Managing ldap sub tree with Solaris Mnagement Console

Hi,
I'm using Sun ONE Directory Server 5.2 in Solaris 9 envronment.
I want to use Solaris Management Console to manage my Ldap Name Service.
On my ldap server I can display two scopes :
Scope 1 file:/example/example
Scope 2 ldap:/example/dc=example,dc=com
With SMC Editor I've created a toolbox to manage my ldap domain and I can manage users and groups only on trunk tree but not on the sub tree.
Does someone can tell me please if it's possible to display the ldap sub tree with SMC and if it's possible to manage other cotainers than people or group containers with SMC (for ex. netgroup container) ?
Thanks.
Dra

By try and error I found out that even when I upgraded my
Sun ONE Directory Server 5.2 to patch level 2, the configuration
in the administration directory was not changed to the new
version. So one couldn't connect with the new console
version 5.2pl2 but used and needed the old one effectively.
To use the 5.2 pl 2 console there need to be the following
files in the client directory:
<root of sun ldap console>/java/jars/
ds522.jar (main console application)
ds522_en.jar (english language resources)
ds522_de.jar (german language resources, in my case, optional)
ds522.icon (icon used in the console)
and for the administration console:
admserv522.jar
admserv522_en.jar
admserv522_de.jar
admserv522.icon
The old file with the '52' in their name may stay where they
are to connect to unpatched 5.2 Servers and 5.2pl2 Servers
without updated configuration.
The configuration is under:
cn=ResourceEditorExtension, ou=4.0, ou=Admin, ou=Global Preferences, ou=zentrale.edekanet.de, o=NetscapeRoot
Search for the attribute 'nsclassname' in all subentries where there
is a substring '@ds52.jar' and change it to '@ds522.jar'.
With newer versions of the Sun Directory Server there are
even jar files with names like 'ds523.jar'. Proceed like above.
After the next start of the console you are using the new 5.2pl2
Versions with all bugfixes and enhancements. To verify you may
move the '52' files away, start and connect. If the directory server
is configured the right way it won't try to download the '52' files
to your local computer.
Frerk

Similar Messages

LDAP sub tree search by OAM during authentication

Hi,
Is it possible to configure OAM to perform sub tree search for user id while authenticating a user. The scenario is - OAM is configured to search LDAP at level ou=comp, dc=com. User ID U01 is stored in ou=fin,ou=comp,dc=com. When user logs in with user ID U01, will OAM search in sub tree level ou=fin,ou=comp,dc=com and not just under ou=comp, dc=com?

Also, you can get more info at http://docs.oracle.com/cd/E27559_01/admin.1112/e27239/datasrc.htm#CHDIACJI URL with more description.
~J

Problems with Solaris Web Console on Solaris 10 x86

I recently installed Solaris 10 x86 (10/08 release) on a Sun x4450.
I have installed the Jan 14, 2009 patch cluster.
I was having some problems connecting to the Web Console to do some ZFS administration. That's when I installed the patch cluster.
After the patch cluster install I couldn't connect at all. This problem was resolved here: http://forums.sun.com/thread.jspa?threadID=5249136
Now when I login to the Web Console I get a message that says:
"+No application is registered with this Sun Java(TM) Web Console, or you have no rights to use any applications that are registered. See your system administrator for assistance.+"
I'm logging in as root, so it shouldn't be a rights issue.

Quick Solution to the problem you are facing
How to configure ZFS Webconsole Administration
run this command
wcadmin deploy -a zfs -z zfs /usr/share/webconsole/webapps/zfs
you should be able to see & Manage ZFS in Applications area of webconsole.
Enjoy ! Cheers

How to drag and drop a sub tree between 2 treeview?

Suppose I have 2 tree rendered in 2 treeview. Then I want to drag and drop any subtree on any node between the 2 tree.
For example, in tree 1, if I drag node node1 and drop it on tree 2 node node2. I want all nodes from node1(subtree) moved to node 2 in tree 2.
How can I do it? Should I code for treeview 1 begindrag event, and code for treeview 2 dragenter event?
and how to move a sub tree with pb built-in function?

