Cannot Configure CA Anti-Virus

[spacegoose]

I was playing with the AV snap-in on our 4200, and disabled it, when I re-enabled it, I got a pop-up error about the ino webserver, several attempts later, I only got 404 page not found error.

Originally, when clicking the configure link under the enable button - I was presented with a Java app certificate to accept, login dialog to enter, which would take me to a Java Console to configure the AV.

My AV plugin has a license code that came with the server we bought new.

When I enable or disable, I get an error saying plugin cannot be enabled (or disabled), but later it shows up either green or grey (so it does seem to enable and disable, despite the warning or does it?). When enabled, the link leading to http://server/ino/index.html gives error 404.

This is no fun. Hoping someone knows how to fix.
I have removed, and re-entered the license, and disabled and re-enabled several times.
I have also updated the Guardian OS (w/ same version image file) still no dice.

Someone else seemed to have similar issues here:
http://forums.procooling.com/vbb/showthread.php?t=13703

Many Thanks,
SG

[Phoenix32]

I do not have the answer, sorry... But I am interested in the answer, so please keep us updated if you learn anything on this... Thank you...

[spacegoose]

i've logged in via SSH and did a find for ino (which seems to be missing when browsing snap e.g. /ino/index.html is not found, even /ino is not found - if it's a real 404 error it could mean that directory isn't mounted by snap's webserver, could be anything though ...


here's what my find finds:

/hd/vol_mnt1/ca_antivirus/ino
find: /hd/vol_mnt1/ca_antivirus/license: Unknown error 990
/hd/vol_mnt1/ca_antivirus/browser/ino

/hd/vol_mnt2/ca_antivirus/ino
find: /hd/vol_mnt2/ca_antivirus/license: Unknown error 990
/hd/vol_mnt2/ca_antivirus/browser/ino

/hd/vol_mnt4/ca_antivirus/ino
find: /hd/vol_mnt4/ca_antivirus/ino/config/backup/InoculateIT: Unknown error 990
find: /hd/vol_mnt4/ca_antivirus/ino/Lang/EN: Unknown error 990
find: /hd/vol_mnt4/ca_antivirus/license: Unknown error 990

/hd/vol_mnt5/ca_antivirus/ino
find: /hd/vol_mnt5/ca_antivirus/ino/config/backup/InoculateIT: Unknown error 990
find: /hd/vol_mnt5/ca_antivirus/license: Unknown error 990
find: /hd/vol_mnt5/ca_antivirus/registry/hkey_local_machine/system/currentcontrolset: Unknown error 990
find: /hd/vol_mnt5/ca_antivirus/registry/hkey_local_machine/software/computerassociates/etrustantivirus/currentversion/queuesystem: Unknown error 990
/hd/vol_mnt5/ca_antivirus/browser/ino


**the above turns out to be my snapshots (notice nothing was found on /hd/vol_mnt0)

[spacegoose]

my mnt_vol0 is missing the ca_antivirus directory (i suppose diabling it actually uninstalls it) - which is not a very nice thing for adaptec to do w/o a warning

copying ca_antivirus from one of my snapshot mounts (mnt_vol1-6), it still doesn't work ... (and, some files don't copy, the license directory, and several files under /tmp/.avipcs/.sem/)

browsing to the ino directory in the admin pages again, still shows 404 not found error.

i think i need to create the mount point for ca_antivirus in /etc/mtab and restart ... ??? can someone post what it should be (do a df when logged in via ssh or better cat /etc/mtab) should be the one that has ca_antivirus in it.

re-enabling it deletes the copied ca_antivirus directory in mnt_vol0 ...

[blue68f100]

Well, we chased several things this afternoon. We located the installer and have re-installed it. But for some reason it does not install the files in the same locations as mine.

[spacegoose]

I was able to get this going again by doing the following (caveat - don't know if it will work on a reboot):

1> Make sure the ca_antivirus is uninstalled.

For me this happened when I 'disabled' the plugin and re-enabled/disabled a few times, getting the CA AV cannot disable/enable error.
you will also know its gone when you get the 404 error upon clicking the Configure eTrust Antivirus link under enable.

It's still there if you get the inoweb webserver error.

You can also tell if it's there by changing to:

cd /hd/vol_mnt0/

if ca_antivirus is not there it's uninstalled

or to:

cd /apps/ca/antivirus/mnt

if nothing's there it's also gone.


2> Login via ssh to the server, su to root:

su - root

(use admin pass to authenticate)

change to:

cd /apps/ca/antivirus/

execute InitAntivirus: ./InitAntivirus

3> Install the software from /apps/ca/antivirus/ by executing InstallAntivirus.sh - this file needs an argument - (the volume to install on) which might be listed in the file volumelist (also in /apps/ca/antivirus/ ) for me, i executed like this:

./InstallAntivirus.sh /hd/vol_mnt0


NOTE: There is also this file: /opt/CA/.uniprodloc

Which controls the location of the actual install - mine has this inside: /apps/ca/antivirus/mnt

The install installs the AV bits to /apps/ca/antivirus/mnt and seems to mount them on /hd/vol_mnt0/ca_antivirus (depending on the argument you give to InstallAntivirus.sh.

