rpm -s -f parameter2.txt -d /home/media/PAMSC141CP5/RPM14.10.50.151 CAeAC-1410-50.151.x86_64.rpm
    Successfully customized installation parameters.
    Repacking the CAeAC rpm package...
    Copying a repacked rpm package into </home/media/PAMSC141CP5/RPM14.10.50.151/CAeAC-1410-50.151.x86_64.rpm>.

    The difference between not working and working is OS version and rpm version.

    [Not working Env]
    Red Hat Enterprise Linux release 8.4
    # rpm -q rpm
    rpm-4.14.3-13.el8.x86_64
    # rpm -q rpm-build
    rpm-build-4.14.3-13.el8.x86_64
    # rpm -q rpm-libs
    rpm-libs-4.14.3-13.el8.x86_64

    # ./customize_eac_rpm -g -f parameter2.txt -d /home/media/PAMSC141CP5/RPM14.10.50.151 CAeAC-1410-50.151.x86_64.rpm
    Extracted  into <parameter2.txt>.
    # ./customize_eac_rpm -s -f parameter2.txt -d /home/media/PAMSC141CP5/RPM14.10.50.151 CAeAC-1410-50.151.x86_64.rpm
    Successfully customized installation parameters.
    Repacking the CAeAC rpm package...

    What do you think about it?

    Best regards,
    Marubun




  • 5.  RE: how to install PAMSC14.1CP05 using rpm

    Broadcom Employee
    Posted May 21, 2024 08:17 AM
    Hello Marubin,

    the "Repacking the CAeAC rpm package..." message indicates the start of a
    rpmbuild operatio. The fact that no "Copying a repacked rpm package into
    <..." message was shown (and the script exits with a non-zero exit code in
    that case) suggests that rpmbuild failed for some reason. If disk space
    was checked and there is plenty of it (should be at least about 1.3 GB free
    with the latest cAeAC rpms), then please examine a log file called
    /tmp/customize_eac_rpm.log-root that the customize_eac_rpm script creates
    for that operation and provide the last dozen lines from it for further
    analysis. BTW, can you also provide df -k from the failing system?

    Best regards

    Dmitry

    --
    This electronic communication and the information and any files transmitted
    with it, or attached to it, are confidential and are intended solely for
    the use of the individual or entity to whom it is addressed and may contain
    information that is confidential, legally privileged, protected by privacy
    laws, or otherwise restricted from disclosure to anyone else. If you are
    not the intended recipient or the person responsible for delivering the
    e-mail to the intended recipient, you are hereby notified that any use,
    copying, distributing, dissemination, forwarding, printing, or copying of
    this e-mail is strictly prohibited. If you received this e-mail in error,
    please return the e-mail to the sender, delete it from your computer, and
    destroy any printed copy of it.




  • 6.  RE: how to install PAMSC14.1CP05 using rpm

    Posted May 21, 2024 07:29 PM

    Hi Dmitry,

    # df -m
    Filesystem     1M-blocks  Used Available Use% Mounted on
    devtmpfs             377     0       377   0% /dev
    tmpfs                404     0       404   0% /dev/shm
    tmpfs                404    11       393   3% /run
    tmpfs                404     0       404   0% /sys/fs/cgroup
    /dev/xvda2         20468  7745     12724  38% /
    tmpfs                 81     0        81   0% /run/user/0

    So disk space is no problem, I think.

    Best regards,

    Marubun.




  • 7.  RE: how to install PAMSC14.1CP05 using rpm

    Broadcom Employee
    Posted May 22, 2024 09:13 AM
    Hello Marubin,

    now I can see that disk space shortage indeed can be ruled out (~12GB
    free). What about the /tmp/customize_eac_rpm.log-root logfile that
    collects specifically output for rpmbuild operation? customize_eac_rpm
    only manipulates CAeAC content as per its command-line options, but the
    actual rebuild is all on Red Hat's rpm. the whole thing works fine for me
    on CentOS 7.9 and RHEL 9.2. If there is a problem with a particular
    version of RPM on a particular distribution, the matter should be
    rather brought up with the vendor. BTW, customizing CAeAC can be done on
    *any* machine that has RPM - not just the target machine. It can be even
    done on a different Linux platform, e.g., on x64 for 390x, and ince
    customized the package can be installed on all of its intended target
    machines.
    BTW, Is there a support ticket for this to enable expeditious exchange of
    information and data?

    Dmitry

    --
    This electronic communication and the information and any files transmitted
    with it, or attached to it, are confidential and are intended solely for
    the use of the individual or entity to whom it is addressed and may contain
    information that is confidential, legally privileged, protected by privacy
    laws, or otherwise restricted from disclosure to anyone else. If you are
    not the intended recipient or the person responsible for delivering the
    e-mail to the intended recipient, you are hereby notified that any use,
    copying, distributing, dissemination, forwarding, printing, or copying of
    this e-mail is strictly prohibited. If you received this e-mail in error,
    please return the e-mail to the sender, delete it from your computer, and
    destroy any printed copy of it.




  • 8.  RE: how to install PAMSC14.1CP05 using rpm

    Posted May 22, 2024 07:38 PM

    HI Dmitry

    I didn't know the log file.

    So I checked the file and saw the following errors in the tail lines.

    =====

    File processing: CAeAC-1410-50.151.x86_64
    Error: Empty %files file /tmp/customize_eac/root/redhat/BUILD/CAeAC/file.lst

    RPM build error:
        Empty %files file /tmp/customize_eac/root/redhat/BUILD/CAeAC/file.lst

    =====

    For sure, the file.lst was empty.

    Also, I saw 2 files in /tmp/customize_eac/root/redhat/BUILD/CAeAC.

    -rw-r--r--. 1 root root  0  5月 21 14:18 file.lst
    -rw-r--r--. 1 root root 20  5月 21 14:18 file.lst.raw

    The file.lst.raw is,,

    # cat file.lst.raw
    /tmp/CAeAC-rpmbuild

    Best regards,

    Marubun,




  • 9.  RE: how to install PAMSC14.1CP05 using rpm

    Broadcom Employee
    Posted May 23, 2024 07:33 AM
    Hello Marubin,

    I need to take a look at that full logfile to provide further comments. Is
    there a support ticket where you can upload it? If - yes, then I also
    suggest collecting and uploading support information from the system in
    question using PIM's support.sh. That should provide a full context for
    the problem and eliminate the need for multiple rounds of questions and
    answers, thus expediting resolution.

    Regards.

    Dmitry

    --
    This electronic communication and the information and any files transmitted
    with it, or attached to it, are confidential and are intended solely for
    the use of the individual or entity to whom it is addressed and may contain
    information that is confidential, legally privileged, protected by privacy
    laws, or otherwise restricted from disclosure to anyone else. If you are
    not the intended recipient or the person responsible for delivering the
    e-mail to the intended recipient, you are hereby notified that any use,
    copying, distributing, dissemination, forwarding, printing, or copying of
    this e-mail is strictly prohibited. If you received this e-mail in error,
    please return the e-mail to the sender, delete it from your computer, and
    destroy any printed copy of it.




  • 10.  RE: how to install PAMSC14.1CP05 using rpm

    Posted May 23, 2024 08:19 PM

    Hi Dmitry

    Thank you for your reply.

    If I need the investigate the root cause in details, I will open the case.

    Thanks,

    Marubun,