Re: tnsping fails on libclntsh.so (Solaris)

My question is why was the setuid bit on in the first place? The listener shouldn't need it because the Oracle executable is setuid.

                                  Rick

ggoodrum_at_my-deja.com writes:

> Just in case anyone ever encounters the same problem, we found the
> solution.
>
> When the setuid bit is on, LD_LIBRARY_PATH is not used. This is a
> Solaris security feature designed to keep a user from tricking the
> system into running his library code under someone else's user ID.
> Without LD_LIBRARY_PATH, the linking loader uses the RPATH (-R option)
> specified when the tnsping executable was linked. In this case, the
> executable had been linked sometime in the past on the host where
> everything was working, with RPATH /u00/app/oracle/product/8.0.5/lib,
> and there is a libclntsh.so.1.0 in that directory on that host. We
> just copied the tnsping executable to the other host. There is no such
> directory /u00/app/oracle/product/8.0.5/lib on the second host, hence
> the "no such file or directory" error.
>
> The solution is to relink tnsping with the correct -R option.
>
> Glenn Goodrum
>
>
> In article <87uhe7$aed$1_at_nnrp1.deja.com>,
> ggoodrum_at_my-deja.com wrote:
> > Perhaps someone has seen this before. I have two Sun E-4000 hosts
> > which I believe are running identical configurations of Solaris 2.5.1.
> > Both have Oracle 8.0.5.2 installed, and both have the same
> > tnsnames.ora. But on one host, tnsping works, while on the other
> host,
> > tnsping fails to execute with this message:
> >
> > hous11;caper> tnsping capertst
> > ld.so.1: tnsping: fatal: libclntsh.so.1.0: open failed: No such file
> or
> > directory
> > Killed
> >
> > I verified that PATH and LD_LIBRARY_PATH are the same on both hosts.
> I
> > verified that libclntsh.so and libclntsh.so.1.0 exist on both hosts,
> > and have the same permissions and the same contents on both hosts. I
> > also verified that tnsping has the same permissions on both hosts, and
> > that no other "tnsping" command existed elsewhere. All of the
> > following yielded identical results on both hosts:
> >
> > hous11;caper> echo $PATH
> >
> /home/user/caper/bin:/usr/local/bin:/usr/bin::/home/user/caper/bin:/usr/
> > sbin:/us
> >
> r/local/bin:/usr/ccs/bin:/usr/ucb:/home/user/caper/bin:/u00/app/oracle/p
> > roduct/8
> > .0.5.2/bin
> >
> > hous11;caper> echo $LD_LIBRARY_PATH
> > /u00/app/oracle/product/8.0.5.2/lib
> >
> > hous11;caper> ls -l $LD_LIBRARY_PATH/libclntsh.so
> > lrwxrwxrwx 1 oracle dba 16 Feb 4 11:09
> > /u00/app/oracle/product/8.0.5.2/lib/libclntsh.so -> libclntsh.so.1.0
> >
> > hous11;caper> ls -l $LD_LIBRARY_PATH/libclntsh.so.1.0
> > -rwxr-xr-x 1 oracle dba 6894704 Dec 15 17:05
> > /u00/app/oracle/product/8.0.5.2/lib/libclntsh.so.1.0
> >
> > hous11;caper> sum $LD_LIBRARY_PATH/libclntsh.so.1.0
> > 56794 13467 /u00/app/oracle/product/8.0.5.2/lib/libclntsh.so.1.0
> >
> > hous11;caper> ls -l $ORACLE_HOME/bin/tnsping
> > -rwsr-s--x 1 oracle dba 99868 Dec 14 1998
> > /u00/app/oracle/product/8.0.5.2/bin/tnsping
> >
> > hous11;caper> which tnsping
> > /u00/app/oracle/product/8.0.5.2/bin/tnsping
> >
> > Does anyone have any ideas about what other differences I should look
> > for?
> >
> > Thanks
> > Glenn Goodrum
> >
> > Sent via Deja.com http://www.deja.com/
> > Before you buy.
> >
>
>
> Sent via Deja.com http://www.deja.com/
> Before you buy.

--

                                Rick Wessman
                                Server Security Group
                                Oracle Corporation
                                rwessman_at_us.oracle.com

     The opinions expressed above are mine and do not necessarily reflect
                         those of Oracle Corporation.