It does this by creating the following mtab entry:
/hd/vol_mnt0/ca_antivirus /apps/ca/antivirus/mnt none rw,bind 0 0 -

After completing the install successfully, you can start the service as follows:

/etc/init.d/CAantivirus start

you should see the following:

Starting eTrust Antivirus:
[ OK ]
sh-2.04# cd /apps/


Hopefully this somehow also takes care of making sure AV starts on server reboots ... I will follow up with that.

Thanks to blue68f100 for his valuable insights into the workings of SNAP.

[seank]

Spacegoose - excellent - I'll have a go with that in the next few days!!

[rarmy]

have ssh enabled, and using putty, have a very limited list of commands. What am I doing wrong. would like to get the Anti-Virus up and working. No access to the original install CD.

[seank]

Finally had a chance to try Spacegoose's instructions - works perfectly - many thanks! Not tried rebooting yet though...

Rarmy:

If you log in with Putty,

cd /apps/ca/antivirus
ls

you should see a few files listed including InstallAnitvirus.sh - if not, then you may need the install CD.

If so, follow Spacegoose's steps - making sure you're logged in as su - ie:

cd /apps/ca/antivirus/

./InitAntivirus

./InstallAntivirus.sh /hd/vol_mnt0


Wait til you get the message 'admin: antivirus is installed successfully....'

/etc/init.d/CAantivirus start

you should see the following:

Starting eTrust Antivirus:
[ OK ]
sh-2.04# cd /apps/

If all that goes well, it should work

[rarmy]

I think part of the problem I am having is I am logging in via putty as myself instead as admin. that might explain the limited cmd's I have...like no "cd" or "ls"

[blue68f100]

Did you get it working??????

If not make sure you have the latest JAVA. It requires it to work properly.

[rarmy]

nope, not working...

details;

[CN-NAS-II]>ver
GuardianOS Version: 4.4.049 SP2
Model: 15000
Hardware: 05.03.00
Server Number: 432306
BIOS Version: 3B02
JVM Version: 1.4.2_13-b06
[CN-NAS-II]>cd /apps/ca/antivirus
Unknown command, enter '?' or 'help' for a list.


when I type help at the prompt;


[CN-NAS-II]>cd ..
Unknown command, enter '?' or 'help' for a list.
[CN-NAS-II]>?
Available commands are:

date domain ftp group name
nfs ntp osupdate reboot securitymodel
share shutdown snmp ssh tcpip
unicode user version volume web

clear exit history less quit

To get help for a command type: COMMAND help
The syntax of the commands is: COMMAND ACTION [OPTIONS]

COMMAND the name of the command itself (e.g. ftp, date, etc)
ACTION what the command should do (e.g. get, set, etc)
OPTIONS optional arguments for the command (e.g. ftp set enable=yes)

Values with square brackets [] are optional (e.g. ftp set [OPTIONS]).
Arguments in UPPERCASE or with curly brackets {} must be replaced
with appropriate values depending on the context (e.g. less {filename}).

From inside the 'cli' prompt TAB completion works for all the commands,
their optional arguments and for the optional argument values that are
known to the system (e.g. users, groups, shares, volumes, files, etc).


so am not sure ifen you folks reloaded with linux or what, but these are my limitations...

[blue68f100]

When you go to snap extensions is CA AV enabled????

On the desktop make sure you have the latest JAVA installed. And POP-UP Allowed. When you go in to do the setup a popup will be behind the main page, look at the tool bar or minmize the main page.

If this does not show you need to verify the installation. Use the instructions above to confirm installation.

[rarmy]

Originally Posted by blue68f100

When you go to snap extensions is CA AV enabled????

On the desktop make sure you have the latest JAVA installed. And POP-UP Allowed. When you go in to do the setup a popup will be behind the main page, look at the tool bar or minmize the main page.

If this does not show you need to verify the installation. Use the instructions above to confirm installation.

ok, a. CA AV is enabled in Extensions page

b. install latest JAVA

c. when I putty in via ssh cd is an unreconized command, as well as ls and anything else

d. when i use the debug screen page (http://10.10.0.251/admin/debug.cgi) I can cd and ls around but no /apps dir, much less any install / configure.sh script anywhere...

e. No install CD or anything else...

keep in mind I just found out I have a model 15000 SNAP server running GaurdianOS Ver 4.4.049 SP2 so's don't know if that makes a diff...

[rarmy]

I just noticed that root owns the files and such, would you know what the default root password is???

[blue68f100]

It should be your admin password. Once you connect has a user, use the "su" cmd and bump your access rights up to ADMIN/ROOT.

[Phoenix32]

This is sounding a little like a complete reinstall of the OS maybe, but this is not my department.

[blue68f100]

Those of you on v4.4 I have found a way to reinstall the CAantivirus, when you get the 404 page not found. And can not uninstall or install without an error.

First you must get the status and snapextension (enable) in the disabled state with no errors when you go in and out.

Must be done now through debug. SSH into putty no longer works, unable to get su rights.

use: /apps/ca/antivirus/clean_antivirus ....this is a bat file with instruction on where the files are stored.
You will get this message if it worked.

/etc/rc.d/init.d/CAantivirus: /apps/ca/antivirus/mnt/ino/scripts/lcl_echo_func: No such file or directory
sh: /etc/rc.d/init.d/httpd: No such file or directory
Removing existing antivirus...
Removing antivirus is completed. Please enable antivirus from Snapserver UI

To gain Admin Rights you need to use the osshell , then su root cmd, enter the admin password and you will now have admin rights.