From robert.clift.ctr at navy.mil Wed Sep 5 15:50:28 2007 From: robert.clift.ctr at navy.mil (Clift, Tom CTR NSWCDL K55) Date: Wed, 5 Sep 2007 14:50:28 -0500 Subject: SUMMARY: clearing a zfs vtoc Message-ID: Thanks again to all that repsonded. The solution was to use format -e, select the disk and label. The system will then ask what type of label to use and I selected VTOC. Thanks again, Clift, Tom CTR NSWCDL K55 wrote: > All, I had a disk as part of a zpool and have removed it from the pool to be > used for something else. Does anyone know how to clear the vtoc? I tried the > following: > > #prtvtoc /dev/dsk/c1t0d0s2 > out ----similiar size disk/manufacture > #fmthard -s out /dev/rdsk/c1t3d0s2 > > The system complains about overlapping partitions as well as I have a number 8 > slice. _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From admitriev at mentora.com Thu Sep 6 14:07:03 2007 From: admitriev at mentora.com (Andrey Dmitriev) Date: Thu, 6 Sep 2007 14:07:03 -0400 Subject: SUMMARY: OT: Network Speed Testing Message-ID: <"L603C2D5FAF304b9a9BDD1F19F4A58DF9.1189102017.mt-adm.mentora.biz*"@MHS> Thanks for tons of responses. I am going to just list URLs and some comments I received. Tools in no particular order. Ttcp and netperf were the most mentioned. ttcp http://www.netcordia.com/tnm/tnm31/ttcp.htm Our quick and dirty test program is ttcp. It's been around forever, and I'm sure that much better tools are available now, but it gives a quick answer to TCP throughput. "Ttcp times the transmission and reception of data between two systems using the UDP or TCP protocols." It attempts to remove non-network limiting factors, such as disk I/O. netperf http://www.netperf.org/netperf/DownloadNetperf.html netperf is a really good one, if you get two decent size x86 boxes with enough horsepower to generate packets then this isa good option. pathchar .. find it limited in use these days as its pretty old. netcps it has a window$ executable nad the sources are available to compile. I've never tried it in Solaris, only on Aix, but I think you shouldn't have problems compiling it netpipe It reliably gives numbers that are near wirespeed on a LAN or across a hub or switch. I tend to believe it represents real world performance rather well. netcat can be used to "pour" a large file through a socket, either TCP or UDP. If your network is fast enough, disk I/O could be netcat's limiting factor. iperf dast.nlanr.net scp and ftp are good "practical" tests. When you perform your tests you need to know what's going on on your network, otherwise you could be measuring the speed of your router or firewall under some typical or non-typical load pattern. hpn-ssh I use ftp, as it seems to make best use of the bandwidth. scp and ssh (unless you have the High Performance modifications on both client and server side) artificially limit the rate due to their network traffic handling algorithms. Nothing to do with encryption overhead per se, but rather, statically defined flow control buffers. ftp ftp> put "|dd if=/dev/zero bs=8192 count=100000" /dev/null General Comment from Garvey Wamboldt: When you're testing TCP you want to know if the receiver has sent one or more "backoff" messages. Every time you get one your transfer speed is cut in half. TCP can be sensitive to buffer sizes which can trigger a backoff. Buffers need to be emptied, so the receiver is also sensitive to load. Large transfers in particular are sensitive to how much RAM you have (when you don't have enough). For long network segments (esp satellite links) you need something like RFC1323, RFC3390 etc to ensure you actually fill the pipe and keep data moving. _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From donaldyu at cancerboard.ab.ca Fri Sep 7 14:51:40 2007 From: donaldyu at cancerboard.ab.ca (Donald Yu) Date: Fri, 7 Sep 2007 12:51:40 -0600 Subject: Summary: SUN Server Inventory Info Message-ID: Original Question: I am collecting some SUN Server Inventory Info. I use commands as uname -a and prtdiag to get system built, CPU and Memory info. Some of my testing SUN Servers have the prtdiag program installed. So I collect these info without problem. But one of my SUN production server and testing server do not have such program. Here, I get a question. Should I install this program or could I turn around to get these info? Summary solution: I have such SUN Servers Systems as 1. SunOS *** 5.10 Generic_118833-36 sun4v sparc SUNW,Sun-Fire-T200 2. SunOS *** 5.9 Generic_117171-12 sun4u sparc SUNW,Sun-Fire-V440 3. SunOS *** 5.9 Generic_118558-28 sun4u sparc SUNW,Sun-Fire-V210 4. SunOS *** 5.10 Generic_118833-03 sun4u sparc SUNW,Sun-Fire-V440 5. SunOS *** 5.8 Generic_117000-03 sun4u sparc SUNW,Sun-Fire-880 6. SunOS *** 5.8 Generic_117000-03 sun4u sparc SUNW,Sun-Fire-880 (same as no.5) I have these SUN Server boxes running either as Testing server and production. From the number 1. to 4., I use my login account to run prtdiag program. I can collect CPU and Memory info. But for the number 5. and 6., I cannot run the program as my login account as prtdiag. In addition, I run the find command as find . -name prtdiag -print and I get nothing. So I assumed that there is no prtdiag on these servers. But I was wrong. Instead, I must run the program as the following: /usr/platform/sun4u/sbin/prtdiag. Now I can collect my CPU and Memory info. Here, I would like to express my sincere appreciation to the following SUN Professionals: Jaehne, Richard S; Robert Legate; Mike Salehi; Stefan Molnar; gurudatta; Sudhir; Chris Cariffe; Brent Killion; francisco roque; Bill Voight; Brad Morrison. Many thanks, have a nice weekend. Don ------------------------------------------------------------------------ - Donald Yu System Analyst III (System Administrator - Database ) Alberta Cancer Board IT Infrastructure, Information System 1220, 10405 Jasper Ave Edmonton AB, Canada T5J 3N4 Email: donaldyu at cancerboard.ab.ca Phone: 780-643-4603 This e-mail and any attachments may contain confidential and privileged information. If you are not the intended recipient, please notify the sender immediately by return e-mail, delete this e-mail and destroy any copies. Any dissemination or use of this information by a person other than the intended recipient is unauthorized and may be illegal. [demime 1.01b removed an attachment of type text/x-vcard which had a name of Donald Yu.vcf] _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From anjum at qp.com.qa Sun Sep 9 06:01:04 2007 From: anjum at qp.com.qa (Ayaz Anjum) Date: Sun, 9 Sep 2007 13:01:04 +0300 Subject: Summary: ufs fssnap with/without Sun cluster ! Message-ID: Thanks to Chris for this reply as below I've been using it on Solaris 9 for a couple of years. Used it with my own backup scripts. Then, when I adopted amanda for backups, I wrote a wrapper for ufsdump for amanda so that I could get backups with snapshots. http://wiki.zmanda.com/index.php/Backup_client#Chris_Hoogendyk.27s_Example I have tried using fssnap in cluster with disksets and filesystem sizes in range 2 TB and above and its working fine. Only issue which i faced is that IBM tsm does not support ufssnapshot devices (/dev/fssnap/0) for image backup . thanks Hi folks, fssnap sounds a nice feature and very attractive to take backup of filesystems online. Pleae let me know if some one are using it in production enviroment. How about taking fssnap on very big filesystem for example 5 TB. My second question is about using fssnap in a sun cluster setup with diskset ? is it supported ? Please share you expereinces with fssnap, and any suggestions thanks Ayaz Anjum -------------------------------------------------------------------------------------------------- Confidentiality Notice : This e-mail and any attachments are confidential to the addressee and may also be privileged. If you are not the addressee of this e-mail, you may not copy, forward, disclose or otherwise use it in any way whatsoever. If you have received this e-mail by mistake, please e-mail the sender by replying to this message, and delete the original and any print out thereof. -------------------------------------------------------------------------------------------------- Confidentiality Notice : This e-mail and any attachments are confidential to the addressee and may also be privileged. If you are not the addressee of this e-mail, you may not copy, forward, disclose or otherwise use it in any way whatsoever. If you have received this e-mail by mistake, please e-mail the sender by replying to this message, and delete the original and any print out thereof. _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From rondebbs at cox.net Fri Sep 7 22:45:59 2007 From: rondebbs at cox.net (Brad) Date: Fri, 7 Sep 2007 19:45:59 -0700 Subject: Summary: emc device mapping from the command line prompt Message-ID: <000001c7f33b$22c05ac0$c7e8e144@Brad> Wow, I stumbled onto this while searching for info on mapping devices a to sym (my background is Clariion). This is excellent stuff. ______________________________________________Hi Guys, I received a lot of responses, so thank you to everyone who responded. Here is a good response I received that I am posting to everyone as a summary. You need to install SYMCLI of course to have the base CLI functionality installed. You can aqquire this software from powerlink.emc.com which is the support site for EMC. The software is free of course, you would need to supply the license for BASE/Server Config in order to be able to re-map EMC hypers to and from director ports. Once you have the CLI installed (and added the licenses), you need to establish a connection with the array. Typically this is done with devices called "gatekeepers" 3MB or smaller 2-way mirror LUNs which are used by SYMCLI to talk to the array via SCSI. If you do not have these available to you, but have some EMC LUNs mapped to the host, you may still be able to talk to the array without gatekeepers as a default the CLI will attempt to communicate through a regular EMC hyper when it fails to locate a gatekeeper. Once you have verified you can speak with your EMC array you can perform mapping/unmapping commands for your hypers. Here is a very small example: 1.) Identify the devices you want to map #symdev list | grep "???:?" 