IBM Support

ENABLE IBM Guardium ATAP TO MONITOR IBM INFORMIX DYNAMIC SERVERS (IDS)

Question & Answer


Question

How can I enable ATAP for Informix ? Can ATAP be enabled for Informix on all operating system platforms of IDS ? Does it capture all types of traffic (eg. Shared Memory and TCP) ?

Answer

If you are not expecting any local activities on an Informix server you may not need to setup ATAP at all.
To activate follow the below:

Step 1:

    Make sure ktap_installed=1 in the guard_tap.ini configuration file.

Step 2:
    To activate ATAP, run guardctl as root user.

      # guardctl db_instance=[INFORMIX INSTANCE NAME] db_user=informixdb_type=informix db_base=[INFORMIX INSTALL DIRECTORY] db_home=[INFORMIX INSTALL DIRECTORY] db_version=[INFORMIX VERSION, e.g. 12.1] activate

    Follow the Informix commands to to gather [INFORMIX INSTANCE NAME], [INFORMIX INSTALL DIRECTORY] and [INFORMIX VERSION] and finally invoke guardctl in step 4 to activate ATAP:

    1. Make sure user informix is in guardium group. Login as user informix.

      $ id
      uid=208(informix) gid=206(informix) groups=205(guardium)

    2. Locate Informix instance name (INFORMIXSERVER) and install directory (INFORMIXDIR).
      Run these Informix commands in Unix:

        $ echo $INFORMIXSERVER
        INFORMIXSERVER=test117

        $ echo $INFORMIXDIR
        INFORMIXDIR=/home/informix

    3. Check the version of Informix.

      $ onstat -V
      IBM Informix Dynamic Server Version 11.70.FC8 Software Serial Number AAA#B000000

    4. Login as root user. Note: db_version is 11.7 not 11.70.FC8.

      # /usr/gim/modules/ATAP/9.0.0_r81649_1-1450431906/files/bin/guardctl db_instance=test117 db_user=informix db_type=informix db_base=/home/informix db_home=/home/informix db_version=11.7 activate

Invoking guardctl in a non-supportable platform (for example AIX), will generate an error

ERROR: This database (informix) is not supported on this platform (aix) 

ATAP for Informix is only supportable for Linux platforms and can only capture Shared Memory protocol.


[{"Product":{"code":"SSMPHH","label":"IBM Security Guardium"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"Guardium Database Activity Monitor","Platform":[{"code":"PF016","label":"Linux"}],"Version":"9.0;9.1;9.5","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
16 June 2018

UID

swg21975738