Hi Kent,
I have just experimented with drag and drop between treeviews. Below is your bare minimum and caters for one node only. It does not drag any children along. If you drag an item it loses any children. Although it works both ways and within.
The handle is set in the dragbegin events.
In the dragdrop events you get source as an argument which is a pointer to the treeview where the drag started.
You get the node using GetItem ( ref treeviewitem ), then InsertItemSort as a child of the node dropped on.
NOTE: Must uncheck DisableDragAndDrop property for both treeviews.
// Instance Variable
ulong draggedhandle
type tv_1 from treeview within w_treehop
string dragicon = "Form!"
boolean dragauto = true
boolean disabledragdrop = false
end type
event begindrag;
draggedhandle = handle
end event
event dragdrop;
treeview tvSource
treeviewitem ltvidropped, ltvidragged
tvSource = source
if draggedhandle > 0
if handle <> draggedhandle or tvSource <> this then
    tvSource.GetItem( draggedhandle , ltvidragged )
    this.GetItem( handle , ltvidropped)
    this.Insertitemsort( handle, ltvidragged )
    tvSource.Deleteitem( draggedhandle )
    draggedhandle = 0
end if
end if
end event
type tv_2 from treeview within w_treehop
string dragicon = "Form!"
boolean dragauto = true
boolean disabledragdrop = false
end type
event begindrag;
draggedhandle = handle
end event
event dragdrop;
treeview tvSource
treeviewitem ltvidropped, ltvidragged
tvSource = source
if draggedhandle > 0
if handle <> draggedhandle or tvSource <> this then
    tvSource.GetItem( draggedhandle , ltvidragged )
    this.GetItem( handle , ltvidropped)
    this.Insertitemsort( handle, ltvidragged )
    tvSource.Deleteitem( draggedhandle )
    draggedhandle = 0
end if
end if
end event
To carry over nested treeview items (children) you can use FindItem ( draggedhandle, navigationcode )
navigationcode as per help:
     ChildTreeItem! The first child of itemhandle.
     NextTreeItem! The sibling after itemhandle. A sibling is an item at the same level with the same parent.
HTH
Lars

Solaris 8 client setup with solaris 9 ldap

I have managed to install iplanet directory server 5.1 that comes with solaris 9 using the utility idsconfig. As far as i can tell, all went well. Now i'm trying to initialize a solaris 8 client to authenticate to the iDS 5.1 on my solaris 9 box. What do i have to do on the solaris 8 client to "initialize it"? I've tried using ldapclient on the solaris 8 client as follows:
# ldapclient -v -P default x.x.x.x
but i keep getting the following errors:
findDN rename(/var/ldap/ldap_client_file.orig, /var/ldap/ldap_client_file) failed!
findDN rename(/var/ldap/ldap_client_cred.orig, /var/ldap/ldap_client_cred) failed!
There are no files in /var/ldap. I thought that one uses ldapclient to create them. Am i wrong?
Also, the output from idsconfig says that a 'NisDomainObject' was added to my domain but looking at the object classes in iDS5.1, there is no nisdomainobject.
I also noticed that when i run the command domain on my solaris 8 box, there's no output. Do i need to set the domain on my solaris 8 client? I have the domain defined in /etc/resolv.conf.
Stewart

hi Stewart,
You may find what you are looking for in the following technical note: http://knowledgebase.iplanet.com/ikb/kb/articles/7966.html
It is called: "Cookbook for Solaris 8 client with Directory Server 5.1/Solaris 9" :-)
Hope this will help you.
Cheers / Damien.

