IBM Support

IBM Security Guardium: ATAP Activation fails on Solaris: Couldn't insert instrumentation for $ORACLE_HOME/lib/libgeneric11.a

Troubleshooting


Problem

ATAP Activation fails on Solaris 5.10 with error: Couldn't insert instrumentation for $ORACLE_HOME/lib/libgeneric11.a where $ORACLE_HOME is the Oracle's instance home directory.

Symptom

You installed IBM Security Guardium S-TAP (STAP) on a Solaris database server. The STAP process is up and running, the KTAP module is loaded. You are now trying to activate the ATAP for an ORACLE instance. You made sure all the required prerequisites are met, including stopping the ORACLE instance. You get an error when you run the ATAP activate command.

The ATAP activate command you run looks like:

- for non Guardium Installation Manager (GIM) installations:

<guardium_base>/bin/guardctl --db-instance=<Oracle instance name> [optional-ATAP-parameters] activate

- for GIM installations:

<guardium_base>/modules/ATAP/current/files/bin/guardctl --db-instance=<Oracle instance name> [optional-ATAP-parameters] activate

where:

<guardium_base> is the directory where Guardium® software is installed. By default it is /user/local/guardium.

<Oracle instance name> is the Oracle instance name

[optional-ATAP-parameters]  are the ATAP parameters you can optionally set with this command

When you run the command, it starts running and show several output lines as it progress through the different steps in the activation. One of these steps will show as "Inserting instrumentation" and eventually under that section it shows this error almost at the end:


ERROR: Couldn't insert instrumentation for <ORACLE Home directory>/lib/libgeneric11.a

where <ORACLE Home directory> is the Oracle home directory.

This is an example of the error output:

== start of sample error output ==

<several lines here>

Inserting instrumentation


/usr/local/guardium/modules/ATAP/current/files/bin/guardctl: [[: not found
Executing: cp -fp /usr/orainstance/11.2.0.4r12/lib/libgeneric11.a
/usr/orainstance/11.2.0.4r12/lib/libgeneric11.a-guard-original
Executing: /usr/xpg4/bin/ar -x
/usr/local/guardium/modules/ATAP/current/files/lib/libguard-atap-oraclestatic-any-64.a
Executing: /usr/xpg4/bin/ar -r /usr/orainstance/11.2.0.4r12/lib/libgeneric11.a atap.o crypto_intercept.o crypto_intercept_partA_naeet.o crypto_intercept_partA_nam.o crypto_intercept_partA_nzos.o shmbox.o shmem.o
Executing: no ranlib in /usr/xpg4/bin /usr/local/sbin /usr/local/bin /usr/sbin /usr/bin /sbin /bin . /bin /usr/bin /usr/ucb /etc /usr/etc /usr/local/bin /export/home/oracle/bin /usr/orainstance/11.2.0.4r12/lib/libgeneric11.a
/usr/local/guardium/modules/ATAP/current/files/bin/guardctl: no: not found
ERROR: Running no ranlib in /usr/xpg4/bin /usr/local/sbin /usr/local/bin /usr/sbin /usr/bin /sbin /bin . /bin /usr/bin /usr/ucb
/etc /usr/etc /usr/local/bin /export/home/oracle/bin /usr/orainstance/11.2.0.4r12/lib/libgeneric11.a
ERROR: Couldn't insert instrumentation for /usr/orainstance/11.2.0.4r12/lib/libgeneric11.a

ERROR: Guarding - /usr/orainstance/11.2.0.4r12/bin/oracle-guard-original exists - if ATAP is not activated please restore this file manually
== end of sample error output ==

[{"Product":{"code":"SSMPHH","label":"IBM Security Guardium"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Component":"Guardium S-TAP","Platform":[{"code":"PF027","label":"Solaris"}],"Version":"10.0;10.0.1;10.1","Edition":"","Line of Business":{"code":"LOB76","label":"Data Platform"}}]

Log InLog in to view more of this document

This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.

Document Information

Modified date:
16 June 2018

UID

swg21987685