From alex.wilkinson at dsto.defence.gov.au Tue May 1 04:53:44 2007 From: alex.wilkinson at dsto.defence.gov.au (Wilkinson, Alex) Date: Tue, 1 May 2007 16:53:44 +0800 Subject: [SUMMARY] [dladm(1m)] Link Aggregation Question ... In-Reply-To: <20070424050832.GA60586@obelix.dsto.defence.gov.au> References: <20070424050832.GA60586@obelix.dsto.defence.gov.au> Message-ID: <20070501085343.GL11044@obelix.dsto.defence.gov.au> Generally speaking you do have to set up LACP [http://en.wikipedia.org/wiki/LACP] on the switch ports. So: 1. Set up LACP on your switch 2. Set up Link Aggregation via dladm(1m) on Solaris. See the following discussion: [http://www.opensolaris.org/jive/thread.jspa?threadID=20152] Thanks to: Darren Dunham Johan Hartzenbe Original Question: 0n Tue, Apr 24, 2007 at 01:08:32PM +0800, Wilkinson, Alex wrote: >Hi all, > >I have link aggregation set up on a T2000 via 4 e1000g(7D) ports. > > key: 1 (0x0001) policy: L4 address: 0:14:4f:2:7f:38 (auto) > device address speed duplex link state > e1000g0 0:14:4f:2:7f:38 1000 Mbps full up attached > e1000g1 0:14:4f:2:7f:39 1000 Mbps full up attached > e1000g2 0:14:4f:2:7f:3a 1000 Mbps full up attached > e1000g3 0:14:4f:2:7f:3b 1000 Mbps full up attached > >Question: > >Do I need to turn on EtherChannel (LACP or PAgP) on my Cisco switch also ? >Or will just having nick aggregation set up via dladm(1m) on Solaris be enough ? > > -aW -aW IMPORTANT: This email remains the property of the Australian Defence Organisation and is subject to the jurisdiction of section 70 of the CRIMES ACT 1914. If you have received this email in error, you are requested to contact the sender and delete the email. _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From mrbill at mrbill.net Tue May 1 12:20:33 2007 From: mrbill at mrbill.net (Bill Bradford) Date: Tue, 1 May 2007 11:20:33 -0500 Subject: SUMMARY: DDS-3 drive configuration on Sol10 In-Reply-To: <20070501152839.GG588@mrbill.net> References: <20070501152839.GG588@mrbill.net> Message-ID: <20070501162033.GJ588@mrbill.net> On Tue, May 01, 2007 at 10:28:39AM -0500, Bill Bradford wrote: > Finally, I dug up these settings from an old shipped-with-solaris st.conf > file circa 2003 (with product IDs changed to match the drive output): > "ARCHIVE IBM-STD224000N!", "Seagate DAT", "ARCH_04106"; > ARCH_04106 = 1, 0x2C, 0, 0x09639, 4, 0x00, 0x8C, 0x8C, 0x8C, 3; > Same result: > root at bradford:/> mt -f /dev/rmt/0n status > /dev/rmt/0n: no tape loaded or drive offline The problem was that I was trying to use the wrong tape device. I'd been told that the tape was written to the "0mb" device on the origin system. Turns out I needed to use the "0lb" device to extract the data. root at bradford:/> ls -al /dev/nrst* lrwxrwxrwx 1 root root 8 Apr 30 15:58 /dev/nrst12 -> rmt/0mbn lrwxrwxrwx 1 root root 8 Apr 30 15:58 /dev/nrst20 -> rmt/0hbn lrwxrwxrwx 1 root root 8 Apr 30 15:58 /dev/nrst28 -> rmt/0cbn lrwxrwxrwx 1 root root 8 Apr 30 15:58 /dev/nrst4 -> rmt/0lbn Tried to use the 0mb device: root at bradford:/tape> mt -f /dev/nrst12 status /dev/nrst12: no tape loaded or drive offline Tried the 0hb device for the heck of it: root at bradford:/tape> mt -f /dev/nrst20 status /dev/nrst20: no tape loaded or drive offline but the 0lb device worked: root at bradford:/tape> mt -f /dev/nrst4 status Seagate DAT tape drive: sense key(0x5)= Illegal Request residual= 0 retries= 0 file no= 0 block no= 0 root at bradford:/tape> tar xvf /dev/nrst4 Bill -- Bill Bradford Houston, Texas _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From meystel at icompsol.com Tue May 1 13:30:21 2007 From: meystel at icompsol.com (Michael A. Meystel) Date: Tue, 1 May 2007 13:30:21 -0400 Subject: SUMMARY: How to configure Sun Ray clients with old firmware? Message-ID: <20070501172447.M86934@icompsol.com> Hello, Many thanks to all who responded to my newbie Sun Ray config question! -Mike -------------------------------------------------- Original question (paraphrased): How can I get older Sun Ray 1 and 150 clients to upgrade their firmware? What is a dedicated interconnect and how do I set one up? -------------------------------------------------- Respondents: - Tim Chipman ( tchipman (-at-) gmail.com ) - Vikash Gupta ( vikashgupta (-at-) yahoo.com ) - Richard Skelton ( Richard.Skelton (-at-) infineon.com ) -------------------------------------------------- Summary: A dedicated interconnect is a network segment that is not connected to anything other than the Sun Ray server and Sun Ray clients, and has no routing other than to the Sun Ray server. I did wind up uninstalling SRSS and reinstalling it -- until I did that, no amount of invocation of utadm would get the dedicated interconnect to work properly. After I reinstalled, all of my clients were able to get the new firmware and things are working great now. -------------------------------------------------- Tim Chipman ( tchipman (-at-) gmail.com ) - Dedicated interconnect means a private network structure - In a configuration where the Sun Ray server has two NICs, one NIC would need to be connected to a switch or hub that has no route to the outside world and the only other devices attached to this network segment are Sun Ray clients -------------------------------------------------- Vikash Gupta ( vikashgupta (-at-) yahoo.com ) We can setup you existing Sunray Server to act as Firmware server also. Please note down your current version of the SunRay DTU F/W using the (STOP+S) key on DTU. Required: 1. one dedicated n/w for the firmware server interface on your U-80 (I am taking hme0) 2. SunRay F/W to be downloaded and put in /var/tmp/firmware. Steps: 1. utadm -a hme0 (See below for the detail output) 2. utfwadm -A - f /var/tmp/firmware/opt/SUNWut/lib/firmware -a -n hme0 3. Connect your SunRay DTU to this hme0 interface thru a cross cable or some HUB and just power ON, you will see the SunRay DTU connect to DCHP server running on U-80 ,do a f/w upgrade and then reboot. Configuration: 1. utadm -a hme0 ### Configuring /etc/nsswitch.conf ### Configuring Service information for Sun Ray ### configuring eth1 interface at subnet 192.168.128.0 Selected values for interface "hme0" host address: 192.168.128.1 net mask: 255.255.255.0 net address: 192.168.128.0 host name: blrsraysyn01-hme0 net name: SunRay-hme0 first unit address: 192.168.128.16 last unit address: 192.168.128.240 auth server: 192.168.128.1 firmware server: 192.168.128.1 router: 192.168.128.1 alternate servers: Accept as is? ([Y]/N): ### successfully setup "/etc/opt/SUNWut/net/hostname.eth1" file ### successfully setup "/etc/hosts" file ### successfully setup "/etc/opt/SUNWut/net/netmasks" file ### successfully setup "/etc/opt/SUNWut/net/networks" file ### finished install of "eth1" interface ### Configuring firmware version for Sun Ray All the units served by "blrsraysyn01" on the 192.168.128.0 network interface, running firmware other than version "3.0_51,REV=2004.11.10.16.18" will be upgraded at their next power-on. ### Configuring Sun Ray Logging Functions DHCP is not currently running, should I start it? ([Y]/N): Y [root at blrsraysyn01 firmware]# utfwadm -A -f /var/tmp/firmware/opt/SUNWut/lib/firmware -a -n eth1 All the units served by "blrsraysyn01" on the 192.168.128.0 network interface, running firmware other than version "kent.best31.200503301406" will be upgraded at their next power-on. ### reinitialized DHCP daemon -------------------------------------------------- Richard Skelton ( Richard.Skelton (-at-) infineon.com ) Start over: - remove SRSS - read chapter 6 of the install guide - get another switch, plug in the 150s and connect qfe0 of the server to this switch - install SRSS - reboot - read chapter 7 of the install guide - cd /opt/SUNWut/sbin - ./utadm -a qfe0 - take all the defaults - reboot - turn on the Sun Ray 150s - they should upgrade the firmware - the reference guide describes the new icons _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From aharrison at gmail.com Wed May 2 09:18:09 2007 From: aharrison at gmail.com (Andy Harrison) Date: Wed, 2 May 2007 09:18:09 -0400 Subject: SUMMARY: New packet loss issue - x4100 tagged aggr interface Message-ID: On 4/27/07, Andy Harrison wrote: > I'm about to submit this as a Sun case, but I thought I'd post here as > well to see if anyone else has experienced this problem. Any ideas? > > > ------------ > > > The server is an x4100 M2 running Solaris 10 11/06 x86. Patches were > current as of 4/9/2007, including a reconfig reboot at that time. > Yesterday, the server was rebooted and afterwards the packet loss was > noticed immediately. Note that as part of troubleshooting this > problem, I've brought the patches up to date as of yesterday, > performed a reconfig reboot, as well as performing a cold boot (with > power cables completely removed). FYI, for anyone else with e1000g interfaces wanting to run aggregated interfaces, the problem is with patch 125121-01 