014F Not Visible ???:? 16A:C5 BCV N/Asst'd RW 4096 0150 Not Visible ???:? 01B:C5 BCV N/Asst'd RW 4096 2.) Provided you know which FA, and port you want to map to you would look at how the LUNs have been mapped to the director port, and use the next available address in the list. *FLAGS: (-FA)Director (-p 0) port (-addr) list assigned LUN addresses (-avail) provide me the next available address # symcfg list -FA 16C -p 0 -addr -avail Symmetrix ID: 000187940703 (Local) Director Device Name Attr Address ---------------------- ----------------------------- ---- -------------- Ident Symbolic Port Sym Physical VBUS TID LUN ------ -------- ---- ---- ----------------------- ---- --- --- FA-16C 16C 0 0000 Not Visible VCM 0 00 000 0001 Not Visible 0 00 001 **************OUTPUT SNIPPED********************************** 019C Not Visible 0 00 07A 019D Not Visible 0 00 07B 019E Not Visible 0 00 07C 019F Not Visible 0 00 07D 01A0 Not Visible 0 00 07E 01A1 Not Visible 0 00 07F 01A2 Not Visible 0 00 080 - AVAILABLE 0 00 081 * 037F Not Visible 0 00 364 0380 Not Visible 0 00 365 0381 Not Visible 0 00 366 0382 Not Visible 0 00 367 - AVAILABLE 0 00 368 * 038B Not Visible 0 00 370 038C Not Visible 0 00 371 - AVAILABLE 0 00 372 * 3.) So we know the next available LUN is LUN 80 on Director 16C, port 0. LUN addressing can be done using base 10, base 8, and base 16 numbering depending on the director ports specific flag settings. We perform mapping using a flat file which defines the entries for the LUNs on the director port: #echo "map dev 014F to dir 16C:0 target=0, lun=81;" > map.test.cmd #echo "map dev 0150 to dir 16C:0 target=0, lun=82;" >> map.test.cmd #more map.test.cmd map dev 014F to dir 16C:0 target=0, lun=81; map dev 0150 to dir 16C:0 target=0, lun=82; 4.) we have our flat file, so we can issue a configuration change to the array: *FLAGS (-file) use the map file I specified (commit) commit the change #symconfigure -file map.test.cmd commit Execute a symconfigure operation (y/[n]) ? y A Configuration Change operation is in progress. Please wait... Establishing a configuration change session...............Established. Processing symmetrix 000187940703 Performing Access checks..................................Allowed. Locking devices...........................................Locked. Submitting configuration changes..........................Submitted. Validating configuration changes..........................Validated. Initiating PREPARE of configuration changes...............Queued. PREPARE requesting required resources.....................Obtained. Step 006 of 017 steps.....................................Executing. Step 006 of 017 steps.....................................Executing. Step 015 of 017 steps.....................................Executing. Local: PREPARE...........................................Done. Initiating COMMIT of configuration changes................Queued. COMMIT requesting required resources......................Obtained. Step 004 of 046 steps.....................................Executing. Step 017 of 046 steps.....................................Executing. Step 037 of 046 steps.....................................Executing. Step 011 of 059 steps.....................................Executing. Step 011 of 059 steps.....................................Executing. Step 042 of 059 steps.....................................Executing. Step 042 of 059 steps.....................................Executing. Step 049 of 059 steps.....................................Executing. Step 050 of 059 steps.....................................Executing. Step 051 of 059 steps.....................................Executing. Step 056 of 059 steps.....................................Executing. Local: COMMIT............................................Done. Terminating the configuration change session..............Done. The configuration change session has successfully completed. The file is parsed to verify the format is correct, if its not the session aborts. Then the symmetrix is locked while the change occurs so only one change can occur at any given time. The changes are logged in /var/symapi/log/symapi-.log, and storapid0.log 5.) Now lets verify we have the LUN mapped to the right port: # symcfg list -FA 16C -p 0 -addr | egrep '014F|0150' 014F Not Visible 0 00 081 0150 Not Visible 0 00 082 6.) Looks good, but we want to remove them now right? Since they are mapped they are in a state of ready for use. To remove them they have to be put in a state of not_ready: # for dev in 014F 0150 > do > symdev -sid 703 not_ready $dev -noprompt > done 'Not Ready' Device operation successfully completed for the device. 'Not Ready' Device operation successfully completed for the device. 7.) now we can do a symconfigure session to remove the devices. This time we will forego the map file and use STDIN instead: # symconfigure commit << EOF > unmap dev 014F from dir 16C:0; > unmap dev 0150 from dir 16C:0; > EOF A Configuration Change operation is in progress. Please wait... Establishing a configuration change session...............Established. Processing symmetrix 000187940703 Performing Access checks..................................Allowed. Locking devices...........................................Locked. Submitting configuration changes..........................Submitted. Validating configuration changes..........................Validated. Initiating PREPARE of configuration changes...............Queued. PREPARE requesting required resources.....................Obtained. ***SNIPPED*** Local: PREPARE...........................................Done. Initiating COMMIT of configuration changes................Queued. COMMIT requesting required resources......................Obtained. ***SNIPPED*** Local: COMMIT............................................Done. Terminating the configuration change session..............Done. The configuration change session has successfully completed. 8.) Verify the LUN addresses are available again on the director port: # ./symcfg list -FA 16C -p 0 -addr -avail | tail -20 019F Not Visible 0 00 07D 01A0 Not Visible 0 00 07E 01A1 Not Visible 0 00 07F 01A2 Not Visible 0 00 080 - AVAILABLE 0 00 081 * _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers ----------------------------------------------------------------------------- --- From jacob.ritorto at gmail.com Mon Sep 10 11:22:09 2007 From: jacob.ritorto at gmail.com (Jacob Ritorto) Date: Mon, 10 Sep 2007 11:22:09 -0400 Subject: Summary: sunfire v880 mpxio mirror Message-ID: <1f3f8f1d0709100822k6aa3dd27h133e5e474f943f83@mail.gmail.com> We've opted to keep it simple and eliminate MPxIO from the solution because it's not going to help or hurt the project and adds unnecessary complexity. So this is a plain old boring S.A.M.E. across multiple controllers using SVM. Keep moving. Nothing to see here.. :) SUN call this "split backplane" configuration. As to the backplane cabling, watch it! You have to attach a $$$ cable from the new controller to the expansion backplane -- but when you do, there are mislabeled connectors on some of the backplanes out there. Mine was one of them and the disks failed to show up because the connections were mislabelled. When I reversed the cables, the disks showed up during probe-scsi-all. See documents 806-6592-11, 817-4411-10 and 806-6597-11 on sunsolve for details. Unfortunately, I'm unable to re-find the errata document that details the mislabeled connector issue.. But it's out there on sunsolve. Thanks to Darren Dunham, Rainer Heilke and Brad Morrison for the input. Jacob Ritorto On 8/9/07, Jacob Ritorto wrote: > Greetings, > > Scenario: > We have a v880 with expansion FCAL backplane and additional FCAL > controller (qlc). We wish to mirror the original set of disks on the > original backplane to the new set of disks on the expansion backplane. > I'm handy with SVM, but having MPxIO in the mix seems to add a layer > of complexity (and fault tolerance) I wasn't prepared for. > > Questions: > Is this a reasonable way to increase storage fault tolerance? > Should I use MPxIO or SVM or both? > If we go with SVM alone, is it OK to have just a 2 way mirror on > all volumes? > How is it done? :) Pointers to best practice docs / recipes > would be greatly appreciated. > If I need to scrap this plan completely and start anew, please > feel welcome to say so. > > thanks, will summarize. > > Jacob Ritorto _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From joe_fletcher at btconnect.com Tue Sep 11 07:33:45 2007 From: joe_fletcher at btconnect.com (joe fletcher) Date: Tue, 11 Sep 2007 12:33:45 +0100 Subject: SUMMARY: packaging question References: <4AE659A2271399438527DEE888E5440C034F0361@HEMV2CUKER.he.local> Message-ID: <4AE659A2271399438527DEE888E5440C034F0362@HEMV2CUKER.he.local> Hi, Thanks to Richard, Anthony and John. who all pointed me in the direction of pkgtrans. I used this to convert to a file based package. I then replaced the binaries and modified the pkgmap file to update the size and checksum info for the altered files, changed the ARCH info in pkginfo and reconverted to the stream format. Happy trails. Cheers Joe ________________________________ From: sunmanagers-bounces at sunmanagers.org on behalf of joe fletcher Sent: Tue 11/09/2007 11:05 To: sunmanagers at sunmanagers.org Subject: packaging question Hi, I've got an application package created by a predecessor at my current site. The package is built for SPARC in stream format. I want to convert it for install onto x86. In essence all I need to do is change the architecture dependency and replace one binary. I must confess I've never built a package before and in this instance there's more to the package than just being a collection of files. It appears to build a whole load of system specific scripts on the fly. I've tried just hacking the package and replacing all instances of "sparc" with "i86pc" but it's not having it. Can anyone assist? TIA Joe _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From