FILE NAME: cmafdtn-5.20-1.i386.rpm TITLE: Compaq Foundation Agents for Servers - Linux VERSION: 5.20-1 LANGUAGE: English CATEGORY: Management Agents DIVISIONS: Systems PRODUCTS AFFECTED: Compaq ProLiant 8000 Compaq ProLiant 8500 Compaq ProLiant DL 320 Compaq ProLiant DL 360 Compaq ProLiant DL 380 Compaq ProLiant DL 380 G2 Compaq ProLiant DL 580 Compaq ProLiant DL 760 Compaq ProLiant ML 330 Compaq ProLiant ML 330e Compaq ProLiant ML 330 G2 Compaq ProLiant ML 350 Compaq ProLiant ML 350 G2 Compaq ProLiant ML 370 Compaq ProLiant ML 370 G2 Compaq ProLiant ML 530 Compaq ProLiant ML 570 Compaq ProLiant ML 750 OPERATING SYSTEM: Red Hat Linux 7.0 Red Hat Linux 7.1 SuSE Linux 7.0 SuSE Linux 7.2 Professional PREREQUISITES: Compaq Health & Wellness Driver ("cpqhealth" RPM) version 2.2.0 and UCD SNMP RPMs must be installed before installing the Foundation Agents for Linux. EFFECTIVE DATE: August 30, 2001 SUPERSEDES: cmafdtn-5.10-2.i386.rpm DESCRIPTION: This Reliable Package Manager (RPM) package contains the Compaq Foundation Agents for Linux. SUPPORTED FEATURES & DEVICES: The following Linux Installations are supported by this release: 1. Red Hat Linux 7.0 Server default installation. 2. Red Hat Linux 7.1 Server default installation. 3. Suse Linux 7.0. 4. Suse Linux 7.2 Professional. ENHANCEMENTS/FIXES: 1. Added support for SuSE Linux 7.2 Professional. 2. Fixed a potential security vulnerability in Compaq Web agent. HOW TO USE: 1. Download the cmafdtn-5.20-1.i386.rpm and cmafdtn-5.20-1.i386.txt to a directory on your hard drive and change to that directory. 2. Refer to the README section in cmafdtn-5.20-1.i386.txt for installation and configuration instructions. 3. After the RPM is installed, you may delete the previously downloaded RPM file. 4. Refer to the README section in cmafdtn-5.20-1.i386.txt for additional information. Copyright 2000-2001, Compaq Computer Corporation. All rights reserved. Product names mentioned herein may be trademarks and/or registered trademarks of their respective companies ==================================README================================== C O M P A Q (R) C O M P U T E R C O R P O R A T I O N Compaq Foundation Agents - Linux Version 5.20-1 August 30, 2001 ------------------------------------------------------------------------ 1. Introduction 2. Documentation Updates and Corrections 3. Known Issues 4. Supported Linux Installations 5. Installation 5.1 Before Installation 5.2 Installing the Foundation Agents from RPM 5.3 Installing the Foundation Agents from Compaq Management CD 5.4 After Installation 6. New Features and Fixes 7. Supported Products ------------------------------------------------------------------------ 1. Introduction The "Compaq Foundation Agents - Linux" software release contains Foundation Agents program and related files for Linux. The Compaq Foundation Agents take advantage of the systems management capabilities of Compaq servers. This release supports Red Hat Linux 7.0, Red Hat Linux 7.1, SuSE Linux 7.0 and SuSE Linux 7.2 Professional. 2. Documentation Updates and Corrections This section contains information on known errors and omissions in other documentation. The information in this section is more up-to-date than that in other documentation. 