and related to bugid 6491179 'link aggregation with e1000g does not work unless snoop is running' and is fixed by the forthcoming 125121-02 patch. -- Andy Harrison _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From am.lists at gmail.com Thu May 3 19:17:28 2007 From: am.lists at gmail.com (am.lists) Date: Thu, 3 May 2007 19:17:28 -0400 Subject: SUMMARY: Message-ID: <25a66d840705031617k2203911cq3fddb96f8699bd17@mail.gmail.com> Special thanks to a bunch of people, you know who you are... most provided the same general direction, but Michael Stier provided step-by-step response. Turns out I was lost in 32-bit vs 64-bit limitations, such as 2GB of swap being the max size available -per-partition- and I need to change the drive setup a bit. Thanks to everyone, you guys make this community work. Angelo >> Solaris 2.6 (SunOS 5.6) is one of the major "transitory" releases, between the 32 bit and 64 bit environments. As to swap, I believe, but haven't confirmed, that swap partitions were handled as 32bit signed integers, and thus limited to 2GB (4 million block) in size. Of course, multiple swap partitions/files could be created and SunOS 5 will balance across them. Note: There is also an issue with older OBP not being able to 'savecore' on systems where the primary swap partition is greater than 2GB. Suggestion: Reboot to single user and run "swap -d /dev/dsk/c0t0d0s1". Run "format" and partition slice 1 to 1452 cylinders. Take the remaining 1452 cylinders and assign them to slice 4. (No, slices (partitions) do not have to be consecutive on the drive.) Edit the /etc/vfstab file and copy the swap declaration line, and create a swap declaration for slice 4. Run "/sbin/swapadd" to mount all swap space. Run "swap -l" to verify two swap slices, in the 4million block range. Exit single user, and continue normal operations. << --- Original Post ---- I'm in a bit of a strange situation with a legacy box. It's running 2.6. The hardware is a 420R. It has two 36G drives locally: c0t0d0 and c0t0d1. The format of d0 looks like this: Part Tag Flag Cylinders Size Blocks 0 root wm 0 - 5807 8.00GB (5808/0/0) 16779312 1 swap wu 5808 - 8711 4.00GB (2904/0/0) 8389656 2 backup wu 0 - 24619 33.92GB (24620/0/0) 71127180 3 usr wm 8712 - 24616 21.91GB (15905/0/0) 45949545 4 unassigned wu 0 0 (0/0/0) 0 Swap is thus c0t0d0s1, 4GB in size. My relevant lines of /etc/vfstab shows: /dev/dsk/c0t0d0s1 - - swap - no - swap - /tmp tmpfs - yes - Running swap -l shows: #swap -l swapfile dev swaplo blocks free /dev/dsk/c0t0d0s1 32,1 16 4194272 4194176 BUT df -k shows swap as hardly any space available: Filesystem kbytes used avail capacity Mounted on /proc 0 0 0 0% /proc fd 0 0 0 0% /dev/fd swap 15904 120 15784 1% /tmp AND I'm getting the "out of swap" error in my syslog: unix: WARNING: /tmp: File system full, swap space limit exceeded This is driving me nuts. I'll summarize any good answers to this. I know 2.6 is old, and I've mostly managed 2.8 boxes, so I won't promise that I've not overlooked something elementary. -Angelo _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From lhecking at users.sourceforge.net Sat May 5 07:03:42 2007 From: lhecking at users.sourceforge.net (Lars Hecking) Date: Sat, 5 May 2007 12:03:42 +0100 (IST) Subject: SUMMARY: Solaris 10 patch installation weirdness In-Reply-To: <20070420100008.9071BC4B7@cork.irdesign.cypress.com> References: <20070420100008.9071BC4B7@cork.irdesign.cypress.com> Message-ID: <20070505110342.50F2FC4B7@cork.irdesign.cypress.com> Lars Hecking writes: > I had to go and install patch 124208-01 as postfix stopped compiling. > > All this patch contains are header files. So, why on earth did this > creature of an updatemanager require a reboot ("patch will be installed > upon reboot")? This is mind boggling - I didn't expect Sun to go back > to before Windows 98. I received one response from Janis Klimowicz. Thanks! | Instead of using updatemanager -- especially on machines that you don't | want to reboot, use smpatch instead: | | # smpatch analyze | # smpatch update -i | | This will not avoid having to reboot for ALL patches, but will allow you to | install many patches without rebooting. _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From ruhnke at us.ibm.com Mon May 7 09:47:20 2007 From: ruhnke at us.ibm.com (Chris Ruhnke) Date: Mon, 7 May 2007 08:47:20 -0500 Subject: SUMMARY: Solaris 8 passwd locked out - permission denied Message-ID: ...and the pink bubble gum cigar goes to: Ric Anderson > What does /usr/sbin/pwck have to say? Indeed some other admin had fat-fingered an update to one of the "standard" accounts -- nobody4. Internal security requires that ALL accounts have a flesh-and-blood owner. When he added the ownership info, he deleted a ":" field-separator. Silly me, presuming that all "standard" records were good format...!!! But, you learn something new every day. I was not aware of "pwck" on Solaris. [demime 1.01b removed an attachment of type image/jpeg] _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From spiro.harvey at gmail.com Fri May 4 15:13:13 2007 From: spiro.harvey at gmail.com (spiro harvey) Date: Sat, 5 May 2007 07:13:13 +1200 Subject: SUMMARY: booting after recovery Message-ID: <98f939870705041213n405f4035ob4e16e594e570d5a@mail.gmail.com> Thanks for all the rapid responses. The solution was in fact that I was missing updating the /etc/path_to_inst file. This was done by booting the working system, mounting the recovered filesystem into /mnt/root and then running 'devfsadm -r /mnt/root' devfsadm has the ability to update device trees and path_to_inst in an alternate root path using the -r option. However, I did notice that by doing this, path_to_inst was updated on the *current* root partition, so I had to copy that over afterwards. Another point to note is that devfsadm will only update files that don't currently exist, so I had to delete all the /dev/dsk and /dev/rdsk entries before devfsadm ran. On 04/05/07, spiro harvey wrote: > Hi all... > > I've got an interesting problem trying to boot a hard disk using a recovered OS. > > I'm building a test network, so the hardware I'm building on isn't the > same as the original hardware. > > The OS is Solaris 9. > > The source server is a 280R. > > The destination server is an E3000. I know. I know. But it's all I've > got to work with. > > The problem I've got is that all the device paths are completely different. > > c0t0d0s0 has the root partition installed from CD > > c0t3d0s7 has the root partition recovered from tape. > > I couldn't overwrite the original root partition as it's not big > enough, so I boot the server with 'boot disk3:h' which works fine > until it gets to fsck the drive. > > Then I was told that fsck couldn't stat the device. After that I > copied everything from the working root's /dev/dsk, /dev/rdsk and > /devices (specifically SBUS dirs) into the recovered partition using > cpio. > > However, this didn't fix the problem. It won't read the disk as > c0t3d0s7. It tells me it can't stat the drive, and to run fsck > manually. I am then dumped into a shell prompt. When I run fsck from > here, I'm told it can't open the device (previously was told couldn't > stat the device). So I think I've progressed, but it still won't boot > properly. > > I tried doing a boot -r but the fsck problem showed before it > reconfigured, hence the need to manually copy the devs with cpio. > > my basic steps in the recovery were: > > - restore root data onto spare partition using scanner|uasm (Networker) > - edit vfstab to list new physical devices (original server was using > metadevices) > - edit /etc/system and comment out all the MDDB lines > - rename hostname.ce0 to hostname.hme0 (different NICs) > - install bootblock > - cpio -p /dev/dsk /dev/rdsk and /devices to new partition > - boot disk3:h (c0t3d0s7) > > I've got a bit of a tight deadline to build this test environment up, > so any ideas greatly appreciated. > > Thanks. _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From Juergen.Schultz at eads.com Wed May 9 01:26:56 2007 From: Juergen.Schultz at eads.com (Schultz, Juergen) Date: Wed, 9 May 2007 07:26:56 +0200 Subject: SUMMARY: Management of servers and workstations running multiple Solaris versions Message-ID: <1C7FDE366847194F9963071930960C6602A0B8A4@GSX300A.mxchg.m.corp> Dear all, thanks for all the replies. I will try Webmin first, which was named with other tools: TeamQuest BladeLogic HP Open View Legato Networker or Veritas Netbackup SWAT (SAMBA Web Interface) SMC - Solaris Management Console Best regards, Juergen > ______________________________________________ > From: Schultz, Juergen > Sent: Tuesday, May 08, 2007 4:21 PM > To: 'sunmanagers at sunmanagers.org' > Subject: Management of servers and workstations running multiple Solaris versions > > Dear sunmanagers, > > I am currently looking for a solaris software suite that allows me to manage different servers and workstations (20+) running different version of Solaris (Solaris 8 to 10). By "managing" I understand adminstrating > > + system monitoring and rebooting > + setting configurations (nfs, > ...