Starting a debugging session with Flexlm lmgrd and a vendor specific daemon

You can patch first bytes in vendor deamon to int 3 or something like that...

Or u can use trick like that, to know why it's want run only under lmgrd.
Write prog, that print out all enviroment and cmdline args and than run vendor deamon whith it's cmdline

I guess I know exactly what you are talking about. Once upon a time I also
thought vendor daemon must be run by lmgrd, actually that is a prompt
message from FLEXlm. BUT IT IS NOT TRUE! It's a trick played by Macrovision.


There are (at least) two ways to see this through:
1. trace lmgrd.exe up to the point when vendor daemon is spawned, capture
the command line and you'll see.
2. read FLEXlm SDK source code. Hint: the key file is ls_app_init.c

I did both, and it's funny to see how simple and ridiculous it is to mislead
people like that. Afterwards you can start debugging vendor deamon directly
without lmgrd.

One thing to point out is that vendor daemon communicates with lmgrd
regularly (the "heartbeat"), so you'll see some messages when lmgrd is not
present. But that won't affect you to dig out the keys and seeds in the
vendor daemon.

Good luck!

[TCM909]

you can use this argument: -app -T hostname 4 -c /you_path/license.dat

where hostname is your computer's hostname.

you can write a program such as:
int main(int argc, char **argv)
{
for (int i = 0; i < argc, i++)
{
printf("%s\n", argv[i]);
}
return 0;
}
compile and replace your daemon, run lmgrd, you can get what you want.

I'm a complete newbie here, so please bear with me if this is common knowledge, I do know a little about FlexLM, there is an old utility called Flexgen that comes with lmgr32XX dll files that display a "magic number" which is actually the keys and seeds and some other info all run together into one number, I can supply you with the full utility, (ver 2000.3), or just the dll's with an explanation of the format, if you would like.

Hopefully this post is helpfull, I'd like to download some of the utilities so I can start learning and maybe discuss things with at least a small amount of knowledge!

SiGiNT33

Today, Flexgen is worthless.

I have used the code from freesoft, and the fake daemon had successfully discovered all the argument passed to it from Lmgrd.
Actually I have got the following outputs from the fake daemon,

10:16:45 (lmgrd) Starting vendor daemons ...
10:16:45 (lmgrd) daemon.exe
-T
myserver
8.1
-1
-c
lic.txt
--lmgrd_start

Then when I try to start the daemon with it:
synd -T myserver 8.1 -1 -c lic.txt
or add the -app switch,
synd -app -T myserver 8.1 4 -c lic.txt
the daemon still try to connect to the lmgrd,

10:17:59 ($ynplctyd) Vendor daemon can't talk to lmgrd (Cannot connect to licens
e server (-15,10:10061 "WinSock: Connection refused"))

This is for the synd of $ynplify, it is from Flexlm 8.1. When I tried the saros of Hdrturbowriter(flexlm7.0d), the daemon can be started by this methord.

I am not sure if the higher version of Flexlm daemon can't be started in this way,
thanks,

Hello. I have tried by compiling the program and save as cdslmd daemon. I stop the cadence license , than replace the cdslmd daemon that is compiled. Then I run " lmgrd -c license.dat " . The license dat uses cdslmd . But notting happen ? Where is the info that u say u can get ? I compile using " gcc -c daemon.c -o cdslmd " .

I am trying to get seeds for cdslmd and magma design daemon .

Regards.

Originally Posted by freesoft

you can write a program such as:
int main(int argc, char **argv)
{
for (int i = 0; i < argc, i++)
{
printf("%s\n", argv[i]);
}
return 0;
}
compile and replace your daemon, run lmgrd, you can get what you want.

you can get the daemon's cmdline passed from lmgrd. Then you can run daemon with those cmdline directly without lmgrd.

Process Explorer from Sysinternals can show the command line a program was started with:

http://www.sysinternals.com/ntw2k/freeware/procexp.shtml

Hello freesoft. Can u give an example of the daemon's cmdline ? I tried but still
cannot get anything ?

Thx.

Originally Posted by freesoft

you can get the daemon's cmdline passed from lmgrd. Then you can run daemon with those cmdline directly without lmgrd.