topic Re: Check Point OSPEC LEA app bad ELF interpreter error in Getting Data In

Check Point OSPEC LEA app bad ELF interpreter error

jbsplunk — Mon, 28 Sep 2020 14:00:05 GMT

I recently installed the Splunk Add-on for Check Point OSPEC LEA application (2.0.2), and when I attempt to Add a New Connection I get this UI error when Pulling the Certificate

Manage Connections: New Connection > Pull Certificate > SIC Details

/opt/splunk/etc/apps/Splunk_TA_opseclea_linux22/bin/pull-cert.sh: ../opsec-tools/opsec_pull_cert: /lib/ld-linux.so.2: bad ELF interpreter: No such file or directory

opsec_pull_cert: /lib/ld-linux.so.2: bad ELF interpreter: No such file or directory

Anyone else run into this? How can it be resolved?

Re: Check Point OSPEC LEA app bad ELF interpreter error

Chubbybunny — Wed, 29 May 2013 18:52:27 GMT

Please refer to the Application system requirements, it seems the following glibc & pam libraries are missing and will need to be installed first

glibc.i686 (32-bit version)
pam.i686 (32-bit version)

Install using: yum install glibc.i686; yum install pam.i686

(\__/)
(='.'=)
(")_(")

Re: Check Point OSPEC LEA app bad ELF interpreter error

daniel_splunk — Thu, 15 Aug 2013 21:44:25 GMT

When I run "yum install pam.i686", hit the following error.

Error: Protected multilib versions: libgcc-4.4.7-3.el6.i686 != libgcc-4.4.6-4.el6.x86_64
Error: Protected multilib versions: pam-1.1.1-13.el6.i686 != pam-1.1.1-10.el6_2.1.x86_64

In order to resolve this type of error, you most likely only need to upgrade the x86_64 packages first and then install the i686 packages as normal.

# yum upgrade libgcc.x86_64 pam.x86_64
# yum install pam.i686