Darren.Reed at Sun.COM Wed Sep 12 16:34:50 2007 From: Darren.Reed at Sun.COM (Darren.Reed at Sun.COM) Date: Wed, 12 Sep 2007 13:34:50 -0700 Subject: SUMMARY: jumpstart questions: ipv6 and additional files In-Reply-To: <46E5D35E.70802@Sun.COM> References: <46E5D35E.70802@Sun.COM> Message-ID: <46E84D6A.4010008@Sun.COM> The question I was getting at was if there was another way besides using the finish script - it appears the answer to that is 'no'. The suggestions were to use the finish script to either - copy each file over seperately or - copy over a directory tree via NFS. I may look at using pax here instead of cp or even tar (cp's semantics don't impress me a whole lot.) Thanks to those who responded . Darren.Reed at Sun.COM wrote: >I've got a working jumpstart configuration in place but >now I want to push it a little bit further... > >Has anyone explored using jumpstart to specify additional >IPv6 addresses for network interfaces? >Or even doing the same for IPv4? > >And what about shipping extra files (such as ssh's known_hosts), >is there an easy way to do this without jumping in bed with JET/JASS? > >Thanks, >Darren _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From sbedberg at ucdavis.edu Wed Sep 12 19:50:40 2007 From: sbedberg at ucdavis.edu (Stephen Edberg) Date: Wed, 12 Sep 2007 16:50:40 -0700 (PDT) Subject: SUMMARY: V880 third-party/big disk question Message-ID: ================== ORIGINAL QUESTION: ================== I have inherited a V880 (no service contract or warranty) with 6x36GB drives. I have limited funds to expand storage space, so I cannot purchase drives from Sun, nor can I add a second drive cage. I'd like to replace some of the existing drives with larger ones, and I checked the Sun-supplied models here: http://sunsolve.sun.com/handbook_pub/Systems/SunFire880/components.html My questions are: (1) Has anyone successfully replaced Sun-supplied drives with matching drives from a third-party vendor? I haven't found a good answer to whether Sun replaces firmware; I did find a mention in the release notes - http://docs.sun.com/source/806-6593-19/dak_RR_relnotes.html - that they required a certain minimum firmware level, but it's unclear as to whether this is Sun or manufacturer firmware. (2) Has anyone used third-party 300GB FCAL drives in a V880? For example, the Fujitsu MAW3300FC, which is the 300GB version of the MAW3147FC that Sun supplies. ================ ADDITIONAL INFO: ================ I should have added for clarity that the V880 uses FCAL drives. Of the systems mentioned below, all (E250, V440, and A1000) are SCSI. I would think that good experiences with third-party SCSI drives would carry over to FCAL, but certainly not 100% sure. ========== RESPONSES: ========== Thanks to: Ric Anderson Matthew Stier Chris Hoogendyk joe fletcher Markus Mayer ---------------------------------------------------------- My usual solution to this is get Sun badged drives from a VAR that gets lease returns like http://www.dmgi.net or some place similar. The tricky part about microcode on disks is that really odd hangs and other nasties happen when the drives have differing microcode. The only microcode upgrades I've ever had access too came as Sun "patches" which booted standalone and then reflashed all the drives. ---------------------------------------------------------- (from a us.fujitsu.com address) Yes, since Sun Microsystems resells the drives with their own part number on it, and since they do sell enough of them, drive manufactures do work with them, and will ship drives to Sun with custom firmware installed. This "tweaked" firmware isn't intended to make the drives proprietary to Sun, but is usually done to resolve some problem that Sun Microsystems has detected between the drive and it's systems. These tweaked drives can have problems in environments they were not intended for. One well known case, is some first generation 20GB drives for the Ultra-10 had problems, and Sun Microsystems worked with Seagate and tweaked the firmware. The result, is a drive that would fine on all non-Windows systems. If used on a system running Win2k or WinXP, the drive size function call would return the wrong value, and Windows would think it was an 8GB drive. Since you have no support on this system, you are free to do as you wish, but only you will pay the consequences, and if you later choose to place the system under some support contract, that will be between you and your vendor. ---------------------------------------------------------- We routinely get seagate cheetah scsi drives for our E250's. We have to get a spud to mount them. We've found those relatively inexpensively online. I don't have a V880 yet, but we are in line to inherit a couple of hand-me-downs. I've already researched the seagate cheetah fcal drives and found that they should work and that the same spuds should work. We've had almost no failures of our drives in many machines over the past few years. We get our drives from Insight and get university pricing from them. ---------------------------------------------------------- Should work fine. Not sure where you are based but in Europe have a word with ww.transtec.co.uk and they will sell you some nice cheap branded drives in suitable carriers for a third of what SUN will charge you. ---------------------------------------------------------- I can't talk for the V880, however from experience with a V440, putting in larger third party disks was no problem. We replaced our 73G disks with 146G disks and there was no problem. Just remember to do a reconfiugure reboot with the new disks, and devfsadm to clean the tree. Additionally, we have a E3500 with an A1000 where we did similar, again no problem. ==================== RESOLUTION (so far): ==================== I have a request in with DMGI for 4x147GB drives, but I suspect even that might be more than what I can spend right now. As far as 300GB drives, I don't want to push my luck with something Sun doesn't supply for the V880, plus the 147GB drives are more cost-effective. I'm currently leaning towards 4 147GB Fujitsu drives from a third party (I already have the mounting hardware) and if necessary doing a firmware upgrade. I verified that I can access the disk firmware patch for at least the Fujitsu MAW3147FC drives I'm looking at. Hopefully, as Sun resells that model, I'll have good luck and won't need to flash the drives. The caveat from Fujitsu above mentioned problems with Sun-tweaked drives in non-Sun environments, and since I'm on a V880 with Solaris 10, that doesn't apply. - steve edberg ........................................................... . Steve Edberg sbedberg at ucdavis.edu . . Computer Consultant University of California, Davis . . (530)754-9127 . ........................................................... _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From Loris.Serena at pfpc.ie Thu Sep 13 07:02:38 2007 From: Loris.Serena at pfpc.ie (Loris.Serena at pfpc.ie) Date: Thu, 13 Sep 2007 12:02:38 +0100 Subject: SUMMARY: How to re-enable remote Gnome login on Solaris 10 8/07 withSecureBy Default Network Profile ON. In-Reply-To: Message-ID: Thanks a mill to Greg Marsh, whose solution (below) worked perfectly fine for me. Loris ===================================================================== As a security measure dtlogin is disabled by running it on port 0 instead of the default port 177 milly / # ps -ef | grep dtlogin root 530 1 0 Aug 06 ? 0:00 /usr/dt/bin/dtlogin -daemon -udpPort 0 To remove the port argument run, svccfg -s cde-login setprop dtlogin/args=\"\" svcadm restart cde-login NB If cde-login enters maintenance state run, svcadm clear cde-login Remote graphical login still not working also had to, svccfg -s x11-server setprop options/tcp_listen=true # false by default svcadm restart cde-login svcadm enable svc:/application/x11/xfs:default # disabled by default CDE now working but not Java desktop system! Modified the /etc/X11/gdm/gdm.conf file, [xdmcp] #Enable=false Enable=true and restarted gdm login service, svcadm restart svc:/application/gdm2-login:default ===================================================================== Loris.Serena at pfpc.ie Sent by: sunmanagers-bounces at sunmanagers.org 13/09/2007 10:50 To sunmanagers at sunmanagers.org cc Subject How to re-enable remote Gnome login on Solaris 10 8/07 withSecure ByDefault Network Profile ON. Guys, I've just installed Solaris 10 8/07 on a SPARC SunBlade 2500 enabling the "Secure By Default Network Profile". Remote SSH login works fine and Gnome graphical login only works locally. How do I re-enable (and then restrict per user and/or per host) remote graphical login? Running, "netservices open" is not an option, that will open far too much! Thanks in advance Loris # svcs -a STATE STIME FMRI legacy_run 18:42:28 lrc:/etc/rc2_d/S00set-tmp-permissions legacy_run 18:42:29 lrc:/etc/rc2_d/S07set-tmp-permissions legacy_run 18:42:31 lrc:/etc/rc2_d/S10lu legacy_run 18:42:31 lrc:/etc/rc2_d/S20sysetup legacy_run 18:42:32 lrc:/etc/rc2_d/S40llc2 legacy_run 18:42:32 lrc:/etc/rc2_d/S42ncakmod legacy_run 18:42:34 lrc:/etc/rc2_d/S70nddconfig legacy_run 18:42:34 lrc:/etc/rc2_d/S73cachefs_daemon legacy_run 18:42:34 lrc:/etc/rc2_d/S81dodatadm_udaplt legacy_run 18:42:34 lrc:/etc/rc2_d/S89bdconfig legacy_run 18:42:34 lrc:/etc/rc2_d/S91ifbinit legacy_run 18:42:35 lrc:/etc/rc2_d/S91jfbinit legacy_run 18:42:35 lrc:/etc/rc2_d/S94ncalogd legacy_run 18:42:35 lrc:/etc/rc2_d/S98deallocate legacy_run 18:42:35 lrc:/etc/rc3_d/S16boot_server legacy_run 18:42:37 lrc:/etc/rc3_d/S22acct legacy_run 18:42:37 lrc:/etc/rc3_d/S52imq disabled 18:42:08 svc:/network/iscsi_initiator:default disabled 18:42:08 svc:/system/metainit:default disabled 18:42:08 svc:/system/device/mpxio-upgrade:default disabled 18:42:08 svc:/network/rpc/keyserv:default disabled 18:42:08 svc:/network/rpc/nisplus:default disabled 18:42:08 svc:/network/nis/server:default disabled 18:42:09 svc:/network/nis/client:default disabled 18:42:09 svc:/network/dns/client:default disabled 18:42:09 svc:/network/ldap/client:default disabled 18:42:09 