Mar 25, 2021
03:24 AM
As part of normal operation, Flexnet Publisher may create and delete folders under /dev/shm with names beginning 'FlexNetFs.'.
These folders are associated with the implementation of the new secure file anchoring functionality on Linux. They are not designed to be accessed other than by Flexnet Publisher, consequently, errors as below may be reported when trying to list such a folder are to be expected:
ls /dev/shm/ -al ls: cannot access /dev/shm/FlexNetFs.43054: Transport endpoint is not connected total 99 drwxrwxrwt 3 root root 120 Mar 14 12:10 . drwxr-xr-x 18 root root 3760 Mar 14 11:10 .. d????????? ? ? ? ? ? FlexNetFs.76491
So, it is suggested to customers to configure their monitoring tool (if any) to ignore any folders matching the name "/dev/shm/FlexNetFs.*"
... View more
Mar 23, 2021
01:30 AM
@llacer , May i request you to advise 'Xilinx' to raise a support cas with us? Because we would need to confirm n multiple details that only 'Xilinx ' can answer, like:
- FNP toolkit version on server and client in use.
- Has there been any implementational enhancement?
- What's the business use case i.e. if Trusted activation or borrow is involved?
It would be helpful if 'Xilinx' can replicate such behavior in house and then get in touch with Revenera Support for further assistance.
... View more
Mar 23, 2021
01:28 AM
@venu_gopal , can you confirm the error code being observed for standalone (I am guessing unserved licenses)?
Also, what's the VENDOR license search path set there (lmpath.exe -status)?
... View more
Mar 19, 2021
05:28 AM
@PierreMarqt , this topic is still under engineering assessment at this point in time. We will have further updates in the coming weeks.
... View more
Mar 11, 2021
10:17 AM
Observation:
When starting the server with the command /opt/FNPLicenseServerManager/lmadmin, the below occurred ./lmadmin: error while loading shared libraries: libldap-2.4.so.2: wrong ELF class: ELFCLASS64 However, in the path /opt/lib64/, libldap-2.4.so.2 does exist
Root Cause:
The error log "libldap-2.4.so.2: wrong ELF class: ELFCLASS64" indicates that the "ldap" libraries installed in system are for 64 bit but for v11.14.0 there was no 64-bit lmadmin available (it was only released starting FNP-11.15.1). So, try by installing the 32 bit variant of libldap and test.
... View more
- Tags:
- ELF
- ELFCLASS64
- LDAP
Mar 11, 2021
03:56 AM
At couple of customer sites, internal technical audit tools are complaining about the world-level read/write access to /dev/shm/.flexnetFS file system.
The ask is if that's necessary and can not be avoided?
Report:
SoC ID: 3.65-9/2.0 No world writable files may exist.
World writable files are files that can be accessed by all users of a system. Such files must be identified and the rights of the corresponding files must be adjusted to an adequate level.
Motivation: Data in world writable files can be read, changed and possibly compromised by any user of a system.
The following threats are relevant to this requirement:
Unauthorized viewing or access to data
Unauthorized modification of data
command to check:
find / -type f ! -path "/proc/" ! -path "/sys/" ( -perm -o+w ) -exec ls -adl {} \;
rw-rw-rw. 1 nuance nuance 0 Feb 24 11:26 /dev/shm/.flexnetfs
Please check the access rights of this file and if this can be subject of change to meet the requirements.
Answer:
/dev/shm/.flexnetFS is a lock-file located in transitory shared memory. It is used in the initialization and maintenance of the FlexNet file-system. Any Flexnet-enabled process, owned by any user, could potentially access or recreate this lock-file.
Typically it contains no content but would not be affected even if the content were added. If deleted, it will simply be regenerated by the next Flexnet-enabled process that tries to access it. For that reason, it is required to have full-world access and poses no security risk.
Also, it is important to note that FNP is having its own bespoke security protocols that do not rely on the host operating-system's native user privileges/file permissions.
... View more
Mar 11, 2021
01:20 AM
It would be worth confirming the exact error message observed. Also, ensure that when connected to VPN - a command-line ping operation, when run against server details (IP/hostname) works fine.
Here is a KB that might help: https://community.flexera.com/t5/FlexNet-Publisher-Knowledge-Base/Best-Practice-Guide-for-Client-and-Server-Communication-FNP/ta-p/180991
... View more
Mar 07, 2021
10:44 AM
1 Kudo
@jbforster , you can contact the Revenera sales. You can either fill in your contact info here:
https://www.revenera.com/about-us/contact-us.html
or call 1.800.374.4353.
... View more
Mar 07, 2021
09:46 AM
1 Kudo
@bbattersby , by inactivity Flexnet licensing means the communication between the license server and client. By default, there is a heartbeat process in between client and server that ensures that both are in sync and communicating to each other (at a periodic interval).
If an automatic heartbeat is disabled for a client application OR, the client is in no more communication with the server (network issues or others), then the client will be regards as "inactive" by the license server and hence post 14400 seconds licenses provided to this client would be claimed back by the server.
... View more
Mar 07, 2021
09:40 AM
@MikeSpragg . for custom applications to identify the DONGLE hardware, they would need to be linked with dongle libraries.
Through default makefile configuration, this gets achieved only when toolkit executables are prepared with command "make DONGLE=1" which internally includes "lmgr_dongle.lib".
