IBM Support

IBM Security Guardium - gim and gsvr processes in "maintenance" mode after Perl upgrade on Solaris server

Troubleshooting


Problem

Guardium gim and gsvr processes goes in maintenance mode after perl upgrade solaris server.

Symptom

Guardium services shows in maintenance mode:
svcs | grep guard
maintenance    14:08:45         svc:/site/guard_gim:default
maintenance    14:08:57         svc:/site/guard_gsvr:default

 
KTAP is not loaded:
root@xxxxx:~#modinfo | grep tap
root@xxxxx:~#

Cause

Missing GIM.pm directory in perl library path (@INC)
In /var/svc/log/site-guard_gim:default.log  file below messages are seen
Can't locate GIM.pm in @INC (you may need to install the GIM module) (@INC contains: /usr/local/guardium/modules/GIM/10.1.2_r101591_1-1513863822/perl5
/usr/perl5/site_perl/5.22/sun4-solaris-thread-multi-64 /usr/perl5/site_perl/5.22
/usr/perl5/vendor_perl/5.22/sun4-solaris-thread-multi-64 /usr/perl5/vendor_perl/5.22 /usr/perl5/5.22/lib/sun4-solaris-thread-multi-64 /usr/perl5/5.22/lib) at /usr/local/guardium/modules/GIM/10.1.2_r101591_1-1513863822/gim_client.pl line 64.

Environment

GIM /STAP 10.1.2
 

Resolving The Problem

Permanent Fix:

This issue is fixed in STAP 10.1.4 and higher versions.

Work Around to bring gim/gsvr up:

Steps:
=====
1- Run below command to find out perl directory.
perl -V
2.Copy GIM.pm from guardium lib to perl directory (ex./usr/perl5/site_perl/5.22/) 
cp -p /usr/local/guardium/modules/GIM/current/GIM.pm /usr/perl5/site_perl/5.22/
3. Check gim/gsvr status - It will show in Maintenance mode
svcs | grep guard
4. Clear guard_gim and guard_gsvr services.
svcadm clear guard_gim
svcadm clear guard_gsvr

5. Start guard_gim and guard_gsvr services.
svcadm enable guard_gim
svcadm enable guard_gsvr
6. Check status : Both the services should be up now.
 svcs | grep guard
7. Run below commands to confirm everything is up.

svcs | grep guard
ps -ef | grep -i perl
ps -ef | grep -i stap

 

Document Location

Worldwide

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSMPHH","label":"IBM Security Guardium"},"ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"10.0.0;10.1.0;10.1.2;10.1.3","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Product Synonym

Guardium

Document Information

Modified date:
26 May 2020

UID

ibm16209687