lmgrd Command-Line Syntax

When you invoke lmgrd, it looks for a license file that contains information about vendors and features.

Usage

lmgrd [-c license_file_list] [-l [+]debug_log_path]

      [-2 -p] [-local] [-x lmdown] [-x lmremove] [-z] [-v] [-datestamp] [-m value] [-help]

The following table describes the syntax elements:

lmgrd Command-Line Syntax

Term

Description

-c license_file_list

Uses the specified license files.

-l [+]debug_log_path

Writes debugging information to file debug_log_path. This option uses the letter l, not the numeral 1. Prepending debug_log_path with the + character appends logging entries. Use the -l option before other options to log all debugging information to debug_log_path. See Debug Log File for more information on this file.

Note:On Windows, it is best practice to set the location of debug_log_path to a ProgramData sub-folder, since this location has user-write permission by default, which is needed when the license server runs as a service with LocalService permission.

-2 -p

All platforms: -2 -p is effective, and supported, only when used together with ‑local.

On UNIX systems, -2 -p restricts usage of lmdown, lmreread, and lmremove—as well as lmswitch, lmswitchr, and lmnewlog—to a license administrator who is by default root. If there is a UNIX group called lmadmin, then use is restricted to only members of that group. If root is not a member of this group, then root does not have permission to use any of the above utilities.

On Windows systems, if lmgrd is started with -2 -p -local, lmgrd and the vendor daemon can only interact with the command-line utilities (lmreread, lmnewlog, lmdown, lmremove, and lmswitch) if these are located on the same machine and if they are run with LOCALSYSTEM privileges.

Note:It is recommended to start your lmgrd with -2 -p -local. This protects FlexNet Publisher from attack that involve remote, unauthenticated access to server commands.

-local

On UNIX systems, -local restricts the lmdown and lmreread commands to be run only from the same system where lmgrd is running.

On Windows systems, if -local is used on its own, lmutil (and variations) can be run by any Local User as long as they are running lmutil from the same host as the license server. If lmgrd is started with -2 -p -local, lmgrd and the vendor daemon can only interact with the command-line utilities (lmreread, lmnewlog, lmdown, lmremove, and lmswitch) if these are located on the same machine and if they are run with LOCALSYSTEM privileges.

All platforms: In the case of a three-server setup, any node in the triad is considered to be local.

-x lmdown

Disables the lmdown command (no user can run lmdown). If lmdown is disabled, stop lmgrd using kill pid (UNIX), or stop the lmgrd and vendor daemon processes through the Windows Task Manager or Windows service.

On UNIX, be sure the kill command does not have a -9 argument.

-x lmremove

Disables the lmremove command (no user can run lmremove).

-z

Runs in foreground. The default behavior is to run in the background.

If -l debug_log_path is present, then no windows are used, but if no -l argument specified, separate windows are used for lmgrd and each vendor daemon.

-v

Displays the lmgrd version number and copyright and exits.

-d

(OS X/macOS only) Makes lmgrd and the vendor daemon OS X/macOS launchd compliant.

Use the reference file demo.plist (included in the OS X/macOS toolkit) for information on how to instruct launchd.

-reuseaddr

[optional] Allows the server to explicitly bind to a same port, which remains in TIME_WAIT state after the server restart or crash

Note:It is recommended to use the -reuseaddr option only on non-Windows systems to avoid undefined behavior.

-datestamp

[optional] Enables writing the date, timestamp, and time zone offset in the debug log files.

-m value

Enforces obfuscation of communication between client and server.

Valid values:

• disabled: Message obfuscation is disabled. The license server ignores the obfuscation mechanism for the communication.
• permissive: Message obfuscation is enforced only if it is supported by the client.
• targeted: Message obfuscation is enforced only for the targeted messages that share the license file information with the clients.

Requests sent by clients without message obfuscation are rejected. Communication with utilities must be obfuscated.

• enforcing: Message obfuscation is enforced on all new style messages.

Important:If the argument targeted or enforcing is set, FlexNet Publisher clients or utilities prior to version 11.19.2 (2022 R3) can not communicate with the license server because they don’t support the obfuscation mechanism.

-help

Displays usage information and exits.

Note:The license search path can also be specified by setting the environment variable LM_LICENSE_FILE to the file’s path name. The -c path specification will override the setting of LM_LICENSE_FILE.