> ) > + backup systems > + adding users/groups/NIS/etc on the servers > + managing SAMBA services on the servers > > > Is there any commercial toolset that allows me to handle all these tasks from a common (web) interface ? Any Windows based tools ? > > > Best regards, > Juergen _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From dave.markham at fjserv.net Wed May 9 05:11:04 2007 From: dave.markham at fjserv.net (Dave Markham) Date: Wed, 09 May 2007 10:11:04 +0100 Subject: SUMMARY: Problem rebuild 280R ufsdump Message-ID: <46419028.3020402@fjserv.net> Silly me for emailing without actually reading a few posts up with someone who had a 280R issue after recovery. I was poking around and noticed in /etc/path_to_inst the wwn's of the original servers disks were referenced and not the ones from a probe-scsi on my new server i was recovering to. This may be a bit drastic but after booting from cdrom i moved /etc/path_to_inst to a backup and then did a boot -a to rebuild it. This has worked a charm. Im sure theres a cleaner way to do this though. _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From robert.clift.ctr at navy.mil Wed May 9 10:17:30 2007 From: robert.clift.ctr at navy.mil (Clift, Tom CTR NSWCDL K55) Date: Wed, 9 May 2007 09:17:30 -0500 Subject: SUMMARY: Solaris Management Console(SMC) Message-ID: The problem turned out to be a corrupt file. Once I moved the current PDS.ser to a backup copy, SMC created a new file and seems to work fine. Original message: All, I am receiving an error from SMC when I try to add a user using a predefined template. This has been working for over a year now. Below is the error in the messages file: Service com.sun.management.vipermpl.services.persistence.PersistenceService cannot be loaded. com.sun.management.viper.CriticalStop.exception: Cannot read/write persistence data file /var/sadm/smc/properties/PDS.ser Permissions/ownership seems to be correct on this file. I also get a Java error on the console like: Exception in Thread "AWT-EventQueue-0" java.lang.NullpointerException............. _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From tchipman at gmail.com Tue May 15 08:07:28 2007 From: tchipman at gmail.com (Tim Chipman) Date: Tue, 15 May 2007 09:07:28 -0300 Subject: SUMMARY: 6120 Disk Array-> Remove and Replace Disk, does not enable Message-ID: Hi all, just a summary (a bit late but better than none for the universe at large I believe) Big thanks goes out to Alan -- a local person who helped me out. Alas I had no replies from the list. I guess these 6120 units are not in heavy use (at least by people who don't have support contracts on them? :-) Basic Scoop is 2-fold for my problem, (1) as per Alan's suggestion, it seems there were bugs in early (ie, the not-latest) firmware for the array which resulted in failure to consistently pick up when a new drive was installed. The fix for this was to download the newest firmware (released in 2007) for all components in the array (main controller, fibre controllers and the drives themselves). After applying these updates to the array it still would not let me use the 3rd party (non-Sun FCAL Drive, lacking sun firmware but otherwise physically identical drive) -- same part from seagate as the failed drive - nor could I flash it up to the sun firmware (no big surprise really I guess) (2) I was able to source a pair of sun-part drives (good used working pulls) on Ebay for a bargain price (same seagate part as my failed drive, but also with Sun firmware). After popping one of these into the array, I was able to update the firmware of the new drive to make it consistent with all other drives in the array. Following this, I was able to manually enable the drive and then a reconstruction began immediately on the raid volume, taking a significant chunk of time (overnight) to rebuild - but completing successfully. (the rebuild time reminds me .. this is basically a souped-up T3 disk array, ie, not exactly cutting edge performance to put it mildly. Sigh.) So. I'm all finished with this madness for now, it seems. The joys of non-contract gear. ---Tim Chipman =============== ORIGINAL QUESTION FOLLOWS BELOW (with console array text truncated this time, which was pasted / present in my original posting) Hi All, Sorry to bother the list with trivial question, but the sun manuals are absurdly opaque on this topic ("it happens automatically in the default config, yay") I've inherited management of a 4800 with a couple of direct-attached 6120 arrays (everything is out of support so I'm working with access only to "free sunsolve", and no tech support from sun). One of the arrays has a disk that went bad - not a problem since we're running raid 5. I've got a cold-spare part which is the identical part as the failed drive (Seagate st373307fc, 73gig FCAL disk - although my cold spare is a generic seagate part, NOT a sun part) First question, I suppose, is - do I have any reason to this this should work with a non-sun part? or will firmware of the disk make it incompatible from the get-go? (hopefully not?!) Second question, assuming I have any right to be doing this with a generic disk: When I remove the bad disk, and install the replacement part, the new disk spins up fine (power LED on the new disk lights up persistently) and I can see from the command-line-admin-interface that the device is detected. However, it does not come online, nor does it rebuild the raid. A friendly kick in the right direction would be massively appreciated. (i.e., what command syntax is expected to force the new disk to be flagged as online and then permit rebuild of the raid volume?!) _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From harrydunn1999 at yahoo.com Tue May 15 14:15:23 2007 From: harrydunn1999 at yahoo.com (Harry Dunn) Date: Tue, 15 May 2007 11:15:23 -0700 (PDT) Subject: Summary pcix or pcie In-Reply-To: <7892f2a50705081537m2863dcd7lb2a229cee3006244@mail.gmail.com> Message-ID: <476124.54333.qm@web57412.mail.re1.yahoo.com> Apologies for my delay in summarizing. Here is the best answer: Thanks to Micah! Micah DesJardins wrote: Harry, It looks like PCI Express is orders of magnitude faster than PCI-X in general. You may want to double check the tech specs on the X4600 itself. Here's a link to get you started, it has a good contrast of PCI vx. PCI-X vx. PCI-E as well as some links to sources at the end. http://darkness.codefu.org/wordpress/2005/08/19/201 Regards, Micah DesJardins --------------------------------- Pinpoint customers who are looking for what you sell. _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From martini1 at llnl.gov Wed May 16 14:22:21 2007 From: martini1 at llnl.gov (Dave Martini 1) Date: Wed, 16 May 2007 11:22:21 -0700 Subject: SUMMARY: /dev/random missing? Message-ID: <464B4BDD.9050805@llnl.gov> Everyone said to install patch 112438 which this system already has. What I'm trying to do is configure openssh on this solaris 8 box and run the ssh-keygen command but when I do I get an error PRNG is not seeded Which has to do with /dev/random and or /dev/urandom being missing I suppose. I'm not sure why I don't have /dev/random even though I have patch 112438-03 installed. Someone suggested installing prngd from sunfreeware.com would this allow the ssh-keygen command to work then? Below is my original question I have a solaris 8 machine that does not have /dev/random or /dev/urandom. My other solaris 8 machines have it. Can I copy it from one of my other solaris 8 machines or do I have to install a package or patch to get it? Thanks. Dave Martini LLNL _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From stan at temple.edu Wed May 16 16:15:34 2007 From: stan at temple.edu (Stan Horwitz) Date: Wed, 16 May 2007 16:15:34 -0400 Subject: Summary: Mounting a CD on Solaris 9 In-Reply-To: <61312CF0-435D-488B-B7ED-5C02742F89B6@versatile.com> References: <802E4FB5-A0F7-4736-8537-646CA922491E@temple.edu> <61312CF0-435D-488B-B7ED-5C02742F89B6@versatile.com> Message-ID: <0906C10B-0073-4709-A40A-37028824ADEF@temple.edu> The command ... mount -r ro -F hsfs /dev/dsk/c1t6d0s2 /cdrom did the trick. Thanks to everyone for your assistance. _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From stan at temple.edu Wed May 16 17:11:33 2007 From: stan at temple.edu (Stan Horwitz) Date: Wed, 16 May 2007 17:11:33 -0400 Subject: Summary: Problem setting up a VLAN on Solaris 9 In-Reply-To: <68001C27702E004BA5A80C0839AEA96C446302@NUTMEG.Ncdoc.navy.mil> References: <8126ECD5-9E50-4F8D-B654-E060077D28BE@temple.edu> <68001C27702E004BA5A80C0839AEA96C446302@NUTMEG.Ncdoc.navy.mil> Message-ID: Thanks to everyone who offered me advise on this matter. I was using the same method I use on my other