We'd like to uninstall Guardium S-TAP which was installed via GIM, but there is an issue with our network and therefore we can't do it via GIM. In this situation, how do we uninstall Guardium S-TAP directly on the DB server?
There is a problem between the S-TAP on DB server and the Guardium appliance, such that we can't un-install the S-TAP from the Guardium GUI console using GIM.
Resolving The Problem
The following is based on an AIX Server - used as an example .
Please attempt the following steps to clean up Guardium modules from the DB server.
1. Attempt an un-install of S-TAP via GIM. See the following manual page for details.
Proceed to the next step even if the above doesn't work.
2 Uninstall GIM client
- 2.1 Logon to the DB server as user root
2.2 Issue the following to uninstall the GIM client.
- Refer to the following manual page for details.
[NOTE] <installation_directory> is something like this:
3 (Optional) This is a workaround to be taken only if the S-TAP uninstaller in step 1 didn't work.
3.1 Unload the driver:
- <installation_directory>/modules/KTAP/current/guard_ktap_loader stop
3.2 Delete all the S-TAP and GIM entries in /etc/inittab
3.3 Remove /etc/drivers/aix_ktap.* and /etc/drivers/guard_ktap_loader
3.4 Edit /etc/rc and remove the following line at the end of the file
- /etc/drivers/guard_ktap_loader start
3.5 Remove the device file: /dev/ktap_<some_number>
3.6 Remove the directory <installation_directory> with the files under the directory.
3.7 Remove /etc/upguard-init - the Guardium GIM init provoker
4. Reboot the system - This action will unload K-TAP completely and reload /etc/inittab
4.1 Ensure K-TAP is not loaded any more by issuing
- genkex | grep tap
5. Reset Client from Guardium GUI
5.1 Navigate to Administration Console > Module Installation > Setup By Client > Search
5.2 Check the checkbox of the DB server where you un-installed GIM, then press "Reset Client".
Was this topic helpful?
16 June 2018