svc:/network/nfs/status:default disabled 18:42:09 svc:/network/nfs/nlockmgr:default disabled 18:42:09 svc:/network/nfs/cbd:default disabled 18:42:09 svc:/network/nfs/mapid:default disabled 18:42:09 svc:/network/inetd-upgrade:default disabled 18:42:09 svc:/network/nfs/client:default disabled 18:42:09 svc:/application/print/server:default disabled 18:42:09 svc:/network/smtp:sendmail disabled 18:42:09 svc:/system/auditd:default disabled 18:42:09 svc:/system/patch-finish:delete disabled 18:42:09 svc:/system/mdmonitor:default disabled 18:42:09 svc:/system/pools:default disabled 18:42:09 svc:/system/rcap:default disabled 18:42:10 svc:/application/management/seaport:default disabled 18:42:10 svc:/application/management/snmpdx:default disabled 18:42:10 svc:/application/management/dmi:default disabled 18:42:10 svc:/network/rpc/bootparams:default disabled 18:42:10 svc:/network/samba:default disabled 18:42:10 svc:/network/winbind:default disabled 18:42:10 svc:/network/wins:default disabled 18:42:10 svc:/network/nfs/server:default disabled 18:42:10 svc:/network/rarp:default disabled 18:42:10 svc:/network/dhcp-server:default disabled 18:42:10 svc:/application/management/webmin:default disabled 18:42:11 svc:/application/management/sma:default disabled 18:42:11 svc:/application/print/ipp-listener:default disabled 18:42:11 svc:/application/database/postgresql:version_81 disabled 18:42:11 svc:/application/database/postgresql:version_82 disabled 18:42:11 svc:/application/gdm2-login:default disabled 18:42:11 svc:/network/dns/server:default disabled 18:42:11 svc:/network/routing/legacy-routing:ipv4 disabled 18:42:11 svc:/network/routing/legacy-routing:ipv6 disabled 18:42:11 svc:/network/routing/ndp:default disabled 18:42:11 svc:/network/routing/rdisc:default disabled 18:42:11 svc:/network/ipv6-forwarding:default disabled 18:42:11 svc:/network/routing/ripng:default disabled 18:42:11 svc:/network/routing/ripng:quagga disabled 18:42:11 svc:/network/routing/zebra:quagga disabled 18:42:11 svc:/network/routing/route:default disabled 18:42:11 svc:/network/ipv4-forwarding:default disabled 18:42:11 svc:/network/routing/rip:quagga disabled 18:42:11 svc:/network/routing/ospf:quagga disabled 18:42:11 svc:/network/routing/ospf6:quagga disabled 18:42:11 svc:/network/routing/bgp:quagga disabled 18:42:12 svc:/network/security/kadmin:default disabled 18:42:12 svc:/network/security/krb5kdc:default disabled 18:42:12 svc:/network/ipmievd:default disabled 18:42:12 svc:/network/nis/passwd:default disabled 18:42:12 svc:/network/nis/update:default disabled 18:42:13 svc:/network/nis/xfr:default disabled 18:42:14 svc:/network/http:apache2 disabled 18:42:14 svc:/network/apocd/udp:default disabled 18:42:14 svc:/network/slp:default disabled 18:42:15 svc:/system/consadm:default disabled 18:42:16 svc:/system/pools/dynamic:default disabled 18:42:16 svc:/system/iscsitgt:default disabled 18:42:16 svc:/system/sar:default disabled 18:42:16 svc:/application/management/common-agent-container-1:default disabled 18:42:18 svc:/system/filesystem/autofs:default disabled 18:42:18 svc:/system/power:default disabled 18:42:18 svc:/network/rpc/bind:default disabled 18:42:19 svc:/application/print/cleanup:default disabled 18:42:27 svc:/network/rpc/meta:default disabled 18:42:27 svc:/application/x11/xfs:default disabled 18:42:28 svc:/network/rpc/rstat:default disabled 18:42:28 svc:/application/print/rfc1179:default disabled 18:42:31 svc:/network/rpc/cde-ttdbserver:tcp disabled 18:42:31 svc:/network/rpc/ocfserv:default disabled 18:42:33 svc:/network/rpc/mdcomm:default disabled 18:42:33 svc:/network/rpc/metamed:default disabled 18:42:33 svc:/network/rpc/metamh:default disabled 18:42:33 svc:/network/rpc/rex:default disabled 18:42:33 svc:/network/rpc/rusers:default disabled 18:42:34 svc:/network/rpc/spray:default disabled 18:42:34 svc:/network/rpc/wall:default disabled 18:42:34 svc:/network/security/krb5_prop:default disabled 18:42:34 svc:/network/swat:default disabled 18:42:34 svc:/network/cde-spc:default disabled 18:42:35 svc:/network/tname:default disabled 18:42:35 svc:/network/telnet:default disabled 18:42:35 svc:/network/nfs/rquota:default disabled 18:42:35 svc:/network/uucp:default disabled 18:42:35 svc:/network/chargen:dgram disabled 18:42:35 svc:/network/chargen:stream disabled 18:42:35 svc:/network/daytime:dgram disabled 18:42:35 svc:/network/daytime:stream disabled 18:42:35 svc:/network/discard:dgram disabled 18:42:35 svc:/network/discard:stream disabled 18:42:35 svc:/network/echo:dgram disabled 18:42:35 svc:/network/echo:stream disabled 18:42:35 svc:/network/time:dgram disabled 18:42:35 svc:/network/time:stream disabled 18:42:36 svc:/network/ftp:default disabled 18:42:36 svc:/network/comsat:default disabled 18:42:36 svc:/network/finger:default disabled 18:42:37 svc:/network/login:eklogin disabled 18:42:37 svc:/network/login:klogin disabled 18:42:37 svc:/network/login:rlogin disabled 18:42:39 svc:/network/rexec:default disabled 18:42:39 svc:/network/shell:default disabled 18:42:39 svc:/network/shell:kshell disabled 18:42:39 svc:/network/talk:default disabled 18:42:39 svc:/network/stdiscover:default disabled 18:42:39 svc:/network/stlisten:default disabled 18:42:39 svc:/application/font/stfsloader:default disabled 18:42:40 svc:/network/security/ktkt_warn:default disabled 18:42:40 svc:/network/rpc-100235_1/rpc_ticotsord:default disabled 18:42:40 svc:/network/rpc/smserver:default disabled 18:42:40 svc:/network/rpc/gss:default online 18:42:07 svc:/system/svc/restarter:default online 18:42:08 svc:/network/pfil:default online 18:42:09 svc:/network/loopback:default online 18:42:09 svc:/system/filesystem/root:default online 18:42:10 svc:/system/installupdates:default online 18:42:10 svc:/milestone/name-services:default online 18:42:11 svc:/system/boot-archive:default online 18:42:11 svc:/system/scheduler:default online 18:42:12 svc:/network/physical:default online 18:42:12 svc:/system/filesystem/usr:default online 18:42:13 svc:/milestone/network:default online 18:42:13 svc:/system/identity:node online 18:42:13 svc:/system/keymap:default online 18:42:14 svc:/system/device/local:default online 18:42:14 svc:/system/filesystem/minimal:default online 18:42:15 svc:/system/identity:domain online 18:42:16 svc:/system/cryptosvc:default online 18:42:16 svc:/system/name-service-cache:default online 18:42:16 svc:/system/resource-mgmt:default online 18:42:16 svc:/system/rmtmpfiles:default online 18:42:16 svc:/system/sysevent:default online 18:42:16 svc:/system/device/fc-fabric:default online 18:42:16 svc:/system/coreadm:default online 18:42:17 svc:/milestone/devices:default online 18:42:17 svc:/system/picl:default online 18:42:17 svc:/network/initial:default online 18:42:18 svc:/network/service:default online 18:42:20 svc:/network/ipfilter:default online 18:42:21 svc:/system/manifest-import:default online 18:42:21 svc:/milestone/single-user:default online 18:42:22 svc:/system/filesystem/local:default online 18:42:22 svc:/system/cron:default online 18:42:22 svc:/system/sysidtool:net online 18:42:23 svc:/network/ntp:default online 18:42:23 svc:/application/stosreg:default online 18:42:23 svc:/system/sysidtool:system online 18:42:23 svc:/system/dumpadm:default online 18:42:24 svc:/milestone/sysconfig:default online 18:42:25 svc:/system/sac:default online 18:42:25 svc:/system/utmp:default online 18:42:25 svc:/network/inetd:default online 18:42:25 svc:/application/management/wbem:default online 18:42:26 svc:/application/font/fc-cache:default online 18:42:26 svc:/system/system-log:default online 18:42:26 svc:/system/fmd:default online 18:42:27 svc:/system/console-login:default online 18:42:29 svc:/network/ssh:default online 18:42:34 svc:/network/routing-setup:default online 18:42:35 svc:/milestone/multi-user:default online 18:42:37 svc:/application/graphical-login/cde-login:default online 18:42:37 svc:/application/cde-printinfo:default online 18:42:37 svc:/milestone/multi-user-server:default online 18:42:39 svc:/system/zones:default online 18:42:39 svc:/system/basicreg:default online 18:43:11 svc:/system/webconsole:console offline 18:42:14 svc:/system/filesystem/volfs:default offline 18:42:29 svc:/network/rpc/cde-calendar-manager:default # -- Loris Serena | Senior Unix Systems Specialist | PFPC International Ltd. Phone: +353-1-7903697 | mailto:loris.serena at pfpc.ie | http://www.pfpc.com _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From sathish.btech at yahoo.co.in Fri Sep 14 11:05:22 2007 From: sathish.btech at yahoo.co.in (sathish kuamr) Date: Fri, 14 Sep 2007 16:05:22 +0100 (BST) Subject: boot command disable ( while installing v440) Message-ID: <770780.58809.qm@web8415.mail.in.yahoo.com> hello sir I am trying to install Sun Fire V440 and getting following error: 1} ok boot cdrom FATAL: system is not bootable, boot command is disabled i think u have come acros this issue so kindly help me out in finding resolution regards sathish --------------------------------- Unlimited freedom, unlimited storage. Get it now From vladimirtt at gmail.com Mon Sep 17 10:08:44 2007 From: vladimirtt at gmail.com (vladimirtt at gmail.com) Date: Mon, 17 Sep 2007 17:08:44 +0300 Subject: SUMMARY: Sun T2000 and Dell PowerVault 220S Message-ID: <46ee8a71.1238400a.6757.77b0@mx.google.com> Thanks to Peter Winterflood and Anthony D'Atri ! The LSI Logic LSI20320-S should work with any SCSI devices which keep the standars. The original question was: Hi Managers, I have a Sun T2000 server which lacks disk space. We also have unused DELL PowerVault 220S external disk array appliance. I have an idea to connect the T2000 to the PowerVault 220S in order to solve the disk space problem. I searched the net and found, Sun offers U320 SCSI HBA (part #SGXPCI1SCSILM320-Z), which possibly will do the trick ... This HBA is branded LSI Logic LSI20320-S PCI/PCI-X, which is the OEM version of LSI20320. Could someone point me whether i can really use the upper SCSI U320 HBA to connect the T2000 to the PowerVault 220s ? Any help is appreciated! Thanks in advance! Vladimir Terziev, CISSP Systems & Security Administrator GB Services Ltd. _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From sun.mail.list at oryx.cc Tue Sep 18 16:17:58 2007 From: sun.mail.list at oryx.cc (Jerry Kemp) Date: Tue, 18 Sep 2007 15:17:58 -0500 Subject: [SUMMARY] replacing the telnet daemon on Solaris In-Reply-To: <46F0040E.7070901@oryx.cc> References: <46F0040E.7070901@oryx.cc> Message-ID: <46F03276.2020909@oryx.cc> I wanted to again say thank you to everyone who responded, and apologize again for my poorly written question. I think that originally, I was looking for a highly configurable telnet equivalent to proftpd or something similar, but several people have convinced me that a PAM module is the way to go. It looks like these PAM modules will meet my needs, specifically the PAM_remote_hosts module. http://www.comsmiths.com.au/pam/v1.05/ http://www.comsmiths.com.au/pam/COMSpam_faq again, thank you to everyone who replied and offered suggestions. Jerry K Jerry K wrote: > My company is doing a mass removal of telnet services corporate wide, to > be replaced by SSH. And this is a good thing. > > We will have a handful of servers, that due to application issues or > vendor support issues, will need to retain telnet daemon services and > will need to be locked down by user id, as to whether they can login to > a server or not. These systems are all Sparc based running Solaris 8. > > Initially, it was suggested to me that xinetd might be able to lock down > telnet, and it can, just not by user id. > > I have done all of the standard searches, i.e. yahoo, Sun BigAdmin, > freshmeat.net, sourceforge, etc. I have not come across anything that > can lock down telnet services by user id. > > Is anyone else doing something like this? I would appreciate it if you > can share what you did, or what telnet daemon you used to resolve your > issue. > > As always, I will summarize. > > Jerry K _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From starcat524 at yahoo.com Wed Sep 19 02:05:32 2007 From: starcat524 at yahoo.com (Sun Fire) Date: Tue, 18 Sep 2007 23:05:32 -0700 (PDT) Subject: Summary: veritas error in the vxdisk list Message-ID: <806578.17063.qm@web63915.mail.re1.yahoo.com> Hi, Thank you everyone for your reply and help and i would like to thank Kim DS for providing me the detail steps. I managed to resolve the problem following the steps. (1) Dissociate the plex rootvol-01 from the volume rootvol (2) remove the plex as both the disk group is pointing to the same disk (3) delete all the subdisk until it is not in use (4) vxdiskadm remove and replace (5) remirror the volume back Regards, Tim ____________________________________________________________________________________ Pinpoint customers who are looking for what you sell. http://searchmarketing.yahoo.com/ _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From robert.clift.ctr at navy.mil Wed Sep 19 14:04:01 2007 From: robert.clift.ctr at navy.mil (Clift, Tom CTR NSWCDL K55) Date: Wed, 19 Sep 2007 13:04:01 -0500 Subject: SUMMARY:Sun V490 not showing all processors Message-ID: Psrinfo showed the states of the processors as faulted. I used "psradm -F -n 1 2 3 16 17 18 19" to bring the other online. Not sure why they were faulted but appear to be working now. Thanks to fransico roque. Original question: All, I have a Sun V490 running 5.10 - 11/06 that doesn't show all processors when running the "mpstat" command or "kstat -p cpu_stat" command. The messages file shows the processors are initialized during boot but the OS doesn't appear to be using them. This is a new system with the recommended patch cluster. _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From vhope07 at gmail.com Wed Sep 19 23:38:06 2007 From: vhope07 at gmail.com (Virginia Hope) Date: Thu, 20 Sep 2007 13:38:06 +1000 Subject: SUMMARY: iostat and HDD Message-ID: A lot of helpful comments! Thanks all! Suggestions: 1. Check the output of iostat -En 2. If more than 5 errors get the HDD replaced 3. the relationship between sd11 and the actual HDD: look at the error you are getting for sd11 in /var/adm/messages look at the path to the device now run echo|format look for the entry that matches the path or alternativly look for for sd11 in /etc/path_to_inst for example "/pci at 1f,4000/scsi at 3/sd at c,0" 11 "sd" and match the "/pci at 1f,4000/scsi at 3/sd at c,0 to the entry from echo|format 5. c1t12d0 /pci at 1f,4000/scsi at 3,1/sd at c,0 Very cool! Warmest Regards, -VH On 9/18/07, Virginia Hope wrote: > > Hi! the output from iostat -e is : > > iostat -e > ---- errors --- > device s/w h/w trn tot > sd0 0 0 0 0 > sd6 0 0 0 0 > sd7 0 0 0 0 > sd8 0 0 0 0 > sd9 0 0 0 0 > sd10 0 0 0 0 > sd11 0 8 0 8 > > How can I repair sd11? Should replace the drive? > > thx > -VH _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From jesse-carroll at usa.net Thu Sep 20 15:42:03 2007 From: jesse-carroll at usa.net (JESSE CARROLL) Date: Thu, 20 Sep 2007 15:42:03 -0400 Subject: SUMMARY (sort of): sudo hangs looking for /net/root.sh Message-ID: <998LiTTpD5908S23.1190317323@cmsweb23.cms.usa.net> Thanks to those who quickly responded, especially Matthew Stier and Francisco Roque who suggested looking at the /net automount. Disabling autofs allowed the sudo command to finish as anticipated, but that is not a real solution as I use /net to access other systems without going through NFS mount bother. I tested several levels of 1.6.9 and all had the same issue. The latest, 1.6.8p9, does not have this issue and does not lstat lots of things for root.sh. Therefore, the program was not hacked and does not need a recompile. The lstat for root.sh must be a new "feature" for 1.6.9. So I'm going to use 1.6.8 for now. JC ------ Original Message ------ Received: Thu, 20 Sep 2007 03:10:07 PM EDT From: "JESSE CARROLL" To: Subject: sudo hangs looking for /net/root.sh Situation: Sol 10 - 0807 on SPARC Sudo version 1.6.9p5 from sunfreeware.com As any valid sudo user, including root, run: 'sudo ls' (or any other command) Command hangs a bit, but completes. If same command run immediately after first completes, no hang. If run after a bit (at least 15 seconds) hangs again. Truss of sudo shows a long pause running lstat for /net/root.sh. Any ideas? Base time stamp: 1190314826.5460 [ Thu Sep 20 19:00:26 GMT 2007 ] 0.0000 execve("/usr/local/bin/sudo", 0xFFBFFE8C, 0xFFBFFE98) argc = 2 0.0500 getdents64(5, 0xFF2F4000, 8192) = 664 0.0503 lstat("/lost+found/root.sh", 0xFFBFC2D8) Err#2 ENOENT 0.0505 lstat("/var/root.sh", 0xFFBFC2D8) Err#2 ENOENT 0.0507 lstat("/usr/root.sh", 0xFFBFC2D8) Err#2 ENOENT 0.0510 lstat("/etc/root.sh", 0xFFBFC2D8) Err#2 ENOENT 0.0512 lstat("/bin/root.sh", 0xFFBFC2D8) Err#2 ENOENT 0.0514 lstat("/dev/root.sh", 0xFFBFC2D8) Err#2 ENOENT 0.0516 lstat("/lib/root.sh", 0xFFBFC2D8) Err#2 ENOENT 0.0518 lstat("/mnt/root.sh", 0xFFBFC2D8) Err#2 ENOENT 0.0520 lstat("/opt/root.sh", 0xFFBFC2D8) Err#2 ENOENT 0.0522 lstat("/proc/root.sh", 0xFFBFC2D8) Err#2 ENOENT 0.0524 lstat("/sbin/root.sh", 0xFFBFC2D8) Err#2 ENOENT 0.0527 lstat("/system/root.sh", 0xFFBFC2D8) Err#2 ENOENT 0.0529 lstat("/tmp/root.sh", 0xFFBFC2D8) = 0 0.0531 lstat("/platform/root.sh", 0xFFBFC2D8) Err#2 ENOENT 0.0533 lstat("/kernel/root.sh", 0xFFBFC2D8) Err#2 ENOENT 0.0535 lstat("/devices/root.sh", 0xFFBFC2D8) Err#2 ENOENT 0.0537 lstat("/export/root.sh", 0xFFBFC2D8) Err#2 ENOENT lstat("/net/root.sh", 0xFFBFC2D8) (sleeping...) 30.0715 lstat("/net/root.sh", 0xFFBFC2D8) Err#2 ENOENT 30.0731 lstat("/home/root.sh", 0xFFBFC2D8) Err#2 ENOENT 30.0744 lstat("/vol/root.sh", 0xFFBFC2D8) Err#2 ENOENT 30.0747 getdents64(5, 0xFF2F4000, 8192) = 0 _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From Szabadkai.Eva at malev.hu Fri Sep 21 04:13:15 2007 From: Szabadkai.Eva at malev.hu (=?ISO-8859-1?Q?Szil=E1gyin=E9_Szabadkai_=C9va?=) Date: Fri, 21 Sep 2007 10:13:15 +0200 Subject: SUMMARY:tool to show I/O stats on a per-process basis Message-ID: Special thanks to Francisco Roque for his prompt answer and solution and to Durren Dunham Roberto Fratelli Matthew Darcy They offered me Brendan Gregg tools for Solaris9. http://www.brendangregg.com/psio.html http://www.brendangregg.com/Perf/paper_diskubyp1.pdf http://www.brendangregg.com/k9toolkit.html It was just what I needed. I tried psio and prusage and found the poorly written application that caused I/O bottleneck. After restarting those processes there was no io wait at all on that filesystem. Original question: ============= Hi Gurus, I need a tool to show I/O stats on a per-process basis on Solaris 9. I'd like to identify how much I/O each process uses to find the program causing I/O bottleneck. Best Regards, Eva _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From raindoctor at gmail.com Fri Sep 21 17:42:37 2007 From: raindoctor at gmail.com (Pedro Espinoza) Date: Fri, 21 Sep 2007 17:42:37 -0400 Subject: SUMMARY: nohup Message-ID: Thanks to Steve Edberg, Edward Scown, Michael Maciolek. The issue is resolved. I changed /usr/bin/sparcv9/nohup to /usr/bin/sparcv9/nohup.old, and it is picking up /usr/bin/nohup. Thanks again. _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From kumaravelk.k at gmail.com Mon Sep 24 06:11:10 2007 From: kumaravelk.k at gmail.com (Kumaravel K) Date: Mon, 24 Sep 2007 15:41:10 +0530 Subject: [SUMMARY] Permission for /dev/rdsk for oracle Message-ID: <607368490709240311j294a94a3qc9a86f62655e12a4@mail.gmail.com> Hi All, This are the steps I followed and the problem solved First i have done chown oracle:dba /dev/rdsk/c2t50060E800043A031d5s* chown oracle:dba /dev/dsk/c2t50060E800043A031d5s* and secondly i repartitioned the harddisk leaving the first 50 cylinders of the diks free , and it starting working for me. Thanks & Regards, Kumaravel K _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From Bruce.Shaw at gov.ab.ca Fri Sep 21 11:23:37 2007 From: Bruce.Shaw at gov.ab.ca (Bruce Shaw) Date: Fri, 21 Sep 2007 09:23:37 -0600 Subject: SUMMARY: nfs mounting to yourself In-Reply-To: References: Message-ID: Several people mentioned symbolic links. I should have mentioned that I tried that already and the app was ignoring that and using the full path which, of course, it hated. One suggested automount, which I think I tried without success, same issue. Several others suggested lofs