Solaris box, but that uses zero as its device number, so I was off by three on the interface name because this other Solaris box has device number 3. I also had to install patch 112233-12 in order to partake of tagged VLAN support on Solaris 9. It seems to be working okay now. Thanks for you help and to everyone else who offered help. _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From Alfredo.Cruz at cancercare.on.ca Thu May 17 19:10:52 2007 From: Alfredo.Cruz at cancercare.on.ca (Cruz, Alfredo) Date: Thu, 17 May 2007 19:10:52 -0400 Subject: RPC-BIND problem Message-ID: Hi, I'm fairly new to Solaris 10. I ran into problems with one of my x4200 server where I cannot login to the server. I get ssh login screen but when I type in the password, it kicks me out. I logged into the console via ILOM and noticed that when I do an "su - acruz", it says no directory even though it is there. When I say "su acruz" it says no shell. I looked closely at the dmesg and noticed that rpc-bind did not load and probably was the main cause of why some of my services are not loaded and unable to login remotely. The rpc-bind is in maintenance mode because of errors: May 16 18:10:45 myserver svc.startd[7]: [ID 652011 daemon.warning] svc:/system/webconsole:console: Method "/lib/svc/method/svc-webconsole start" failed with exit status 95. May 16 18:10:45 myserver svc.startd[7]: [ID 748625 daemon.error] system/webconsole:console failed fatally: transitioned to maintenance (see 'svcs -xv' for details) May 16 19:15:41 myserver svc.startd[7]: [ID 652011 daemon.warning] svc:/network/rpc/bind:default: Method "/lib/svc/method/rpc-bind start" failed with exit status 1. May 16 19:15:41 myserver svc.startd[7]: [ID 748625 daemon.error] network/rpc/bind:default failed: transitioned to maintenance (see 'svcs -xv' for details) May 16 19:15:54 myserver svc.startd[7]: [ID 652011 daemon.warning] svc:/network/rpc/bind:default: Method "/lib/svc/method/rpc-bind start" failed with exit status 1. May 16 19:15:54 myserver svc.startd[7]: [ID 748625 daemon.error] network/rpc/bind:default failed: transitioned to maintenance (see 'svcs -xv' for details) May 16 20:54:08 myserver sshd[935]: [ID 234283 auth.error] libpkcs11: /usr/lib/security/pkcs11_softtoken.so unexpected failure in ELF signature verification. System may have been tampered with. See cryptoadm(1M). Skipping this plug-in. May 16 20:54:08 myserver sshd[935]: [ID 530472 auth.error] Kerberos mechanism library initialization error: unknown error. May 16 20:54:08 myserver sshd[935]: [ID 234283 auth.error] libpkcs11: /usr/lib/security/pkcs11_softtoken.so unexpected failure in ELF signature verification. System may have been tampered with. See cryptoadm(1M). Skipping this plug-in. May 16 20:54:08 myserver sshd[935]: [ID 530472 auth.error] Kerberos mechanism library initialization error: unknown error. May 16 20:54:08 myserver sshd[935]: [ID 234283 auth.error] libpkcs11: /usr/lib/security/pkcs11_softtoken.so unexpected failure in ELF signature verification. System may have been tampered with. See cryptoadm(1M). Skipping this plug-in. May 16 20:54:08 myserver sshd[935]: [ID 530472 auth.error] Kerberos mechanism library initialization error: unknown error. May 16 21:01:09 myserver sshd[964]: [ID 234283 auth.error] libpkcs11: /usr/lib/security/pkcs11_softtoken.so unexpected failure in ELF signature verification. System may have been tampered with. See cryptoadm(1M). Skipping this plug-in. May 16 21:01:09 myserver sshd[964]: [ID 530472 auth.error] Kerberos mechanism library initialization error: unknown error. May 16 21:01:09 myserver sshd[964]: [ID 234283 auth.error] libpkcs11: /usr/lib/security/pkcs11_softtoken.so unexpected failure in ELF signature verification. System may have been tampered with. See cryptoadm(1M). Skipping this plug-in. May 16 21:01:09 myserver sshd[964]: [ID 530472 auth.error] Kerberos mechanism library initialization error: unknown error. May 16 21:01:09 myserver sshd[964]: [ID 234283 auth.error] libpkcs11: /usr/lib/security/pkcs11_softtoken.so unexpected failure in ELF signature verification. System may have been tampered with. See cryptoadm(1M). Skipping this plug-in. May 16 21:01:09 myserver sshd[964]: [ID 530472 auth.error] Kerberos mechanism library initialization error: unknown error. May 16 22:32:31 myserver xntpd[360]: [ID 866926 daemon.notice] xntpd exiting on signal 15 May 16 22:32:31 myserver syslogd: going down on signal 15 May 16 22:32:55 myserver genunix: [ID 672855 kern.notice] syncing file systems... This problem started when I try to move root's home directory from /root to /. I initially cause me problem after. When I did an "su -" it say says not user not permitted to do an su. I decided to rebooted the server but got an error saying "/" differ from the boot archive. I've did the svcadm clear system/boot-archive which was successful but I'm stuck with this rpc-bind problem. I don't know if any of the sequence I did caused this problem but I would appreciate it if any you can give me some suggestions. Thanks, Alfredo DISCLAIMER: This e-mail message (and any attachments) may contain confidential and/or privileged information for the sole use of the intended recipient. Any review or distribution by anyone other than the person for whom it was originally intended is strictly prohibited. If you have received this e-mail in error, please contact the sender and delete all copies. Opinions, conclusions or other information contained in this e-mail may not be that of the organization. From mark_round at ipcmedia.com Thu May 17 12:38:29 2007 From: mark_round at ipcmedia.com (mark_round at ipcmedia.com) Date: Thu, 17 May 2007 17:38:29 +0100 Subject: SUMMARY: Veritas VxVM on X2100 giving "disk.repl: -1 bad number" Message-ID: <5DEAFA3C900EC441A755A94B58D3668527BA45@LONMSGMB01.enterprise.corpad.timeinc.com> I managed to fix this. If anyone has this problem again, the problem was that /usr/lib/vxvm/voladm.d/bin/disk.repl uses /sbin/sh, but it seems to use something that plain Bourne shell doesn't like. I changed the shebang at the top to use /usr/bin/bash (presumably other shells would work as well), and it started working! -Mark -----Original Message----- From: Round, Mark - CALM Technical Sent: 09 May 2007 10:40 To: sunmanagers at sunmanagers.org Subject: Veritas VxVM on X2100 giving "disk.repl: -1 bad number" Hi all, I have a problem with Veritas Volume Manager (VxVM). I'm using Storage Foundation 4.1 on a sun X2100, 5.10 Generic_118855-33. It is connected to a Compaq StorageWorks JBOD via Dual HBA, I can't remember the manufacturer of the HBA but I assume it is Qlogic. I downloaded the volume manager direct from Symantec, it's not a SUN-branded one. See below for diagnostic output etc. The problem arises when I try to replace a faulty disk. I was testing the procedure (getting up to speed on 4.1, the last VxVM stuff I did was on 3.x), so created a RAID 5 volume (although this problem happens on any kind of volume) and simulated a disk failure by removing one of the drives. I then used vxdiskadm and selected the drive to be removed for replacement. So far, so good. I then replaced it with a fresh disk, fdisk'ed it and ran vxdctl enable. I then went back into vxdiskadm (option 5), and this is what I saw : Replace a failed or removed disk Menu: VolumeManager/Disk/ReplaceDisk Use this menu operation to specify a replacement disk for a disk that you removed with the "Remove a disk for replacement" menu operation, or that failed during use. You will be prompted for a disk name to replace and a disk device to use as a replacement. You can choose an uninitialized disk, in which case the disk will be initialized, or you can choose a disk that you have already initialized using the Add or initialize a disk menu operation. Select a removed or failed disk [,list,q,?] list Disk group: datadg DM NAME DEVICE TYPE PRIVLEN PUBLEN STATE dm datadg12 - - - - REMOVED Select a removed or failed disk [,list,q,?] datadg12 /usr/lib/vxvm/voladm.d/bin/disk.repl: -1: bad number And then it bombs back to the main menu... I can't get past this error - whatever I try, it just bombs out with the "disk.repl: -1: bad number" error. Everything else I have tried seems fine, I just can't replace a failed disk! Has anyone any suggestions on what I may be doing wrong, or what the issue may be ? I will of course summarize any responses or advice received... Many thanks in advance, -Mark $ modinfo | grep -i vx 49 fffffffff3a1f000 299d8 207 1 vxdmp (VxVM 4.1_p3.1 + e430808 DMP Dri) 68 fffffffff3ae4000 1f8468 208 1 vxio (VxVM 4.1_p3.1 I/O driver) 69 fffffffff3cbc000 1458 209 1 vxspec (VxVM 4.1_p3.1 control/status dr) 172 fffffffff40db5e8 be0 210 1 vxportal (VxFS 4.1_REV-4.1x86p2A8_sol por) 173 fffffffff420b000 1856f8 20 1 vxfs (VxFS 4.1_REV-4.1x86p2A8_sol Sun) vxprint below : # dg datadg default default 61000 1178116019.58.devhost-5.ipcmedia.com dm datadg01 c3t0d0s2 auto 