Experience with Solaris 10 Memory Management

Dear Forum!
Using Note 724713 we installed a couple of R3 Systems on Solaris 10. Independently which R3 Version is used we observe much more memory problems as with prior solaris releases or other operating systems like AIX.
For instance1: We moved three R3 Systems from a server with solaris 8 to a server with solaris 10. We didnt change memory parameters of R3 and the databases (oracle). The solaris 10 server has the same amount of memory (8GB) like the solaris 8 server. Now, on the solaris 10 server we can only start two R3 systems, the third one doesnt start because no memory can be allocated. The memory parameter of all component slightly overload the main memory. Because the systems are not productive they mostly idle and performance loss due to paging and even swapping didnt worry us. Not even that the third system didnt start, the whole OS was a kind of freezed and no more work was possible, also not on the other two R3 systems which were already startet.
For instance2:
On another server with 16GB memory we startet an installation of a sapsystem and the sapinst crashed due to memory absence. Admittedly, here the main memory was also a bit overloaded, but this is not unusal here and I never saw sapinst crashing because of this.
In both cases Swapspace was adequate.
Do you have similar experiences? Or any tipps to solve the problem.
Thanks
Andreas

this is strange. Although /etc/user_attr shows
/etc/user_attr shows
adm::::profiles=Log Management
lp::::profiles=Printer Management
postgres::::type=role;profiles=Postgres Administration,All
root::::auths=solaris.*,solaris.grant;profiles=Web Console Management,All;lock_after_retries=no;min_label=admin_low;cle
arance=admin_high
qp7adm::::project=QP7
oraqp7::::project=QP7
sapadm::::project=QP7
smdadm::::project=QP7
the process list show that the processes of the user sidadm run in project "system" only the oracle user project is ok:
root@pi7q # ps -eo user,pid,ppid,project,args
    USER   PID PPID PROJECT COMMAND
oraqp7 1783 3652      QP7 ora_q001_QP7
oraqp7   125 3652      QP7 ora_mmon_QP7
qp7adm 1884 1862   system dw.sapQP7_DVEBMGS00 pf=/usr/sap/QP7/SYS/profile/QP7_DVEBMGS00_pi7q
oraqp7 20464 3652      QP7 oracleQP7 (LOCAL=NO)
daemon 4416 3652   system /usr/lib/nfs/nfs4cbd
qp7adm 1870 1862   system icman -attach pf=/usr/sap/QP7/SYS/profile/QP7_DVEBMGS00_pi7q
oraqp7 20462 3652      QP7 oracleQP7 (LOCAL=NO)
    root 14658 25510 user.root bash
oraqp7   105 3652      QP7 ora_dbw1_QP7
oraqp7 2980 3652      QP7 oracleQP7 (LOCAL=NO)
    root 5819 3652   system ./tGAgent.d -d
oraqp7 2544 3652      QP7 oracleQP7 (LOCAL=NO)
smdadm 5639 3652   system /usr/sap/SMD/SMDA02/exe/sapstartsrv pf=/usr/sap/SMD/SYS/profile/SMD_SMDA02_pi7q
qp7adm 1900 1862   system dw.sapQP7_DVEBMGS00 pf=/usr/sap/QP7/SYS/profile/QP7_DVEBMGS00_pi7q
    root 4443 3668   system /usr/lib/saf/sac -t 300

Monitoring services in zones with Solaris container Manager

I need to know how to Manage Solaris services (SMF) in sparse zone with Solaris container manager.
I have navigated all the documentation and I have not found any clue.
I installed the Sun management center (SMC) server on a server box and the agents on others. I can manage the SMF of the global zone by drilling down via the console GUI. But having access to the container manager, I have to go via https connection. And drilling down on the zone did not reveal that SMF can be monitored.
Please if you have any idea, share it with me.