Please confirm if this library is part of the linking process. Also, have a look at this KB:
https://community.flexera.com/t5/FlexNet-Publisher-Knowledge-Base/FLEXID-9-is-not-being-detected-using-FNP/ta-p/133179
Hope this helps.
... View more
Mar 07, 2021
09:34 AM
@jjardine
It is not enough clear for me, where we set this attribute LM_A_PROMPT_FOR_FILE ?
[Abhay]: This attribute is set through the client application, which performs the license checkout.
The recommendation is to have an environment variable "VENDOR_LICENSE_FILE" (replace VENDOR keyword with your native vendor daemon name) to port@host configuration. Where port is the TCP port at which license server is running and 'host' could be hostname/IP address of server system.
... View more
Mar 07, 2021
09:30 AM
@nxf54812 , yes we can disable this flag (which is set to TRUE by default) under machind/lsvendor.c file.
Set, 'ls_client_removal_on_reread' to "0" and rebuild your vendor daemon application.
Kindly be advised that post making this attribute as "0", you may observe few potential additional usages of license scenario, which is expected.
Hope this helps.
... View more
Mar 04, 2021
11:58 PM
1 Kudo
@bsivakumar , this particular enhancement has been provided in FNP-11.17.2. This KB should help understand the details about this implementation:
https://community.flexera.com/t5/FlexNet-Publisher-Knowledge-Base/Debug-log-Automatic-rollover-starting-FNP-11-17-2-explained-101/ta-p/180474
You would need to upgrade the lmgrd and vendor daemon to avail this feature.
... View more
Mar 03, 2021
08:54 AM
1 Kudo
You would need to have a valid (if expired, then renewed one) Support entitlement to download the latest hotfix/kits from Flexera's Product and Licensing Center.
Support Account will exist for always, but Support entitlement (contract) expires periodically and would need to be renewed.
... View more
Mar 03, 2021
07:59 AM
The only case where you should need a support account (and a valid Support Entitlement that needs to be purchased), if your native product is being developed using Flexnet Publisher.
You can buy a valid support entitlement, but if the requests are for a 3rd party application then it needs to be done by 3rd party itself.
... View more
Latest posts by aparashar1
Subject | Views | Posted |
---|---|---|
1091 | Mar 25, 2021 03:24 AM | |
745 | Mar 23, 2021 01:30 AM | |
2151 | Mar 23, 2021 01:28 AM | |
2088 | Mar 19, 2021 05:28 AM | |
2553 | Mar 11, 2021 10:17 AM | |
1171 | Mar 11, 2021 03:56 AM | |
2227 | Mar 11, 2021 01:20 AM | |
1664 | Mar 07, 2021 10:44 AM | |
1048 | Mar 07, 2021 09:46 AM | |
2236 | Mar 07, 2021 09:40 AM |
Activity Feed
- Posted What are the FlexnetFS files created under /dev/shm? on FlexNet Publisher Knowledge Base. Mar 25, 2021 03:24 AM
- Posted Re: Missing checked out licenses in license server log for Xilinx software on FlexNet Publisher Forum. Mar 23, 2021 01:30 AM
- Posted Re: Checkout failure on VPN on FlexNet Publisher Forum. Mar 23, 2021 01:28 AM
- Posted Re: Elevated Privilege Issue with FlexNet Publisher Licensing Service on Windows on FlexNet Publisher Knowledge Base. Mar 19, 2021 05:28 AM
- Got a Kudo for Re: FlexNet Licensing log (lmgrd). Mar 19, 2021 05:02 AM
- Posted wrong ELF class: ELFCLASS64 on FlexNet Publisher Knowledge Base. Mar 11, 2021 10:17 AM
- Posted Why /dev/shm folder structure has world write access? on FlexNet Publisher Knowledge Base. Mar 11, 2021 03:56 AM
- Posted Re: Checkout failure on VPN on FlexNet Publisher Forum. Mar 11, 2021 01:20 AM
- Got a Kudo for Re: Is support account needed for downloading security fixes. Mar 07, 2021 10:45 AM
- Posted Re: Is support account needed for downloading security fixes on FlexNet Publisher Forum. Mar 07, 2021 10:44 AM
- Got a Kudo for Re: License Timeout Not Working As Client Not Seen As Idle. Mar 07, 2021 10:40 AM
- Got a Kudo for Re: Is support account needed for downloading security fixes. Mar 07, 2021 10:35 AM
- Posted Re: License Timeout Not Working As Client Not Seen As Idle on FlexNet Operations Forum. Mar 07, 2021 09:46 AM
- Posted Re: Sentinel HL Key is not found in Device Manager post-windows upgrade on FlexNet Publisher Forum. Mar 07, 2021 09:40 AM
- Posted Re: FNP 11.14.0.2 used with VPN (Zscaler Private Access) failed due to ICMP/Ping request on FlexNet Publisher Forum. Mar 07, 2021 09:34 AM
- Posted Re: ls_client_removal_on_reread is enabled on FlexNet Publisher Forum. Mar 07, 2021 09:30 AM
- Posted Re: FlexNet Licensing log (lmgrd) on FlexNet Publisher Forum. Mar 04, 2021 11:58 PM
- Posted Re: Is support account needed for downloading security fixes on FlexNet Publisher Forum. Mar 03, 2021 08:54 AM
- Posted Re: Is support account needed for downloading security fixes on FlexNet Publisher Forum. Mar 03, 2021 07:59 AM
- Posted Re: Is support account needed for downloading security fixes on FlexNet Publisher Forum. Mar 03, 2021 07:18 AM