2048 71069248 - dm datadg02 c3t1d0s2 auto 2048 71069248 - dm datadg03 c3t3d0s2 auto 2048 71069248 - dm datadg04 c3t4d0s2 auto 2048 71069248 - dm datadg05 c3t5d0s2 auto 2048 71069248 - dm datadg06 c3t8d0s2 auto 2048 71069248 - dm datadg07 c4t1d0s2 auto 2048 71069248 - dm datadg08 c4t2d0s2 auto 2048 71069248 - dm datadg09 c4t3d0s2 auto 2048 71069248 - dm datadg10 c4t4d0s2 auto 2048 71069248 - dm datadg11 c4t8d0s2 auto 2048 71069248 - dm datadg12 - - - - REMOVED v data - DISABLED ACTIVE 142137344 RAID - raid5 pl data-01 data DISABLED ACTIVE 142137344 RAID 3/32 RW sd datadg01-01 data-01 datadg01 0 71068672 0/0 c3t0d0 ENA sd datadg02-01 data-01 datadg02 0 71068672 1/0 c3t1d0 ENA sd datadg12-01 data-01 datadg12 0 71068672 2/0 - RMOV And, here's the vxdiskadm list output : DEVICE DISK GROUP STATUS c1t0d0 - - online invalid c2t0d0 - - online invalid c3t0d0 datadg01 datadg online c3t1d0 datadg02 datadg online c3t3d0 datadg03 datadg online c3t4d0 datadg04 datadg online c3t5d0 datadg05 datadg online c3t8d0 datadg06 datadg online c4t0d0 - - online invalid c4t1d0 datadg07 datadg online c4t2d0 datadg08 datadg online c4t3d0 datadg09 datadg online c4t4d0 datadg10 datadg online c4t8d0 datadg11 datadg online ----------------------------------------------------------------------- * IPC Media's head office moves to new headquarters from 2nd April, 2007. The new address will be The Blue Fin Building, 110 Southwark Street, London, SE1 0SU. The new telephone switchboard number will be 020 3148 5000. This E-mail is from IPC Media Ltd, a company registered in England and Wales, whose registered office is at Kings Reach Tower, Stamford Street, London SE1 9LS, registered number 53626, VAT number 646150645. The contents and any attachments to it include information that is private and confidential and should only be read by those persons to whom they are addressed. IPC Media accepts no liability for any loss or damage suffered by any person arising from the use of this e-mail. Neither IPC Media nor the sender accepts any responsibility for viruses and it is your responsibility to check the email and attachments (if any). No contracts may be concluded on behalf of IPC Media by means of e-mail communications. If you have received this e-mail in error, please destroy and delete the message from your computer. For unbeatable savings on magazine subscriptions and great gift ideas visit www.giftmags.co.uk ______________________________________________________________________ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email ______________________________________________________________________ _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From Jonathan.Birchall at Xchanging.com Mon May 21 03:54:40 2007 From: Jonathan.Birchall at Xchanging.com (Jonathan Birchall) Date: Mon, 21 May 2007 08:54:40 +0100 Subject: SUMMARY: REF:multiple oracle instances with projects and svcadm References: <4031373E16D64B4F9676FF9FAA2DD735017D1FA1@EXCHANGE02.ad.Xglobal.com> <2BD72F7C-734A-42E7-9D30-8ADDF823C56D@versatile.com> Message-ID: <4031373E16D64B4F9676FF9FAA2DD735017D20C5@EXCHANGE02.ad.xglobal.com> Thanks to William for the solution below. Assuming you want all the DBAs to be able to stop/start all instances In your SMF manifest, add a definition like this: Then add a line like: solaris.smf.manage.oracle:::Manage Oracle Service States:: to /etc/security/auth_attr and modify the appropriate accounts to have the solaris.smf.manage.oracle authorization usermod -A solaris.smf.manage.oracle $user when the user logs in again, they should have the ability to enable/ disable (permanently or temporarily) the SMF services you modified. If you wanted to have different DBAs able to modify different instances, then make an authorization for each instance, like: solaris.smf.manage.oracle.instance1 solaris.smf.manage.oracle.instance2 and assign those. -- William D. Hathaway email: william.hathaway at versatile.com Solutions Architect aim: wdhPO Versatile, Inc. cell: 717-314-5461 On May 18, 2007, at 3:46 AM, Jonathan Birchall wrote: > Hello, > > > > I have built a sunfire v445 on which 3 seperate instances of oracle > 10g > are running. These are started by the SMF under different projects, > however I have coming up against a mental block as to have the oracle > user start these in thier respective projects using svcadm. > > > > I can configure the oracle users as a role and allow them service > manager rights but this does not allow the granularity required as the > oracle role then appears to be able to have full svcadm rights. I do > trust my DBA's but not that much. > > > > Has anyone done this, or could point me in the direction of a good > document which shows the project side of things. I have read the sun > blue print on starting apache as a non root user but this doesn't seem > to cover what I need, that or I dont quiet grasp the finer points. > > > > Regards > > Jonathan > _______________________________________________ > sunmanagers mailing list > sunmanagers at sunmanagers.org > http://www.sunmanagers.org/mailman/listinfo/sunmanagers _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From martini1 at llnl.gov Tue May 22 12:52:38 2007 From: martini1 at llnl.gov (Dave Martini 1) Date: Tue, 22 May 2007 09:52:38 -0700 Subject: SUMMARY: How to add a user to a NIS+ group Message-ID: <46531FD6.20107@llnl.gov> No matter what syntax I gave the nistbladm command I couldn't add a user to a group. A few people suggested to dump the contents of the group table to an ascii file then edit it and dump it back. I have not tried it yet but this should work. # /usr/lib/nis/nisaddent -d group > /tmp/group # vi /tmp/group <<<<<<<<<<<<<<<< Add the new user to the appropriate group and save the file. # /usr/lib/nis/nisaddent -rvf /tmp/group group Below is my original question I'm trying to add a user to a nis+ user group. There are already 20 users in this group. Is there an easy way to do it? I tried typing every user who is already in the group in again. nistbladm -e members=user1,user2,user3,user4,user5,user6 '[name=hydrogeo]'group.org_dir When I tried the above the line had to many characters and the terminal started beeping. I tried the command with a \ at the end of each line for line continuation but it returns an error can't parse column values: Missing or malformed attribute. I can't use the solstice adminsuite gui because some of the usernames are more than 8 characters in length and I get an error to fix those entries when I try to add another user. Is there a way to add a users to a nis+ group using nistbladm or some other command and just specify the actual user I want to add to the group and not everyone who is already in the group? Thank You. Dave Martini LLNL _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From te at tsemba.org Tue May 22 19:58:00 2007 From: te at tsemba.org (Tamer Embaby) Date: Wed, 23 May 2007 02:58:00 +0300 Subject: SUMMARY: Sun Fire V210 automatic startup. In-Reply-To: <46537A58.6090104@tsemba.org> References: <46537A58.6090104@tsemba.org> Message-ID: <46538388.5080105@tsemba.org> All, I found this nice URL: https://equoria.net/index.php/Solaris_Operating_System It's talking about setting this using: 1- OBP parameter auto-boot? to true (already there) 2- ALOM parameter sc_powerstatememory to true (default to 'false' and changed to true) I'm gonna have to wait until next power outage to test that. Many thanks for Sandy Gordon for exactly describing the above steps. And also for: Benzi Mizrahi Steve Harris For helping out. Kind regards, Tamer Tamer Embaby wrote: > Guys, > > I have two Sun Fire V210 servers which are facing a problem whenever > an electricity outage happens in the server room, I know this should > not happen at all to such servers but I cannot help it right now to > buy electricity generators and the UPS they are attached to doesn't > hold for long time. > > The problem is, when the electricity comes back again these two servers > never startup automatically (as what happens with the rest of servers, > which start up, boot the OS, and return to running state automatically), > of course there is no key switch (like in V240), and the V210 servers > stay turned off until someone switch them on again from the power button > in the front panel. But I believe there could be some way to make them > startup automatically, can anyone help me with that or shed some lights? > > The servers are running Solaris 8, OBP version 4.16.2. > > Appreciate your input. > > Tamer > -- Tamer Embaby _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From george at yorku.ca Wed May 23 13:08:53 2007 From: george at yorku.ca (George Kahler) Date: Wed, 23 May 2007 13:08:53 -0400 (EDT) Subject: SUMMARY: Sun V440 ALOM - hostname Message-ID: <20070523.130853.87592179.george@yorku.ca> Thanks to: "Lineberger, Aaron" "brian smith" Chris Ruhnke grove at zeta.org.au "filo smith" who suggested to upgrade