[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [FW-1] FW-1 Solaris GUI Help

To: [email protected]
Subject: Re: [FW-1] FW-1 Solaris GUI Help
From: Layne Meier <[email protected]>
Date: Thu, 3 Oct 2002 10:44:42 -0400
In-Reply-To: <4570F47FB214644CADC1EF1FF5E69BEF0C6C79@uscntnt499.us.deloitte.com>
Reply-To: Mailing list for discussion of Firewall-1 <[email protected]>
Sender: Mailing list for discussion of Firewall-1 <[email protected]>
Unfortunately crle is a Solaris 8 utility.  The Sun box I'm running
this on is a SPARCstation 5 running Solaris 7.

I really do appreciate all the input I'm getting on this matter.  I
don't know why all libraries but one are working.

Thanks,
Layne


On Thursday, October 3, 2002, at 09:54  AM, Bischoff, Christopher (US -
Hermitage) wrote:

> Layne,
>         Modifying LD_LIBRARY_PATH is typically not a good idea.
> Checkout
> this website
> http://supportforum.sun.com/freesolaris/techfaqs.html?techfaqs_3057
>
> Solaris under the directory /var/ld has the ability to create a 32 and
> 64
> bit ld.config.  The command crle will create both the 32 and 64 bit
> ld.config files whihch should contain the library directories.
>
> I don't know if /opt/CPclnt-50/bin/Fwui is a 64 bit or 32 bit
> application.
> Depending on which it is, will determine which command below you will
> need
> to run.
>
>
> This will create the 32-bit ld.config
> Crle -l
> /usr/lib:/usr/ccs/lib:/usr/openwin/lib:/usr/share/lib:/opt/CPclnt-50/
> lib
>
> This will create the 64-bit ld.config
> Crle -64 -l /usr/lib/64:/opt/CPclnt-50/lib
>
> -----Original Message-----
> From: Russell Aspinwall [mailto:[email protected]]
> Sent: Thursday, October 03, 2002 4:49 AM
> To: [email protected]
> Subject: Re: [FW-1] FW-1 Solaris GUI Help
>
>
> Hi Layne,
>
> Try modifying  LD_LIBRARY_PATH=/opt/CPclnt-50/lib:${LD_LIBRARY_PATH}
> assuming /opt/CPclnt-50/lib contains libcpopenssl.so
>
> Regards
>
> Russell
>
> Layne Meier wrote:
>>
>> I ran ldd against /opt/CPclnt-50/bin/FWui and all of the libraries
>> EXCEPT libcpopenssl.so show proper association (ie; libckpssl.so =>
>> /opt/CPclnt-50/lib/libckpssl.so).  On the entry for libcpopenssl.so,
>> LDD shows this:
>>
>> libcpopenssl.so =>  (file not found), but if you look in the
>> /opt/CPclnt-50/lib directory libcpopenssl.so is there as well as in
>> the /usr/local/lib directory.
>>
>> Just a little more insight into my setup.  This is in a lab
>> environment.  I have a total of 4 Sun systems.  2 are setup as
>> Enforcement Modules, 1 as the Management server and 1 as a
>> Workstation.
>>   The 2 enforcement modules and the Management server all have
>> CPCONFIG installed on them, but when you install just the GUI, there
>> is no SVN Foundation or any FireWall-1/VPN-1 software so there is no
>> need for a CPCONFIG.
>>
>> I have defined Administrators and setup specified IP Addresses that
>> are authorized to access the Management Server via the GUI.  I did
>> make sure that the IP Address of the workstation was in the Management
>> server.
>>
>> I did, however, previously install Secure Shell and WEBMIN.  When I
>> installed Secure Shell and WEBMIN, both required the installation of
>> OpenSSL.  Could there somehow be a conflict with the installation of
>> OpenSSL with the libcpOPENSSL.so?
>>
>> Thanks,
>> Layne
>>
>> On Wednesday, October 2, 2002, at 04:00  AM, Russell Aspinwall wrote:
>>
>>> Hi Layne,
>>>
>>> Have you tried doing an "ldd fwpolicy" to check it can see all the
>>> libraries.
>>>
>>> # ldd /usr/bin/ls
>>>         libc.so.1 =>     /usr/lib/libc.so.1
>>>         libdl.so.1 =>    /usr/lib/libdl.so.1
>>>
>>> I know it is obvious but is FW-1 configured to permit GUI access
>>> (using cpconfig)?
>>>
>>> Regards
>>>
>>> Russell
>>>
>>> Layne Meier wrote:
>>>>
>>>> I have the MOTIF GUI License.
>>>>
>>>> When I try to launch the GUI I get an error that there was a fatal
>>>> problem with the libcpopenssl.so (No such file or directory).
>>>>
>>>> Thanks,
>>>> Layne
>>>>
>>>> On Tuesday, October 1, 2002, at 08:43  AM, Russell Aspinwall wrote:
>>>>
>>>>> Hi Layne,
>>>>>
>>>>> You must have a FW GUI License to run on Solaris.
>>>>>
>>>>> Regards
>>>>>
>>>>> Russell
>>>>>
>>>>> Layne Meier wrote:
>>>>>>
>>>>>> I'm sorry to repost this one, but my mail system may have thought
