DAT updates fail after upgrading from VirusScan Enterprise for Linux 1.9.1 to 1.9.2

Technical Articles ID: KB89076
Last Modified: 4/10/2017

Environment

McAfee VirusScan Enterprise for Linux (VSEL) 1.9.x

Problem

After upgrading from VSEL 1.9.1 to 1.9.2, DAT updates fail from ePolicy Orchestrator (ePO). In addition, the local installation updated, but failed to enforce the properties from ePO.

The McScript.log contains the following details. The plugin name for VSEL 1.9.1 and earlier is: LYNXSHLD1700. The plugin name for VSEL 1.9.2 is: LYNXSHLD1920.

2017-02-23 00:55:57 [31239] (16384)   [ScrptExe] [D] Line 310: ReportStatus ************ [GetPlugInXML] : LYNXSHLD1700
2017-02-23 00:55:57 [31239] (16384)   [ScrptExe] [D] ************ [GetPlugInXML] : LYNXSHLD1700
2017-02-23 00:55:57 [31239] (16384)   [ScrptExe] [D] ConcatString
2017-02-23 00:55:57 [31239] (16384)   [ScrptExe] [D] Line 312: ConcatString XMLFile = /etc/cma.d/, LYNXSHLD1700, /, config.xml
2017-02-23 00:55:57 [31239] (16384)   [ScrptUtl] [D] XMLFile not in the local symbol table. Searching the global symbol table...
2017-02-23 00:55:57 [31239] (16384)   [ScrptUtl] [D] Found XMLFile in the global symbol table.
2017-02-23 00:55:57 [31239] (16384)   [ScrptExe] [D] Setting XMLFile to /etc/cma.d/LYNXSHLD1700/config.xml
2017-02-23 00:55:57 [31239] (16384)   [ScrptExe] [D] DirExists
2017-02-23 00:55:57 [31239] (16384)   [ScrptUtl] [D] installed not in the local symbol table. Searching the global symbol table...
2017-02-23 00:55:57 [31239] (16384)   [ScrptUtl] [D] Found installed in the global symbol table.

2017-02-23 00:55:55 [31239] (16384)   [ScrptExe] [D] Line 893: ReportStatus ************ [IsProductInstalledXML] : ProdID:LYNXSHLD1920
2017-02-23 00:55:55 [31239] (16384)   [ScrptExe] [D] ************ [IsProductInstalledXML] : ProdID:LYNXSHLD1920
2017-02-23 00:55:55 [31239] (16384)   [ScrptExe] [D] ConcatString
2017-02-23 00:55:55 [31239] (16384)   [ScrptExe] [D] Line 894: ConcatString XMLFile = /etc/cma.d/, LYNXSHLD1920, /, config.xml
2017-02-23 00:55:55 [31239] (16384)   [ScrptUtl] [D] XMLFile not in the local symbol table. Searching the global symbol table...
2017-02-23 00:55:55 [31239] (16384)   [ScrptUtl] [D] Found XMLFile in the global symbol table.
2017-02-23 00:55:55 [31239] (16384)   [ScrptExe] [D] Setting XMLFile to /etc/cma.d/LYNXSHLD1920/config.xml
2017-02-23 00:55:55 [31239] (16384)   [ScrptExe] [D] DirExists
2017-02-23 00:55:55 [31239] (16384)   [ScrptUtl] [D] installed not in the local symbol table. Searching the global symbol table...
2017-02-23 00:55:55 [31239] (16384)   [ScrptUtl] [D] Found installed in the global symbol table.

Cause

The VSEL 1.9.1 plugin was partially removed during the VSEL patch upgrade.

Solution

To resolve the issue:

Navigate to /etc/cma.d/. It should contain only the plugin LYNXSHLD1920 (for VSEL 1.9.2), but if you are encountering the issue described in this article, you will see two plugins: LYNXSHLD1700 (for VSEL 1.9.1) and LYNXSHLD1920 (for VSEL 1.9.2).
Run the following command to confirm that LYNXSHLD1700 refers to VSEL 1.9.1:

cat /etc/cma.d/LYNXSHLD1700/config.xml

The config.xml file data for LYNXSHLD1700 would look like the following:

<?xml version="1.0" encoding="UTF-8"?>

<Configuration>
<UseIpc>1</UseIpc>
<AuthorizationHash>c71490fc24aa3d19e11282da77032dd9cdb33103</AuthorizationHash>
<UpdatePluginPath>LYNXSHLD1700</UpdatePluginPath>
<UpdateContentType>DAT;Engine;ExtraDAT</UpdateContentType>
<Path>LYNXSHLD1700</Path>
<SoftwareID>LYNXSHLD1700</SoftwareID>
<StartCommand>/etc/init.d/nails start</StartCommand>
<StopCommand>/etc/init.d/nails stop</StopCommand>
<IsRunning>/etc/init.d/nails status</IsRunning>
<ProductName>VirusScan Enterprise for Linux</ProductName>
<Version>1.9.1</Version>
<Language>0409</Language>
<InstalledPath>/opt/NAI/LinuxShield</InstalledPath>
<UninstallCommand>rpm -e McAfeeVSEForLinux</UninstallCommand>
</Configuration>

The config.xml file data for LYNXSHLD1920 would look like the following:

<?xml version="1.0" encoding="UTF-8"?>

<Configuration>
<UseIpc>1</UseIpc>
<AuthorizationHash>c71490fc24aa3d19e11282da77032dd9cdb33103</AuthorizationHash>
<UpdatePluginPath>LYNXSHLD1920</UpdatePluginPath>
<UpdateContentType>DAT;Engine;ExtraDAT</UpdateContentType>
<Path>LYNXSHLD1920</Path>
<SoftwareID>LYNXSHLD1920</SoftwareID>
<StartCommand>/etc/init.d/nails start</StartCommand>
<StopCommand>/etc/init.d/nails stop</StopCommand>
<IsRunning>/etc/init.d/nails status</IsRunning>
<ProductName>VirusScan Enterprise for Linux</ProductName>
<Version>1.9.2.29197</Version>
<Language>0409</Language>
<InstalledPath>/opt/NAI/LinuxShield</InstalledPath>
<UninstallCommand>rpm -e McAfeeVSEForLinux</UninstallCommand>
</Configuration>
Remove the old VSEL plugin using the following command:

rm -rf /etc/cma.d/LYNXSHLD1700

Affected Products

Known Issue/Product Defect
Upgrade/Migrate
VirusScan Enterprise for Linux 1.9.x

Languages:

This article is available in the following languages:

English United States
Spanish Spain
French
Italian
Japanese
Portuguese Brasileiro

Glossary of Technical Terms

Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.

Knowledge Center

DAT updates fail after upgrading from VirusScan Enterprise for Linux 1.9.1 to 1.9.2

Environment

Problem

Cause

Solution

Affected Products

Languages:

Glossary of Technical Terms

Title

Title

Knowledge Center

DAT updates fail after upgrading from VirusScan Enterprise for Linux 1.9.1 to 1.9.2

Environment

Problem

Cause

Solution

Affected Products

Languages:

Glossary of Technical Terms

Choose your region

Title

Title