IBM Support

Conflict between IBM Guardium S-TAP and Rubrik

News


Abstract

This techdoc discusses a third-party application that interferes with the IBM Guardium A-TAP agent and how to workaround this conflict.

Content

Rubrik with secure thrift feature enabled
Installing Guardium Software TAP (S-TAP) agent and enabling Application TAP (A-TAP) with S-TAP revisions 12.1.1_r119073, 12.0_r118475, 11.5_r118684, 11.4_r119149, and earlier when the Rubrik product is running with the secure thrift feature enabled, the Oracle database backup process will not work. The Rubrik product depends on LD_PRELOAD that is used by A-TAP as well. 
Workaround
The workaround involves changing the LD_PRELOAD configuration values for A-TAP. This can be executed by using the guard-tag utility as follows:
~/bin/guard-tag edit executor/env ~/oracle
For example:
/usr/local/modules/ATAP/12.1.1.2_r119073_1-1742979431/files/bin/guard-tag edit executor/env /optware/oracle/19c/db_1/bin/oracle
Note: The guard-tag location can be different based on the installation and so the Oracle home.
The previous command opens a text editor, where you can edit the LD_PRELOAD=libguard-atap-oracle-any-64.so to LD_PRELOAD=/lib64/libinject.so:libguard-atap-oracle-any-64.so 
Note:  The location of libinject.so can be slightly different on the host.
Resolution
In the upcoming Guardium 11.5, 12.0, and 12.1 S-TAP patches (ETA Q2 and Q3 2025), the IBM Guardium team is adding a preload-libs parameter where it will take a full path to third party, preloaded libraries while configuring A-TAP.

[{"Type":"MASTER","Line of Business":{"code":"LOB76","label":"Data Platform"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSMPHH","label":"IBM Security Guardium"},"ARM Category":[{"code":"a8m0z0000001gcKAAQ","label":"A-TAP"}],"Platform":[{"code":"PF002","label":"AIX"},{"code":"PF010","label":"HP-UX"},{"code":"PF016","label":"Linux"},{"code":"PF027","label":"Solaris"}],"Version":"All Versions"}]

Document Information

Modified date:
13 June 2025

UID

ibm17229197