Vanilla installs of the BigFix client will include QnA for development and debugging purposes. But one problem…
if you try to launch it you receive the following error:
qna: error while loading shared libraries: libBEScrypto_1_0_0_1.so: cannot open shared object file: No such file or directory
The way to fix that is to execute the following command…
This will let you launch QnA on several flavors of Linux…
(Tested on CentOS and openSUSE)
Reference (thanks Noah): http://forum.bigfix.com/viewtopic.php?id=2685
So, I’m researching the NMAP tool from Insecure.org… and needed to compile it on my various linux test boxes.
suse1:~/nmap # ./configure
checking whether NLS is requested… yes
checking build system type… i686-pc-linux-gnu
checking host system type… i686-pc-linux-gnu
checking for gcc… no
checking for cc… no
checking for cl.exe… no
configure: error: in `/root/nmap’:
configure: error: no acceptable C compiler found in $PATH
See `config.log’ for more details.
Only problem is they are fresh installations with the minimum of options during the setup of the computers. IE: I went with basic server options with no additional packages during the install of each flavor of Linux.
So where do I go from here… welp, download and compile of course.
In the end I needed 15 different rpm packages from my SuSE DVD… and they needed to be installed in the following order:
I’ve posted them at my files webiste http://files.moranit.com/SuSE11/
After installing all of these, the remaining installation proceedure outlined on the nmap website went perfectly… I now have a working version on my SuSE 11.0 text box.
Finally got the client working on my Fedora 14 test box…
basically following the instructions on the bigfix website: http://support.bigfix.com/bes/install/besclients-nonwindows.html
Ran into a problem with the basic instructions though… a fresh install of Fedora 14 apparently has additional restrictions and would not allow the libBEScrypto library to function properly… i got the following error while attempting to launch the BESClient:
[root@fedora1 BESClient]# /etc/init.d/besclient start Starting BESClient: /opt/BESClient/bin/BESClient: error while loading shared libraries: libBEScrypto_1_0_0_1.so: cannot enable executable stack as shared object requires: Permission denied
As it turns out the solution was simple… and i’m working via the BigFix forum thread (http://forum.bigfix.com/viewtopic.php?pid=25812#p25812) to explain to me why it worked… but basically to get the client started and working I had to run the following command:
setsebool -P allow_execstack 1
then using the “/etc/init.d/besclient start”, the client started right up…
Here is how to install BigFix onto SuSE 11…
rpm -ivh compat-2007.4.18-31.i586.rpm
rpm -ivh compat-libstdc++-5.0.7-86.i586.rpm
rpm -ivh BESAgent-8.0.627.0-suse80.i386.rpm
then wget your masthead and put into /etc/opt/BESClient/actionsite.afxm
then start it with /etc/init.d/besclient start
Disable firewall completelyI was wondering… why I can’t connect through ssh. sshd daemon is running fine, so I found out that OpenSuSE installs its stikin’ firewall by default and blocks everything. I’m pretty well protected behind enough high end security devices, and don’t need to micro-manage my connection. Here is how I disabled the firewall altogether:
/sbin/SuSEfirewall2 offTo start the firewall:
/sbin/SuSEfirewall2 onIf you want to temporarily disable your firewall:
/etc/init.d/SuSEfirewall2_setup stopEnter the above line without “stop” and you will see all available switches.