VIO Server | Unix Linux Forums | AIX

  Go Back    


AIX AIX is IBM's industry-leading UNIX operating system that meets the demands of applications that businesses rely upon in today's marketplace.

VIO Server

AIX


Tags
aix, unix

Closed Thread    
 
Thread Tools Search this Thread Display Modes
    #1  
Old 07-31-2012
vjm vjm is offline
Registered User
 
Join Date: Mar 2005
Last Activity: 30 November 2012, 2:22 AM EST
Posts: 93
Thanks: 0
Thanked 2 Times in 2 Posts
VIO Server

Hi,

I am facing an issue in vio server. When I run

Code:
bosboot -ad /dev/hdisk0

I am getting an error

Code:
trustchk: Verification of attributes failed: /usr/sbin/bootinfo 
: accessauths

regards,

vjm

Moderator's Comments:
Please use code tags next time for your code and data.

Last edited by zaxxon; 07-31-2012 at 08:12 AM.. Reason: code tags
Sponsored Links
    #2  
Old 07-31-2012
funksen funksen is offline Forum Advisor  
Registered User
 
Join Date: Nov 2006
Last Activity: 30 April 2014, 10:11 AM EDT
Location: Austria/Vienna
Posts: 675
Thanks: 21
Thanked 31 Times in 30 Posts
the file /usr/sbin/bootinfo has wrong attributes (user/group/permissions/size) as it should have for trusted computing base

maybe try to copy the permissions from another server, default permissions are


Code:
-r-xr-x---    1 bin      bin           13852 Aug 15 2011  /usr/sbin/bootinfo

size changes of course with your AIX release and technology level

Edit:
check out this link

http://www.ibm.com/developerworks/ai...ron/index.html


the command that might solve your issue is:


Code:
trustchk -y /usr/sbin/bootinfo



of course someone could have manipulated this command, but more obvious, bootinfo is a command with nice outputs for monitoring tools or configuration management databases, and these tools normally don't run as root user
so you might have changed the permission for this command, so it can be run as non root user (since most pvs on the vio server are not part of volume groups, lspv will not work, so you will most likely use bootinfo -s for example)

changing these attributes may lead to other errors in your environment


cheers
funksen

Last edited by funksen; 07-31-2012 at 10:25 AM..
Sponsored Links
    #3  
Old 08-01-2012
vjm vjm is offline
Registered User
 
Join Date: Mar 2005
Last Activity: 30 November 2012, 2:22 AM EST
Posts: 93
Thanks: 0
Thanked 2 Times in 2 Posts
Hi,

I have newly installed this vio server from cd and have not enabled trust base.

So why its giving this error. No body has access to this server. Is it any bug in the os. vios 2.2.1.4

Regards,

vjm
    #4  
Old 08-02-2012
funksen funksen is offline Forum Advisor  
Registered User
 
Join Date: Nov 2006
Last Activity: 30 April 2014, 10:11 AM EDT
Location: Austria/Vienna
Posts: 675
Thanks: 21
Thanked 31 Times in 30 Posts
don't know if it's a bug in this release
did you try
Code:
trustchk -y

?
Sponsored Links
    #5  
Old 08-03-2012
kah00na's Avatar
kah00na kah00na is offline
Registered User
 
Join Date: Jul 2007
Last Activity: 15 October 2014, 11:26 AM EDT
Location: Kansas
Posts: 298
Thanks: 21
Thanked 24 Times in 21 Posts
Run "cksum /usr/sbin/bootinfo" and hopefully someone with a working 2.2.1.4 install can run it too and you can compare the results. I'd show you, but I'm on 2.2.1.3:

Code:
vio0:/home/padmin:# ioslevel
2.2.1.3
vio0:/home/padmin:# oem_setup_env
# cksum /usr/sbin/bootinfo
850554791 14276 /usr/sbin/bootinfo
#

Sponsored Links
    #6  
Old 08-08-2012
AchmedLachned AchmedLachned is offline
Registered User
 
Join Date: Aug 2012
Last Activity: 12 October 2012, 6:02 AM EDT
Posts: 4
Thanks: 0
Thanked 1 Time in 1 Post
Same problem after upgrade VIO to 2.2.1.3, as we updated our SDDPCM driver under oem_setup_env (changes to root instead of padmin !) and smitty update_all:

Code:
...
Finished processing all filesets.  (Total time:  29 secs).

0503-409 installp:  bosboot verification starting...
installp:  bosboot verification completed.
0503-408 installp:  bosboot process starting...
trustchk: Verification of attributes failed: /usr/bin/tee : group mode
trustchk: Verification of attributes failed: /usr/sbin/bootinfo : accessauths

bosboot: Boot image is 49180 512 byte blocks.
0503-292 This update will not fully take effect until after a
        system reboot.
...

Since the bosboot worked in our case, we didn't call IBM support.

Moderator's Comments:
Please use code tags next time for your code and data.

Last edited by zaxxon; 08-08-2012 at 06:23 AM.. Reason: Reformat wrapped lines
Sponsored Links
    #7  
Old 10-10-2012
The_Moves The_Moves is offline
Registered User
 
Join Date: Oct 2012
Last Activity: 11 October 2012, 9:35 PM EDT
Posts: 2
Thanks: 0
Thanked 0 Times in 0 Posts
Here is a working server:

Code:
# /usr/ios/cli/ioscli ioslevel
2.2.1.4
# bosboot -ad /dev/hdisk0

bosboot: Boot image is 51228 512 byte blocks.
#  cksum /usr/sbin/bootinfo
3368613133 14276 /usr/sbin/bootinfo
#

Here is a non-working server:

Code:
#  /usr/ios/cli/ioscli ioslevel
2.2.1.4
# bosboot -ad /dev/hdisk0
trustchk: Verification of attributes failed: /usr/bin/tee
: group mode

bosboot: Boot image is 51228 512 byte blocks.
#  cksum /usr/sbin/bootinfo
3368613133 14276 /usr/sbin/bootinfo
#

Calling IBM to see what they say...

---------- Post updated at 02:07 PM ---------- Previous update was at 01:44 PM ----------

Make sure the permissions of the /usr/bin/tee file are correct, here they are after i updated them:


Code:
# ls -l /usr/bin/tee
-r-xr-xr-x    1 bin      bin            4318 May 10 2008  /usr/bin/tee
# bosboot -ad /dev/hdisk0

bosboot: Boot image is 51228 512 byte blocks.
#


Last edited by The_Moves; 10-10-2012 at 03:15 PM..
Sponsored Links
Closed Thread

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

More UNIX and Linux Forum Topics You Might Find Helpful
Thread Thread Starter Forum Replies Last Post
Problem with Perl script after moving from a Windows/Apache Server to a UNIX server. BigBobbyB Programming 9 05-02-2012 04:13 PM



All times are GMT -4. The time now is 12:52 AM.