cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Who Me Too'd this topic

expedition first time use - Remediation help needed

L1 Bithead

In a new installation of Expedition upon first login we had three issues to remediate:

 

1. The instructions for "Verify that the SQL_Log_bin flag in MariaDB is set to off" were clear enough.  So that was addressed successfully.

 

2. Insufficient instructions for "Verify that the Log_bin flag in MariaDB is set to off". 

A search did not come up with instances of log_bin:

 

root:/etc/mysql# grep -i log_bin `find /etc/mysql -type f`
/etc/mysql/my.cnf:skip-log_bin = /var/log/mysql/mariadb-bin
/etc/mysql/my.cnf:skip-log_bin_index = /var/log/mysql/mariadb-bin.index
root:/etc/mysql#

 

3. Insufficient instructions for "Verify the PanOrders agent is running to accept background jobs"

A look at services located panReadOrders, but no PanOrders

 

root:/etc/mysql# service --status-all | grep -i pan
[ - ] panReadOrders
root:/etc/mysql# service panReadOrders status
● panReadOrders.service - LSB: starts panReadOrders agent for Expedition
Loaded: loaded (/etc/init.d/panReadOrders; bad; vendor preset: enabled)
Active: active (running) since Fri 2020-02-21 08:57:37 PST; 3 days ago
Docs: man:systemd-sysv-generator(8)
Process: 40502 ExecStart=/etc/init.d/panReadOrders start (code=exited, status=0/SUCCESS)
Tasks: 2
Memory: 11.7M
CPU: 4.871s
CGroup: /system.slice/panReadOrders.service
├─40508 sudo -u www-data php /var/www/html/console/messaging/readOrders.php
└─40512 php /var/www/html/console/messaging/readOrders.php

Feb 21 08:57:27 asa2pan systemd[1]: Starting LSB: starts panReadOrders agent for Expedition...
Feb 21 08:57:37 asa2pan systemd[1]: Started LSB: starts panReadOrders agent for Expedition.
Feb 21 08:57:37 asa2pan sudo[40508]: root : TTY=unknown ; PWD=/ ; USER=www-data ; COMMAND=/usr/bin/php /var/www/html/console
Feb 21 08:57:37 asa2pan sudo[40508]: pam_unix(sudo:session): session opened for user www-data by (uid=0)
root:/etc/mysql#

 

A bit more checking revealed a script:

 

root:/tmp# find / -print > filelist
root:/tmp# grep -i panorder filelist
/var/www/html/libs/PaloAltoNetworks/HealthCheck/PanOrdersAgentCheck.php
root:/tmp#

 

No change in symptoms after

 

root@asa2pan:/tmp# service panReadOrders restart

 

or


root@asa2pan:/tmp# service panReadOrders stop
root@asa2pan:/tmp# service panReadOrders start

 

Suggestions on how to overcome these are welcome.  Thanks.

Who Me Too'd this topic