Thank you Jose for the knowledge sharing which perfectly corrected my thought. I thought the root cause is the type of FS mount -- 'tmpfs'; Your sharing makes more sense that mount option of 'noexec' is the root cause.
Original Message:
Sent: 03-20-2024 04:21:46 AM
From: Jose Manuel Rodriguez Prieto
Subject: Need help with dxtoolkit
Hi Johnley.
I am glad you found a workaround to fix your problem.
Based on your tips I found out that /tmp is mounted with the noexec option in RHEL8 which prevents the execution of binaries stored in /tmp.
That explains why mounting /tmp on a different disk with the default options that do not include noexec fixes the issue.
I just found out that you can define the variables TEMP or TMP in your dxToolkit shell environment to point them somewhere outside /tmp, like /home/delphix/temp or similar. This should fix the issue as well without reducing the security of your Linux box.
------------------------------
Jose Manuel Rodriguez Prieto
Technical Account Manager
Delphix
Original Message:
Sent: 03-19-2024 03:58:36 PM
From: Johnley Li
Subject: Need help with dxtoolkit
Hi Jose,
I resolved the issue and found the root cause. my /tmp is mounted as "tmpfs" which is a FS type saving everything in memory instead of physical disk, that is the root cause. I created a new volume on disk and remount /tmp with the new logical volume, dxToolkit just works fine then.
Looks like dxToolkit doesn't support that FS type
Thanks for your diligent response and follow up.
Regards
Johnley
------------------------------
Johnley Li
Intern
HSBC Canada
Original Message:
Sent: 03-18-2024 04:57:55 AM
From: Jose Manuel Rodriguez Prieto
Subject: Need help with dxtoolkit
Hi Johnley.
Can you execute dxtoolkit with strace and provide the output?
Also, what is the exact version of RHEL in use?
Can you try executing dxtoolkit with root privileges and let us know what happens?
------------------------------
Jose Manuel Rodriguez Prieto
Technical Account Manager
Delphix
Original Message:
Sent: 03-14-2024 01:54:51 PM
From: Johnley Li
Subject: Need help with dxtoolkit
Sorry, celebrated too early :-(. I mistakenly did the testing/investigation on a wrong server which was actually never had any issue with dxToolkit even with SELinux "enforcing";
I tried the solution you provided on the "bad" server, it doesn't help. I still get the same issue -- dx_xxx command doesn't return error nor result even the SELinux is disabled.
------------------------------
Johnley Li
Intern
HSBC Canada
Original Message:
Sent: 03-11-2024 03:37:10 AM
From: Jose Manuel Rodriguez Prieto
Subject: Need help with dxtoolkit
Hi Johnley.
I've seen this behaviour in other brand new installed RHEL hosts. I haven't been able to fully root cause it but this seems to be related to Selinux.
Execute the command getenforce both on the "good" and the "bad" servers. If only the "bad" one has Selinux enabled, try with setenforce 0 to temporarily disable Selinux and try using dxToolkit.
If both systems have Selinux enabled, you will have to modify the context of the dxToolkit files/user to be able to write to /tmp. This is a RHEL article that may help explain this: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html-single/using_selinux/index
This is only a hypothesis at this moment, but seems to be the most feasible.
------------------------------
Jose Manuel Rodriguez Prieto
Technical Account Manager
Delphix
Original Message:
Sent: 03-08-2024 02:22:22 PM
From: Johnley Li
Subject: Need help with dxtoolkit
Thank you Neal for the quick response. Here are the output
--(~)-$ id -a
uid=800(oracle) gid=26013(oinstall) groups=26013(oinstall),26629(oradba),400005628(rpa) context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
--(/tmp)-$ ls -la | more
total 9940
drwxrwxrwt. 18 root root 460 Mar 8 20:15 .
dr-xr-xr-x. 22 root root 4096 Jan 22 12:57 ..
--(/tmp)-$ ls -la | grep par
drwx------. 4 oracle oinstall 80 Mar 8 16:55 par-6f7261636c65
I also run step 2 and step 3 on another server which has dxToolkit running well, the output are identical with the one from the server we have dxtoolkit issue, here are the output from "good" server:
--(/tmp)-$ ls -al | more
total 7088
drwxrwxrwt. 4196 root root 262144 Mar 8 21:19 .
dr-xr-xr-x. 29 root root 4096 Mar 3 09:12 ..
--(/tmp)-$ ls -l | grep par
drwx------. 3 oracle oinstall 60 Mar 8 18:05 par-6f7261636c65
------------------------------
Johnley Li
Intern
HSBC Canada
Original Message:
Sent: 03-08-2024 11:43:38 AM
From: Neal Stack
Subject: Need help with dxtoolkit
Hello,
It is generally best to start new threads for new questions because it helps others find answers when they have the same questions.
Please provide the following output:
- Run "id -a" as the user trying to execute the dxtoolkit commands.
- Change into the "/tmp" directory and run "ls -la | more" and provide the output of the first two lines (. and .. directory permissions).
- From the "/tmp" directory, run "ls -la | grep par". Dxtoolkit creates a directory in "/tmp" with the name par and a number (par-737962617365 for example). If execute permissions are somehow removed from the "/tmp" directory, it can cause the dxtoolkit commands to execute with no result.
Thanks,
Neal
------------------------------
Neal Stack
Senior Principal Technical Support Engineer
Delphix
Original Message:
Sent: 03-08-2024 11:36:07 AM
From: Johnley Li
Subject: Need help with dxtoolkit
Hi Michael,
I'd like to use this thread to raise the question for the same subject.
I have installed dxToolkit many times in different RedHat machine and running fine. However the recent installation on the new ReadHat machine gave me some trouble.
I configure the dxtools.conf as I usually did, then I try to test with various ./dx_xx_xx command. But nothing happened - no error, no result returns.
i.e.
--$ ./dx_get_cpu
--$
--$ ./dx_get_env
--$
------------------------------
Johnley Li
Intern
HSBC Canada
Original Message:
Sent: 06-07-2023 03:35:08 PM
From: Michael Torok
Subject: Need help with dxtoolkit
Hi Binod,
Have you found the binary releases within github here: https://github.com/delphix/dxtoolkit/releases?
Please take a look at the wiki page, here: https://github.com/delphix/dxtoolkit/wiki. Each of the commands found here https://github.com/delphix/dxtoolkit/wiki/dxtoolkit_list has a page with command information, for example dx_config's man page is https://github.com/delphix/dxtoolkit/wiki/dx_config.
An example and usage of the dx_encrypt command is here https://github.com/delphix/dxtoolkit/wiki/dx_encrypt.
I am not sure what is necessary from the standpoint of Cyberark. Maybe @Marcin Przepiorowski can help you with that question.
I hope this helped.
Michael
------------------------------
Michael Torok
Digital Customer Experience, Senior Director
Delphix
Original Message:
Sent: 06-07-2023 02:58:05 AM
From: Binod Chowdhury
Subject: Need help with dxtoolkit
Hi All,
I am new to Delphix and not able to get how to use the dxtoolkit.
It woulkd be great help if you all help me with some documents with example for below pointers :
- Configuration/Installation of Dxtoolkit -- I went through the wiki link but not much clear with steps and execution. Small sample example doc would help.
- Sample scripts / templates to use for credentials retrieval <o:p></o:p>
- What we need from Cyberark in order to get credentials from password vault<o:p></o:p>
- Config file encryption Sample<o:p></o:p>
------------------------------
Binod Chowdhury
TDM lead
TATA Consultancy Services Ltd
------------------------------