ALOM to version 1.6.x and to make sure that /etc/nodename has the correct entry in it. Unfortunately after upgrading to ALOM 1.6.3, OBP 4.16.4 and installing Solaris 10 6/06 I still can not change the displayed name in the ALOM login, ie. ---------------------------------------------------------------------- sc> logout Copyright 2007 Sun Microsystems, Inc. All rights reserved. Use is subject to license terms. Sun(tm) Advanced Lights Out Manager 1.6.3 (bkup4a.yorku.ca) ^^^^^^^^^^^^^^^ Please login: Serial line login timeout, returns to console stream. Enter #. to return to ALOM. ---------------------------------------------------------------------- I will continue to fight with this and if successful I will post the fix. George > No matter how many times I reboot Solaris8 or reset the ALOM > SC, the hostname that ALOM displays in its banner/login is that of the > previous system. > > Does anyone of you have an idea how this can be remedied ? > According to all docs that I read, it suggest that the ALOM hostname is > automatically configured when the system boots :-( > BTW, access to the ALOM is only via the serial connection. > > Thanks. > George _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From serafino at cshl.edu Thu May 24 09:18:48 2007 From: serafino at cshl.edu (Sal Serafino) Date: Thu, 24 May 2007 09:18:48 -0400 (EDT) Subject: SUMMARY: smpatch on sol-10 Message-ID: <200705241318.l4ODImU02656@phage.cshl.edu> I only got one response on this -- quickly I may add! Aaron Lineberger suggested that I manually register my machine with sconadm. It didn't work, and I received the same error about the security validator. A little research showed that there were some problems with the patch manager in various Solaris releases. In fact, I remember some trouble with smpatch/updatemanager on my x86 laptop a few months ago, but the fix I used then (change the source URL to "https:" and exclude the trailing "/solaris") didn't work, either. I downloaded and installed the latest cluster. Word to the wise: You must run /install_cluster, reboot, and rerun ./install_cluster a second time! After that, it seems to be working just fine now (at least on one box!). Thanks to all, -Sal _______________________________________________ -----Original Message----- From: sunmanagers-bounces at sunmanagers.org [mailto:sunmanagers-bounces at sunmanagers.org] On Behalf Of Sal Serafino Sent: Thursday, May 17, 2007 12:47 PM To: sunmanagers at sunmanagers.org Subject: smpatch on sol-10 Hi All- I recently installed Solaris-10 06/06 on two new T2000's. Both are running the Developer Cluster with slight modifications (add Freeware Shells, remove Apache, remove WBEM, etc.) After getting basic settings done, I ran updatemanager to install the latest patch sets. My first run installed 119254-27 and 121118-08 which are updates to the smpatch suite. I know there are more than two patches, so I rechecked for updates. There are 128 new patches, but I can't get them to install on either machine in either GUI or CLI mode. Errors on one machine: Failure: Cannot connect to retrieve Database/current.zip: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: signature check failed The other machine runs 'smpatch analyze' without problems, but if I try to do 'smpatch download' or 'smpatch update' I get this error: : This patch could not be found Two questions: Why are the error messages so different? Anybody know how to fix this and get patches working again? TIA, -Sal _______________________________________________ _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From nmvega at computingarchitects.com Thu May 24 09:36:15 2007 From: nmvega at computingarchitects.com (Noelle M. Vega) Date: Thu, 24 May 2007 06:36:15 -0700 (PDT) Subject: SUMMARY: SunCluster 3.2: LogicalHost resource not bringing back up aninterface ... Message-ID: <385986.53656.qm@web36112.mail.mud.yahoo.com> Hi: For the problem I explained, its actually not (as told to me by Sun). IPMP handles underlying problems with SC logicalHost VIPs within an IPMP group (moving them as necessary from one interface to another - normal IPMP behavior). But IPMP does not concern itself with the VIP's themselves as it does with link level loss and with reachability to well known IP's on the local subnet (e.g. default router; multicast address; etc.). So the behavior I experienced below, is not incorrect. Btw... Thank you Andreas for pointing out that SC3.2 support starts at the H/W 11/06 version of Solaris 10. Regards, Noel Milton ================== Hi: Im running SunCluster 3.2 on Solaris 10 (06/06). I have a one-node cluster up and running. The resource group I defined has, as part of it, a LogicalHost defined as shown: ================================================================== root# clrs show -g mq1-RG -p NetIfList,HostnameList mq1-lh-RES === Resources === Resource: mq1-lh-RES --- Standard and extension properties --- NetIfList: ipmp_grp0 at 1 Class: extension Description: List of IPMP groups on each node Per-node: False Type: stringarray ================================================================== I can bring the resource group online and offline with each resource correspondingly going on and offline as well, including the LogicalHost resource. My questions is this... With the resource group brought online, ce0:2 gets configured successfully (LogicalHost). Fine. But when I, on purpose, do an "ifconfig ce0:2 down" or unplumb it, to hopefully see the cluster bring it back up, an scstat shows the LogicalHost as online even though ce0:2 remains down or unplumbed: Resource Name Node Name State Status Message ------------- --------- ----- -------------- Resource: mq1-lh-RES server22 Online Online - LogicalHostname online. Resource: mq1-hadisk-RES server22 Online Online Resource: mq1-mq-RES server22 Online Online - Service is online. Anyone know why it doesn't bring it back up? I followed the docs to the letter. TIA, Noel Milton _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From sun.mail.list at oryx.cc Thu May 24 12:44:53 2007 From: sun.mail.list at oryx.cc (Jerry Kemp) Date: Thu, 24 May 2007 11:44:53 -0500 Subject: [SUMMARY] Solaris x86 cisco vpn client Message-ID: <4655C105.8090603@oryx.cc> Solaris x86 VPN client summary. Thank you to the following for your comments and suggestions: Michael Grice Gary Chambers Matthew Taylor Glenn Prince David Magda Al Saenz Vacations - It has been a while since I posted a question here, and amazingly, no one is on holiday. ================================ Down to business - With one exception, everyone suggested VPNC. No one has this working on Solaris that emailed me, but some indicated that they had it working on linux. This is the URL for VPNc: http://www.unix-ag.uni-kl.de/~massar/vpnc/ The one exception was for the Connectra SSL VPN extender. The Cisco VPN concentrator does not support SSL based VPN's, so I was not able to explore this option. ================================ Compiling VPNc My VPNc test platform is an Ultra 20 M2 running Solaris 10u3. I pulled down the VPNc 0.4.0 source code last evening, and ultimately got a good working compile. Why there was not any rocket-surgery involved, it wasn't a task for the timid or beginner. This application had roughly a dozen sub-dependencies I had to get compiled and installed prior to getting a good/working compile of VPNc. The bulk of problems encountered with the sub-dependencies revolved around ld. They needed the GNU ld. And it wasn't enough to do a ./configure --with-gnu-ld=/usr/local/bin/ld . I actually had to rename /usr/ccs/bin/ld to get a good compile. If you have to do this also, be sure to restore /usr/ccs/bin/ld afterwards, you will need it! The big exception to the sub-dependencies was the compiling/installing of the TUN/TAP kernel modules. I was not able to get a good compile and install till I used /usr/ccs/bin/ld . I was able to verify my TUN/TAP installation here with the following command: # modinfo | egrep -i 'tun|tap' ================================ VPNc installation/configuration/usage After I had a good installation of all of the sub-dependencies for VPNc, I was finally able to begin working with VPNc itself. The compile (make) was easy/quick/clean, but the "make install" operation really didn't do much of anything. I manually copied the binaries and scripts to /usr/local/sbin , and configuration files were put in /etc/vpnc/ . VPNc includes a script to convert your Cisco generated *.pcf file to a VPNc style configuration file. This script did a pretty good job, but I needed to do some manual clean up. Once complete, your configuration file should be named "default.conf" and moved to the /etc/vpnc/ subdirectory. ================================ Success? I ran out of time last night before I was fully complete, but before I needed to stop, but I was able to run VPNc, successfully log in, have VPNc display warning/disclaimer