IBM Support

STAP Flex loading instructions for GIM and non-GIM environments

Question & Answer


Question

How do I perform STAP install using flex loading for Guardium GIM and non-GIM environments?

Answer

Loader Flexibility aids in the installation of currently built modules when an exact match between module and kernel version does not exist.

  • Loader flexibility is only enabled if explicitly requested at installation time
  • Pass the option of --ktap_allow_module_combos when using the non-interactive installer
  • If installing interactively, answer "y" to the question posed after editing the guard_tap.ini (and setting ktap_installed=1)
  • The loader flexibility is disabled by default. This means that the K-TAP will be disabled, if the booted kernel is not directly supported or tested as working with another module. 

Example-

Please substitute the STAP installer (.sh filename), STAP installation directory (--dir) and .tgz filename appropriate to your environment.

Non-GIM Flex-load instructions :


    1. Download latest available STAP package for your platform from Fix Central
    2. Unzip Package
    3. Copy the modules-<version>.tgz to /tmp of the database server
    4. Run the correct command
      For interactive installation run the following all on 1 line :

        ./guard-stap-guard-<version_platform>.sh -- --modules /tmp/modules-<version>.tgz

        and answer "y" to load alternative module

      For non-interactive installation run the following all on 1 line :

        ./guard-stap-guard-<version_platform>.sh -- --modules /tmp/modules-<version>.tgz --ni -k --dir <guardium_installation_directory> --ktap_allow_module_combos --tapip <tap_ip or host_name> --sqlguardip <sqlguard_ip or host_name>

    5. After successful install verify that module is loaded by running one of the commands below depending on your O/S

    O/Scommand
    AIXgenkex | grep 'tap'
    Linuxlsmod | grep 'tap'
    Solarismodinfo | grep 'tap'
    HP-UXlsdev | grep 'tap'


GIM Flex load instructions :
    1. Download latest available STAP package for your platform from Fix Central
      Unzip Package
    2. Upload from the package guard-bundle-STAP-<version>*.gim to your Collector or Central Manager(CM)
    3. Specify "Y" to module parameter "KTAP_ALLOW_MODULE_COMBOS"
    4. Update the module parameter KTAP_ENABLED=1
      Install or upgrade using this BUNDLE-STAP.

    7. After successful install verify that module is loaded by running one of the commands below depending on your o/s

    O/Scommand
    AIXgenkex | grep 'tap'
    Linuxlsmod | grep 'tap'
    Solarismodinfo | grep 'tap'
    HP-UXlsdev | grep 'tap'

[{"Product":{"code":"SSMPHH","label":"IBM Security Guardium"},"Business Unit":{"code":"BU008","label":"Security"},"Component":"Guardium Database Activity Monitor","Platform":[{"code":"PF016","label":"Linux"}],"Version":"9.0;8.2","Edition":""}]

Document Information

Modified date:
16 July 2018

UID

swg21608038