Mar 25, 2021
03:24 AM
As part of normal operation, Flexnet Publisher may create and delete folders under /dev/shm with names beginning 'FlexNetFs.'.
These folders are associated with the implementation of the new secure file anchoring functionality on Linux. They are not designed to be accessed other than by Flexnet Publisher, consequently, errors as below may be reported when trying to list such a folder are to be expected:
ls /dev/shm/ -al ls: cannot access /dev/shm/FlexNetFs.43054: Transport endpoint is not connected total 99 drwxrwxrwt 3 root root 120 Mar 14 12:10 . drwxr-xr-x 18 root root 3760 Mar 14 11:10 .. d????????? ? ? ? ? ? FlexNetFs.76491
So, it is suggested to customers to configure their monitoring tool (if any) to ignore any folders matching the name "/dev/shm/FlexNetFs.*"
... View more
Mar 23, 2021
01:30 AM
@llacer , May i request you to advise ' Xilinx' to raise a support cas with us? Because we would need to confirm n multiple details that only 'Xilinx ' can answer, like:
- FNP toolkit version on server and client in use.
- Has there been any implementational enhancement?
- What's the business use case i.e. if Trusted activation or borrow is involved?
It would be helpful if ' Xilinx' can replicate such behavior in house and then get in touch with Revenera Support for further assistance.
... View more
Mar 23, 2021
01:28 AM
@venu_gopal , can you confirm the error code being observed for standalone (I am guessing unserved licenses)?
Also, what's the VENDOR license search path set there (lmpath.exe -status)?
... View more
Mar 19, 2021
05:28 AM
@PierreMarqt , this topic is still under engineering assessment at this point in time. We will have further updates in the coming weeks.
... View more
Mar 11, 2021
10:17 AM
Observation:
When starting the server with the command /opt/FNPLicenseServerManager/lmadmin, the below occurred ./lmadmin: error while loading shared libraries: libldap-2.4.so.2: wrong ELF class: ELFCLASS64 However, in the path /opt/lib64/, libldap-2.4.so.2 does exist
Root Cause:
The error log "libldap-2.4.so.2: wrong ELF class: ELFCLASS64" indicates that the "ldap" libraries installed in system are for 64 bit but for v11.14.0 there was no 64-bit lmadmin available (it was only released starting FNP-11.15.1). So, try by installing the 32 bit variant of libldap and test.
... View more
- Tags:
- ELF
- ELFCLASS64
- LDAP
Mar 11, 2021
03:56 AM
At couple of customer sites, internal technical audit tools are complaining about the world-level read/write access to /dev/shm/.flexnetFS file system.
The ask is if that's necessary and can not be avoided?
Report:
SoC ID: 3.65-9/2.0 No world writable files may exist.
World writable files are files that can be accessed by all users of a system. Such files must be identified and the rights of the corresponding files must be adjusted to an adequate level.
Motivation: Data in world writable files can be read, changed and possibly compromised by any user of a system.
The following threats are relevant to this requirement:
Unauthorized viewing or access to data
Unauthorized modification of data
command to check:
find / -type f ! -path "/proc/" ! -path "/sys/" ( -perm -o+w ) -exec ls -adl {} \;
rw-rw-rw. 1 nuance nuance 0 Feb 24 11:26 /dev/shm/.flexnetfs
Please check the access rights of this file and if this can be subject of change to meet the requirements.
Answer:
/dev/shm/.flexnetFS is a lock-file located in transitory shared memory. It is used in the initialization and maintenance of the FlexNet file-system. Any Flexnet-enabled process, owned by any user, could potentially access or recreate this lock-file.
Typically it contains no content but would not be affected even if the content were added. If deleted, it will simply be regenerated by the next Flexnet-enabled process that tries to access it. For that reason, it is required to have full-world access and poses no security risk.
Also, it is important to note that FNP is having its own bespoke security protocols that do not rely on the host operating-system's native user privileges/file permissions.
... View more
Mar 07, 2021
10:44 AM
1 Kudo
@jbforster , you can contact the Revenera sales. You can either fill in your contact info here:
https://www.revenera.com/about-us/contact-us.html
or call 1.800.374.4353.
... View more
Mar 07, 2021
10:41 AM
This stuff always confused me. Thanks for reiterating.
... View more
Mar 07, 2021
09:43 AM
Thanks, but that's not it - as the dongle itself isn't recognised by Windows (am I in wrong group) - so no amount of code will detect it (although I do see what you mean - our application does see/use the dongle as per) but this is more of a physical thing. I've seen several occasions where the dongle does not show in Windows Device Manager - as Sentinel HL Key (the Sentinel HASP and Sentinel USB keys are shown).
... View more
Mar 07, 2021
09:34 AM
@jjardine
It is not enough clear for me, where we set this attribute LM_A_PROMPT_FOR_FILE ?
[Abhay]: This attribute is set through the client application, which performs the license checkout.
The recommendation is to have an environment variable "VENDOR_LICENSE_FILE" (replace VENDOR keyword with your native vendor daemon name) to port@host configuration. Where port is the TCP port at which license server is running and 'host' could be hostname/IP address of server system.
... View more
Mar 07, 2021
09:30 AM
@nxf54812 , yes we can disable this flag (which is set to TRUE by default) under machind/lsvendor.c file.
Set, 'ls_client_removal_on_reread' to "0" and rebuild your vendor daemon application.
Kindly be advised that post making this attribute as "0", you may observe few potential additional usages of license scenario, which is expected.
Hope this helps.