banners, and have the Cisco concentrator automatically set static routes to all of the internal networks. I was not able to pass any traffic through the tunnel before I needed to stop, but I am certain that I am very close. There are some scripting issues that I need to work through, but I feel that I will be successful using VPNc. ================================ Additional details This was suppose to be a short summary, but it is starting to look like a book. If anyone needs additional details of what I did, please email me off line, and I will assist to the best of my abilities. ================================ Original question > Currently, Cisco does not provide a VPN client for Solaris x86, although > there is one for Solaris Sparc. > > Does any one have a usable 3rd party functional VPN client that they use > to connect to a Cisco VPN concentrator. It could be 3rd party > commercial, shareware, freeware, open source, etc? > > A Yahoo search turns up many others asking the same question, but no > answers. > > Thanks for any comments, I will post a summary. _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From s.zhou at larc.nasa.gov Thu May 24 16:37:15 2007 From: s.zhou at larc.nasa.gov (s.zhou) Date: Thu, 24 May 2007 16:37:15 -0400 (EDT) Subject: summary: PRNG is not seeded Message-ID: Thanks for all who replied. Basically I need patch 112438 on some of my Solaris 8 systems and some have alreay had this patch installed. By the way, I have similar problems with some of my SGIs. Do you know is there any such SGI's managers mailing list around? Thanks, -- Shouben Zhou Science Systems and Applications Inc.(SSAI) 1 Enterprise Pkwy, Hampton, VA 23666 Tel: (757)827-4887 Fax: (757)825-9129 Email: s.zhou at larc.nasa.gov > >Have you seen this before? > >I have got openssh 4.6p1 from sunfreeware.com and installed. While test >the newly installed sshd by /usr/local/sbin/sshd -v, I got: > >PRNG is not seeded. > >Do you know what is the quickest fix for that? Also I got same error >message on some IRIX machines as well. > >Thanks, > >-- >Shouben Zhou >Science Systems and Applications Inc.(SSAI) >1 Enterprise Pkwy, Hampton, VA 23666 >Tel: (757)827-4887 Fax: (757)825-9129 >Email: s.zhou at larc.nasa.gov >_______________________________________________ >sunmanagers mailing list >sunmanagers at sunmanagers.org >http://www.sunmanagers.org/mailman/listinfo/sunmanagers _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From anjum at qp.com.qa Sun May 27 07:05:28 2007 From: anjum at qp.com.qa (Ayaz Anjum) Date: Sun, 27 May 2007 14:05:28 +0300 Subject: Summary: issues with cluster 3.2 In-Reply-To: Message-ID: Thanks to Murat BALKAS, and "aams listastecnicas", for confirming my suspecion. The problem with with cluster interconnect being on the same vlan. I have used cross cable and the errors are gone. Regarding the second error which i hv posted May 25 19:24:40 orarac01 Cluster.SMF.DR: Unable to open door descriptor /var/run /rgmd_receptionist_door May 25 19:24:40 orarac01 Cluster.SMF.DR: May 25 19:24:40 orarac01 Error in scha_cluster_get its a bug and can be ignored, see CR 6490541 thanks Ayaz Anjum Ayaz Anjum/IT/QGPC 05/25/2007 07:27 PM To cc Subject issues with cluster 3.2 HI ! I am evaluating sun cluster 3.2 and facing following wierd issues ( solaris 10 11/06 ) 1. While installing i have specified a non default private interconnect ip addresses ( 10.20.0.0) Cluster nodes boots up fine but then i get following messages first node - orarac01 May 25 16:32:29 orarac01 ip: [ID 903730 kern.warning] WARNING: IP: Hardware address '00:00:00:00:00:01' trying to be our address 010.020.004.001! second node =- orarac02 May 25 17:12:28 orarac02 ip: [ID 903730 kern.warning] WARNING: IP: Hardware address '00:00:00:00:00:02' trying to be our address 010.020.004.002! I am using ce3 and ce7 for cluster interconect and i see following on both nodes orarac01: ce3: flags=1008843 mtu 1500 index 5 inet 10.20.0.129 netmask ffffff80 broadcast 10.20.0.255 ether 0:3:ba:db:9d:a3 ce7: flags=1008843 mtu 1500 index 4 inet 10.20.1.1 netmask ffffff80 broadcast 10.20.1.127 ether 0:3:ba:3:7b:2e clprivnet0: flags=1009843 mtu 1500 index 6 inet 10.20.4.1 netmask fffffe00 broadcast 10.20.5.255 ether 0:0:0:0:0:1 orarac02: ce3: flags=1008843 mtu 1500 index 4 inet 10.20.0.130 netmask ffffff80 broadcast 10.20.0.255 ether 0:3:ba:db:6c:af ce7: flags=1008843 mtu 1500 index 3 inet 10.20.1.2 netmask ffffff80 broadcast 10.20.1.127 ether 0:3:ba:3:bb:52 clprivnet0: flags=1009843 mtu 1500 index 5 inet 10.20.4.2 netmask fffffe00 broadcast 10.20.5.255 ether 0:0:0:0:0:2 i dont see and address conflict in above ifconfig output, but from the messages the nodes are complaining about the other member. Using the new feature of cluster 3.2, i booted in non cluster mode, and did clsetup to change the private ip address to default range but it gave me errors "remote access attempt to one or more of the other nodes failed" and i am not able to change the ip address Other error which i am gettting on reboots May 25 19:24:40 orarac01 Cluster.SMF.DR: Unable to open door descriptor /var/run /rgmd_receptionist_door May 25 19:24:40 orarac01 Cluster.SMF.DR: May 25 19:24:40 orarac01 Error in scha_cluster_get I hv just installed cluster one node at a time, and reset the install mode, no configurations done any suggestions thanks Ayaz Anjum Ayaz Anjum Systems Engineer , ITT/E6 Information Technology Department Qatar Petroleum P.O. Box 47 Doha, Qatar Tel +974 4405280 Cell +974 5729770 anjum at qp.com.qa www.qp.com.qa -------------------------------------------------------------------------------------------------- Confidentiality Notice : This e-mail and any attachments are confidential to the addressee and may also be privileged. If you are not the addressee of this e-mail, you may not copy, forward, disclose or otherwise use it in any way whatsoever. If you have received this e-mail by mistake, please e-mail the sender by replying to this message, and delete the original and any print out thereof. -------------------------------------------------------------------------------------------------- Confidentiality Notice : This e-mail and any attachments are confidential to the addressee and may also be privileged. If you are not the addressee of this e-mail, you may not copy, forward, disclose or otherwise use it in any way whatsoever. If you have received this e-mail by mistake, please e-mail the sender by replying to this message, and delete the original and any print out thereof. _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From paul.coray at unibas.ch Tue May 29 03:57:57 2007 From: paul.coray at unibas.ch (Paul Coray) Date: Tue, 29 May 2007 09:57:57 +0200 Subject: SUMMARY: Which minimal SW-Cluster for running GUI-Installers e.g. Oracle? Message-ID: <465BDD05.4070605@unibas.ch> Hi all, Thanks to Anonymous Mark and Vladimir, who provided me classfiles for Solaris 9, I was able to figure out how to achieve what I want on Solaris 10. I get a wonderfully slim installation of ~500 MB, opposed to ~4 GB with the SW-Clusters that throw JDS and CDE on my Disk :-) Saves me quite some Diskspace and time, when it comes to Backups... This is my original posting: "I want our server to have the minimal required SW installed to run graphical installers like Oracle, but no CDE, no GNOME/JDS. Would the Core-Cluster SUNWCreq be sufficient? Someone made a classfile for jumpstart with needed clusters and packages and could share?" First my new classfile for jumpstarting a new Solaris 10 server, followed by two Solaris 9 configs. Thanks all Paul Solaris 10 ******************************************************* install_type initial_install system_type standalone partitioning explicit filesys mirror c0t0d0s0 c0t1d0s0 free / filesys mirror c0t0d0s1 c0t1d0s1 16000 swap filesys mirror c0t0d0s3 c0t1d0s3 8000 /var filesys mirror c0t0d0s5 c0t1d0s5 2000 /redo0 metadb c0t0d0s4 count 4 metadb c0t1d0s4 count 4 cluster SUNWCreq cluster SUNWCssh add package SUNWless add package SUNWbash add package SUNWbindr add package SUNWbind add package SUNWadmc add package SUNWadmfr add package SUNWadmfw add package SUNWinst add package SUNWzip add package SUNWgcmn add package SUNWwgetr add package SUNWwgetu add package SUNWgzip add # Commonly needed misc. packages (Mandatory) #package SUNWadmc add # System administration core libraries #package SUNWadmfw add # System & Network Administration Framework package SUNWscpu add # Source Compatibility, (Usr) package SUNWscpr add # Commonly needed library packages (Mandatory) package SUNWbtool add # CCS tools bundled with SunOS #package SUNWzlib add # The Zip compression library package SUNWtoo add # Programming Tools # Manpages package SUNWdoc add package SUNWman add # Allow for X tunneling over SSH package SUNWxcu4 add #package SUNWcpp add package SUNWxi18n add package SUNWxim add package SUNWxwcft add package SUNWxwcsl add package SUNWxwfa