Layne,
Modifying LD_LIBRARY_PATH is typically not a good idea. Checkout
this website
http://supportforum.sun.com/freesolaris/techfaqs.html?techfaqs_3057
Solaris under the directory /var/ld has the ability to create a 32 and 64
bit ld.config. The command crle will create both the 32 and 64 bit
ld.config files whihch should contain the library directories.
I don't know if /opt/CPclnt-50/bin/Fwui is a 64 bit or 32 bit application.
Depending on which it is, will determine which command below you will need
to run.
This will create the 32-bit ld.config
Crle -l
/usr/lib:/usr/ccs/lib:/usr/openwin/lib:/usr/share/lib:/opt/CPclnt-50/lib
This will create the 64-bit ld.config
Crle -64 -l /usr/lib/64:/opt/CPclnt-50/lib
-----Original Message-----
From: Russell Aspinwall [mailto:[EMAIL PROTECTED]]
Sent: Thursday, October 03, 2002 4:49 AM
To: [EMAIL PROTECTED]
Subject: Re: [FW-1] FW-1 Solaris GUI Help
Hi Layne,
Try modifying LD_LIBRARY_PATH=/opt/CPclnt-50/lib:${LD_LIBRARY_PATH}
assuming /opt/CPclnt-50/lib contains libcpopenssl.so
Regards
Russell
Layne Meier wrote:
>
> I ran ldd against /opt/CPclnt-50/bin/FWui and all of the libraries
> EXCEPT libcpopenssl.so show proper association (ie; libckpssl.so =>
> /opt/CPclnt-50/lib/libckpssl.so). On the entry for libcpopenssl.so,
> LDD shows this:
>
> libcpopenssl.so => (file not found), but if you look in the
> /opt/CPclnt-50/lib directory libcpopenssl.so is there as well as in
> the /usr/local/lib directory.
>
> Just a little more insight into my setup. This is in a lab
> environment. I have a total of 4 Sun systems. 2 are setup as
> Enforcement Modules, 1 as the Management server and 1 as a Workstation.
> The 2 enforcement modules and the Management server all have
> CPCONFIG installed on them, but when you install just the GUI, there
> is no SVN Foundation or any FireWall-1/VPN-1 software so there is no
> need for a CPCONFIG.
>
> I have defined Administrators and setup specified IP Addresses that
> are authorized to access the Management Server via the GUI. I did
> make sure that the IP Address of the workstation was in the Management
> server.
>
> I did, however, previously install Secure Shell and WEBMIN. When I
> installed Secure Shell and WEBMIN, both required the installation of
> OpenSSL. Could there somehow be a conflict with the installation of
> OpenSSL with the libcpOPENSSL.so?
>
> Thanks,
> Layne
>
> On Wednesday, October 2, 2002, at 04:00 AM, Russell Aspinwall wrote:
>
> > Hi Layne,
> >
> > Have you tried doing an "ldd fwpolicy" to check it can see all the
> > libraries.
> >
> > # ldd /usr/bin/ls
> > libc.so.1 => /usr/lib/libc.so.1
> > libdl.so.1 => /usr/lib/libdl.so.1
> >
> > I know it is obvious but is FW-1 configured to permit GUI access
> > (using cpconfig)?
> >
> > Regards
> >
> > Russell
> >
> > Layne Meier wrote:
> >>
> >> I have the MOTIF GUI License.
> >>
> >> When I try to launch the GUI I get an error that there was a fatal
> >> problem with the libcpopenssl.so (No such file or directory).
> >>
> >> Thanks,
> >> Layne
> >>
> >> On Tuesday, October 1, 2002, at 08:43 AM, Russell Aspinwall wrote:
> >>
> >>> Hi Layne,
> >>>
> >>> You must have a FW GUI License to run on Solaris.
> >>>
> >>> Regards
> >>>
> >>> Russell
> >>>
> >>> Layne Meier wrote:
> >>>>
> >>>> I'm sorry to repost this one, but my mail system may have thought
> >>>> that any replies back to me regarding this previous message may
> >>>> have been rejected as SPAM. I could really use some help on
> >>>> getting my Solaris
> >>>> GUI up and running and you all are my best resource. I do have Gold
> >>>> Support from CheckPoint, but I thought I'd try this forum first as
> >>>> CP
> >>>> Tech Support seems to favor Nokia over any other OS for running
> >>>> their
> >>>> software on.
> >>>>
> >>>> I normally use the Windows GUI to access my VPN-1/FireWall-1
> >>>> system, but at the time being for this environment, I do not have
> >>>> one available to me.
> >>>>
> >>>> I downloaded the CheckPoint NG FP2 Solaris GUI from the download
> >>>> center on CheckPoint's website and set off to install it onto a
> >>>> Sun SPARC system (currently running Solaris 7). This system has
> >>>> the latest Solaris 7 Recommended patches installed as well.
> >>>>
> >>>> Anyway, when I attempt to launch the FireWall User Interface I
> >>>> get the following...
> >>>>
> >>>> lmeier-sun:root:1:/#FWui &
> >>>> [1] 582
> >>>> lmeier-sun:root:2:/#ld.so.1: FWui: fatal: libcpopenssl.so: open
> >>>> failed:
> >>>> No such file or directory
> >>>> [1] killed FWui
> >>>> lmeier-sun:root:2:/#
> >>>>
> >>>> I have a .cshrc file (profile) on this sytem with the following
> >>>> defined...
> >>>>
> >>>> setenv GUIDIR /opt/CPclnt-50
> >>>> setenv LD_LIBRARY_PATH /opt/CPclnt-50/lib
> >>>>
> >>>> set path=(/opt/CPclnt-50/bin /opt/CPclnt-50/lib .)
> >>>>
> >>>> If I'm at my prompt and type the following...
> >>>> lmeier-sun:root:2:/#which libcpopenssl.so
> >>>>
> >>>> I get the follwing result... /opt/CPclnt-50/lib/libcpopenssl.so
> >>>>
> >>>> My system recognizes the directory and where the file is, but
> >>>> apparently the application does not.
> >>>>
> >>>> Does anyone out there have any idea what might be going on here?
> >
> > -
> >
> > =================================================
> > To set vacation, Out Of Office, or away messages,
> > send an email to [EMAIL PROTECTED]
> > in the BODY of the email add:
> > set fw-1-mailinglist nomail
> > =================================================
> > To unsubscribe from this mailing list,
> > please see the instructions at
> > http://www.checkpoint.com/services/mailing.html
> > =================================================
> > If you have any questions on how to change your subscription
> > options, email [EMAIL PROTECTED]
> > =================================================
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to [EMAIL PROTECTED]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [EMAIL PROTECTED]
> =================================================
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
- This message (including any attachments) contains confidential information
intended for a specific individual and purpose, and is protected by law. -
If you are not the intended recipient, you should delete this message and
are hereby notified that any disclosure, copying, or distribution of this
message, or the taking of any action based on it, is strictly prohibited.
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
