LinuxQuestions.org
Latest LQ Deal: Complete CCNA, CCNP & Red Hat Certification Training Bundle
Go Back   LinuxQuestions.org > Forums > Other *NIX Forums > AIX
User Name
Password
AIX This forum is for the discussion of IBM AIX.
eserver and other IBM related questions are also on topic.

Notices


Reply
  Search this Thread
Old 02-04-2016, 02:55 AM   #1
NevemTeve
Senior Member
 
Registered: Oct 2011
Location: Budapest
Distribution: Debian/GNU/Linux, AIX
Posts: 3,484

Rep: Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072
slp_srvreg vs tivoli -- catfight on UDP port 427


On an AIX6.1 computer /var/log/warning.log contains these repeated messages:
Code:
Feb  4 04:54:59 localhost daemon:err|error syslog: slp: 0660-077 [7667882] SLPServiceListener -- The SA failed to initialize its sockets: Network Initialisation Failed (-20).
Feb  4 04:54:59 localhost daemon:err|error last message repeated 2 times
Feb  4 04:54:59 localhost user:err|error syslog: slp_srvreg : All of 3 tries to launch the SLP service listener failed. slp_srvreg will exit
In simpler words, slp_srvreg cannot open UDP port 427, because it is used by tivoli (/var/opt/tivoli/ep/_jvm/jre/bin/java) -- lsof shows that.

Now here's my questions: Which one of the two should win in this fight for port 427? Are the two meant for the same purpose? Perhaps one of them is meant to replace the other? Should we simply uninstall both?

Edit: it is "Tivoli Nonstop Service" or "Tivoli Common Agent" whichever is the official name.

Last edited by NevemTeve; 02-04-2016 at 04:49 AM.
 
Old 02-04-2016, 07:16 AM   #2
NevemTeve
Senior Member
 
Registered: Oct 2011
Location: Budapest
Distribution: Debian/GNU/Linux, AIX
Posts: 3,484

Original Poster
Rep: Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072
It might depend on the order: started slp_srvreg first, tivoli later and there was no fight on port.

Well, not entirely true the following messages came:
Code:
Feb  4 13:44:23 localhost daemon:err|error syslog: slp: 0660-065 [7798888] Impossible to parse attribute (ca-uid=file:///var/opt/tivoli/ep/runtime/agent),(am-host=),(ca-ips=17.119.93.237\2c 17.119.93.235),(ca-basic-port=9510),(ca-cert-port=9510),(ca-version=1.4.2.2),(os-uid=2D3F0A20A56E11E5A894001A64AD116A).
Feb  4 13:44:23 localhost daemon:err|error syslog: slp: [7798888] decode_srvreg -- __srv_r
eg_local failed with rc = -2.
Feb  4 13:44:23 localhost daemon:err|error syslog: slp: 0660-084 [7798888] The SA failed t
o decode and compute received message: Parse Error (-2)
Edit: this article seems to be related: https://en.wikipedia.org/wiki/Service_Location_Protocol
it talks about 'attributes', in this case these might be those:
Code:
(ca-uid=file:///var/opt/tivoli/ep/runtime/agent),
(am-host=),
(ca-ips=17.119.93.237\2c 17.119.93.235),
(ca-basic-port=9510),
(ca-cert-port=9510),
(ca-version=1.4.2.2),
(os-uid=2D3F0A20A56E11E5A894001A64AD116A)
So what is the problem with them?

Edit the IP-addresses belong to some other computer, so maybe the message (that caused the error-message) came from there. Perhaps.

Also related:
https://tools.ietf.org/html/rfc2608
Some instinct says this attribute should be checked: (am-host=)

Last edited by NevemTeve; 02-04-2016 at 01:12 PM.
 
Old 02-04-2016, 09:54 AM   #3
NevemTeve
Senior Member
 
Registered: Oct 2011
Location: Budapest
Distribution: Debian/GNU/Linux, AIX
Posts: 3,484

Original Poster
Rep: Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072
A note: slp_srvreg is started by tier1slp, which is started by init.

I think it would be good if I knew what these are good for. My current guess is that slp_srvreg is something like rpc.portmap or oracle.listener, while tivoli might be analogue to BackOrifice.