add package SUNWxwfnt add package SUNWxwfs add package SUNWxwxft add package SUNWxwhl add package SUNWxwice add package SUNWxwinc add #package SUNWxwman add #package SUNWxwmod add package SUNWxwoft add package SUNWxwopt add package SUNWxwpft add package SUNWxwplr add package SUNWxwplt add #package SUNWxwpmn add package SUNWxwrtl add package SUNWxwslb add #package SUNWxwsrc add package SUNWxwsrv add package SUNWxwxst add package SUNWctpls add package SUNWdtbas add package SUNWmfrun add package SUNWicu add package SUNWstsf add package SUNWfreetype2 add package SUNWfontconfig add package SUNWfontconfig-root add package SUNWj5rt add ******************************************************* Solaris 9 ******************************************************* install_type initial_install geo N_America locale C cluster SUNWCcore partitioning explicit # Primary Disk filesys c0t0d0s0 4000 / logging filesys c0t0d0s1 1000 swap filesys c0t0d0s3 3000 /usr logging filesys c0t0d0s5 5000 /export/home logging filesys c0t0d0s6 6000 /a01 logging # Shell package SUNWzsh add # NTP package SUNWntpr add package SUNWntpu add # Man Pages package SUNWdoc add package SUNWman add package SUNWlibC add # package SUNWter add package SUNWaccr add package SUNWaccu add # Compression Utilities package SUNWgzip add package SUNWbzip add package SUNWbzipx add package SUNWzip add # Patch Management package SUNWadmc add package SUNWadmfw add # Truss and other Tools package SUNWtoo add package SUNWtoox add # Allow for X tunneling over SSH package SUNWxcu4 add package SUNWxwfnt add package SUNWxwice add package SUNWcpp add package SUNWzlib add package SUNWxwplt add package SUNWxwplx add package SUNWxwrtl add package SUNWxwrtx add ******************************************************* Solaris 9 (alt) ******************************************************* cluster SUNWCreq cluster SUNWCssh cluster SUNWCfwcmp cluster SUNWCfwcmpx cluster SUNWCfwshl cluster SUNWCwget cluster SUNWCadm cluster SUNWCxwrte cluster SUNWCptoo cluster SUNWCstlx cluster SUNWCxwrtx cluster SUNWCscp cluster SUNWCacc cluster SUNWCptoo package SUNWhea add package SUNWless add package SUNWdoc add package SUNWsfman add package SUNWsfinf add package SUNWggrp add package SUNWlibC add package SUNWlibCf add package SUNWlibCx add package SUNWuiu8 add package SUNWmfrun add package SUNWctpls add package SUNWman add package SUNWntpu add package SUNWmdb add package SUNWmdbdm add package SUNWmdbx add package SUNWarc add package SUNWarcx add package SUNWxcu4t add package SUNWbcp add package SUNWtoo add package SUNWtoox add package SUNWscpu add package SUNWscpux add package SUNWscpr add package SUNWesxu add package SUNWinst add package SUNWgssc add package SUNWfns add package SUNWfnsx add package SUNWgss add package SUNWgssk add package SUNWgssx add package SUNWrsgk add package SUNWrsgx add package SUNWgssdh add package SUNWgsskx add package SUNWatfsr delete package SUNWatfsu delete package SUNWiiimr delete package SUNWiiimu delete package SUNWtleu delete package SUNWtleux delete package SUNWinleu delete package SUNWinlex delete ******************************************************* -- Paul Coray Administrator Server und Netzwerk Oeffentliche Bibliothek der Universitaet Basel EDV-Abteilung Schoenbeinstrasse 18-20 CH-4056 Basel Tel: +41 61 267 05 13 Fax: +41 61 267 31 03 mailto:paul.coray at unibas.ch http://www.ub.unibas.ch _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From serafino at cshl.edu Tue May 29 13:37:44 2007 From: serafino at cshl.edu (Sal Serafino) Date: Tue, 29 May 2007 13:37:44 -0400 (EDT) Subject: SUMMARY: smpatch on sol-10, part 2 Message-ID: <200705291737.l4THbiC15235@phage.cshl.edu> I've had some correspondance with Chris Barnard, who has identified that there are hidden dependencies between the smpatch/updatemanager and several of the WBEM packages. So, I did a re-re-reinstall on my second T2000 that included these. The first T2000, which I can't reinstall just now, still gets stuck while trying to start up cacaoadm, so no patches for this box just yet. After the initial OS install, I installed some additional software (Companion CD packages, Studio11, etc.) and then installed the 10_Recommended Cluster, making sure to run the install, reboot, and re-run the install. After that, I was able to register my system through updatemanager, but I still get an error when trying to install patches. I was then able to run smpatch, and I noticed that there were a number of patches to the Basic Registration, Install Software, Common Agent Container, and other packages that appear be required for the updatemanager GUI to run. After running 'smpatch update' and rebooting, I did an 'rm -rf *' from /var/sadm/spool, and 'rm -rf .gconf* .gnome* java/ .softwareupdate/ .sunw/' from /. Now, smpatch and updatemanager hoth run, and I am very happy this is no longer broken. For additional reference, Martin Paul suggested that I use PCA. I looked at it briefly, but decided that I don't want to maintain any of its hard-coded magic. Otherwise, it looks like a nice little package -- thanks, Martin! General consensus is, Sun dropped the ball with the new patch software; most people who emailed me thought that clusters and the old PatchDiag script were much better. I can't say I agree 100% since this is the first real problem I've had with it, but I will say that this particular experience left me sour. Thanks to all for your comments and suggestions, -Sal _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From Alfredo.Cruz at cancercare.on.ca Wed May 30 13:33:24 2007 From: Alfredo.Cruz at cancercare.on.ca (Cruz, Alfredo) Date: Wed, 30 May 2007 13:33:24 -0400 Subject: SUMMARY: Configuring second NIC card for local zone In-Reply-To: References: Message-ID: I think I found a solution: just create a file called /etc/hostname.e1000g1 in the global zone with nothing in it. Thanks, Alfredo ________________________________ From: Cruz, Alfredo Sent: May 30, 2007 12:04 PM To: 'sunmanagers at sunmanagers.org' Subject: Configuring second NIC card for local zone Hello, I have two interface card on my global zone. I need one configured with an IP address (e1000g0) and the other plumb with no IP address (e1000g1). The reason for this is so that local zone boots up with two interface cards: one with e-1000g0:1 and the other with e1000g1:1 both with valid IP addresses. Is it possible to setup the globalzone to bring up the e1000g1 plumb without IP addresses? Do you have a better solutions or better standard practice? Thanks in advance. Alfredo DISCLAIMER: This e-mail message (and any attachments) may contain confidential and/or privileged information for the sole use of the intended recipient. Any review or distribution by anyone other than the person for whom it was originally intended is strictly prohibited. If you have received this e-mail in error, please contact the sender and delete all copies. Opinions, conclusions or other information contained in this e-mail may not be that of the organization. _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From ahoesch at smartsoft.de Thu May 31 07:01:55 2007 From: ahoesch at smartsoft.de (=?ISO-8859-1?Q?Andreas_H=F6schler?=) Date: Thu, 31 May 2007 13:01:55 +0200 Subject: Summary: Accessing devices as non-root user In-Reply-To: Message-ID: <5841DDFB-0F66-11DC-85EE-003065CCA582@smartsoft.de> Dear managers, Thanks to all that responded! >> we have an application (running on Solaris 10) that accesses sound and >> serial devices. The application works when run as root, but is not >> able to access (/dev/audio, /dev/term/0,...) when run as a normal >> user. >> >> audioCtlDevice = open ("/dev/audioctl", O_RDWR); >> if (audioCtlDevice < 0) { NSLog(@"Error: open() returned %d; >> errno %d", audioCtlDevice, errno); return 0; } >> >> 2007-05-22 11:57:15.084 AudioPlayTest[21626] Error: open() returned >> -1; errno 2 >> >> I suppose this is a general issue. What do we have to do to give >> non-root users access to devices? > > It has been recommended to check http://blogs.sun.com/jg and also have > a look into update_drv. I modified the entry in /etc/minor_perm from > "audio:* 0600 root sys" to > > audio:* 0666 root sys > > and ran "devfsadm -c audio". I also tried "update_drv" which just gave > me a list of options. "update_drv -v audio" gave me > > -bash-3.00# update_drv -v audio > Failed to update audio.conf for driver. > > and I can still not access /dev/audio when the app is run as a normal > user (it works when run as root). > > /Build/AudioPlayTest/obj/AudioPlayTest > > 2007-05-31 10:29:08.177 AudioPlayTest[26025] Error: open() returned > -1; errno 13 Since I wasn't able to populate my changes to /etc/minor_perm via any update_drv or the like command I finally rebooted the machine. After that I could access /dev/audio as a non-root user. Not nice but it works! Thanks, Andreas _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers