From frisco at blackant.net Thu May 1 12:19:39 2008 From: frisco at blackant.net (francisco roque) Date: Thu, 1 May 2008 12:19:39 -0400 (EDT) Subject: SUMMARY: Network issue in Solaris 10 update 4 Message-ID: No resolution to the issue, but we've found some work-arounds, and here are some answers to suggestions i've received (thanks for all the suggestions!), plus some more info: - Neither ipmp nor ipf are enabled on the machines with issues. No other firewall is present. - I get timeouts even when the two machines are in the same subnet. - I've re-verified that when both the switch and the server are set to auto-negotiate, they are appropriately configured the same. Problems still persist. - We've tried hard-setting the switch and a server to 1000/full duplex and 100/full duplex and still have problems. - `netstat -i` reports no errors or collisions. - I am using `ping` for most of my testing, but ssh sessions also time out and http connections hang. - If i ping the 10u4 server while simultaneously pinging anything else *from* the 10u4 server, then my ping rates drop to 1% packet loss. - only changes i've read about to networking are the DAD changes, and unfortunately the designers decided not to allow us to turn off DAD. - placing the server behind our pix firewall, running in transparent mode, problem persists. - placing the server behind our pix firewall, running in nat mode, problem disappears. The production machines in question were eventually going behind the pix, so for now we have a workaround - keep them behind the pix and away from whatever is downing u4/5 on our network. Once we get more time we'll try to troubleshoot the issue further to look for a real solution - for now project time limits require the workaround to be enough. It really feels like a mac cache issue but it's strange that it only affects u4/5 and that u3 in the same physical/logical setup is fine. Thanks for all your help & suggestions, -f http://www.blackant.net/ _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From ruhnke at us.ibm.com Sun May 4 17:35:14 2008 From: ruhnke at us.ibm.com (Chris Ruhnke) Date: Sun, 4 May 2008 16:35:14 -0500 Subject: SUMMARY: sudo: cannot open socket: Invalid argument Message-ID: Multiple responses, but none of them hit the target. Indeed the problem turned out to be related to the libsocket.so.1 in the /usr/local/lib directory. There was no LD_LIBRARY_PATH defined so this must be one of the "default" searches. When I removed this entry by renaming it, sudo began to work and mapped the socket library in /usr/lib. I have no idea where the local version of the socket library came from. I will leave things as they are and see if anyone complains. Chris Ruhnke IBM SMB Mid-Range Server Support ----- Forwarded by Chris Ruhnke/St Louis/IBM on 05/04/2008 04:21 PM ----- Chris Ruhnke/St Louis/IBM 05/02/2008 09:56 AM To sunmanagers cc Subject Update: sudo: cannot open socket: Invalid argument To all who have asked the obvious questions... - Yes, the file ownership is root:root - Yes, the setuid bit is on -- mod = ---s--x--x The checksums between working server and the non-working server match. Several folks made recommendations to check the load libraries and we may have something there! NON-WORKING: homer # ldd `which sudo` libpam.so.1 => /usr/lib/libpam.so.1 libdl.so.1 => /usr/lib/libdl.so.1 libsocket.so.1 => /usr/local/lib/libsocket.so.1 <--- libsocket.so.1 (SISCD_2.3) => (version not found) <--- libnsl.so.1 => /usr/lib/libnsl.so.1 libc.so.1 => /usr/lib/libc.so.1 libmp.so.2 => /usr/lib/libmp.so.2 WORKING: pollux# ldd `which sudo` libpam.so.1 => /usr/lib/libpam.so.1 libdl.so.1 => /usr/lib/libdl.so.1 libsocket.so.1 => /usr/lib/libsocket.so.1 <--- libnsl.so.1 => /usr/lib/libnsl.so.1 libc.so.1 => /usr/lib/libc.so.1 libmp.so.2 => /usr/lib/libmp.so.2 /usr/platform/SUNW,Ultra-Enterprise/lib/libc_psr.so.1 Note that the working server points the libsocket.so.1 library to the module in /use/lib while the failing server uses /use/local/lib. I also have no idea where the (SISCD_2.3) module comes from on the failing server. At least I have something to research now! Will summarize when I resolve. Chris Ruhnke IBM SMB Mid-Range Server Support Original posting: On Thu, 1 May 2008, Chris Ruhnke wrote: This is an unusual one, for me at least... Inherited server -- isn't that the was too many of these get started! # uname -a SunOS homer 5.6 Generic_105181-17 sun4m sparc SUNW,SPARCstation-10 Trying to run sudo and it doesn't start. Displays the message: # sudo -V sudo: cannot open socket: Invalid argument Have tried copying over a known good sudo image from another server allegedly running the exact same patch level of Solaris 5.6 and get the same results. Have searched the sunmanagers archives with no hits. Have Googled the web with no hits. Anybody have an idea what the problem might be? _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From ghenry at cmi.univ-mrs.fr Mon May 5 08:08:19 2008 From: ghenry at cmi.univ-mrs.fr (=?ISO-8859-1?Q?G=E9rard_Henry?=) Date: Mon, 05 May 2008 14:08:19 +0200 Subject: SUMMARY: st2530 attached to two T2000? In-Reply-To: <4817473C.5080402@cmi.univ-mrs.fr> References: <4817473C.5080402@cmi.univ-mrs.fr> Message-ID: <481EF8B3.7020608@cmi.univ-mrs.fr> especially thanks to scott Lawson for the discussion we had, Stefan Varga, Chris Hoogendyk and William Hathaway. My question wasn't precise, so if i resume, i have to do the following: - on first T2000, zfs pool is imported, ans remain accessible after reboots. The second T2000 doesn't import the pool. - Manually, if the first T2000 is stopped or crashed, i can import the zfs pool on the second T2000 This way is sufficent for me, the next step would be to install something like SunCluster It isn't possible to mount the zfs pool from the second T2000 read only my original post: > i have the following config: > - two T2000 with HBA SAS S10U3 > - st2530 > There is a zfs pool on st2530. The st2530 is attached to the two > T2000's. I can do: > "zfs import donnees" from first T2000 > then > "zfs export donnees" > and > "zfs import donnees" from second T2000 > But i don't know if it is possible to mount the pool read-write on the > first T2000 and read-only from the second T2000? > And what happens if the two T2000 reboot at the same time? > > thanks in advance, > > gerard > _______________________________________________ > sunmanagers mailing list > sunmanagers at sunmanagers.org > http://www.sunmanagers.org/mailman/listinfo/sunmanagers _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From sengork at gmail.com Mon May 5 13:35:39 2008 From: sengork at gmail.com (Sengor) Date: Tue, 6 May 2008 03:35:39 +1000 Subject: SUMMARY: IPMP Daemon flags Message-ID: <8417e52e0805051035k7a4ef951yeed2fa6b71b6f159@mail.gmail.com> It appears that in.mpathd's " -a " option is used to trigger alarming presumably using syslog. Thanks amigo. ---------- Forwarded message ---------- From: Sengor Date: Mon, May 5, 2008 at 1:03 AM Subject: IPMP Daemon flags To: sunmanagers at sunmanagers.org Hi colleagues, Anyone know what -a option to in.mpathd on Solaris 9 does? man page lists no options. Looks like it's an undocumented feature. Thank you. _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From lhecking at users.sourceforge.net Wed May 7 11:37:31 2008 From: lhecking at users.sourceforge.net (Lars Hecking) Date: Wed, 7 May 2008 16:37:31 +0100 (IST) Subject: SUMMARY: Stale NFS file handle In-Reply-To: <20080506210029.DCF6B4E9A7@cork.irdesign.cypress.com> References: <20080506210029.DCF6B4E9A7@cork.irdesign.cypress.com> Message-ID: <20080507153731.B88154ED02@cork.irdesign.cypress.com> Thanks to Sanjaya Srivastava and Aleks Feltin for their input. In the file handle log below, the first number should correspond to the nfs share dev entry from /etc/mnttab, and the fourth number to the inode of the file in question. I have not come to a resolution since the logged filesystem id is not in /etc/mnttab, even when I force all possible automounts. Searching all volumes one by one, I eventually found a matching inode, but the file hasn't been touched, and certainly not written to, in three months. NFS v4 may help, but I cannot enable it on the filer because we have too many clients which don't support it. Useful info: http://blog.thilelli.net/post/2007/03/07/Stale-NFS-File-Handle Lars Hecking writes: > Server is running Solaris 10, filer is a NetApp filer. How can I find out > which file is causing this? What do all the numbers after "file handle" > mean? I understand there's a filesystem id and inode numbers involved, > but none of the numbers appear in df -g output. Nothing is logged on the > filer. > > May 6 20:15:01 server nfs: [ID 626546 kern.notice] NFS write error on host filer: Stale NFS file handle. > May 6 20:15:01 server nfs: [ID 702911 kern.notice] (file handle: 29bc3300 81aa9200 20000000 62df01 7fee1c0f 5a304c3 40000000 36ccbf00) _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From stepchung at gmail.com Wed May 7 13:16:26 2008 From: stepchung at gmail.com (Stephanie C) Date: Wed, 7 May 2008 10:16:26 -0700 Subject: SUMMARY: How to create password in the script? Message-ID: <6bdfa8ce0805071016q280da324t521e9e6ddb3691a@mail.gmail.com> Thank you very much for all the responses. Here are couple options: - Use 'expect'. I have to learn this. - Use the following syntax within the script right after the 'useradd' line to add the password into /etc/shadow file: echo ${useracct}:`perl -e '$x=crypt('password','n${useracct}'); print $x'`:13798:::::: >> /etc/shadow This works fine, but the shadow file has two lines for one user. One line is the locked password and another has the added password line. I have to edit the shadow file to remove the locked password line. This is no can do. - Put a following line in the script right after the useradd line: passwd -u ${useracct} (this to unlock the account with a null password, users need to set the password at first login). I will go with this option for now. Thanks. Stephanie QUESTION: I have to create hundreds and hundreds (thousands) of user accounts on our solaris 10 servers. I have created a script to do so. The problem is, I don't want to set the password for these users by typing 'passwd' command for every one of them (take forever to do this). I know Linux's useradd command has an option '-p' to set the password, but not solaris. Is there a way to create a default password in the script when create user account? Here is my the useradd script: #!/usr/bin/ksh # 05/14/2006 # Author: # Script: user_add.sh # DIRECT="/export/home/its" GROUP="staff" while read useracct do useradd -d ${DIRECT}/${useracct} -g ${GROUP} -s /bin/ksh -m -k /etc/skel/ ${useracct} * passwd ${useracct} < /dmp/userpassfile.txt (NOT WORKING, IT PROMPTS FOR PASSWORD)* done < /dmp/useraccount.txt _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From stepchung at gmail.com Wed May 7 14:11:29 2008 From: stepchung at gmail.com (Stephanie C) Date: Wed, 7 May 2008 11:11:29 -0700 Subject: SUMMARY: How to create password in the script? In-Reply-To: <6bdfa8ce0805071040g52762a80v1ae8e1e7526d233c@mail.gmail.com> References: <6bdfa8ce0805071040g52762a80v1ae8e1e7526d233c@mail.gmail.com> Message-ID: <6bdfa8ce0805071111x500eeb21j18bfc73d21250f5f@mail.gmail.com> I forgot one more option: - Add the line: passwd -u ${useracct} right after the line 'useradd' to unlock password and set the password to null. Users need to set the password at first login. I select this option for now. Thanks. Stepahnie On Wed, May 7, 2008 at 10:40 AM, Stephanie C wrote: > Thank you very much for all the responses. Here are couple options: > > - Use 'expect'. I have to learn this. > - Use the following syntax within the script right after the 'useradd' > line to add the password into /etc/shadow file: > echo ${useracct}:`perl -e '$x=crypt('password','n${useracct}'); print > $x'`:13798:::::: >> /etc/shadow > This works fine, but the shadow file has two lines for one user. One line > is the locked password and another has the added password. > > QUESTION: > I have to create hundreds and hundreds (thousands) of user accounts on our > solaris 10 servers. I have created a script to do so. The problem is, I > don't want to set the password for these users by typing 'passwd' command > for every one of them (take forever to do this). I know Linux's useradd > command has an option '-p' to set the password, but not solaris. Is there a > way to create a default password in the script when create user account? > > Here is my the useradd script: > > #!/usr/bin/ksh > > # 05/14/2006 > > # Author: > > # Script: user_add.sh > > # > > DIRECT="/export/home/its" > > GROUP="staff" > > while read useracct > > do > > useradd -d ${DIRECT}/${useracct} -g ${GROUP} -s /bin/ksh -m -k > /etc/skel/ ${useracct} > > * passwd ${useracct} < /dmp/userpassfile.txt (NOT WORKING, IT PROMPTS FOR > PASSWORD)* > > done < /dmp/useraccount.txt _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From jesse-carroll at usa.net Thu May 8 08:32:51 2008 From: jesse-carroll at usa.net (JESSE CARROLL) Date: Thu, 08 May 2008 08:32:51 -0400 Subject: SUMMARY: Complilng VPNC Message-ID: <557meHmfz8634S01.1210249971@cmsweb01.cms.usa.net> Sorry about the delay, but it took a while. The real issue is not compiling vnpc. I got throught that. The real issue is the vpnc-script. The one that comes with vpnc 0.5.1 simply won't work with X86. It doesn't handle resolv.conf properly and doesn't setup the routing correctly. After some hacking and slashing I finally got a script that works (at least for me, your milage may vary). There are things in the script that possibly could be improved and things that could be deleted. #!/usr/bin/bash #* reason -- why this script was called, one of: pre-init connect disconnect #* VPNGATEWAY -- vpn gateway address (always present) #* TUNDEV -- tunnel device (always present) #* INTERNAL_IP4_ADDRESS -- address (always present) #* INTERNAL_IP4_NETMASK -- netmask (often unset) #* INTERNAL_IP4_DNS -- list of dns serverss #* INTERNAL_IP4_NBNS -- list of wins servers #* CISCO_DEF_DOMAIN -- default domain name #* CISCO_BANNER -- banner from server #* CISCO_SPLIT_INC -- number of networks in split-network-list #* CISCO_SPLIT_INC_%d_ADDR -- network address #* CISCO_SPLIT_INC_%d_MASK -- subnet mask (for example: 255.255.255.0) #* CISCO_SPLIT_INC_%d_MASKLEN -- subnet masklen (for example: 24) #* CISCO_SPLIT_INC_%d_PROTOCOL -- protocol (often just 0) #* CISCO_SPLIT_INC_%d_SPORT -- source port (often just 0) #* CISCO_SPLIT_INC_%d_DPORT -- destination port (often just 0) #set -x # =========== script (variable) setup ==================================== PATH=/sbin:/usr/sbin:$PATH OS="`uname -s`" DEFAULT_ROUTE_FILE=/var/run/vpnc/defaultroute RESOLV_CONF_BACKUP=/var/run/vpnc/resolv.conf-backup FULL_SCRIPTNAME=/usr/local/sbin/vpnc SCRIPTNAME=`basename $FULL_SCRIPTNAME` if ! [ -d "/var/run/vpnc" ]; then mkdir -p /var/run/vpnc fi MODIFYRESOLVCONF=modify_resolvconf_generic RESTORERESOLVCONF=restore_resolvconf_generic # =========== tunnel interface handling ==================================== do_ifconfig() { ifconfig "$TUNDEV" inet "$INTERNAL_IP4_ADDRESS" "$INTERNAL_IP4_ADDRESS" netmask 255.255.255.255 mtu 1412 up } # =========== route handling ==================================== # use route command get_default_gw() { # isn't -n supposed to give --numeric output? apperently not... # Get rid of lines containing IPv6 addresses (':') netstat -r -n | sed 's/default/0.0.0.0/' | sed 's/^.*:.*$//' | grep '^0.0.0.0' | awk '{print $2}' } set_vpngateway_route() { route add "$VPNGATEWAY" "$DEFAULTGW" } del_vpngateway_route() { DEFAULTGW=`cat $DEFAULT_ROUTE_FILE` route delete -host "$VPNGATEWAY" "$DEFAULTGW" } set_default_route() { DEFAULTGW="`get_default_gw`" echo "$DEFAULTGW" > "$DEFAULT_ROUTE_FILE" route delete default $DEFAULTGW route add default "$INTERNAL_IP4_ADDRESS" -interface } reset_default_route() { if [ -s "$DEFAULT_ROUTE_FILE" ]; then route $route_syntax_del default $INTERNAL_IP4_ADDRESS route add default `cat "$DEFAULT_ROUTE_FILE"` rm -f -- "$DEFAULT_ROUTE_FILE" fi } # =========== resolv.conf handling for any OS ========================= modify_resolvconf_generic() { grep '^#@VPNC_GENERATED@' /etc/resolv.conf > /dev/null 2>&1 || cp -- /etc/resolv.conf "$RESOLV_CONF_BACKUP" NEW_RESOLVCONF="#@VPNC_GENERATED@ -- this file is generated by vpnc # and will be overwritten by vpnc # as long as the above mark is intact" # Remember the original value of CISCO_DEF_DOMAIN we need it later CISCO_DEF_DOMAIN_ORIG="$CISCO_DEF_DOMAIN" # Don't step on INTERNAL_IP4_DNS value, use a temporary variable INTERNAL_IP4_DNS_TEMP="$INTERNAL_IP4_DNS" exec 6< "$RESOLV_CONF_BACKUP" while read LINE <&6 ; do case "$LINE" in nameserver*) if [ -n "$INTERNAL_IP4_DNS_TEMP" ]; then read ONE_NAMESERVER INTERNAL_IP4_DNS_TEMP <<-EOF $INTERNAL_IP4_DNS_TEMP EOF LINE="nameserver $ONE_NAMESERVER" else LINE="" fi ;; search*) if [ -n "$CISCO_DEF_DOMAIN" ]; then LINE="$LINE $CISCO_DEF_DOMAIN" CISCO_DEF_DOMAIN="" fi ;; domain*) if [ -n "$CISCO_DEF_DOMAIN" ]; then LINE="domain $CISCO_DEF_DOMAIN" CISCO_DEF_DOMAIN="" fi ;; esac NEW_RESOLVCONF="$NEW_RESOLVCONF $LINE" done exec 6<&- for i in $INTERNAL_IP4_DNS_TEMP ; do NEW_RESOLVCONF="$NEW_RESOLVCONF nameserver $i" done if [ -n "$CISCO_DEF_DOMAIN" ]; then NEW_RESOLVCONF="$NEW_RESOLVCONF search $CISCO_DEF_DOMAIN" fi echo "$NEW_RESOLVCONF" > /etc/resolv.conf } restore_resolvconf_generic() { if [ ! -e "$RESOLV_CONF_BACKUP" ]; then return fi grep '^#@VPNC_GENERATED@' /etc/resolv.conf > /dev/null 2>&1 && cat "$RESOLV_CONF_BACKUP" > /etc/resolv.conf rm -f -- "$RESOLV_CONF_BACKUP" } # ========= Toplevel state handling ======================================= kernel_is_2_6_or_above() { case `uname -r` in 1.*|2.[012345]*) return 1 ;; *) return 0 ;; esac } do_pre_init() { if [ "$OS" = "Linux" ]; then if (exec 6<> /dev/net/tun) > /dev/null 2>&1 ; then : else # can't open /dev/net/tun test -e /proc/sys/kernel/modprobe && `cat /proc/sys/kernel/modprobe` tun 2>/dev/null # fix for broken devfs in kernel 2.6.x if [ "`readlink /dev/net/tun`" = misc/net/tun \ -a ! -e /dev/net/misc/net/tun -a -e /dev/misc/net/tun ] ; then ln -sf /dev/misc/net/tun /dev/net/tun fi # make sure tun device exists if [ ! -e /dev/net/tun ]; then mkdir -p /dev/net mknod -m 0640 /dev/net/tun c 10 200 fi # workaround for a possible latency caused by udev, sleep max. 10s if kernel_is_2_6_or_above ; then for x in `seq 100` ; do (exec 6<> /dev/net/tun) > /dev/null 2>&1 && break; sleep 0.1 done fi fi elif [ "$OS" = "FreeBSD" ]; then if [ ! -e /dev/tun ]; then kldload if_tun fi elif [ "$OS" = "GNU/kFreeBSD" ]; then if [ ! -e /dev/tun ]; then kldload if_tun fi elif [ "$OS" = "NetBSD" ]; then : elif [ "$OS" = "OpenBSD" ]; then : elif [ "$OS" = "SunOS" ]; then : elif [ "$OS" = "Darwin" ]; then : fi } do_connect() { if [ -n "$CISCO_BANNER" ]; then echo "Connect Banner:" echo "$CISCO_BANNER" | while read LINE ; do echo "|" "$LINE" ; done echo fi do_ifconfig set_default_route set_vpngateway_route if [ -n "$INTERNAL_IP4_DNS" ]; then $MODIFYRESOLVCONF fi } do_disconnect() { del_vpngateway_route reset_default_route if [ -n "$INTERNAL_IP4_DNS" ]; then $RESTORERESOLVCONF fi } #### Main if [ -z "$reason" ]; then echo "this script must be called from vpnc" 1>&2 exit 1 fi case "$reason" in pre-init) do_pre_init ;; connect) do_connect ;; disconnect) do_disconnect ;; *) echo "unknown reason '$reason'. Maybe vpnc-script is out of date" 1>&2 exit 1 ;; esac exit 0 ------ Original Question ------ I'm trying to connect an Solaris 10 x86 system to a Cisco VPN. Most of what I found suggests using VPNC. However I cannot get it to compile. I've installed the Blastware stuff (gcc 3.4.3, binutils, libgcrypt, libgcrypt, intltool, libiconv, gmake) but I get errors such as: gcc -O3 -g -W -Wall -Wmissing-declarations -Wwrite-strings -DVERSION=\"0.5.1\" -c -o sysdep.o sysdep.c gcc -O3 -g -W -Wall -Wmissing-declarations -Wwrite-strings -DVERSION=\"0.5.1\" -c -o vpnc-debug.o vpnc-debug.c gcc -O3 -g -W -Wall -Wmissing-declarations -Wwrite-strings -DVERSION=\"0.5.1\" -c -o isakmp-pkt.o isakmp-pkt.c In file included from isakmp-pkt.c:31: math_group.h:62: error: syntax error before "gcry_mpi_t" math_group.h:62: warning: no semicolon at end of struct or union math_group.h:63: warning: type defaults to `int' in declaration of `p' math_group.h:63: warning: data definition has no type or storage class math_group.h:64: error: syntax error before "a" math_group.h:64: warning: type defaults to `int' in declaration of `a' math_group.h:64: warning: type defaults to `int' in declaration of `b' math_group.h:64: warning: type defaults to `int' in declaration of `c' math_group.h:64: warning: type defaults to `int' in declaration of `d' math_group.h:64: warning: data definition has no type or storage class math_group.h:65: error: syntax error before '}' token In file included from vpnc.h:24, from isakmp-pkt.c:32: tunip.h:43: error: syntax error before "gcry_cipher_hd_t" tunip.h:43: warning: no semicolon at end of struct or union tunip.h:50: error: syntax error before '}' token tunip.h:111: error: field `rx' has incomplete type tunip.h:111: error: field `tx' has incomplete type gmake: *** [isakmp-pkt.o] Error 1 Has someone gotten this beast to compile or should I just go with openvpn? The reason I'm trying VPNC is that there are utilities to convert Cisco PCF files and searches indicate that once it is compiled it works really well with Cisco. (Unfortunately Cisco does not have a Solaris x86 VPN client.) JC PS: J and C are my initials, look at the email address. _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From G.Bakalarski at icm.edu.pl Thu May 8 09:25:01 2008 From: G.Bakalarski at icm.edu.pl (Grzegorz Bakalarski) Date: Thu, 8 May 2008 15:25:01 +0200 Subject: SUMMARY: Soloris 10 x86 external USB DVD In-Reply-To: <20080508115237.GA18641@mathematik.uni-bielefeld.de> References: <20080508114445.GF13589@delta.icm.edu.pl> <20080508115237.GA18641@mathematik.uni-bielefeld.de> Message-ID: <20080508132501.GM13589@delta.icm.edu.pl> Hi Thanks to Richard, Bernhard, Remy, hike & Chris for help. The winner is Bernhard who first corrected my mistake ... On Thu, May 08, 2008 at 01:52:37PM +0200, Bernhard Sadlowski wrote: > > mount -F hsfs -o ro /dev/rdsk/c8t0d0p0 /mnt/cdrom > > > > gives message that this is not block device ... > > (with CD or DVD in the drive) (the drive after powering up > > looks working - green diode blinks, I can open it, close with > > CD etc...) > > Did you try to use the block device and not the raw device as above? > > # mount -F hsfs -o ro /dev/dsk/c8t0d0p0 /mnt/cdrom > > Bernhard I tried to mount block device using /dev/dsk/c8t0d0s2 but not /dev/dsk/c8t0d0p0 where I not correctly tried to use raw device /dev/rdsk/c8t0d0p0 Maybe I was foolished by this strange message in dmesg: May 8 13:58:04 lomnica genunix: [ID 314293 kern.info] device pciclass,030000 at 3(display#0) keeps up device sd at 0,0(disk#51), but the latter is not power managed May 8 13:58:48 lomnica scsi: [ID 107833 kern.notice] Device is gone May 8 14:01:43 lomnica last message repeated 6 times Where has my device gone??? Thanks for all! Cheers! GB _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From tlongo at avaya.com Wed May 7 15:51:59 2008 From: tlongo at avaya.com (Tim Longo) Date: Wed, 07 May 2008 15:51:59 -0400 Subject: SUMMARY: Second NIC in sparc 20 In-Reply-To: <20080507161314.GA11944@elaan.research.avayalabs.com> References: <20080507161314.GA11944@elaan.research.avayalabs.com> Message-ID: <4822085F.2070709@avaya.com> Thank you to all that responded. There were too many to respond individually. Most people suggested I reconfigure then plumb the interface. I had done that previously, but noticed the mac address was the same for both interfaces. I thought I had done something wrong. hme0:flags=1000843 mtu 1500 index 2 inet 192.168.1.30 netmask ffffff00 broadcast 192.168.1.255 ether 8:0:20:72:a3:5d hme1:flags=1000843 mtu 1500 index 3 inet 192.168.1.163 netmask ffffff00 broadcast 192.168.1.255 ether 8:0:20:72:a3:5d le0:flags=1000842 mtu 1500 index 4 inet 0.0.0.0 netmask 0 ether 8:0:20:72:a3:5d One person responded suggesting I change the local-address? obp setting to true and reboot. I did this, but the mac's are still the same. From what I read, I think that means the NIC's don't have a hardware address, and the machine will default to the system mac address. I also read that I can use the ifconfig command to set the ether address if cards are on the same subnet. Thanks again, this is a great list! Tim Longo wrote: > Hi, > > I've got a Sparc 20 w/Solaris 9 installed. The system has > the built in le0 interface, and I've added two hme > interfaces. > > SPARCstation 20 MP (2 X RT626), No Keyboard > ROM Rev. 2.25, 256 MB memory installed, Serial #7512925. > Ethernet address 8:0:20:72:a3:5d, Host ID: 7272a35d. > > > <#2> ok show-nets > a) /iommu at f,e0000000/sbus at f,e0001000/SUNW,hme at 3,8c00000 > b) /iommu at f,e0000000/sbus at f,e0001000/SUNW,hme at 1,8c00000 > c) /iommu at f,e0000000/sbus at f,e0001000/ledma at f,400010/le at f,c00000 > > > My goal is to configure both hme nic's but I can only seem > to get hme0 working. > > # ifconfig -a > lo0: flags=1000849 mtu 8232 index 1 > inet 127.0.0.1 netmask ff000000 > hme0: flags=1000843 mtu 1500 index 2 > inet 192.168.1.30 netmask ffffff00 broadcast 192.168.1.255 > ether 8:0:20:72:a3:5d > > Any suggestions on how to get the second hme card working? > > Thanks _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From les.l.greene at boeing.com Thu May 8 13:17:02 2008 From: les.l.greene at boeing.com (Greene, Les L) Date: Thu, 8 May 2008 10:17:02 -0700 Subject: SUMMARY: Sunstudio 12 Hummingbird Exceed problem In-Reply-To: References: Message-ID: Solved. Thanks to contributors: William Hathaway Charles Morris Mr. Hathaway suggested leaving off the & and it worked fine... Les Greene Boeing On May 8, 2008, at 12:43 PM, Greene, Les L wrote: > Hi - > > I am trying to launch SunStudio (12) via Hummingbird Exceed and I get > the following: > > vg344c @ ascs-prod1 33 > sunstudio & > [4] 2405 > vg344c @ ascs-prod1 34 > > [4] + Stopped (tty output) sunstudio > > vg344c @ ascs-prod1 34 > > vg344c @ ascs-prod1 34 > > > My display is set right as I can pull up like an "xclock" > > If I launch from a Sun Solaris client, it works fine. > > Les Greene > _______________________________________________ > sunmanagers mailing list > sunmanagers at sunmanagers.org > http://www.sunmanagers.org/mailman/listinfo/sunmanagers _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From stepchung at gmail.com Thu May 8 18:48:43 2008 From: stepchung at gmail.com (Stephanie C) Date: Thu, 8 May 2008 15:48:43 -0700 Subject: SUMMARY: How to remove '*' on a line in a file? Message-ID: <6bdfa8ce0805081548m31298e90v75fc0d4520e5543b@mail.gmail.com> Thanks to Sander for quick response, really appreciate. perl -pi -e 's/\*dollars\*/dollars/g' On Thu, May 8, 2008 at 3:38 PM, Stephanie C wrote: > Hi- I have many text files that has '*dollars*' word in the line. I want to > remove the '*'. I have tried the following syntax: > > perl -pi -e 's/*dollars*/dollars/g' filename (doesn't work, without '*' it > replaces the string fine, '*' seems to treat as a wild card) > > I have to use perl because it changes directly to the filename so I don't > have to redirect to a different filename and copy it back to original > filename as 'sed' does. > > 'sed' doesn't work either. > > Thanks for your help! > > Step _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From stepchung at gmail.com Fri May 9 17:07:28 2008 From: stepchung at gmail.com (Stephanie C) Date: Fri, 9 May 2008 14:07:28 -0700 Subject: SUMMARY: How to create password in the script? Version 2 Message-ID: <6bdfa8ce0805091407g16f6c7e5r83b2e3f610bbba60@mail.gmail.com> I wrote the following script to create multiple user accounts that I would like to share with the group (no expect needed). This script will do the following: 1. Create user account 2. Reset/unlock the account (remove *LK* in the shadow file for that account) 3. Create a encrypted password as 'pass123'. Field: 'n${ACCT}' is just key generated (you can put anything in this field) 4. Put the password into /etc/shadow for each user account when created. #!/usr/bin/sh # 05/14/2006 # Author: Stephanie # This script creates multiple user accounts using the username text file. # echo "Home directory (/export/home/its): \c" read DIR echo "Belong to GROUP (oracle): \c" read GROUP echo "Account name text file (/tmp/acctname.txt): \c" read USERFILE while read ACCT do useradd -d ${DIR}/${ACCT} -g ${GROUP} -s /bin/ksh -m -k /etc/skel/ ${ACCT} passwd -u ${ACCT} # unlock password and set to null PW=`perl -e '$x=crypt('pass123','n${ACCT}'); print $x'` perl -pi -e s/${ACCT}:/${ACCT}:${PW}/g /etc/shadow done < ${USERFILE} exit 0 On Wed, May 7, 2008 at 10:16 AM, Stephanie C wrote: > Thank you very much for all the responses. Here are couple options: > > - Use 'expect'. I have to learn this. > - Use the following syntax within the script right after the 'useradd' line > to add the password into /etc/shadow file: > echo ${useracct}:`perl -e '$x=crypt('password','n${useracct}'); print > $x'`:13798:::::: >> /etc/shadow > This works fine, but the shadow file has two lines for one user. One line > is the locked password and another has the added password line. I have to > edit the shadow file to remove the locked password line. This is no can do. > - Put a following line in the script right after the useradd line: > passwd -u ${useracct} (this to unlock the account with a null password, > users need to set the password at first login). I will go with this option > for now. > > Thanks. > > Stephanie > > QUESTION: > I have to create hundreds and hundreds (thousands) of user accounts on our > solaris 10 servers. I have created a script to do so. The problem is, I > don't want to set the password for these users by typing 'passwd' command > for every one of them (take forever to do this). I know Linux's useradd > command has an option '-p' to set the password, but not solaris. Is there a > way to create a default password in the script when create user account? > > Here is my the useradd script: > > #!/usr/bin/ksh > > # 05/14/2006 > > # Author: > > # Script: user_add.sh > > # > > DIRECT="/export/home/its" > > GROUP="staff" > > while read useracct > > do > > useradd -d ${DIRECT}/${useracct} -g ${GROUP} -s /bin/ksh -m -k /etc/skel/ > ${useracct} > > * passwd ${useracct} < /dmp/userpassfile.txt (NOT WORKING, IT PROMPTS FOR > PASSWORD)* > > done < /dmp/useraccount.txt _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From wick at bobwickline.com Sun May 11 02:36:22 2008 From: wick at bobwickline.com (Bob Wickline) Date: Sun, 11 May 2008 01:36:22 -0500 Subject: Summary: PHP and Apache2 on Solaris 10/x64 In-Reply-To: <4825CA52.7070906@bobwickline.com> References: <4825CA52.7070906@bobwickline.com> Message-ID: <482693E6.1070901@bobwickline.com> Thanks to Matthew, Dennis, Donald, Luc, & Shyam for their responses. The consensus is that the built-in Apache and SunFreeware PHP are both not the most desired versions of said applications. I had this combination working on another server but I guess that was by accident. Most everyone's suggestions was to use the Blastwave.org implementation of these applications. I would have downloaded the source of said applications before, but I have committed to sunfreeware.com as a sole source of open applications and it seems that was not a wise choice. I have a Dell server running Solaris 10 11/06 with 15 or so sparse-root zones running Apache2 web stuff. One zone has the desire to use PHP and I had it configured on the previous server but when we migrated to the Dell it behaved as I stated in my original email. I downloaded the Blastwave pkg-get and installed the Blastwave apache2.2 and PHP5. After configuring the apache conf files, all the pages display properly. I wished I had the time to figure out why the combination I was using previously wasn't working, but when you have paying customers that are down you are easily drawn to the light (easy fix). -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From ahoesch at smartsoft.de Fri May 9 11:16:21 2008 From: ahoesch at smartsoft.de (=?ISO-8859-1?Q?Andreas_H=F6schler?=) Date: Fri, 9 May 2008 17:16:21 +0200 Subject: Summary: NFS mount problem In-Reply-To: <20080509150652.GA22715@dev.scms.fi> Message-ID: Dear manager, thanks to "Charles Morris" Lawrence Sorrillo Roderick Grau" Stefan Varga Aleks Feltin > I have nfs-exported /home with zfs on server A as follows > > zfs create tank/home > zfs set mountpoint=/home tank/home > zfs set sharenfs=rw tank/home > zfs share tank/home > > and mount that on client B as follows > > svcadm disable autofs > mkdir /home > mount -F nfs 192.168.1.1:/home /home > > I have copied /etc/passwd, /etc/group and /etc/shadow from server A to > client B. I can log into client B as ahoesch and also list my files > but when doing "ls -l" I get > > ... > -rw------- 1 nobody nobody 136 Aug 18 2004 local.cshrc > -rw------- 1 nobody nobody 157 Aug 18 2004 local.login > -rw------- 1 nobody nobody 174 Aug 18 2004 local.profile > drwx------ 2 nobody nobody 7 May 9 15:57 mail > -rw-r--r-- 1 nobody nobody 2073088 May 8 18:48 maritim.tar > -rwx------ 1 nobody nobody 2025 Nov 19 2004 > merkurSync.command > ... > > Why does client B think these files owned by nobody? When I do the > same ls -l on server A I get > > ... > -rw------- 1 ahoesch other 136 Aug 18 2004 local.cshrc > -rw------- 1 ahoesch other 157 Aug 18 2004 local.login > -rw------- 1 ahoesch other 174 Aug 18 2004 local.profile > drwx------ 2 ahoesch other 7 May 9 16:22 mail > -rw-r--r-- 1 ahoesch other 2073088 May 8 18:48 maritim.tar > -rwx------ 1 ahoesch other 2025 Nov 19 2004 > merkurSync.command > ... > > Since both machines have the same accounts I am wondering what that > means. I read "man mount" but got no hint. postfix is complaining that > /home/ahoesch/.forward has a bad userId (--> nobody) on client B. > That's why I started to look into this. What am I missing? The problem was caused by different values of NFSMAPID_DOMAIN (cat /var/run/nfs4_domain). Modifying the contents of /var/run/nfs4_domain has no effect. The value is modified during reboot. I therefore made sure /etc/resolv.conf has the same domain entry on both machines. After a reboot of the client, the problem was gone. Aleks Feltin pointed me to /etc/default/nfs which can have an entry for NFSMAPID_DOMAIN. If one really needs different domains in /etc/resolv.conf one can probably fix the problem as well by defining NFSMAPID_DOMAIN in this file. However, I can live with identical resolv.conf domains so I haven't tried that out yet. Thanks a lot for your kind help!!! Regards, Andreas _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From kkkong at ee.cuhk.edu.hk Fri May 9 23:51:11 2008 From: kkkong at ee.cuhk.edu.hk (Alan Kong) Date: Sat, 10 May 2008 11:51:11 +0800 Subject: Summary: Mirroring root disk and /var/mail using SDS In-Reply-To: <482409F4.5090701@ee.cuhk.edu.hk> References: <482409F4.5090701@ee.cuhk.edu.hk> Message-ID: <48251BAF.4000100@ee.cuhk.edu.hk> Thanks to: "Paveza, Gary" "Paul Kraus" jim.musso at phoenix.gov Roger Kynaston Summary: 1) One one set of metadatabases is enough, suggested to create 3 metadb replicas on each OS disk and 1 on each data disk, but make sure that loss of one any controller or disk does not take out more than 50% of the replicas.; 2) Make sure only doing a way mirror as there is data on /var/mail, perform metaattach afterwards; 3) Do forget to update /etc/vfstab Regards Alan Alan Kong wrote: > Hi, > I have 2 internal disk and "/var/mail" is hung off from external disk. > I intended to use SDS to mirror the system disk with the 2 internal > disks and add a second disk to mirror the external disk on > "/var/mail". Wonder the following method is correct: > > Platform: Solaris 2.8 > SDS: version 4.2.1 > > For system disk: > 1) metadb -a -f -c2 to create the metadb on the 2 internal disks for > the root fs; > 2) create the meta devices on the 2 internal disk. > 3) create the mirror for the root fs. > > For "/var/mail" partition: > 4) metadb -a -f -c2 to create metadb on the 2 external disks for the > "/var/mail" partition; > 5) create the meta devices on the 2 external disks; > 6) create mirror for "var/mail". > > > > Thank you. > > Regards > Alan _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From dean.plant at roke.co.uk Mon May 12 11:31:16 2008 From: dean.plant at roke.co.uk (Plant, Dean) Date: Mon, 12 May 2008 16:31:16 +0100 Subject: SUMMARY: Unable to create the metadb due to overlapping Message-ID: <2181C5F19DD0254692452BFF3EAF1D6803940EA5@rsys005a.comm.ad.roke.co.uk> Thanks to Gary Paveza & Chris Ruhnke for the replies. I had checked the partitioning before posting to the list. Special thanks to Tobias Nutt who hit the nail on the head with the below reply. Important Note: The vendor string has to be 8 characters and the product string 16. So Tobias's reply shows sd-config-list= "DEC HSG80 ", "workaround"; ^^^^^ ^^^^^^^^^^^ 5 blanks 11 blanks In my case the correct line was sd-config-list= "SEAGATE ST373455LC ", "workaround"; ^ ^^^^^^ 1 blank 6 blanks ------------------------------ Since Sol8 (rev.NN) sds use IDs to identify disks and this dosnt work sometimes with NON-SUN disks There are some dokuments inside sunsolve how to add an ID to these drives. I've got some hints to solve this problem: 1) Enter the following two lines into the /kernel/drv/md.conf file imediately before the "Begin MDD Database" line: md_devid_destroy=1; md_keep_repl_state=1; These lines only disable the DevID (relocation) information. No data is removed or destroyed. A reboot is needed to complete the procedure. 2) format -e ; then select scsi, then inquiry. Vendor: DEC Product: HSG80 Revision: V86F Removable media: no Device type: 0 ISO version: 0 ECMA version: 0 ANSI version: 2 Async event notification: no Terminate i/o process msg: no Response data format: 2 Additional length: 247 Relative addressing: no 32 bit transfers: no 16 bit transfers: yes Synchronous transfers: yes Linked commands: no Command queueing: yes Soft reset option: no Add an entry in the file '/kernel/drv/sd.conf'. In general, the entry will be: sd-config-list= "vendor product ", "anystring"; anystring=1,0x8,0,0,0,0,0; here is it: sd-config-list= "DEC HSG80 ", "workaround"; ^^^^^ ^^^^^^^^^^^ 5 blanks 11 blanks have a look at the blanks!!! reboot everything should be fine -----Original Message----- From: Plant, Dean Sent: 12 May 2008 11:10 To: 'sunmanagers at sunmanagers.org' Subject: Unable to create the metadb due to overlapping I have had to replace two system disks and am now trying to rebuild the mirror. I am unable to add the metadbs to both disks, which I think is down to the SCSI disks having the same device id as shown below. Is there a way of changing the device id of a disk drive? Solaris 10 3/05 SPARC on Sun v240 with non Sun hard drives. # iostat -iE sd0 Soft Errors: 0 Hard Errors: 0 Transport Errors: 0 Vendor: SEAGATE Product: ST373455LC Revision: 0003 Device Id: id1,sd at n5000000000000000 Size: 73.35GB <73347749888 bytes> Media Error: 0 Device Not Ready: 0 No Device: 0 Recoverable: 0 Illegal Request: 0 Predictive Failure Analysis: 0 sd1 Soft Errors: 0 Hard Errors: 0 Transport Errors: 0 Vendor: SEAGATE Product: ST373455LC Revision: 0003 Device Id: id1,sd at n5000000000000000 Size: 73.35GB <73347749888 bytes> Media Error: 0 Device Not Ready: 0 No Device: 0 Recoverable: 0 # metadb flags first blk block count a u 16 8192 /dev/dsk/c1t1d0s7 a u 8208 8192 /dev/dsk/c1t1d0s7 a u 16400 8192 /dev/dsk/c1t1d0s7 # metadb -a -f -c3 /dev/dsk/c1t0d0s7 metadb: myhost: c1t0d0s7: overlaps with device in metadevice state database # cat /etc/lvm/mddb.cf #metadevice database location file do not hand edit #driver minor_t daddr_t device id checksum sd 15 16 id1,sd at n5000000000000000/h -1815 sd 15 8208 id1,sd at n5000000000000000/h -10007 sd 15 16400 id1,sd at n5000000000000000/h -18199 Thanks Dean. _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From frisco at blackant.net Mon May 12 18:14:21 2008 From: frisco at blackant.net (francisco roque) Date: Mon, 12 May 2008 18:14:21 -0400 (EDT) Subject: SUMMARY: Network issue in Solaris 10 update 4 In-Reply-To: References: Message-ID: Problem resolved thanks to Sun Support: http://blogs.sun.com/swas/entry/solaris_10_8_07_broadcom A recap of the issue + solution: - our network was working fine, no known issues. - we upgrade to Solaris 10u4, those machines start dropping network. - no other machines are affected; Windows, Linux, *BSD, Solaris <= 10u3 are all fine. - the solution is to upgrade any other machines that are using broadcom nics in teaming mode. Apparently the cost of being more RFC-compliant is enhanced vulnerability to arp poison. Thanks again to everyone for their help & tips. -f http://www.blackant.net/ _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From sunhux at gmail.com Tue May 13 05:39:29 2008 From: sunhux at gmail.com (sunhux G) Date: Tue, 13 May 2008 17:39:29 +0800 Subject: Summary: what are the services needed for GUI (Xming, Hummingbird, ReflectionX) & CDE Message-ID: <60f08e700805130239x273f46c5sdc0d2aa590396c3c@mail.gmail.com> Thanks Nowell, Daniel, Aleks, Mark. Sorry for the late summary as just managed to read the emails a while ago only : Replies are : a)you don't need any particular services on the Solaris box to send your X11 display to a PC running an X server. The X-enabled apps will know how to talk to your X server. You don't need an X server running on the Solaris box either. b)Default services in multi-user milestone would be enough for X11 forwarding c)Ensure the following packages are installed : SUNWxcu4 SUNWxwfnt SUNWxwice SUNWcpp SUNWzlib SUNWxwplt SUNWxwplx SUNWxwrtl SUNWxwrtx Then use putty/SSH to login & ensure that X11 forwarding is enabled on the server in the sshd_config file and that the putty client is enabled to allow forwarding). d)The rpc.ttdbserver daemon is used by CDE, so you'll need it to login via the CDE GUI. On Solaris 10, you'll need the "cde-login" service enabled : svc:/application/graphical-login/cde-login:default If it's disabled, enable it with : # svcadm enable cde-login The only thing that must be checked is that your Solaris box allows remote session for your PC host (which must be, IIRC, in /usr/dt/config/Xaccess). e)If your firewall will allow it, you can do a full CDE desktop with XDMCP (this is not secure) or you can forward X with ssh using ssh -X user at hostname. You can also install cygwin/X on Windows with the ssh package. If you initiate your ssh session from cygwin/X then everything will redirect to your screen. Test it with a simple application first like xclock or Mozilla. Thanks U On 