Edit:
perhaps related:
http://www-01.ibm.com/support/docvie...id=isg1IC84805
http://www.unix.com/aix/233939-error...es-syslog.html
http://www.programering.com/q/MTM4kTNwATc.html
http://developer.developer-works.com.../Start+cluster
https://www.ibm.com/developerworks/c...sh%20for%20AIX

Last edited by NevemTeve; 02-04-2016 at 01:32 PM.
 
Old 02-04-2016, 01:54 PM   #4
NevemTeve
Senior Member
 
Registered: Oct 2011
Location: Budapest
Distribution: Debian/GNU/Linux, AIX
Posts: 3,484

Original Poster
Rep: Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072
Note to self: find somewhere a file called */runtime/agent/toolkit/config/configure.properties and compare the values inside it with the quoted 'attributes'

PS: On that other computer (whose IP addresses were mentioned)
 
Old 02-05-2016, 01:22 AM   #5
NevemTeve
Senior Member
 
Registered: Oct 2011
Location: Budapest
Distribution: Debian/GNU/Linux, AIX
Posts: 3,484

Original Poster
Rep: Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072
Keep on blogging
On some computers, where there's no such problems, slp_query says sg like this:
Code:
URL: service:TivoliCommonAgent://somehost1:9510
ATTR: (ca-uid=file:///var/opt/tivoli/ep/runtime/agent),
(am-host=null),
(ca-ips=10.30.30.11\2c 10.90.190.91),
(ca-basic-port=9510),
(ca-cert-port=9510),
(ca-version=1.4.2.4),
(os-uid=54654D1E705A11E3928E000000000000)
so most like (am-host=null) is okay, (am-host=) is not okay, the difference is in tivoli subversion 1.4.2.2 vs 1.4.2.4

Edit: 'am-host' might be 'Agent Manager Host' which most certainly means something, and hopefully it can be configure somehow. Keep googling.

Edit: There is line agentManagerHostname=127.0.0.1 in file /var/opt/tivoli/ep/runtime/agent/toolkit/config/configure.properties, I don't know if it has anything to do with anything else.

Edit: also there is another file /var/opt/tivoli/ep/runtime/agent/config/endpoint.properties that might be related.

Edit: some documentations suggest that the following two might be the same thing:
/var/opt/tivoli/ep/runtime/agent/toolkit/bin/configure.sh
/opt/ibm/director/agent/runtime/agent/toolkit/configure.sh

Might be plausible, considering:
Code:
ls -l /opt/ibm/director/agent
lrwxrwxrwx 1 root system 18 Jan 25 15:54 /opt/ibm/director/agent -> /var/opt/tivoli/ep

Last edited by NevemTeve; 02-05-2016 at 04:15 AM.
 
Old 02-05-2016, 05:55 AM   #6
NevemTeve
Senior Member
 
Registered: Oct 2011
Location: Budapest
Distribution: Debian/GNU/Linux, AIX
Posts: 3,484

Original Poster
Rep: Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072
Yet another interesting piece of text:
Code:
2016/02/05 11:17:15.012 SEVERE getAttributesam-host is empty
::class.method=com.ibm.tivoli.cas.agent.slp.internal.CAServiceDescriptor.getAttributes()
::thread=ManagedService Update Queue
::loggername=com.ibm.tivoli.cas.agent.slp.internal
Might be related with this file:
/var/opt/tivoli/ep/runtime/agent/eclipse/plugins/
com.ibm.tivoli.cas.agent.slp_1.4.2.4.jar

Last edited by NevemTeve; 02-05-2016 at 10:25 AM.
 
Old 02-05-2016, 06:25 AM   #7
NevemTeve
Senior Member
 
Registered: Oct 2011
Location: Budapest
Distribution: Debian/GNU/Linux, AIX
Posts: 3,484

Original Poster
Rep: Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072
Let's give it a rest, and do what IBM suggests:
Code:
Temporary fix

    The client can choose to set net.slp.loglevel=0 in
    /etc/slp.conf, which sets up the SLP server to only log
    emergency-level messages to syslog. As there are no
    emergency-level messages in the SLP server, this would
    effectively disable SLP server logging.
 
Old 02-05-2016, 10:43 AM   #8
NevemTeve
Senior Member
 
Registered: Oct 2011
Location: Budapest
Distribution: Debian/GNU/Linux, AIX
Posts: 3,484

Original Poster
Rep: Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072
use the source, Luke!
good version:
Code:
            if(Boolean.valueOf(configuration.getProperty("unmanagedAgent")).booleanValue())
            {
                LOG.trace(TraceType.ENTER, Level.FINE, CLAZZ, "getAttributes", "am-host is empty", "");
                LOG.log(Level.ERROR, CLAZZ, "getAttributes", "com.ibm.tivoli.cas.agent.slp.SlpMsgs", "getAttrib
utesam-host is empty");
                am_host = "null";
            } else
            {
                am_host = configuration.getProperty("CatalogueService.Host");
            }
bad version:
Code:
            if(Boolean.valueOf(configuration.getProperty("unmanagedAgent")).booleanValue())
                am_host = "";
            else
                am_host = configuration.getProperty("CatalogueService.Host");

Last edited by NevemTeve; 02-05-2016 at 10:56 AM.
 
Old 02-06-2016, 09:29 AM   #9
NevemTeve
Senior Member
 
Registered: Oct 2011
Location: Budapest
Distribution: Debian/GNU/Linux, AIX
Posts: 3,484

Original Poster
Rep: Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072
Summary: start slp_srvreg before Tivoli cas_agent (also known as 'common agent service' or 'endpoint agent' or 'non stop agent' or 'lwi'); upgrade tivoli to 1.4.2.4+
 
Old 05-13-2016, 02:07 PM   #10
NevemTeve
Senior Member
 
Registered: Oct 2011
Location: Budapest
Distribution: Debian/GNU/Linux, AIX
Posts: 3,484

Original Poster
Rep: Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072
To restart tivoli/cas_agent/many_other_names:
Code:
lssrc -a | grep cas_agent # to get the old process' PID
stopsrc -s cas_agent
<wait a little>
startsrc -s cas_agent

Last edited by NevemTeve; 05-13-2016 at 02:15 PM.
 
Old 02-01-2017, 01:54 PM   #11
NevemTeve
Senior Member
 
Registered: Oct 2011
Location: Budapest
Distribution: Debian/GNU/Linux, AIX
Posts: 3,484

Original Poster
Rep: Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072
http://www.unix.com/aix/253903-i-see...e-ignored.html
Just found this, seems to be related/useful.

It says these entries in /etc/inittab have relevance:
Code:
cimservices:2:once:/usr/bin/startsrc -s cimsys    >/dev/null 2>&1
cas_agent  :2:once:/usr/bin/startsrc -s cas_agent >/dev/null 2>&1
Also these processes:
Code:
/opt/freeware/cimom/pegasus/bin/cimssys platform_agent
/opt/freeware/cimom/pegasus/bin/cimssys cimsys
 
Old 06-05-2018, 07:07 AM   #12
NevemTeve
Senior Member
 
Registered: Oct 2011
Location: Budapest
Distribution: Debian/GNU/Linux, AIX
Posts: 3,484

Original Poster
Rep: Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072Reputation: 1072
And now, slp_srvreg didn't start because it couldn't perform a sendto operation to [ff01::0123]:427
I really don't know where this address came from, and why did it work so far.
Anyways, to placate it I added this line into /etc/slp.conf:
Code:
net.slp.DAAddresses = 127.0.0.1
Obviously, I had to stop cas_agent before restarting slp_srvreg.
Mind you, I still have no idea why either of these two is installed on our computers...
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Port 80/UDP czezz Linux - Security 13 02-07-2014 05:30 PM
telneting to a udp port. juanb Linux - Security 3 03-06-2013 01:30 PM
UDP port 5353 WannaLearnLinux Linux - Security 17 05-05-2011 01:26 PM
UDP port answerme Linux - Newbie 8 06-05-2008 07:45 AM
udp port 1024 frgtn Linux - Security 2 03-27-2005 07:10 AM

LinuxQuestions.org > Forums > Other *NIX Forums > AIX

All times are GMT -5. The time now is 09:41 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration