Problem with installing atk2008.10.0

[renren123123]

for centOS 5.2, we dont find the file "pfilter.conf" and any simillar one, then we create a file and rename it as "pfilter.conf", which says:
OPEN tcp 27000:27009
OPEN udp 27000:27009
However I dont open "service pfliter restart" latter?
Faced to the problem, how can we do?Thank you very much!
we are worried about it for server weeks in ATK installation!

[Anders Blom]

In CentOS 5 (and most other modern Linux distros), the firewall is handled by iptables, not pfilter as I suggested before. To open ports with iptables, open the file /etc/sysconfig/iptables in an editor and add rules for FLEXlm as follows:

Code

-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 27000:27009 -j ACCEPT

After saving and closing the file, restart the iptables service

Code

/etc/init.d/iptables restart

You need to be root for all these operations. There are many options for iptables, for instance you may want to consider limiting access to the license server to computers within a particular IP range, etc. Please refer to the manual for this and further options. Don't forget to also set the port for the vendor daemon as suggested above, and open the corresponding port (if you chose a different port than somewhere in the range 27000-27009).

[renren123123]

Our system CENTOS 5.2 only consists of "/etc/iptable-conf"
and I add above sentence
"-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 27000:27009 -j ACCEPT"
to its end, however, it display language error for "-A" when we restart iptable,why? how to solve ?

[Anders Blom]

I must admit, I don't have a CentOS machine to test on, so I'm putting things together from Googling etc  On my Ubuntu, I had some success using the COMMAND (not editing any file)

Code

iptables -A INPUT -m state --state NEW -m tcp -p tcp --dport 27000:27009 -j ACCEPT

Here, the name INPUT comes from inspecting the iptables via

Code

iptables -L

which showed 3 "chains": INPUT, FORWARD, and OUTPUT. If you have other listings, choose accordingly. According to the CentOS 5 administration guide, the above approach should work for CentOS too. Once the rule is added, the CentOS guide tells us that we need to save the rule by

Code

/sbin/service iptables save

This command is not available on Ubuntu, but there are similar instructions in the Ubuntu Help. I hope this brings you further. It's a bit hard when I cannot test myself... The iptables command is extremely feature-rich, and I'm not about what all the options above mean (perhaps some are not needed), but if it works it works...

[hejun8035]

when we run "iptables -L" it shows an error "iptables:command not found"

[Anders Blom]

This command is only available for superusers / root.

[renren123123]

it remains even if for root

[Anders Blom]

Hmm, well, if you are not running any firewall, then that's hardly the cause of the problem. Is it possible that you have another FLEXlm / lmgrd process running already on port 27000? Try changing the port number to, say, 27002, and also make sure all other lmgrd daemons are terminated (use the lmstat command to find running lmgrd processes, you can download this utility from Also I read here that the file /etc/hosts must contain a specification for localhost, like

Code

127.0.0.1 localhost

[hejun8035]

Anders Blom thank you help!
According to you saying,we try again.Now,the new error is that:

[bx2009@node11 bin]$ export ATOMIST_LICENSE_FILE=27000@node11
[bx2009@node11 bin]$ ./lmgrd -c license.lic -l log &
[1] 8563
[bx2009@node11 bin]$ atk --version
ERROR: license feature checkout failed: Cannot connect to license server system.
 The license server manager (lmgrd) has not been started yet,
 the wrong port@host or license file is being used, or the
 port or hostname in the license file has been changed.
Feature:       ATKmaster
Server name:   node11
License path:  27000@node11:/home/bx2009/atk-2008.10.0/bin/license.lic
FLEXnet Licensing error:-15,570.  System Error: 115 "Operation now in progress"
For further information, refer to the FLEXnet Licensing End User Guide,
available at "www.macrovision.com".
Traceback (most recent call last):
NLError: License required - contact Atomistix.
[1]+  Done                    ./lmgrd -c license.lic -l log


what's this mean? need for help!

[Anders Blom]

It looks like the lmgrd process never really got started (the last line of your output shows that it terminated). Look in the "log" file for details.

Your supplier has been notified of your case and will also try to provide assistance.

[hejun8035]

The log file is the same as previous，shows that

13:16:09 (lmgrd) -----------------------------------------------
13:16:09 (lmgrd)   Please Note:
13:16:09 (lmgrd)
13:16:09 (lmgrd)   This log is intended for debug purposes only.
13:16:09 (lmgrd)   In order to capture accurate license
13:16:09 (lmgrd)   usage data into an organized repository,
13:16:09 (lmgrd)   please enable report logging. Use Acresso Software Inc.'s
13:16:09 (lmgrd)   software license administration  solution,
13:16:09 (lmgrd)   FLEXnet Manager, to  readily gain visibility
13:16:09 (lmgrd)   into license usage data and to create
13:16:09 (lmgrd)   insightful reports on critical information like
13:16:09 (lmgrd)   license availability and usage. FLEXnet Manager
13:16:09 (lmgrd)   can be fully automated to run these reports on
13:16:09 (lmgrd)   schedule and can be used to track license
13:16:09 (lmgrd)   servers and usage across a heterogeneous
13:16:09 (lmgrd)   network of servers including Windows NT, Linux
13:16:09 (lmgrd)   and UNIX. Contact Acresso Software Inc. at
13:16:09 (lmgrd)   www.acresso.com for more details on how to
13:16:09 (lmgrd)   obtain an evaluation copy of FLEXnet Manager
13:16:09 (lmgrd)   for your enterprise.
13:16:09 (lmgrd)
13:16:09 (lmgrd) -----------------------------------------------
13:16:09 (lmgrd)
13:16:09 (lmgrd)
13:16:09 (lmgrd) Failed to open the TCP port number in the license.

[Anders Blom]

Obviously this is the same error as before.

I don't think we can solve this problem (which probably has a very simple solution, it's finding the solution which is tricky) over emails. We will contact you via your supplier, to arrange a different approach to solve the issue.