3. Known Issues a. SNMP agent (snmpd; versions 4.1.1 and 4.1.2) leaks memory when SNMP requests fail the authentication (usually canused by incorrect Community String and/or Source of requests). Use "ps -elf |grep snmpd" command to view the size of snmpd. A workaround of this issue is provided within Host Agent (cmahostd). The workaround is disabled by default. The workaround, when enabled, will watch the size of snmpd every 30 minutes and restart snmpd when its size doubles. Before enabling the workaround, make sure that restarting snmpd will not cause any problem on your system. snmpd is restarted using "/etc/rc.d/init.d/snmpd restart" (SuSE 7.0) or "/etc/init.d/snmpd restart" (Red Hat and SuSE 7.2 Professional) command. To enable the workaround, you need to add "-z" flag to the cmahostd command in /opt/compaq/foundation/etc/cmahostd. For example: PFLAGS="-p 15 -s OK -z" Restart the cmahostd using "/etc/rc.d/init.d/cmafdtn restart cmahostd" (SuSE 7.0) or "/etc/init.d/cmafdtn restart cmahostd" (Red Hat and SuSE 7.2 Professional) command. Every time snmpd is restarted, the following message will be added to Agents log file (/var/spool/compaq/cma.log): "Restarting snmpd. Current size = nnnK. size captured earlier = nnnK" Note: This memory leak does NOT exist in UCD SNMP version 4.2. b. While viewing the Web agent, AutoRefresh feature does not function properly for NetScape browsers running under Linux. AutoRefresh does work for browsers running under Windows. c. During a SuSE 7.0 installation, if user select "Everything" install mode, the package snmp-3.6-126.i386.rpm is installed by default. When the user tries to install the package "ucdsnmp-4.1.1-58.i386.rpm" from CD #1, the following message will be displayed: error: failed dependencies: snmp conflicts with ucdsnmp-4.1.1-58 To solve this problem, uninstall the package snmp-3.6-126.i386.rpm (%rpm -e snmp-3.6-126) and proceed with the installation of the package ucdsnmp-4.1.1-58.i386.rpm. 4. Supported Linux Installations Following Linux installations are supported by this release: a. Red Hat Linux 7.0 Server default installation. b. Red Hat Linux 7.1 Server default installation. Note: If default "High" or "Medium" firewall configuration was selected during the installation of Red Hat Linux 7.1, external SNMP requests will be "REJECTED" by the system and the server will become unmanageable. There are significant security implications to configuring firewall and the ipfw(4), ipchains(8), ipchains-save(8) and ipchains-restore(8) manpages should be regarded as mandatory reading before making any change to firewall configuration. The system should start "ACCEPT"ing SNMP requests (e.g. from CIM or other management consoles) with following command: %ipchains -I input -s 16.101.168.68/255.255.255.255 \ -d 16.101.169.69/255.255.255.255 161:161 \ -i eth0 -p udp -j ACCEPT Where 1. "16.101.168.68" is the IP Address of remote system running management console (or issuing SNMP requests) 2. "16.101.169.69" is the IP Address of the interface "eth0" of the server running Red Hat Linux 7.1. c. SuSE Linux 7.0 installations plus "ucdsnmp" RPMs. d. SuSE Linux 7.2 Professional installations plus "ucdsnmp" RPMs. 5. Installation 5.1 