5/9/08, sunhux G wrote: > > Hi, > > If I launch a X server on my Windows PC (eg: Xming, Hummingbird, > ReflectionX), I would like the tools (eg: admintool, oracle installer) > to throw its output to my PC (yes, I would need to set the DISPLAY > to my PC's IP address first). > > Which services (for Solaris 9 & 10) are needed for this to happen > as don't want to accidentally hardened/remove them? > > In Solaris 9, is this > rpc.ttdbserver? > > In Solaris 10, there's a whole list of services in "svcs -a" > > > Also, if I need to login to the Solaris server via CDE GUI, > which are the services needed? > > > Thanks > U _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From aleks.feltin at sunsetwireless.fi Tue May 13 07:09:04 2008 From: aleks.feltin at sunsetwireless.fi (Aleks Feltin) Date: Tue, 13 May 2008 14:09:04 +0300 Subject: SUMMARY: Wanted: Online CPU Diagnostics Monitor Message-ID: <20080513110904.GA29294@dev.scms.fi> I found it in a download section: http://www.sun.com/download/products.xml?id=3f620e8d Thanks to everyone. On 13/05/08 10:31 +0300, Aleks Feltin wrote: >Hi, > >Could anybody share these packages: > >NAME: Online CPU Diagnostics Monitor (64-bit) >ARCH: sparc >VERSION: 1.1.1,REV=2004.01.21.22.00 > >SUNWcdiam >SUNWcdiar >SUNWcdiax (64-bit) > >This was previously a part of "Online CPU Diagnostics Monitor" product. > >Thanks in advance. > >-- >A > >[demime 1.01b removed an attachment of type application/pgp-signature which had a name of signature.asc] >_______________________________________________ >sunmanagers mailing list >sunmanagers at sunmanagers.org >http://www.sunmanagers.org/mailman/listinfo/sunmanagers -- A [demime 1.01b removed an attachment of type application/pgp-signature which had a name of signature.asc] _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From Brian.Dunbar at plexus.com Tue May 13 14:11:49 2008 From: Brian.Dunbar at plexus.com (Brian Dunbar) Date: Tue, 13 May 2008 13:11:49 -0500 Subject: Summary: ALOM in the DMZ Message-ID: Thank you all for your input. A few points of clarification are in order: * This is for console access. * The ALOM card would be in a separate network from the ethernet cards in the DMZ. I had to see the network who runs the DMZ because it's in 'his' rack. Consensus: If the ALOM is in a separate network, you should be okay. scadm was mentioned as a way to 'get into' the alom card. The network crew were concerned about other hosts being exploited from alom if the host is compromised; if my host is hacked that deeply it's time to take it offline and scrub down to bare metal. ipmitool was mentioned in this regard as well. This is new to me, so thanks! My sanity was questioned for my alleged humor; I'll keep it in check in the future. I submit that the question that lay buried underneath layers of childish humor is pertinent. And no, I don't have a life. The network guy's expertise was questioned: " Sounds like he's just spooked by something outside his experience and understanding." I may have painted the fellow in a bad light. He's trying to be a good steward of the network that he's been entrusted with. We can all agree this is a worthy goal and it's a big part of what we get paid for. A serial connection from another host via tip was mentioned, and this would be a good interim solution - and it would beat the laptop. I'll give it a shot. Two problems with this. * I have three servers I need to talk to. Soon to be four. * The only servers in that room that I 'own' are the ones in the DMZ that I need console access to. * The other servers are owned by a separate admin group. We get along but .. it's a Great Big Deal to acquire a login. Thanks for your input. Brian Dunbar Systems Administrator Plexus Desk: (920) 751-3364 Cell: (920) 716-2027 _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From tw0616 at att.com Wed May 14 09:12:39 2008 From: tw0616 at att.com (Wood, Tad) Date: Wed, 14 May 2008 08:12:39 -0500 Subject: SUMMARY: Where to download Sun Network Storage Agent In-Reply-To: <4829EC47.3010108@manukau.ac.nz> References: <88E0B15FAD1D244081CC9882823CD47904EDD224@brexc52p> <4829EC47.3010108@manukau.ac.nz> Message-ID: <88E0B15FAD1D244081CC9882823CD47904EDD22D@brexc52p> My problem has been resolved. I never found a place to download Sun Network Storage Agent, but thanks to Scott Lawson, was given a method to use to determine which drive in my array was failing. Basically it is to run iostat -En and get the serial number of the failing disk and match it to the drive in the array. See Scott's reply below for more details. However, in my case, after running iostat -En, I saw no errors reported for the disk that I thought was failing. Veritas Volume Manager was reporting it as failing, but not iostat. So I removed the disk from the disk group and then added it back. After doing this, the disk now shows as healthy in Veritas. So my problem appears to be resolved. Thanks again to Scott Lawson for his help. Tad -----Original Message----- From: Scott Lawson [mailto:Scott.Lawson at manukau.ac.nz] Sent: Tuesday, May 13, 2008 3:30 PM To: Wood, Tad Subject: Re: Where to download Sun Network Storage Agent Tad, The D2 looks to be the same as a D1000. ie a JBOD. If this is the case and you are using Sun branded disks then you can use the command 'iostat -En' to locate your failed disk. You will have a target id that is failing and this command will list the targets and their serial numbers. This serial number will be written on the spine of the spud bracket holding the disk that you can see when you open the front flap of the D2. /Scott Wood, Tad wrote: > Hello Sun Managers, > > I have a Sun StorEdge D2 array that has a failing disk in it. I need > to identify the disk in the array and according to the D2 > documentation, the method to do this requires the use of the Network > Storage Agent software. However, after searching on Sun's website and > in Google, I cannot find this package. Nor can I find any reference to > newer software that replaces Network Storage Agent. Does anyone know > where I can download Network Storage Agent? Or its replacement? If so, > please provide a link. > > Thanks. > > Just in case its needed here is the info on the host server: > SunFire V480 > Solaris 9 patch level 118558-30 > > > Tad Wood > AT&T Southeast > GSAT IP EMS > _______________________________________________ > sunmanagers mailing list > sunmanagers at sunmanagers.org > http://www.sunmanagers.org/mailman/listinfo/sunmanagers > -- _______________________________________________________________________ Scott Lawson Systems Architect Manukau Institute of Technology Information Communication Technology Services Private Bag 94006 Manukau City Auckland New Zealand Phone : +64 09 968 7611 Fax : +64 09 968 7641 Mobile : +64 27 568 7611 mailto:scott at manukau.ac.nz http://www.manukau.ac.nz ________________________________________________________________________ perl -e 'print $i=pack(c5,(41*2),sqrt(7056),(unpack(c,H)-2),oct(115),10);' ________________________________________________________________________ ***** The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential, proprietary, and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from all computers. GA622 _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From diego.veiga at freescale.com Wed May 14 10:01:42 2008 From: diego.veiga at freescale.com (Diego Brito Veiga - b04917) Date: Wed, 14 May 2008 11:01:42 -0300 Subject: SUMMARY: excluding folder under flarcreate Message-ID: <482AF0C6.9050908@freescale.com> Thanks for the promptly replies. The flarcreate don't follow NFS. That's what I wanted. I can also specify a list of folders using the -X options. I was thinking it's only for files. Thanks again... ORIGINAL POST: Hi guys, host with Solaris 8 2/04. I am excluding a total of 26 NFS folders to create a flarcreate with the -x options. The flarcreate is crashing when are excluding more than 12 folders. Is it true? To perform a test I copied the flarcreate script from solaris 10 to the solaris 8 host but the same issue happened. My command line and output: ksh -x flarcreate -n server -S -c -x /net -x /home -x /proj -x /proj_tmp -x /sections -x /xfn -x /tools -x /pub -x /sync -x /_TOOLS_ -x /clearcase/ccvv_archived -x /c learcase/ccvv_ref -x /clearcase/ccvv_view -x /clearcase/ccvv_vob -x /clearcase/ccvv_shipping -x /usr/local -x /dsync -x /publish -x /site -x /orcallator -x /proj_re f -x /edocs -x /.downloads -x /sync_cache/sync_cache01 -x /view -x /vob server.flar ... + COMPUTEHASH= + comparsion=new_dir_compare + FILTER=/tmp/flash_filter_one_.9987 + getopts :a:b:cCd:e:E:f:FHi:m:n:p:qR:StT:u:U:vx:X:y:z: opt + content_name=pardo + getopts :a:b:cCd:e:E:f:FHi:m:n:p:qR:StT:u:U:vx:X:y:z: opt + sizing_action=No + getopts :a:b:cCd:e:E:f:FHi:m:n:p:qR:StT:u:U:vx:X:y:z: opt + compress_action=Yes + getopts :a:b:cCd:e:E:f:FHi:m:n:p:qR:StT:u:U:vx:X:y:z: opt + echo - /net + 1>> /tmp/flash_filter_one_.9987 + getopts :a:b:cCd:e:E:f:FHi:m:n:p:qR:StT:u:U:vx:X:y:z: opt + echo - /home + 1>> /tmp/flash_filter_one_.9987 + getopts :a:b:cCd:e:E:f:FHi:m:n:p:qR:StT:u:U:vx:X:y:z: opt + echo - /proj + 1>> /tmp/flash_filter_one_.9987 + getopts :a:b:cCd:e:E:f:FHi:m:n:p:qR:StT:u:U:vx:X:y:z: opt + echo - /proj_tmp + 1>> /tmp/flash_filter_one_.9987 + getopts :a:b:cCd:e:E:f:FHi:m:n:p:qR:StT:u:U:vx:X:y:z: opt + echo - /sections + 1>> /tmp/flash_filter_one_.9987 + getopts :a:b:cCd:e:E:f:FHi:m:n:p:qR:StT:u:U:vx:X:y:z: opt + echo - /xfn + 1>> /tmp/flash_filter_one_.9987 + getopts :a:b:cCd:e:E:f:FHi:m:n:p:qR:StT:u:U:vx:X:y:z: opt + echo - /tools + 1>> /tmp/flash_filter_one_.9987 + getopts :a:b:cCd:e:E:f:FHi:m:n:p:qR:StT:u:U:vx:X:y:z: opt + echo - /pub + 1>> /tmp/flash_filter_one_.9987 + getopts :a:b:cCd:e:E:f:FHi:m:n:p:qR:StT:u:U:vx:X:y:z: opt + echo - /sync + 1>> /tmp/flash_filter_one_.9987 + getopts :a:b:cCd:e:E:f:FHi:m:n:p:qR:StT:u:U:vx:X:y:z: opt + echo - /_TOOLS_ + 1>> /tmp/flash_filter_one_.9987 + getopts :a:b:cCd:e:E:f:FHi:m:n:p:qR:StT:u:U:vx:X:y:z: opt + echo - /clearcase/ccvv_archived + 1>> /tmp/flash_filter_one_.9987 + getopts :a:b:cCd:e:E:f:FHi:m:n:p:qR:StT:u:U:vx:X:y:z: opt + echo - /c + 1>> /tmp/flash_filter_one_.9987 + getopts :a:b:cCd:e:E:f:FHi:m:n:p:qR:StT:u:U:vx:X:y:z: opt + [ -x /usr/sbin/computehash ] + COMPUTEHASH=/usr/sbin/computehash + shift 28 + [[ 31 != 1 ]] + print_usage_and_exit Usage: flarcreate -n name [-R root] [-H] [-S] [-c] [-t [-p posn] [-b blocksize]] [-i date] [-u section [-d path ]] [-U key=value] [-m master] [-f [ list_file | - ] [-F]] [-a author] [-e descr | -E descr_file] [-T type] [[-x exclude_dir/file][-x exclude_dir/file]...] [-X list_file] [[-y include_dir/file [-y include_dir/file]...] [-z filter_list_file] archive Any tip? Tks, -- Diego Brito Veiga _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From martini1 at llnl.gov Thu May 15 12:56:46 2008 From: martini1 at llnl.gov (Dave Martini) Date: Thu, 15 May 2008 09:56:46 -0700 Subject: SUMMARY: Checking 280R internal temp Message-ID: <482C6B4E.9090805@llnl.gov> Well, of course I didn't think of trying prtdiag -v System Temperatures (Celsius): ------------------------------ cpu0 1 --------- 59 xx We've got an AC problem in our server room currently and as you can see the system is very hot. Doesn't the 280R shutdown when it reaches 110F?? Dave. _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From scottd at HanoverDirect.com Tue May 20 07:37:38 2008 From: scottd at HanoverDirect.com (Deiter, Scott) Date: Tue, 20 May 2008 07:37:38 -0400 Subject: Summary: Sftp command help In-Reply-To: References: <004101c8b493$5dd65960$4201a8c0@Paviliona1114n> Message-ID: Thanks form the many responses. Our choice is to use sftp -o 'IdentityFile /path/to/idfile' Scott Deiter System Administrator Hanover Direct, Inc. Hanover, PA Voice: 717-633-3298 _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From jbeck at seic.com Wed May 21 11:08:20 2008 From: jbeck at seic.com (Beck, Joseph) Date: Wed, 21 May 2008 11:08:20 -0400 Subject: SUMMARY: Quota at directory level In-Reply-To: <6171c6010805210802v76c86568xd3112dd3af02aa74@mail.gmail.com> References: <266FF61A00ED80458FF03DC667561CCA10A73BCA@post03.corp.seic.com> <6171c6010805210802v76c86568xd3112dd3af02aa74@mail.gmail.com> Message-ID: <266FF61A00ED80458FF03DC667561CCA10A73BCF@post03.corp.seic.com> So far responses have been sort of what I expected. Ufs & vxfs limited...use zfs for this. I should've noted that I did push for using zfs & creating FS per domain as quotas are nice & easy in that world. Not so many domains per box that would rule out 1 vxvol/vxfs per domain either, but my mgr is not liking that approach too much... Thanks for the feedback. I'll update if I get any new suggestions or ideas. Joe Beck Ciber Inc. - a consultant to SEI One Freedom Valley Drive/ 100 Cider Mill Road| Oaks, PA 19456 | p: 610.676.2258 | jbeck at seic.com -----Original Message----- From: charlesmorris at gmail.com [mailto:charlesmorris at gmail.com] On Behalf Of Charles Morris Sent: Wednesday, May 21, 2008 11:02 AM To: Beck, Joseph Subject: Re: Quota at directory level You can't do it via ufs quotas, those are done on the partition level.. you could fine tune ZFS to do it for you though. On Wed, May 21, 2008 at 10:41 AM, Beck, Joseph wrote: > The only google hit on this was DTQ with one of sun's NAS devices. > I'm looking to see if there is a way to implement directory level > quotas on solaris 9 and/or 10. > > its a weblogic server & all domains are running as single user...we're > pushing for dedicated role per domain but this will take a little time > & doesn't address existing domains. > developers agreed to implement log4j to put limits on size/amount of > logging but they have a unique requirement that requires us to figure > out a way to apply directory-tree based quotas. I haven't seen this > implemented anywhere & don't think its feasible based on ufs or vxfs > filesystems but figured I'd check out there. > > thanks, > > > Joe Beck Ciber Inc. - a consultant to SEI One Freedom Valley Drive/ > 100 Cider Mill Road| Oaks, PA 19456 | p: 610.676.2258 | jbeck at seic.com > _______________________________________________ > sunmanagers mailing list > sunmanagers at sunmanagers.org > http://www.sunmanagers.org/mailman/listinfo/sunmanagers > > -- Charles Morris cmorris at cs.odu.edu, cmorris at occs.odu.edu Network Security Administrator, Software Developer Office of Computing and Communications Services, CS Systems Group Old Dominion University http://www.cs.odu.edu/~cmorris _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From unix.95054 at gmail.com Thu May 22 01:22:09 2008 From: unix.95054 at gmail.com (Unix Admin) Date: Wed, 21 May 2008 22:22:09 -0700 Subject: SUMMARY: Grub question - tripple boot system Message-ID: <40a17ffe0805212222tc86db69q6d2745a0738d2360@mail.gmail.com> Well, the problem was lying in menu.lst file of grub. At any given point of time, it was not updating it for all three OS'es. If I installed Fedora in last, then it will update Grub for Fedora + Windows. In case of Solaris in last, the Grub was getting updated for Solaris + windows. I, then booted it using Fedora CD, and noted the Grub's menu.lst file and then appeneded the Fedora related entry in /boot/grub/menu.lst file of Solaris grub. (This is because I installed Solaris in last and it was booting only using Solaris Grub). Once I updated menu.lst file, and rebooted, every OS came up fine. Thanks to everyone who responeded. (and to those also who bothered to preach about the community rules but never provided any single hint!!!) :-) ********************************************************************************************************************************* #pragma ident "@(#)menu.lst 1.2 07/01/10 SMI" # # default menu entry to boot default 0 # # menu timeout in second before default OS is booted # set to -1 to wait for user input timeout 10 # # To enable grub serial console to ttya uncomment the following lines # and comment out the splashimage line below # WARNING: don't enable grub serial console when BIOS console serial # redirection is active!!! # serial --unit=0 --speed=9600 # terminal serial # # Uncomment the following line to enable GRUB splashimage on console splashimage /boot/grub/splash.xpm.gz # # To chainload another OS # # title Another OS # root (hd,) # chainloader +1 # # To chainload a Solaris release not based on grub # # title Solaris 9 # root (hd,) # chainloader +1 # makeactive # # To load a Solaris instance based on grub # If GRUB determines if the booting system is 64-bit capable, # the kernel$ and module$ commands expand $ISADIR to "amd64" # # title Solaris # root (hd,,x) --x = Solaris root slice # kernel$ /platform/i86pc/kernel/$ISADIR/unix # module$ /platform/i86pc/$ISADIR/boot_archive # # To override Solaris boot args (see kernel(1M)), console device and # properties set via eeprom(1M) edit the "kernel" line to: # # kernel /platform/i86pc/kernel/unix -B prop1=val1,prop2=val2,... # #---------- ADDED BY BOOTADM - DO NOT EDIT ---------- title Solaris Express Community Edition snv_86 X86 kernel$ /platform/i86pc/kernel/$ISADIR/unix module$ /platform/i86pc/$ISADIR/boot_archive #---------------------END BOOTADM-------------------- #---------- ADDED BY BOOTADM - DO NOT EDIT ---------- title Solaris xVM kernel$ /boot/$ISADIR/xen.gz module$ /platform/i86xpv/kernel/$ISADIR/unix /platform/i86xpv/kernel/$ISADIR/unix module$ /platform/i86pc/$ISADIR/boot_archive #---------------------END BOOTADM-------------------- #---------- ADDED BY BOOTADM - DO NOT EDIT ---------- title Solaris failsafe kernel /boot/platform/i86pc/kernel/unix -s module /boot/x86.miniroot-safe #---------------------END BOOTADM-------------------- title Windows rootnoverify (hd0,0) chainloader +1 #title Windows # rootnoverify (hd0,1) # chainloader +1 # Unknown partition of type 5 found on /dev/rdsk/c1t0d0p0 partition: 4 # It maps to the GRUB device: (hd0,3) . title Fedora root (hd0,4) kernel /vmlinuz-2.6.23.1-42.fc8 ro root=/dev/VolGroup00/LogVol00 rhgb quiet initrd /initrd-2.6.23.1-42.fc8.img *********************************************************************************************************************************** On Mon, May 19, 2008 at 11:57 AM, Unix Admin wrote: > Not a priority item or end of world for me but still I am curious to make it > work. Please dont reply by saying "RTFM or do googling!" I have done > homework but didn't find any solution :-) :-) > > I am trying to setup my laptop for tripple boot (Windows Vista + Fedora + > OpenSolaris Rev 86). > > I first created four fdisk partitions (2 for windows, 1 for OpenSolaris and > one for Fedora). > > Then I installed Windows Vista and rebooted. It came up fine. Then I > installed Fedora "without Grub option" and rebooted. It didn;t come up. I > thought that it is because Grub is not installed, thats why it is not able > to boot. > > Now, in last, I installed Open Solaris Rev 86 with all options and rebooted. > It is able to come up in Solaris but not in Windows and Fedora. > > When I select Fedora, it keep on rebooting but never comes up. When I select > Windows Vista,, it complains "BOOTMGE missing. Please press CTRL+ALT+DEL to > reboot". I can see the fdisk partition contains all the system file and it > was installed properly. > > Finally, I tried to install Grub on Fedora partition, but it is not > installing and gives "No kernel related package installed on your system." > It is weird. I have never seen this type of error message in past. > > The reason I did not installed Grub while installing fedora is that I read > on some website that the OS containing Grub should be installed in the last. > In this case, both Fedora and Solaris have their own grub. Not sure what I > should do to make it work. Has anyone come across this situation??? Please > help. > > Thanks for reading. _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From Szabadkai.Eva at malev.hu Thu May 22 05:36:10 2008 From: Szabadkai.Eva at malev.hu (=?iso-8859-1?Q?Szil=E1gyin=E9_Szabadkai_=C9va?