I'm running NSM 2011.1, and 11.1R3.5 on an SRX240H-POE Virtual Chassis. When I attempt to push the Attack DB from NSM to the VC I get the following failure message:
Error Code: Error Text: Attack/Detector Update exception Error Details: Error information from the device : Write to destination file (/var/db/idpd/sec-download/libidp-detector.so.tgz.v_5230) failed: Permission denied Error Severity error
NSM uses the 'admin' user id, which is configured as a super-user on the SRX. Is there something I'm missing here?
I can confirm this too, we ran into the same issue and it's probably the same in all releases of JunOS (we saw this in 10.2). The file permissions on that directory are that the "root" user has write access, and so non-root netconf users attempts to update the attack DB fail with a permissions error.
I think that a solution may be required in JunOS so that a non-root netconf user can deliver the attack db to the device and have it integrated. At the moment, your options are to change directory perms, group id on your user or to use "root" for your NSM connection. We did not open a bug or enhancement request on this one, but if you do we'd add support to the case notes too.. just PM me.