... View more
Mar 04, 2021
11:58 PM
1 Kudo
@bsivakumar , this particular enhancement has been provided in FNP-11.17.2. This KB should help understand the details about this implementation:
https://community.flexera.com/t5/FlexNet-Publisher-Knowledge-Base/Debug-log-Automatic-rollover-starting-FNP-11-17-2-explained-101/ta-p/180474
You would need to upgrade the lmgrd and vendor daemon to avail this feature.
... View more
Mar 02, 2021
10:15 AM
Problem Statement:
During the FNP-11.13.0 release timeline, it was noticed that RHEL 6.4 doesn't have any inbuilt support for 32 bit. So, as conventionally lmadmin was always a 32 bit executable, hence for lmadmin to run, we need to install the 32 bit rpm "redhat-lsb-core-4.0-7.el6.i686". which could lead to issues on the production server since it might conflict with other applications they have.
FNP-11.15.1 :
64-bit lmadmin was provided to overcome this issue.
Release Note Statement: The FlexNet Publisher Licensing Toolkit supplies a 32-bit lmadmin installer that can be used for 32- and 64-bit platforms. For 64-bit Linux, the toolkit provides a specific 64-bit lmadmin installer.
FNP-11.16.0
Support for 64-bit lmadmin was added for other platforms.
Release Note Statement: Previously, FlexNet Publisher 64-bit toolkits contained 32-bit lmadmin binaries which were supported on 64-bit platforms. FlexNet Publisher 64-bit toolkits now include only 64-bit lmadmin binaries. While the 32-bit lmadmin binaries (contained in the relevant 32-bit toolkits or separately available) continue to be supported on 64-bit systems, Flexera recommends using the 64-bit lmadmin binaries on 64-bit systems. (FNP-18383, FNP-17125; Salesforce case 01270591)
... View more
Feb 24, 2021
11:17 AM
@neogeogis2 , i meant about the ' vendor support (ESRI) ' team actually. As if they provide any utility/client to generate the output in a customized module/format then you can take help of that.
'lmstat' has a pre-defined format of data display, which cannot be customized.
... View more
Feb 23, 2021
09:07 AM
I can tell you whatever you use for TIMEOUT/TIMEOUTALL in the options file on the server will make no difference - went down that rabbit hole for a while. The LM_A_TCP_TIMEOUT goes on the server as a system env var. I set mine to 180 and it seems to have worked. Even if the license times out - it'll be immediately consumed again by the client if the client is still active (correct behaviour). However, if heartbeat is lost and this timer expires - it's released.
... View more
Latest posts by aparashar1
Subject | Views | Posted |
---|---|---|
82 | Mar 25, 2021 03:24 AM | |
71 | Mar 23, 2021 01:30 AM | |
55 | Mar 23, 2021 01:28 AM | |
82 | Mar 19, 2021 05:28 AM | |
66 | Mar 11, 2021 10:17 AM | |
79 | Mar 11, 2021 03:56 AM | |
131 | Mar 11, 2021 01:20 AM | |
194 | Mar 07, 2021 10:44 AM | |
134 | Mar 07, 2021 09:46 AM | |
95 | Mar 07, 2021 09:40 AM |
Activity Feed
- Posted What are the FlexnetFS files created under /dev/shm? on FlexNet Publisher Knowledge Base. Mar 25, 2021 03:24 AM
- Posted Re: Missing checked out licenses in license server log for Xilinx software on FlexNet Publisher Forum. Mar 23, 2021 01:30 AM
- Posted Re: Checkout failure on VPN on FlexNet Publisher Forum. Mar 23, 2021 01:28 AM
- Posted Re: Elevated Privilege Issue with FlexNet Publisher Licensing Service on Windows on FlexNet Publisher Knowledge Base. Mar 19, 2021 05:28 AM
- Got a Kudo for Re: FlexNet Licensing log (lmgrd). Mar 19, 2021 05:02 AM
- Posted wrong ELF class: ELFCLASS64 on FlexNet Publisher Knowledge Base. Mar 11, 2021 10:17 AM
- Posted Why /dev/shm folder structure has world write access? on FlexNet Publisher Knowledge Base. Mar 11, 2021 03:56 AM
- Posted Re: Checkout failure on VPN on FlexNet Publisher Forum. Mar 11, 2021 01:20 AM
- Got a Kudo for Re: Is support account needed for downloading security fixes. Mar 07, 2021 10:45 AM
- Posted Re: Is support account needed for downloading security fixes on FlexNet Publisher Forum. Mar 07, 2021 10:44 AM
- Got a Kudo for Re: License Timeout Not Working As Client Not Seen As Idle. Mar 07, 2021 10:40 AM
- Got a Kudo for Re: Is support account needed for downloading security fixes. Mar 07, 2021 10:35 AM
- Posted Re: License Timeout Not Working As Client Not Seen As Idle on FlexNet Operations Forum. Mar 07, 2021 09:46 AM
- Posted Re: Sentinel HL Key is not found in Device Manager post-windows upgrade on FlexNet Publisher Forum. Mar 07, 2021 09:40 AM
- Posted Re: FNP 11.14.0.2 used with VPN (Zscaler Private Access) failed due to ICMP/Ping request on FlexNet Publisher Forum. Mar 07, 2021 09:34 AM
- Posted Re: ls_client_removal_on_reread is enabled on FlexNet Publisher Forum. Mar 07, 2021 09:30 AM
- Posted Re: FlexNet Licensing log (lmgrd) on FlexNet Publisher Forum. Mar 04, 2021 11:58 PM
- Posted Re: Is support account needed for downloading security fixes on FlexNet Publisher Forum. Mar 03, 2021 08:54 AM
- Posted Re: Is support account needed for downloading security fixes on FlexNet Publisher Forum. Mar 03, 2021 07:59 AM
- Posted Re: Is support account needed for downloading security fixes on FlexNet Publisher Forum. Mar 03, 2021 07:18 AM