mounts, which worked. Revised vfstab entry... ########################################### #foo:/blah/boo/biff/bopp/bailey/babelfish - /gahgah nfs 3 yes soft,bg # no, previous entry doesn't work anymore use lofs mount instead /blah/boo/biff/bopp/bailey/babelfish - /gahgah lofs 3 yes - ########################################### Thanks to: Peter Jakobi Deborah Crocker Peter Winterflood Anthony D'Atri Francisco Roque Bill R. Williams ########### Original entry (irrelevant stuff removed) ########## > Bruce Shaw wrote: > I have a situation with an application that won't read looooooooonnng > paths. There's nothing I can do about that piece, get over it. > > Deep in the mists of time, as a workaround, someone struck upon the idea > of nfs mounting at a lower place in the tree. > > Here's what I mean. > > server = foo > loong directory = /blah/boo/biff/bopp/bailey/babelfish > alternate mount = /gahgah > > /etc/dfstab entry > > ########################################### > share -F nfs -o rw=foo:bar,root=foo:bar /blah > ########################################### > > /etc/vfstab entries > > ########################################### > /dev/md/dsk/d20 /dev/md/rdsk/d20 /blah ufs 2 yes > logging > foo:/blah/boo/biff/bopp/bailey/babelfish - /gahgah nfs 3 yes soft,bg > ########################################### > > relevant output of "mount" > > ########################################### > /blah on /dev/dsk/c0t0d0s6 > read/write/setuid/intr/largefiles/logging/onerror=panic/dev=1d80076 on > Sun Sep 16 01:28:58 2007 > ########################################### > > relevant output of "share" > ########################################### > /blah rw=bar:booboo:yogi,root=bar:booboo:yogi > ########################################### > > which matches what is /etc/dfs/sharetab. > > End of system configuration: > > Discussion: > > OK that's just plain weird. server "foo" isn't on the list and two > other servers are. They were shut off two years ago and we've rebooted > since then. > > I can't unshare /blah 'cause people on "bar" are using it. > > How can I get the sharing of /blah sorted out? > > "exportfs -a" didn't help. This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From ahoesch at smartsoft.de Mon Sep 24 07:20:55 2007 From: ahoesch at smartsoft.de (=?ISO-8859-1?Q?Andreas_H=F6schler?=) Date: Mon, 24 Sep 2007 13:20:55 +0200 Subject: Summary: Refreshing ARP cache In-Reply-To: <46F79C00.3050203@us.fujitsu.com> Message-ID: <377F2F2E-6A90-11DC-8185-000393CA0072@smartsoft.de> Hi all, thanks a lot to "Matthew Stier" Tom Crummey The response was: > Dynamic entries have a Time-To-Live of 180 seconds. So we will just wait 3 minutes: :-) Regards, Andreas >> we are getting a new router today. Since the MAC address of the >> router will change I don't expect routing to work immediately after >> replacing the router. I know the ARP cache can be shown with >> >> arp -a >> >> and that we can manually delete the entry for the router with "arp -d >> ". However, this can only be done as root and nobody with >> root privileges will have access to the machine after the router was >> replaced (until routing works again). Can I write a script that can >> be called by a non-root user to do that? How long will it take for >> the arp cache to get aware of the new MAC address if we do nothing >> and simply wait? _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From jordir at fib.upc.edu Tue Sep 25 10:10:55 2007 From: jordir at fib.upc.edu (jordir at fib.upc.edu) Date: Tue, 25 Sep 2007 16:10:55 +0200 Subject: SUMMARY: memory is not released on sun fire 280R In-Reply-To: <46EE9AD2.2000508@fib.upc.edu> References: <46EE9AD2.2000508@fib.upc.edu> Message-ID: <46F916EF.3080501@fib.upc.edu> Thanks for tons of responses. Next, my summary. There are some possible causes and ways of resolution: 1) It's normal behaviour. I'd need more memory. 2) There is a memory leak, and I must monitorize system when it crashes to know which process is failing. 3) There is a memory leak, due to Oracle. Tunning oracle settings /etc/system. 4) There is a memory leak, due ncsd (solaris bug). Install existing patch. In my case, cause has been option 4: a memory leak by ncsd. I've fixed the problem with a patch: 110710-02. Now, system doesn't use so memory. Memory doesn't decreases.It goes up and down. Jordi Renye Thanks again, Next, it follow answers. Answer ------------------------ If you do not have memory leaking apps then it is quite normal for solaris OS, do not worry. it is got allocated into internal buffers and will be reclaimed back by processes when they need it. Read up sun's "solaris memory management" for more info. Answer ------------------------ this is normal. the os manages memory. linux is the same. windows reports memory usage differently. this is in the doucmentation and on the web. Answer ----------------------- This is normal Solaris behavior. Any memory not used by processes is used for file caching. It is made available to processes if there is need. See http://groups.google.com/group/comp.unix.solaris/browse_thread/thread/6878f1f5c68785bb/7fda160bcee2a96d?lnk=st&q=solaris+vmstat+sr+values&rnum=3#7fda160bcee2a96d for a discussion on this by Scott Howard. It is probable the URL above will be split into multiple lines by various things along the email path, so you may have to reconstruct it. A portion is pasted below in case you are unable to get to google groups. ------------------------ Answer t looks like you have an application that is not freeing freeing memory. Try running "top" to identify hte offending application -- if you don't have "top" installed, run prstat. ------------------------ Answer Suggest using prstat or top to identify which process has the memory leak. ------------------------ Answer Knowing that memory is in use doesn't do you much good, does it? You'll need to find out what process or processes are using that memory. You might want to collect 'ps' information, especially the 'vsz' and 'rss' fields. Presumably one or more processes is not releasing memory. ------------------------ Answer Try to identify which process is consuming most of your memory. Try 'prstat' or maybe # ps -eo pmem,pid,args I don't believe in a misbehavior from your Solaris Box. The culpirit can be an application/database you're running... ------------------------ Answer Two things: Change you shmmax and also change the stack size for Oracle. Each instance is demanding over 700MB of memory, you can change that to 256 and see if that helps ------------------------ Answer There was an old bug with nscd when running oracle which caused a memory leak. Check the size of nscd in your process listings. If it's more that a few Mb in size after restarting then you need to modify the nscd.conf file to stop it caching user attr. ------------------------ Answer I'd definitely reduce shmsys:shminfo_shmmax to a number which is less than the amount of physical RAM you have on the machine. ------------------------ Answer You definitely have a memory leak, now you need to find the process that's responsible for it. Replace your monitor process with something like this, run (say) every 30 minutes from cron: #!/bin/sh PATH=/bin:/usr/bin; export PATH umask 022 logfile=`date '+/var/log/memleak/%Y%m%d/%H%M'` d=`dirname $logfile` mkdir -p $d ps -efly > $logfile exit 0 Keep an eye on the RSS and SZ fields in these logfiles. Some program is growing continuously without releasing any memory, and that's what you need to fix. ------------------------ Answer What else is running - it seems that you have some application with a memory leak - run Top for a while (set the seconds to refresh to something like 30) and you should see the memory hog. ------------------------ First post to list jordir at fib.upc.edu wrote: > Dear sirs, > > We have two servers Sun Fire 280R with Solaris 8 with same problem: > server are not releasing memory. > > For example, at Listing 1, we can seee how free memory always are > decreasing > but never increasing. > > Problem is that when server is up during several days, there is small > memory to work, and server is freezed. Not crashed, but I must > reboot pushing reset button. > > In Listint 2, we have a monitor process, that shows free memory before > freeze moment. > > We have patched system with lattest Solaris 8 Recommended. > > Thanks in advanced. > > Jordi Renye > Facultat Informatica Barcelona - Universitat Politecnica Catalunya > (Faculty of Computer Science) > Catalonia - Spain > > Listing 1 > ====== > Memory: 2048M real, 999M free, 828M swap in use, 4886M swap free > Memory: 2048M real, 610M free, 1191M swap in use, 4500M swap free > Memory: 2048M real, 666M free, 1151M swap in use, 4539M swap free > Memory: 2048M real, 651M free, 1164M swap in use, 4525M swap free > Memory: 2048M real, 660M free, 1154M swap in use, 4534M swap free > Memory: 2048M real, 614M free, 1196M swap in use, 4490M swap free > Memory: 2048M real, 582M free, 1203M swap in use, 4482M swap free > Memory: 2048M real, 645M free, 1157M swap in use, 4528M swap free > Memory: 2048M real, 633M free, 1159M swap in use, 4525M swap free > Memory: 2048M real, 608M free, 1181M swap in use, 4503M swap free > Memory: 2048M real, 611M free, 1177M swap in use, 4506M swap free > Memory: 2048M real, 620M free, 1158M swap in use, 4524M swap free > Memory: 2048M real, 609M free, 1167M swap in use, 4514M swap free > Memory: 2048M real, 573M free, 1201M swap in use, 4479M swap free > Memory: 2048M real, 608M free, 1160M swap in use, 4517M swap free > Memory: 2048M real, 606M free, 1160M swap in use, 4516M swap free > Memory: 2048M real, 579M free, 1160M swap in use, 4515M swap free > Memory: 2048M real, 594M free, 1169M swap in use, 4505M swap free > Memory: 2048M real, 599M free, 1164M swap in use, 4509M swap free > Memory: 2048M real, 598M free, 1164M swap in use, 4509M swap free > Memory: 2048M real, 596M free, 1166M swap in use, 4507M swap free > Memory: 2048M real, 594M free, 1166M swap in use, 4506M swap free > Memory: 2048M real, 591M free, 1169M swap in use, 4502M swap free > Memory: 2048M real, 593M free, 1166M swap in use, 4504M swap free > Memory: 