=) Date: Thu, 22 May 2008 11:36:10 +0200 Subject: SUMMARY: How to speed up timeserver's clock in solaris9? Message-ID: Thanks to Richard Skelton Eric Voisard Sean Walmsley Grzegorz Bakalarski Darren Dunham and others, They sugegsted to use GPS system or radio-clocks to set the time via USB/serial on my Sparc hosts because in our company it is not allowed to get time from the internet for security reasons. At last I found a Windows NTP server and wrote its ip address in /etc/inet/ntp.conf on solaris boxes: server 57.227.64.219 prefer and restarting xntpd solved my problem, now the solaris boxes synchronize to the Window server running ntp services on it. Brgds, Eva Original question ============= On May 21, 2008, at 4:19 AM, Szilagyini Szabadkai Iva wrote: > Hi Gurus, > > Our solaris servers use a solaris9 timeserver to sync with. But > recently the clock of the server lates very much, > 1 minute per month. How can I adjust the frequency of the local clock > oscillator to speed it up? > Is it possible or have to use another precise external time source? _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From pnkumaresh at gmail.com Thu May 22 15:36:33 2008 From: pnkumaresh at gmail.com (kumaresh P N) Date: Thu, 22 May 2008 15:36:33 -0400 Subject: [SUMMARY] can i get the flash archive of T2000 to E220R ? In-Reply-To: <2d406e350805211002o28b9de8fka6f171afaf97e79f@mail.gmail.com> References: <2d406e350805211002o28b9de8fka6f171afaf97e79f@mail.gmail.com> Message-ID: <2d406e350805221236vddb745i88925817e889651d@mail.gmail.com> Not possible , different architecture ... Sun4u and Sun4v Thanks for all the replies .. Keep rocking Best Regards Kumaresh On Wed, May 21, 2008 at 1:02 PM, kumaresh P N wrote: > Hi Guys , > > I have the production server T2000 .. and i want a new test environment .. > and i have only E220R ... can i flash archive T2000 and restore it in E220R > ????????? > > > -- > Best Regards > > Kumaresh > -- Best Regards Kumaresh _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From rumbiles at yahoo.com Fri May 23 02:31:16 2008 From: rumbiles at yahoo.com (rumbidzayi gadhula) Date: Thu, 22 May 2008 23:31:16 -0700 (PDT) Subject: SUMMARY: tape read error Message-ID: <450704.51044.qm@web54410.mail.yahoo.com> Good day! I confirmed my suspicions of a bad tape. Apparently the source server (the server from which the tape was written) has a misaligned head and this caused the tapes to develop read errors on the other drives. I have setup an external tape drive on that server and everything is working fine. Thanks to all who responded. Regards, R Gadhula _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From bgbeaird at sbcglobal.net Fri May 23 14:16:54 2008 From: bgbeaird at sbcglobal.net (Gene Beaird) Date: Fri, 23 May 2008 13:16:54 -0500 Subject: Summary: memory or CPU error on SunFire V280R Message-ID: <000d01c8bd01$30163d80$0214a8c0@ibmt23> Thanks to: mh1272 (hike) Eric Voisard Dean Ross-Smith for their replies. Hike pointed out that these were indeed kern.info messages, and not errors. As such, it was simply the system informing me that there had been a memory error but the system successfully corrected it. Dean reinforced the fact that this is a lot like the Persistent, correctable memory errors that we occasionally see. As long as they don't occur in rapid succession, there is usually not a problem. Eric stated that he had seen this before on a batch of V280Rs they he had at his establishment that apparently had some weak CPUs. They passed original QA, but had to be replaced after being placed into production and running for a while under a load. I've seen that in E220Rs, too, but that was a long time ago. I simply let the customer know there was no problem here, but that we will monitor the situation to see if the messages occur more frequently. I haven't seen a repeat yet. Two documents I found a good read: Soft Memory Errors and Their Effect on SunFire Systems (thanks Eric), and Supplement to Sun Fire 6800/4810/4800/3800 Systems Troubleshooting Manual (Further description of ecache and WDC events) Thank you, all. Gene Beaird, Unix Support Engineer, Pearland, Texas No virus found in this outgoing message. Checked by AVG. Version: 7.5.524 / Virus Database: 269.24.0/1462 - Release Date: 5/23/2008 7:20 AM _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From bgbeaird at sbcglobal.net Fri May 23 14:31:24 2008 From: bgbeaird at sbcglobal.net (Gene Beaird) Date: Fri, 23 May 2008 13:31:24 -0500 Subject: Summary: Help with booting a SunFire V440 Message-ID: <000e01c8bd03$35f920d0$0214a8c0@ibmt23> Again, thank you to all who replied: Peter Winterflood Jeff Marble Jerry Kemp Christopher Barnard Ioan Nemes Jay Florendo Stefan Varga Tim Bradshaw Kamal Bhusal Ryan Anderson I had multiple problems with this system, chief of which was I couldn't get it to boot from disk1 with the bad disk0 in it. Disk0 was throwing so many SCSI errors that the system would never accept a login. I even had to catch the system at the right time, go to the SC> prompt and issue a reset to get it to drop to an OK prompt so I could attempt a reboot. After finally getting a bootable Solaris 9 CD of the proper vintage in the box, I was able to break the mirrors, convert the metadevices to cxtxdxsx devices and the system actually did boot on disk0, although it did post a bunch of SCSI errors. Both disks successfully passed fsck, though. Jeff suggested I reseat the drives, but by the time I got the system booted on the CD, I already had a Sun FE standing in front of the box with a new disk. Once the Sun FE arrived, and determined it had a bad disk0, we tried to reboot it to disk1 so he could replace the drive with the box life. Since that wasn't happening, we shut the system down, replaced disk0 and rebooted the system on disk1. That was successful. Once we did that, I was able to re-init the metadevices and resync the mirrors. That process took about seven hours. The system has been running ever since. Ryan Anderson did note that he had a V440 do the same thing after a power outage, and it corrupted the bootblock on disk0. After rebooting to a CD, and mounting disk0, he simply copied back in the bootblock and successfully rebooted the server. Unfortunately, I got that info too late to try, but I have squirreled that away for later use. I really think the disk was physically hurt, though, given the errors it was throwing. Here is the steps Mr. Anderson followed to accomplish the bootblock copy: OK> boot cdrom -s # mkdir /tmp/mnt # mount /dev/dsk/c0t0d0s0 /tmp/mnt # installboot /tmp/mnt/usr/platform/sun4u/lib/fs/ufs/bootblk /dev/rdsk/c0t0d0s0 # umount /tmp/mnt # halt OK> boot Thanks again, this list rocks! Gene Beaird, CISSP, Unix Support Engineer, Pearland, Texas No virus found in this outgoing message. Checked by AVG. Version: 7.5.524 / Virus Database: 269.24.0/1462 - Release Date: 5/23/2008 7:20 AM _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From unixlifebox at gmail.com Wed May 28 10:28:00 2008 From: unixlifebox at gmail.com (Rongsheng Fang) Date: Wed, 28 May 2008 10:28:00 -0400 Subject: Summary: Sun Fire E6900 boots EXTREMELY slow In-Reply-To: References: Message-ID: <73F05881-1147-4A71-AEC2-4C5477D97BCA@gmail.com> Thanks to everyone who replied: Anatoliy Nelyubin Noel Milton Vega Francisco Mauro Bill Voight DRoss-Smith James C. McPherson I asked: > > We have a Sun Fire E6900 with two dual port Sun branded Qlogic 4GB/ > s HBAs. The servers is connected to a EMC Symmetrix DMX3 via two > redundant Brocade fibre switches. The DMX3 has 4 FA connections > going to each fibre switch. So each LUN presented on the OS has 16 > paths. Currently 221 EMC LUNs are presented to this box, which > means the OS will see 3536 EMC LUNs. > > We are running Solaris 10 U5 on this server. We did a reconfigure > reboot today, and it's been more than 2 hours and the system is > still trying to do detect all the paths to the EMC devices: > > ...... > /ssm at 0,0/pci at 18,600000/SUNW,qlc at 1/fp at 0,0/ssd at w5006048ad52cc2c7,1c8 > (ssd3079) online > ssd3080 at fp6: name w5006048ad52cc2c7,1c7, bus address 17000 > ssd3080 is /ssm at 0,0/pci at 18,600000/SUNW,qlc at 1/fp at 0,0/ > ssd at w5006048ad52cc2c7,1c7 > /ssm at 0,0/pci at 18,600000/SUNW,qlc at 1/fp at 0,0/ssd at w5006048ad52cc2c7,1c7 > (ssd3080) online > ssd3081 at fp6: name w5006048ad52cc2c7,1c6, bus address 17000 > ssd3081 is /ssm at 0,0/pci at 18,600000/SUNW,qlc at 1/fp at 0,0/ > ssd at w5006048ad52cc2c7,1c6 > /ssm at 0,0/pci at 18,600000/SUNW,qlc at 1/fp at 0,0/ssd at w5006048ad52cc2c7,1c6 > (ssd3081) online > ssd3082 at fp6: name w5006048ad52cc2c7,1c5, bus address 17000 > ssd3082 is /ssm at 0,0/pci at 18,600000/SUNW,qlc at 1/fp at 0,0/ > ssd at w5006048ad52cc2c7,1c5 > /ssm at 0,0/pci at 18,600000/SUNW,qlc at 1/fp at 0,0/ssd at w5006048ad52cc2c7,1c5 > (ssd3082) online > ssd3083 at fp6: name w5006048ad52cc2c7,1c4, bus address 17000 > ssd3083 is /ssm at 0,0/pci at 18,600000/SUNW,qlc at 1/fp at 0,0/ > ssd at w5006048ad52cc2c7,1c4 > /ssm at 0,0/pci at 18,600000/SUNW,qlc at 1/fp at 0,0/ssd at w5006048ad52cc2c7,1c4 > (ssd3083) online > ssd3084 at fp6: name w5006048ad52cc2c7,1c3, bus address 17000 > ssd3084 is /ssm at 0,0/pci at 18,600000/SUNW,qlc at 1/fp at 0,0/ > ssd at w5006048ad52cc2c7,1c3 > /ssm at 0,0/pci at 18,600000/SUNW,qlc at 1/fp at 0,0/ssd at w5006048ad52cc2c7,1c3 > (ssd3084) online > ssd3085 at fp6: name w5006048ad52cc2c7,1c2, bus address 17000 > ssd3085 is /ssm at 0,0/pci at 18,600000/SUNW,qlc at 1/fp at 0,0/ > ssd at w5006048ad52cc2c7,1c2 > /ssm at 0,0/pci at 18,600000/SUNW,qlc at 1/fp at 0,0/ssd at w5006048ad52cc2c7,1c2 > (ssd3085) online > ...... > > > I am not sure if the long reboot time is due to the large number of > paths that the OS has to detect during the reconfigure boot process > or something else is wrong. Has anybody experienced this before? This reconfigure reboot actually took about 3 hours. We had two bad links (our of 8) between the DMX and the switch during the time of the reboot. I wasn't and am still not sure if that was causing the problem. But once the links were fixed, the reconfigure boot time comes down to 20 minutes which is quite normal for a Sun Fire E6900. Yes, I did try a couple of reconfigure reboots and made sure the results were consistent. James C. McPherson from Sun mentioned: "if you've got that many paths resulting in an extraordinary number of luns, then yes I would expect to see a crazylong boot time." I didn't enable MPxIO and gave it a shot as the problem seemed to go away once we fixed the bad links. Thanks again to all who responded! Rongsheng _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From romeotheriault at gmail.com Wed May 28 11:31:14 2008 From: romeotheriault at gmail.com (Romeo Theriault) Date: Wed, 28 May 2008 11:31:14 -0400 Subject: SUMMARY: Total User Memory Footprint Message-ID: <46cd475b0805280831x3780c598hb05556345d92e3ac@mail.gmail.com> Many Thanks for all the responses (folks listed below): Most people replied with some combination of using prstat -a and prstat -t or using ps with a command like this: 'ps -eo vsz,rss,user' and adding up the vsz and rss per user. francisco roque gave a handy little shell script to do this: ps -eo user= | sort -u | while read U; do ps -eo vsz,rss,user | awk '/'$U'/{ v+=$1; r+=$2} END {print "user '$U' is using VSZ of", v, " and RSS of", r}'; done Many people also noted that using the ps and prstat methods will not be all that accurate for processes that use lots of shared memory, such as oracle. Suggestions for getting more accurate answers included using the ipcs and pmap commands. Since I can't explain it better, here is a quote from Darren Dunham explaining how one would get more accurate results with pmap. "So the smart (and more difficult) thing to do is run 'pmap -x ' for all processes that you're interested in. Then check the shared mappings to files and ISM and count those only once for all the files they appear in. Then count anonymous and other private spaces for each file it's in. That should get you a much closer count." So, thanks again for all the responses from people. In this case I believe that the prstat -t output will be close enough of an approximation for our needs. Thanks to: Richard Skelton xyu121520 Aleks Feltin Darren Dunham Francisco Puente Dean Ross-Smith John Hallman Steve Edberg Francisco Roque -- Romeo Theriault _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From sunhux at gmail.com Thu May 29 00:00:39 2008 From: sunhux at gmail.com (sunhux G) Date: Thu, 29 May 2008 12:00:39 +0800 Subject: Summary: Brainstorming needed: impact of changing hostname Message-ID: <60f08e700805282100u7d40f562rb70fd1d32882ec28@mail.gmail.com> Thanks, the favourite replies follows : ================== b) A properly configured firewall is the key defense against outside world. If a hacker has breached your network, a funny sounding name is not going to slow him down. He's going to do a port scan and figure out if this is an ORACLE server or a file server. Outsourced IT vendors & internal users are hard to guard against. If you are really paranoid about keeping them from knowing details about the box, you could put the box in a DMZ and only expose the services they absolutely require. But again, there's a good chance that one or more of the services they are exposed to will give away your OS anyway c) Hardening should be your first priority. I would put all of your effort into that. =================== a)If your infrastructure is already running, I seriously discourage renaming the boxes. Some software licence key off the hostname. Many not very smart programmers also hardcode the hostnames in their code. Some applications use he hostname for licensing too. Changing hostnames can lead to pretty bad application outages. =================== d) if you're really allowing telnet (not ssh) access, you're likely have larger security issues. d)Secure your login banner page with warning & don't use things like "Welcome to company ABC" in it =================== a)Don't have any other "authorative" sources to back that up, but do they have any that claim it is high risk? a)If I have a domain name, I can look up who registered "example.com." If I have an IP, you're right, I can go to ARIN, RIPE, APNIC, etc. and find out to whom the space is registered. b)There is no accepted secure naming convention that works for everyone. The most "secure" naming convention would be random strings. But that's not good for humans. If you make the names too hard, why bother. It's just as easy to remember by IP address. b)If you don't want people to know your organization name, should you have a website to begin with? Also, if your IP address is available via DNS, someone could use (say) nmap to give them MUCH more information about your system than they could get from a hostname. ============================================ to make it easier for the outside world to deal with, I use CNAMEs to assign every host a second name indicating its function, e.g. Hostname banana dns1.example.com apple dns2.example.com ... ... wyoming mx1.example.com oregon mx2.example.com Note how this makes changes seamless: if I bring online a new DNS server named "coconut" to replace "apple", then as long as the CNAME points to the new host, the change is invisible. NOTE CAREFULLY that MX records must not point to CNAMEs, by the way. > c)What's the system/network impact? This is why you use CNAMEs. It removes the need to change most of this stuff, because you can just make the changes (a) on the host and (b) in DNS, then everything else just works. ==================== - Yes, CA Unicenter monitoring agent needs to be reinstalled - Yes, HP DataProtector needs to be reinstalled - will any OS patches (for Solaris, HPUX, Linux) need to be reinstalled? No, but some software licence depends on hostname ==================== For naming convention, it's recommended the length do not exceed 8 characters though it can go longer as some existing application/tools may not be able to support hostname with more than 8 characters : http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x2db614a24fd1d4118fef0090279cd0f9,00.html http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0xc2b7d5fab40ed6118ff40090279cd0f9,00.html Using fruit/object name easily exceeds the 8 character limit ==================== One organization that has different geographical location came up with this : sfwdp01a (use lower case) where - "s" represent country (MNC uses this to identify where the server is located geographically) - "fw" is the function (fw for firewall, dn for dns, sw for switch, ws for webserver, db for database server) - "dp" is a code for the department that uses it (pb if public) - 01/02 (just a numbering system in incrementing order) - a or b (if it's a cluster member, a for 1st member, b for 2nd ...) _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From speedyourmind at yahoo.com Fri May 30 09:35:04 2008 From: speedyourmind at yahoo.com (Kiran Sharma) Date: Fri, 30 May 2008 06:35:04 -0700 (PDT) Subject: SUMMARY: CPU utilization/ Disk utilization In-Reply-To: <614156.51376.qm@web65407.mail.ac4.yahoo.com> Message-ID: <922356.85536.qm@web65404.mail.ac4.yahoo.com> Thanks to following individuals who gave me very good information. Jeff Marble, francisco roque, hike, John Hallman, Unix Admin John suggested to monotor the sql process and database stuff and other folks suggested to use or configure sar for future use. I think I should use sar in the future. Thanks KS Kiran Sharma wrote: Hi Gurus, I got a complain from a user that it took him 4 hour to update a remedy ticket to all subsequent child tickets to have the category type and items change. I have Sun StorageTek 2510 array attached. Could someone please give me some hints to find out what was cpu utilization yesterday from 5 tp 9 PM? Just to update one ticket it was taking 4 hours and it was really slow. I need to find out the reason behind it. I don't have any other monitoring tools here. When I use iostat to see the read and write info it has very much ups and down data. It spikes and goes down. Hope to hear from you guys. Thanks - KS _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From ddratliff at yahoo.com Fri May 30 10:33:14 2008 From: ddratliff at yahoo.com (D. Ratliff) Date: Fri, 30 May 2008 07:33:14 -0700 (PDT) Subject: Summary: boot directory in sol 10 CD image Message-ID: <903863.6393.qm@web31704.mail.mud.yahoo.com> Thanks to : Darren Dunham Anonymous Mark sunman links to the solution: http://www.bolthole.com/solaris/mount-cdrom.html http://www.petertribble.co.uk/Solaris/isosetup.html regards, Don --- On Thu, 5/29/08, D. Ratliff wrote: > From: D. Ratliff > Subject: boot directory in sol 10 CD image > To: "SUN Managers" > Date: Thursday, May 29, 2008, 3:59 PM > Hey all, > > > i've downloaded the iso files for CDs, ( > > couldn't seem to download the DVD image ), > unzipped the > > files to pure iso files, cat'ed the files together > and > > mounted the resulting iso file using lofiadm. > > when I run add_install_client it complains about > an > > invalid Boot directory, sure enough... the Boot > directory > > shows as some link which doesnt' exist .. what the > heck > > is s1??? > > any help appreciated. > > Don > > qbvision38 Tools> ls -l > > total 228 > > -rwxr-xr-x 2 root bin 64643 Oct 17 > 2007 > > add_install_client > > lrwxrwxrwx 1 root root 11 Mar 24 > 16:17 > > Boot -> ../../../s1 > > -rwxr-xr-x 2 root sys 1325 Oct 17 > 2007 > > dial > > drwxr-xr-x 2 root root 2048 Mar 24 > 16:23 > > miniroot_extra > > -rwxr-xr-x 2 root bin 19233 Oct 17 > 2007 > > rm_install_client > > -rwxr-xr-x 2 root bin 27742 Oct 17 > 2007 > > setup_install_server > > qbvision38 Tools> pwd > > /jumpstart/solaris/sparc10_0508/Solaris_10/Tools > > qbvision38 Tools> > > > > - Done. _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers From tschmidt at micron.com Fri May 30 14:29:03 2008 From: tschmidt at micron.com (Tom Schmidt) Date: Fri, 30 May 2008 12:29:03 -0600 Subject: SUMMARY: Solaris 10 5/08 jumpstart not working In-Reply-To: <483F2266.4070606@micron.com> References: <483F2266.4070606@micron.com> Message-ID: <4840476F.5080202@micron.com> I have found the issue. My boot server is booting the Solaris 10 12/05 release (update 1), which worked fine for Solaris 10 8/07 (update 4) and earlier, but is not working for installation of Solaris 10 5/08 (update 5). I use a separate boot server because the client I am jumpstarting is on a different subnet than the install server. So to fix the issue, I am upgrading the Solaris 10 install image on the boot server to 5/08. Thanks go to Martin Paul for giving me a couple ideas that helped me pinpoint the issue. Tom Tom Schmidt wrote: > I have downloaded the ISOs of the DVD image for Solaris 10 5/08 for > SPARC and I have installed it on my jumpstart server. However, when I > jumpstart a machine with the image, it fails to complete, stating > "Solaris 10 software installation partially failed". > > I verified the MD5 checksums of the downloads, and also tried using the > 5 CD images instead of the DVD image, and I get the same results. I > installed the image on my jumpstart server the same way I did for the > Solaris 10 8/07 image, which jumpstarts fine. But I cannot get the 5/08 > image to jumpstart. Is anyone else seeing the same issue or know of a > workaround? > > Background information: > Installed from Solaris 10 5/08 downloaded ISOs using: > umask 022 > mkdir /jumpstart/install/sparc_5.10_508 > lofiadm -a > /jumpstart/install/sol10-u5.isos/sol-10-u5-ga-sparc-dvd.iso /dev/lofi/1 > mount -F hsfs /dev/lofi/1 /mnt > rsync -aHSz /mnt/.??* /mnt/* /jumpstart/install/sparc_5.10_508 > umount /mnt > lofiadm -d /dev/lofi/1 > I then jumpstart using the /jumpstart/install/sparc_5.10_508 path and > the SUNWCall cluster. My boot server is running the Solaris 9 9/05 > SPARC release, which works fine for jumpstarting earlier Solaris 10 > releases. > > Here is the end of the jumpstart log showing the failure: > > Completed software installation > > Solaris 10 software installation partially failed > > Solaris 10 packages partially installed > SUNWocfd > SUNWcsu > SUNWcsr > SUNWcsl > . . . > SUNWtiu8 > > Customizing system files > - Mount points table (/etc/vfstab) > > ERROR: Could not open file (/a/etc/vfstab) > > ERROR: Could not create the file system mount table (/etc/vfstab) > > ERROR: System installation failed > Solaris installation program exited. > # > > > Thanks...Tom -- Tom L. Schmidt, Manager/SysAdmin Characterization Equipment Micron Technology, Inc. http://www.micron.com/ 8000 S. Federal Way P.O. Box 6 Mail Stop 01-371 Boise, Idaho USA 83707-0006 mailto:tschmidt at micron.com http://peunix.micron.com/ _______________________________________________ sunmanagers mailing list sunmanagers at sunmanagers.org http://www.sunmanagers.org/mailman/listinfo/sunmanagers