Before Installation a. "Compaq Foundation Agents - Linux" requires following binary RPMs: UCD SNMP RPM: version 4.1.2 for Red Hat 7.0 (ucd-snmp-4.1.2) version 4.2 for Red Hat 7.1 (ucd-snmp-4.2) version 4.1.1 for SuSE 7.0 (ucdsnmp-4.1.1) version 4.2.1 for SuSE 7.2 Professional (ucdsnmp-4.2.1) Compaq Health Driver RPM (cpqhealth) version 2.2.0 b. The UCD snmpd Start script "snmpd" (under /etc/rc.d) should be turned on under one or more runlevels of 2, 3, 4 and 5. For Red Hat Linux, /sbin/chkconfig tool can be used. E.g. "/sbin/chkconfig --level 3 snmpd on". If "snmpd" is not turned on at any runlevel, the Foundation Agents RPM post installation script will automatically turn it on at default boot runlevel based on the /etc/inittab configuration(see "man inittab"). NOTE: For SuSE 7.2 Professional with ucdsnmp-4.2.1, the snmpd is NOT configured to start automatically during boot by default. The automatic startup of snmpd can be turned on by editing /etc/rc.config and changing the value of "START_SNMPD" to "yes". The Foundation Agents RPM installation script will turn on the snmpd automatic startup if it had not been done so. 5.2 Installing the Foundation Agent from RPM Log in as "root", then use following command to install Foundation Agents from RPM: %rpm -Uvh cmafdtn-5.20-1.i386.rpm 5.3 Installing the Foundation Agent from Compaq Management CD a. Insert the Compaq Management CD into CD-ROM drive and log in as "root" user. b. Mount the Compaq Management CD at the directory /mnt/cdrom (Red Hat Linux) or /cdrom (SuSE Linux) using following command: %mount /dev/cdrom c. Install the Foundation Agents using following command: %rpm -Uvh /mnt/cdrom/agents/linux/eng/compaq/cmafdtn/cmafdtn.rpm (Red Hat Linux) %rpm -Uvh /cdrom/agents/linux/eng/compaq/cmafdtn/cmafdtn.rpm (SuSE Linux) d. Un-mount the Compaq Management CD: %cd / %umount /mnt/cdrom e. Remove the Compaq Management CD from CD-ROM drive. 5.4 After Installation Note: There are significant security implications to configuring "snmpd.conf", and the snmp_config(5) and snmpd.conf(5) manpages should be regarded as mandatory reading before proceeding. a. SNMP configuration files ("snmpd.conf") need to be configured properly. An example snmpd.conf can be found at /opt/compaq/foundation/etc/snmpd.conf.cma. Read the comments in "snmpd.conf.cma" for more information on customization and installation. Please note that "/usr/share/snmp/snmpd.conf" is the first configuration file to be read by "snmpd". NOTE: For SuSE 7.2 Professional, the /etc/init.d/snmpd will start "snmpd" with following flags: "-c /etc/ucdsnmpd.conf -f -L -A" We recommend that you edit the /etc/init.d/snmpd and remove all flags above. Read "snmpd", "snmp_config" and "snmpd.conf" manpages before making the changes. b. Compaq Management Agents will use "rocommunity" and "rwcommunity" entries to obtain community strings. At minimum, localhost SNMP READ privilege is required. For example, rocommunity YourReadStr 127.0.0.1 Localhost SNMP WRITE(SET) privilege is required if you like to enable Web agent with SET capability or to perform SETs through Remote Insight Board. For example, rwcommunity YourWriteStr 127.0.0.1 Compaq Management Agents will refer to "trapcommunity" and "trapsink" entries for Trap destinations and community string. For examples: trapcommunity defaulttrapcomm trapsink 127.0.0.1 mytrapcomm trapsink 131.168.11.2 c. "/usr/sbin/snmpd" needs to be re-built to include Compaq Management Agents eXtension (cmaX). UCD SNMP 4.1.2 (ucd-snmp-4.1.2-8) is supported under Red Hat Linux 7.0. UCD SNMP 4.2 (ucd-snmp-4.2-12) is supported under Red Hat Linux 7.1 and UCD SNMP 4.1.1 (ucdsnmp-4.1.1-58) is supported under SuSE Linux 7.0. UCD SNMP 4.2.1 (ucdsnmp-4.2.1-15) is supported under SuSE Linux 7.2 Professional. UCD SNMP "SOURCE" RPMs can be found on the Red Hat CD #2 (SRPM CD)and SuSE CD #6. Source RPM installation instructions for UCD SNMP 4.1.2 under Red Hat Linux 7.0: (Insert Red Hat Linux 7.0 CD #2 (SRPM CD) into CDROM drive) %mount /dev/cdrom %rpm -i /mnt/cdrom/SRPMS/ucd-snmp-4.1.2-8.src.rpm %cd /usr/src/redhat/SOURCES %tar xvzf ucd-snmp-4.1.2.tar.gz %patch -p0 < ucd-snmp-4.1.2-rpm40.patch %umount /dev/cdrom (Remove Red Hat Linux 7.0 CD #2 (SRPM CD) from CDROM drive) Source RPM installation instructions for UCD SNMP 4.2 under Red Hat Linux 7.1: (Insert Red Hat Linux 7.1 CD #2 (SRPM CD) into CDROM drive) %mount /dev/cdrom %rpm -i /mnt/cdrom/SRPMS/ucd-snmp-4.2-12.src.rpm %cd /usr/src/redhat/SOURCES %tar xvzf ucd-snmp-4.2.tar.gz %patch -p1 -d ucd-snmp-4.2 < ucd-snmp-4.1.2-bug18153.patch %patch -p0 -d ucd-snmp-4.2 < ucd-snmp-4.2-fromcvs.patch %patch -p0 < ucd-snmp-4.2-null.patch %patch -p0 < ucd-snmp-4.2-rpm40.patch %umount /dev/cdrom (Remove Red Hat Linux 7.1 CD #2 (SRPM CD) from CDROM drive) Source RPM installation instructions for UCD SNMP 4.1.1 under SuSE Linux 7.0: (Insert SuSE Linux 7.0 CD #6 into CDROM drive) %mount /dev/cdrom %rpm -i /cdrom/full-names/src/ucdsnmp-4.1.1-58.src.rpm %cd /usr/src/packages/SOURCES %tar xvzf ucd-snmp-4.1.1.tar.gz %umount /dev/cdrom (Remove SuSE Linux 7.0 CD #6 from CDROM drive) Source RPM installation instructions for UCD SNMP 4.2.1 under SuSE Linux 7.2 Professional: (Insert SuSE Linux 7.2 Professional CD #6 into CDROM drive) %mount /dev/cdrom %rpm -i /cdrom/full-names/src/ucdsnmp-4.2.1-15.src.rpm %cd /usr/src/packages/SOURCES %tar xvjf ucd-snmp-4.2.1.tar.bz2 %umount /dev/cdrom (Remove SuSE Linux 7.2 Professional CD #6 from CDROM drive) Note: a fix for UCD SNMP's "interfaces.c" (Versions 4.1.x only) is also included in Foundation Agents RPM. This issue does not exist in UCD SNMP Version 4.2. To add Compaq Management Agents eXtension (cmaX) to "snmpd", log in as "root" and run "/opt/compaq/foundation/etc/snmpdbld" script (recommended): %/opt/compaq/foundation/etc/snmpdbld or, if you wish to build snmpd manually, follow the instructions below: Note: if your snmpd also includes other extensions, you can't use "snmpdbld" script and you need to include all the extensions in the "--with-mib-modules" flag of "./configure" commands below. Commands for adding cmaX manually under Red Hat Linux 7.0: % SNMPVER=4.1.2 % cd /usr/src/redhat/SOURCES/ucd-snmp-$SNMPVER % mv ./agent/mibgroup/mibII/interfaces.c \ ./agent/mibgroup/mibII/interfaces.c.orig % cp /opt/compaq/foundation/src/interfaces.c.$SNMPVER \ ./agent/mibgroup/mibII/interfaces.c % cp /opt/compaq/foundation/src/cmaX.