>>>>>> that any replies back to me regarding this previous message may
>>>>>> have been rejected as SPAM.  I could really use some help on
>>>>>> getting my Solaris
>>>>>> GUI up and running and you all are my best resource.  I do have
>>>>>> Gold
>>>>>> Support from CheckPoint, but I thought I'd try this forum first as
>>>>>> CP
>>>>>> Tech Support seems to favor Nokia over any other OS for running
>>>>>> their
>>>>>> software on.
>>>>>>
>>>>>> I normally use the Windows GUI to access my VPN-1/FireWall-1
>>>>>> system, but at the time being for this environment, I do not have
>>>>>> one available to me.
>>>>>>
>>>>>> I downloaded the CheckPoint NG FP2 Solaris GUI from the download
>>>>>> center on CheckPoint's website and set off to install it onto a
>>>>>> Sun SPARC system (currently running Solaris 7).  This system has
>>>>>> the latest Solaris 7 Recommended patches installed as well.
>>>>>>
>>>>>> Anyway, when I attempt to launch the FireWall User Interface I
>>>>>> get the following...
>>>>>>
>>>>>> lmeier-sun:root:1:/#FWui &
>>>>>> [1] 582
>>>>>> lmeier-sun:root:2:/#ld.so.1: FWui: fatal: libcpopenssl.so: open
>>>>>> failed:
>>>>>> No such file or directory
>>>>>> [1]     killed          FWui
>>>>>> lmeier-sun:root:2:/#
>>>>>>
>>>>>> I have a .cshrc file (profile) on this sytem with the following
>>>>>> defined...
>>>>>>
>>>>>> setenv  GUIDIR                          /opt/CPclnt-50
>>>>>> setenv  LD_LIBRARY_PATH /opt/CPclnt-50/lib
>>>>>>
>>>>>> set path=(/opt/CPclnt-50/bin /opt/CPclnt-50/lib .)
>>>>>>
>>>>>> If I'm at my prompt and type the following...
>>>>>> lmeier-sun:root:2:/#which libcpopenssl.so
>>>>>>
>>>>>> I get the follwing result... /opt/CPclnt-50/lib/libcpopenssl.so
>>>>>>
>>>>>> My system recognizes the directory and where the file is, but
>>>>>> apparently the application does not.
>>>>>>
>>>>>> Does anyone out there have any idea what might be going on here?
>>>
>>> -
>>>
>>> =================================================
>>> To set vacation, Out Of Office, or away messages,
>>> send an email to [email protected]
>>> in the BODY of the email add:
>>> set fw-1-mailinglist nomail
>>> =================================================
>>> To unsubscribe from this mailing list,
>>> please see the instructions at
>>> http://www.checkpoint.com/services/mailing.html
>>> =================================================
>>> If you have any questions on how to change your subscription
>>> options, email [email protected]
>>> =================================================
>>
>> =================================================
>> To set vacation, Out Of Office, or away messages,
>> send an email to [email protected]
>> in the BODY of the email add:
>> set fw-1-mailinglist nomail
>> =================================================
>> To unsubscribe from this mailing list,
>> please see the instructions at
>> http://www.checkpoint.com/services/mailing.html
>> =================================================
>> If you have any questions on how to change your
>> subscription options, email
>> [email protected]
>> =================================================
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to [email protected]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [email protected]
> =================================================
> - This message (including any attachments) contains confidential
> information
> intended for a specific individual and purpose, and is protected by
> law.  -
> If you are not the intended recipient, you should delete this message
> and
> are hereby notified that any disclosure, copying, or distribution of
> this
> message, or the taking of any action based on it, is strictly
> prohibited.
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to [email protected]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [email protected]
> =================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================
References:
- Re: [FW-1] FW-1 Solaris GUI Help
  - From: "Bischoff, Christopher (US - Hermitage)" <[email protected]>
Prev by Date: Re: [FW-1] CVP and Interscan
Next by Date: [FW-1] Reporting module client problem
Prev by thread: Re: [FW-1] FW-1 Solaris GUI Help
Next by thread: Re: [FW-1] Check point firewall open ports
Index(es):
- Date
- Thread