Hey All,

We updated to unidata 8.2 from 8.1, and seem to have broken ssh. Everything seems fine when called from an AIX session, but Unidata sessions are failing when calling same commands... we do recieve the above message

X.COMMAND = '-C !scp N19.POSPA…
CALL S.EXECUTE(X.COMMAND)

This code has been running for years, so any idea on where I should look?

Thanks!

Rick

------------------------------
Rick Brown
Sysadmin
Rocket Forum Shared Account
------------------------------

Hi Rick!

The command below looks like you're trying to run an scp command. When 8.2 was installed, was it installed as the same user as 8.1? If not, has .rhosts (and other config files) been updated on the target hosts to allow the new user to perform copies?

Brian

---

Hi Rick!

The command below looks like you're trying to run an scp command. When 8.2 was installed, was it installed as the same user as 8.1? If not, has .rhosts (and other config files) been updated on the target hosts to allow the new user to perform copies?

Brian

Hi Brian,

Yes to all! We have opened a ticket with our vendor. User and permissions have not changed.

Thanks!

Rick B

------------------------------
Rick Brown
Sysadmin
Rocket Forum Shared Account
------------------------------

---

Hi Brian,

Yes to all! We have opened a ticket with our vendor. User and permissions have not changed.

Thanks!

Rick B

------------------------------
Rick Brown
Sysadmin
Rocket Forum Shared Account
------------------------------

Hi Brian,

What version of UniData 8.2 did you upgrade to ?

8.2.2 would have upgraded the openSSL libraries to 1.1.1b and 8.2.4 to 1.1.1n.

This problem may come down to the fact that from the AIX level and UniData level they are in fact using different openSSL versions.

Before entering UniData type 'openssl version'  while inside UniData from ECL enter '!openssl version'

So as a first step try that and let's see if you have multiple versions of openSSL on the machine.

Regards,

------------------------------
Jonathan Smith
UniData ATS
Rocket Support
------------------------------

---

Hi Brian,

What version of UniData 8.2 did you upgrade to ?

8.2.2 would have upgraded the openSSL libraries to 1.1.1b and 8.2.4 to 1.1.1n.

This problem may come down to the fact that from the AIX level and UniData level they are in fact using different openSSL versions.

Before entering UniData type 'openssl version'  while inside UniData from ECL enter '!openssl version'

So as a first step try that and let's see if you have multiple versions of openSSL on the machine.

Regards,

------------------------------
Jonathan Smith
UniData ATS
Rocket Support
------------------------------

Hi Johnathan,

In both cases I get;

:!openssl version
exec(): 0509-036 Cannot load program openssl because of the following errors:
        0509-150   Dependent module /usr/ud82/bin/libcrypto.a(libcrypto.so.1.0.2) could not be loaded.
        0509-152   Member libcrypto.so.1.0.2 is not found in archive

>openssl version
exec(): 0509-036 Cannot load program openssl because of the following errors:
        0509-150   Dependent module /usr/ud82/bin/libcrypto.a(libcrypto.so.1.0.2) could not be loaded.
        0509-152   Member libcrypto.so.1.0.2 is not found in archive

The current account is version 8.1.
823

------------------------------
Rick Brown
Sysadmin
Rocket Forum Shared Account
------------------------------

---

Hi Johnathan,

In both cases I get;

:!openssl version
exec(): 0509-036 Cannot load program openssl because of the following errors:
        0509-150   Dependent module /usr/ud82/bin/libcrypto.a(libcrypto.so.1.0.2) could not be loaded.
        0509-152   Member libcrypto.so.1.0.2 is not found in archive

>openssl version
exec(): 0509-036 Cannot load program openssl because of the following errors:
        0509-150   Dependent module /usr/ud82/bin/libcrypto.a(libcrypto.so.1.0.2) could not be loaded.
        0509-152   Member libcrypto.so.1.0.2 is not found in archive

The current account is version 8.1.
823

------------------------------
Rick Brown
Sysadmin
Rocket Forum Shared Account
------------------------------

Rick,

Check PATH and also the the shared library path - usually LIBPATH or LD_LIBRARY_PATH. Make sure you are picking up the same version of the executable and the associated libraries. 'which openssl' will tell you which version of the executable is being picked up and the emvironment variable(s) which version of the libraries are being picked up. They should both ideally point to the same common versions - i.e. the UniData versions.

Note that SOLARIS is a little different with the concept of a 'trusted library path'  -m see 'crle'.

Regards

JJ

------------------------------
John Jenkins
Thame, Oxfordshire
------------------------------

---