[ch] ./agent/mibgroup % ./configure --with-mib-modules=cmaX --with-ldflags="-lpthread" --prefix=/usr % make % /etc/init.d/snmpd stop % mv /usr/sbin/snmpd /usr/sbin/snmpd.orig % cp ./agent/snmpd /usr/sbin/snmpd % /etc/init.d/snmpd start Commands for adding cmaX manually under Red Hat Linux 7.1: % SNMPVER=4.2 % cd /usr/src/redhat/SOURCES/ucd-snmp-$SNMPVER % cp /opt/compaq/foundation/src/cmaX.[ch] ./agent/mibgroup % ./configure --disable-shared --with-mib-modules=cmaX \ --with-ldflags="-lpthread" --prefix=/usr % make % /etc/init.d/snmpd stop % mv /usr/sbin/snmpd /usr/sbin/snmpd.orig % cp ./agent/snmpd /usr/sbin/snmpd % /etc/init.d/snmpd start Commands for adding cmaX manually under SuSE Linux 7.0: % SNMPVER=4.1.1 % cd /usr/src/packages/SOURCES/ucd-snmp-$SNMPVER % cp /opt/compaq/foundation/src/cmaX.[ch] ./agent/mibgroup % mv ./agent/mibgroup/mibII/interfaces.c \ ./agent/mibgroup/mibII/interfaces.c.orig % cp /opt/compaq/foundation/src/interfaces.c.$SNMPVER \ ./agent/mibgroup/mibII/interfaces.c % ./configure --with-mib-modules=cmaX --with-ldflags="-lpthread" --prefix=/usr % make % /etc/rc.d/init.d/snmpd stop % mv /usr/sbin/snmpd /usr/sbin/snmpd.orig % cp ./agent/snmpd /usr/sbin/snmpd % /etc/rc.d/init.d/snmpd start Commands for adding cmaX manually under SuSE Linux 7.2 Professional: % SNMPVER=4.2.1 % cd /usr/src/packages/SOURCES/ucd-snmp-$SNMPVER % cp /opt/compaq/foundation/src/cmaX.[ch] ./agent/mibgroup % ./configure --disable-shared --with-mib-modules=cmaX \ --with-ldflags="-lpthread" --prefix=/usr % make % /etc/init.d/snmpd stop % mv /usr/sbin/snmpd /usr/sbin/snmpd.orig % cp ./agent/snmpd /usr/sbin/snmpd % /etc/init.d/snmpd start d. Start the Foundation agents % /etc/rc.d/init.d/cmafdtn start (For SuSE Linux 7.0) % /etc/init.d/cmafdtn start (For Red Hat and SuSE Linux 7.2 Professional) If "snmpd" is not running, start it with following command: % /etc/rc.d/init.d/snmpd start (For SuSE Linux 7.0) % /etc/init.d/snmpd start (For Red Hat and SuSE Linux 7.2 Professional) e. Optionally, install other Compaq Management Agents for Servers packages Compaq Server Agents - Linux (cmasvr) Compaq Storage Agents - Linux (cmastor) Compaq NIC Agents - Linux (cmanic) 6. New Features and Fixes Added support for SuSE Linux 7.2 Professional. Fixed a potential security vulnerability in Compaq Web agent. 7. Supported Products The "Compaq Foundation Agents - Linux" has been tested on the following Compaq Products: Compaq ProLiant 8000 Compaq ProLiant 8500 Compaq ProLiant DL320 Compaq ProLiant DL360 Compaq ProLiant DL380 Compaq ProLiant DL380 G2 Compaq ProLiant DL580 Compaq ProLiant DL760 Compaq ProLiant ML330 Compaq ProLiant ML330e Compaq ProLiant ML330 G2 Compaq ProLiant ML350 Compaq ProLiant ML350 G2 Compaq ProLiant ML370 Compaq ProLiant ML370 G2 Compaq ProLiant ML530 Compaq ProLiant ML570 Compaq ProLiant ML750 Use of this software on equipment not specifically tested by Compaq may produce unreliable or undesirable results. Compaq does not warrant the fitness or compatibility of this software on untested hardware. ------------------------------------------------------------------------ Copyright 2000-2001 Compaq Computer Corporation. All rights reserved. Product names mentioned herein may be trademarks and/or registered trademarks of their respective companies.