2048M real, 592M free, 1166M swap in use, 4503M swap free > Memory: 2048M real, 592M free, 1164M swap in use, 4505M swap free > Memory: 2048M real, 587M free, 1169M swap in use, 4499M swap free > Memory: 2048M real, 588M free, 1165M swap in use, 4503M swap free > Memory: 2048M real, 565M free, 1187M swap in use, 4480M swap free > Memory: 2048M real, 523M free, 1227M swap in use, 4439M swap free > Memory: 2048M real, 556M free, 1191M swap in use, 4473M swap free > Memory: 2048M real, 559M free, 1188M swap in use, 4476M swap free > Memory: 2048M real, 548M free, 1198M swap in use, 4465M swap free > Memory: 2048M real, 565M free, 1179M swap in use, 4483M swap free > # > > Listing 2 > ====== > Memory: 2048M real, 18M free, 1162M swap in use, 3679M swap free > Memory: 2048M real, 19M free, 1125M swap in use, 3715M swap free > Memory: 2048M real, 18M free, 1125M swap in use, 3715M swap free > Memory: 2048M real, 15M free, 1128M swap in use, 3713M swap free > Memory: 2048M real, 18M free, 1126M swap in use, 3715M swap free > Memory: 2048M real, 20M free, 1126M swap in use, 3715M swap free > Memory: 2048M real, 19M free, 1127M swap in use, 3714M swap free > Memory: 2048M real, 18M free, 1127M swap in use, 3714M swap free > Memory: 2048M real, 15M free, 1127M swap in use, 3714M swap free > Memory: 2048M real, 18M free, 1127M swap in use, 3714M swap free > Memory: 2048M real, 19M free, 1127M swap in use, 3714M swap free > Memory: 2048M real, 16M free, 1127M swap in use, 3714M swap free > Memory: 2048M real, 14M free, 1127M swap in use, 3714M swap free > Memory: 2048M real, 16M free, 1127M swap in use, 3714M swap free > Memory: 2048M real, 17M free, 1126M swap in use, 3714M swap free > Memory: 2048M real, 17M free, 1129M swap in use, 3712M swap free > Memory: 2048M real, 15M free, 1128M swap in use, 3713M swap free > _______________________________________________ > sunmanagers mailing list > sunmanagers at sunmanagers.org > http://www.sunmanagers.org/mailman/listinfo/sunmanagers > ---------------------------------------------------------- Second post to list Dear sirs, Perhaps, I must tell it before. We have running Oracle 9i on this server. Next follows output from prstat -U oracle9i PID USERNAME SIZE RSS STATE PRI NICE TIME CPU PROCESS/NLWP 1244 oracle9i 17M 6776K sleep 58 0 0:00.00 0.0% tnslsnr/1 1218 oracle9i 765M 721M sleep 59 0 0:00.00 0.0% oracle/1 1216 oracle9i 765M 721M sleep 58 0 0:00.00 0.0% oracle/1 1220 oracle9i 765M 723M sleep 58 0 0:00.00 0.0% oracle/1 1222 oracle9i 766M 719M sleep 58 0 0:00.00 0.0% oracle/1 1210 oracle9i 771M 720M sleep 59 0 0:00.00 0.0% oracle/11 1212 oracle9i 767M 720M sleep 58 0 0:00.00 0.0% oracle/11 1206 oracle9i 766M 720M sleep 59 0 0:00.00 0.0% oracle/1 1214 oracle9i 765M 722M sleep 58 0 0:00.00 0.0% oracle/1 1224 oracle9i 765M 719M sleep 59 0 0:00.00 0.0% oracle/1 1208 oracle9i 769M 722M sleep 59 0 0:00.00 0.0% oracle/18 Perhaps, we have setting better shmsys:shminfo_shmmax variable: set shmsys:shminfo_shmmax=4294967295 because we have only 2Gbytes of RAM. I thought there was a problem specific to Sun fire 280R, because we have two servers that failed. The other server, runs INFORMIX, but in that case variable shmsys:shminfo_shmmax is next: shmsys:shminfo_shmmax=268435456 where server has 2Gbytes too. Is this the problem I suffering? Thanks again. ---------------------------------------------------------- _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From sbedberg at ucdavis.edu Thu Sep 27 04:55:12 2007 From: sbedberg at ucdavis.edu (Steve Edberg) Date: Thu, 27 Sep 2007 01:55:12 -0700 Subject: SUMMARY (UPDATED): V880 third-party/big disk question Message-ID: (Update at bottom; original summary dated 12 sep 2007. Quick updated summary summary: it works) ================== ORIGINAL QUESTION: ================== I have inherited a V880 (no service contract or warranty) with 6x36GB drives. I have limited funds to expand storage space, so I cannot purchase drives from Sun, nor can I add a second drive cage. I'd like to replace some of the existing drives with larger ones, and I checked the Sun-supplied models here: http://sunsolve.sun.com/handbook_pub/Systems/SunFire880/components.html My questions are: (1) Has anyone successfully replaced Sun-supplied drives with matching drives from a third-party vendor? I haven't found a good answer to whether Sun replaces firmware; I did find a mention in the release notes - http://docs.sun.com/source/806-6593-19/dak_RR_relnotes.html - that they required a certain minimum firmware level, but it's unclear as to whether this is Sun or manufacturer firmware. (2) Has anyone used third-party 300GB FCAL drives in a V880? For example, the Fujitsu MAW3300FC, which is the 300GB version of the MAW3147FC that Sun supplies. ================ ADDITIONAL INFO: ================ I should have added for clarity that the V880 uses FCAL drives. Of the systems mentioned below, all (E250, V440, and A1000) are SCSI. I would think that good experiences with third-party SCSI drives would carry over to FCAL, but certainly not 100% sure. ========== RESPONSES: ========== Thanks to: Ric Anderson Matthew Stier Chris Hoogendyk joe fletcher Markus Mayer ---------------------------------------------------------- My usual solution to this is get Sun badged drives from a VAR that gets lease returns like http://www.dmgi.net or some place similar. The tricky part about microcode on disks is that really odd hangs and other nasties happen when the drives have differing microcode. The only microcode upgrades I've ever had access too came as Sun "patches" which booted standalone and then reflashed all the drives. ---------------------------------------------------------- (from a us.fujitsu.com address) Yes, since Sun Microsystems resells the drives with their own part number on it, and since they do sell enough of them, drive manufactures do work with them, and will ship drives to Sun with custom firmware installed. This "tweaked" firmware isn't intended to make the drives proprietary to Sun, but is usually done to resolve some problem that Sun Microsystems has detected between the drive and it's systems. These tweaked drives can have problems in environments they were not intended for. One well known case, is some first generation 20GB drives for the Ultra-10 had problems, and Sun Microsystems worked with Seagate and tweaked the firmware. The result, is a drive that would fine on all non-Windows systems. If used on a system running Win2k or WinXP, the drive size function call would return the wrong value, and Windows would think it was an 8GB drive. Since you have no support on this system, you are free to do as you wish, but only you will pay the consequences, and if you later choose to place the system under some support contract, that will be between you and your vendor. ---------------------------------------------------------- We routinely get seagate cheetah scsi drives for our E250's. We have to get a spud to mount them. We've found those relatively inexpensively online. I don't have a V880 yet, but we are in line to inherit a couple of hand-me-downs. I've already researched the seagate cheetah fcal drives and found that they should work and that the same spuds should work. We've had almost no failures of our drives in many machines over the past few years. We get our drives from Insight and get university pricing from them. ---------------------------------------------------------- Should work fine. Not sure where you are based but in Europe have a word with ww.transtec.co.uk and they will sell you some nice cheap branded drives in suitable carriers for a third of what SUN will charge you. ---------------------------------------------------------- I can't talk for the V880, however from experience with a V440, putting in larger third party disks was no problem. We replaced our 73G disks with 146G disks and there was no problem. Just remember to do a reconfiugure reboot with the new disks, and devfsadm to clean the tree. Additionally, we have a E3500 with an A1000 where we did similar, again no problem. ==================== RESOLUTION (so far): ==================== I have a request in with DMGI for 4x147GB drives, but I suspect even that might be more than what I can spend right now. As far as 300GB drives, I don't want to push my luck with something Sun doesn't supply for the V880, plus the 147GB drives are more cost-effective. I'm currently leaning towards 4 147GB Fujitsu drives from a third party (I already have the mounting hardware) and if necessary doing a firmware upgrade. I verified that I can access the disk firmware patch for at least the Fujitsu MAW3147FC drives I'm looking at. Hopefully, as Sun resells that model, I'll have good luck and won't need to flash the drives. The caveat from Fujitsu above mentioned problems with Sun-tweaked drives in non-Sun environments, and since I'm on a V880 with Solaris 10, that doesn't apply. ====================== UPDATE (as of 27 sep): ====================== I received the 4 Fujitsu MAW3147FC drives this morning, and replaced the old 36GB Sun/Seagate drives. I did not flash the drives with new firmware. After a devfsadm -c disk, all drives were recognized. After labelling, I zpool'ed and zfs'ed without a hitch. I did a quick test using dd to create several GB of files, then did a zpool scrub, copied some files to and from other filesystems and diff'ed them - no errors detected. Everything seems to be A-OK and I now have a new 401GB RAIDZ1 pool. FYI, here's the revision levels: # prtconf -V OBP 4.5.6 2002/01/04 12:30 # uname -a SunOS pgfsaturn 5.10 Generic_118833-36 sun4u sparc SUNW,Sun-Fire-880 format -> inquiry reported for all four new drives: FUJITSU MAW3147FC Revision 0102 I haven't ventured into the realm of 300GB FC drives and probably won't. I would need a second disk backplane for the V880, to begin with. And on a mostly-unrelated note, ZFS is really cool. - steve edberg -- +--------------- my people are the people of the dessert, ---------------+ | Steve Edberg http://pgfsun.ucdavis.edu/ | | UC Davis Genome Center sbedberg at ucdavis.edu | | Bioinformatics programming/database/sysadmin (530)754-9127 | +---------------- said t e lawrence, picking up his fork ----------------+ _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From mymaillists at gmx.at Thu Sep 27 11:16:24 2007 From: mymaillists at gmx.at (Markus Mayer) Date: Thu, 27 Sep 2007 17:16:24 +0200 Subject: SUMMARY: nfs mounts, file owners and groups problem In-Reply-To: <200709261339.08191.mymaillists@gmx.at> References: <200709261339.08191.mymaillists@gmx.at> Message-ID: <200709271716.24948.mymaillists@gmx.at> Thank you to all who replied, in the end 16 people. I am very grateful for all your suggestions! The replies varied regarding the strategy to get the job done: - taring in 2gb chunks, scp the chunks, untar - a perl script defining getperm and setperm, run over the whole fs - check for matching userids in etc/passwd (made no difference) - use ufsdump (no chance to mount ro, or unmount because of time) - use scp -rp, (fails to preserve owner/group over network) - use rsync with public key authentication (this worked! Danke Jan) - share the fs with the options anon=0, root= - mount the share with the option vers=3 if I am on Solaris 10 (I am) I had already been sharing the fs with the root= option, however on a handfull of userid's, this was seen on the client side as nobody. I added the anon=0 option, however this made no difference. I also added the problem userid's to /etc/passwd on the client system with no change in behaviour. The behaviour is very odd for me, as it seems that what I was doing with nfs should have worked. I will have to spend more time on this issue as it will come up in the future again under other circumstances. Jan D. pointed out that rsync should work, however I was obviouly doing it in a far too complicated manner - setting up an rsync server, then rsyncing through that. His suggestion was to use key authentication, and # rsync -e ssh -aHvp S1:/path/to/copydir S2:/copy/me/here/ This got me out of trouble for now. Thanks again to everyone who replied. regards Markus On Wednesday 26 September 2007, Markus Mayer wrote: > Hello all, > > I need to transfer a large amount of data (about 730Gb) from one machine to > another and am not able to take anything off line. As an rsync > client/server setup doesn't preserve the file ownership and groups at all, > I am trying to do it using an nfs share. This method is also running into > problems. > > I have a share on one machine, set up with the following command: > S1# share -F nfs -o ro=,root= /share/location > On the second machine, I can mount the share using: > S2# mount -F nfs-o ro :/share/location /mnt/remoteserver > > The problem I run into is that on the first machine, files have thier owner > and group, however on the nfs mount on the second machine, often the owner > is changed to nobody. An example of such a file is: > S1# ls -ln /share/location/dir1/afile > -rw-rw-r-- 1 206 201 1348 Sep 11 2006 afile > On the second machine however, I get: > S2# ls -ln /mnt/remoteserver/dir1/afile > -rw-rw-r-- 1 60001 201 1348 Sep 11 2006 afile > > There does seem to be some consistency in this behaviour, all be it > strange. All files on S1 with owner root have their ownership seen as > nobody on S2. For other files, if the file owner on S1 has id 206, the > owner is seen as nobody on S2, however if the owner is 205 or 207, the > owner is preserved. On S1, there is an user entry for id 206, so I put > that id on S2, however with no change in behaviour for ownership > preservations. > > I'm at an absolute loss as to what's happening here and would be grateful > for any help anyone can give me. > > regards > Markus > _______________________________________________ > sunmanagers mailing list > sunmanagers at sunmanagers.org > http://www.sunmanagers.org/mailman/listinfo/sunmanagers _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From aad at beak.org Thu Sep 27 16:27:59 2007 From: aad at beak.org (Anthony D'Atri) Date: Thu, 27 Sep 2007 13:27:59 -0700 Subject: SUMMARY: Obviating the NFS4 domain question at first / jumpstart boot In-Reply-To: <68D897A3-99C1-477F-86E9-BE7AB302CCB7@beak.org> References: <68D897A3-99C1-477F-86E9-BE7AB302CCB7@beak.org> Message-ID: My question: > It used to be that one could forestall the > > Do you need to override the system's default NFS version 4 > domain > name (yes/no) ? [no] : > > prompt at first boot after jumpstarting a host by touching /a/ > etc/.NFS4inst_state.domain in the finish script. I've found that > lately (ie., Solaris 10u3 x86) this doesn't seem to work. I've found > a claim that this check has moved into the sysconfig framework and > that setting nfs4_domain=dynamic in the sysidcfg file (Sysids/e1000g0/ > sysidcfg) will now accomplish this, but find that this doesn't work > for me either. The server has a recent recommended patch bundle, and > the jumpstart package tree is right off the u3 media. > > Any thoughts on how to recover this functionality? It would be great > to once more have jumps run to completion without intervention. The winning answer, which works like a charm on my u3 systems: From: "Michelle Bradshaw" In addition to touching /etc/.NFS4inst_state.domain, you'll want to also have /etc/.sysidconfig.apps and /etc/.sysIDtool.state: # cat etc/.sysidconfig.apps /usr/sbin/sysidnfs4 /usr/sbin/sysidpm /lib/svc/method/sshd /usr/lib/cc-ccr/bin/eraseCCRRepository # cat etc/.sysIDtool.state 1 # System previously configured? 1 # Bootparams succeeded? 1 # System is on a network? 1 # Extended network information gathered? 1 # Autobinder succeeded? 1 # Network has subnets? 1 # root password prompted for? 1 # locale and term prompted for? 1 # security policy in place vt100 _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From romeotheriault at gmail.com Thu Sep 27 17:06:34 2007 From: romeotheriault at gmail.com (Romeo Theriault) Date: Thu, 27 Sep 2007 17:06:34 -0400 Subject: SUMMARY: Recommended patch strategy Message-ID: <46cd475b0709271406v466cb6fchb81bc302733b9e9e@mail.gmail.com> Thank you all for your prompt answers to my question of patching Solaris Systems. The majority of replies to my question pointed me to a non-Sun based tool called Patch Check Advanced or PCA for short. It's web-page is located at: http://www.par.univie.ac.at/solaris/pca/ The next most popular patching method is to periodically apply Sun's Recommended Patch Cluster and in between Patch Clusters watching the Sun Security Alert newsletter for any critical patches that should be applied. After looking at both solutions I highly recommend PCA, though I think I'll use the Recommended Patch Cluster to bring our systems up to speed and then use PCA to stay on top of things. PCA is also a great tool to just tell you which patches you are missing. Perfect for a weekly cron job. Thank you again, -- Romeo Theriault _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From kkkong at ee.cuhk.edu.hk Wed Sep 26 21:56:42 2007 From: kkkong at ee.cuhk.edu.hk (Alan Kong) Date: Thu, 27 Sep 2007 09:56:42 +0800 Subject: INGRESLOCK - Could it be someone trying to attack - Summary In-Reply-To: <46F8CDCD.6020307@ee.cuhk.edu.hk> References: <46F8CDCD.6020307@ee.cuhk.edu.hk> Message-ID: <46FB0DDA.70305@ee.cuhk.edu.hk> Dear All, Thank you for your advise and help: -Casper (Casper.Dik at Sun.COM) - joe_fletcher at btconnect.com - Ric Anderson (ric at opus1.com) - JayJay Florendo (arflorendo at gmail.com) Summary: 1) "It's just a coincidence; the system has used port 1524 (ingreslock) to connect to your SPARC"; 2)"There used to be a standard hack years ago against the ingreslock port on solaris. Thought it was well patched by now though."; 3)"Check /etc/inet/services (and make sure /etc/services is a symbolic link to /etc/inet/services) for INGRESLOCK." 4) "Look at the source and dest IPs, If you don't recognize them, you may be under attack." I agree that it was just a coincidence that port 1524 was used to connect to the Sparc. The Sun Sparc has up-to-date patch and nothing abnormal was observed for the last few days. Regards Alan Alan Kong wrote: > Dear Managers, > The following was observed when I ran "snoop" on a Sun sparc workstation > runnning Solaris 8. I was connecting to the work station using ssh from > a PC at that moment: > 1 0.00000 137.189.3.6 -> cus12.cuhk.edu.hk INGRESLOCK R port=22 > 2 0.00006 cus12.cuhk.edu.hk -> 137.189.3.6 INGRESLOCK C port=22 > 3 0.32806 137.189.3.6 -> cuees12.cuhk.edu.hk INGRESLOCK R port=22 > 4 0.53146 cus12.cuhk.edu.hk -> 137.189.3.6 INGRESLOCK C port=22 > ..... > 194 0.00006 cus12.cuhk.edu.hk -> 137.189.3.6 INGRESLOCK C port=22 \203/n > \305;=\f\357)?\320=\342z\4\342f\315rJ > > I have searched on Googles and some mentioned "INGRESLOCK" indicated > someone tried to hack but it doesn't mean I have been exploited. Could > you please help to confirm that the machine was not exploited. > > Thank you. > > Regards > Alan > _______________________________________________ > sunmanagers mailing list > sunmanagers at sunmanagers.org > http://www.sunmanagers.org/mailman/listinfo/sunmanagers _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From stepchung at gmail.com Fri Sep 28 20:20:12 2007 From: stepchung at gmail.com (Stephanie C) Date: Fri, 28 Sep 2007 17:20:12 -0700 Subject: SUMMARY ssh/ftp Solaris Slowness Message-ID: <6bdfa8ce0709281720n914f6cbuec06f6c62b1009e0@mail.gmail.com> Thank you very much for all the helps I got from all of you. The problem was this IP subnet was not in the DNS record. I asked the DNS gentlement to add this IP subnet into DNS and everything is working. Thanks again. Stephanie C wrote: > Hi List, > > Issue: With some reasons the ssh and ftp are very slow to connect to my > solaris 10 (Sun 280R) server form some of network VLAN. If user tries to > connect ssh to this server from 216.64.x.x IP address, it takes forever to > connect. Connetion from other IP addresses are very fast. Fingers pointing > here, Server Admin <---> Network. I say it is network's problem, network > says server's problem. Do you have any idea where to look on my server for > this issue. Thanks for your help. > > Stephanie _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers