Re: [FW-1] Running "fw" commands from cron under NG on Solaris!

[Jim Burwell <jimb@FW1-NOSPAMBROADVISION.COM>]

Title: Firewall Logs

This means that the run-time linker (loader) can't locate the library libfw1.so
that the fw executable requires when running.  

This means that CP didn't use the compiler flag that gives the executable
a list of directories other than the default to search for the library in
(or specify the exact location of the library), and instead relies on the
LD_LIBRARY_PATH environment variable.

If you can log into the managment station and run the 'fw' command interactively,
this means that somewhere in the environment, the LD_LIBRARY_PATH is being
set.  Checkpoint probably modifies the /etc/profile, or .cshrc, or .profile 
In your cron job, you'll need to make sure that this variable is set the
same as it is in an interactive login session, either by calling a script
which sets it and then calls the 'fw' command, or by using parentheses in
your cron job line: (LD_LIBRARY_PATH=<paths>;fw logswitch)

You can find out what this needs to be by doing 'echo $LD_LIBRARY_PATH' in
an interactive session where fw works.  

If CP needs this set, I'm actually suprised that they didn't replace the
fw exe with a wrapper script that sets things up and then runs the real fw
exe.

- Jim

Daniel Fischer (J) wrote:

Hi,

 

I am running NG FP1 on Solaris 8 and would like to automate the command "/opt/CPfw1-50/bin/fw logswitch" using cron. With 4.1, this was not an issue, it worked fine but under NG, I get the error "ld.so.1: /opt/CPfw1-50/bin/fw: fatal: libfw1.so: open failed: No such file or directory"

 

I think that means it has a problem with STDOUT but I am not sure!

 

Can anyone shed a little light on this or has anyone seen this issue? I figure that this could cause administrative havoc for many people if "fw" commands cannot be automated with cron jobs under NG!

 

Thanks

DF

--
+---------------------------------------------------------------------+
|    Jim Burwell - Sr. Systems/Network Admin., Broadvision, Inc.      |
+---------------------------------------------------------------------+
| "I never let my schooling get in the way of my education"-Mark Twain|
| "UNIX was never designed to keep people from doing stupid things,   |
| because that policy would also keep them from doing clever things." |
| "Cool is only three letters away from Fool" - Mike Muir, Suicyco    |
| "..Government in its best state is but a necessary evil; in its     |
| worst state an intolerable one.."-Thomas Paine,"Common Sense"(1776) |
+---------------------------------------------------------------------+
|    Email:  jimb@broadvision.com               ICQ UIN:  1695089     |
|             Voice:Fax:|
+---------------------------------------------------------------------+