Hi,
check these:
- Version of webserver latest is 3.1
# smcwebserver -V
- check webconsole is started and running
# smcwebserver status
Sun Java(TM) Web Console is running
# svcs webconsole
STATE STIME FMRI
online 19:38:06 svc:/system/webconsole:console
# svcs -pl webconsole
fmri svc:/system/webconsole:console
name java web console
enabled true
state online
next_state none
state_time Wed Feb 10 19:38:06 2010
logfile /var/svc/log/system-webconsole:console.log
restarter svc:/system/svc/restarter:default
contract_id 64
dependency require_all/none svc:/milestone/network (online)
dependency require_all/refresh svc:/milestone/name-services (online)
dependency require_all/none svc:/system/filesystem/local (online)
dependency optional_all/none svc:/system/filesystem/autofs (online) svc:/network/nfs/client (online)
dependency require_all/none svc:/system/system-log (online)
process 843 /usr/java/bin/java -server -Xmx128m -XX:+UseParallelGC -XX:ParallelGCThreads=4
- check port 6789 is listen mode
# netstat -an | grep 6789
*.6789 *.* 0 0 49152 0 LISTEN
if the output show
localhost .6789 *.* 0 0 49152 0 LISTEN
than do these:
- check that the tcp_listen of webconsole service is true, default is false
# svccfg -s webconsole listprop options/tcp_listen
options/tcp_listen boolean false
# svcadm disable svc:/system/webconsole:console
# svccfg -s webconsole setprop options/tcp_listen=true
# svccfg -s webconsole listprop options/tcp_listen
options/tcp_listen boolean true
# svcadm enable svc:/system/webconsole:console
Regards

Which is better approach to manage sharepoint online - PowerShell Script with CSOM or Console Application with CSOM?

Which is better approach to manage sharepoint online - PowerShell Script with CSOM or Console Application with CSOM?
change in sharepoint scripts not require compilation but anything else?

Yes, PowerShell is great, since you can quick change your code without compilation.
SP admin can write ps scripts without specific tools like Visual Studio.
With powershell you can use cmdlets,
which could remove a lot of code, for example restarting a service.
[custom.development]

Impossible to start UCM managed server with the WLS console

Hi,
I cannot start the UCM managed server with the WLS console. The node manager is running by startNodeManager.cmd. The admin server by startWebLogic.cmd.
When I start the UCM server with the console WLS (Environment, Servers, Control tab and Start on the checked server), it seems to be running (the state is RUNNING) but when I open the url on the the web server UCM there is a 404 error
In the log, there are many java.lang.ClassNotFoundException: oracle.jrf.wls.JRFStartup, oracle.security.jps.wls.JpsWlsStartupClass, oracle.core.ojdl.weblogic.ODLConfiguration, oracle.jrf.AppContextStartup, oracle.as.jmx.framework.wls.spi.StartupListener, oracle.ias.cache.Startup, oracle.dms.wls.DMSStartup ...
If I start UCM directly by startManagedWebLogic.cmd and not with the WLS console, everything is OK. No error in the log and UCM server is working well
Any idea ?
Thanks
Hugues

Great!
I had the same error: when starting UCM on WL Console, it starts and says Running. But when accessing it on the browser receive the error 404. In the other hand, when starting with Commands, it force shutdowns.
I have set the StartScriptEnabled property to true, now I can start UCM only on the command Line, to start it on WL Console, I have to manually start the node manager.
Is there a way/script to start the node manager automatically?
Regards,

Problem with the agent console created in the ESSO-Logon Manager 64 bits

Friends,
When I use the installer that I created in the console ESSO-Logon Manager for 32-bit, this I install it on the client side and when I synchronize with the console-Logon Manager ESSO brings me and I can see the agent all the templates I configured.
I have a problem with the agent console created in the Logon Manager ESSO-64bit.
When I use this installer on the client stations and then by the agent does not envision the applications that I have configured in the console.
This causes you can not do single sign on to applications that I have configured in the client stations
To generate this installer use the source name: ESSO-LMx64.msi
Can someone please help me with this problem, this only happens when I use the msi installer on 64-bit client stations.
Thanks.

Jackson_Bill wrote:
What IDE are you using and what platform?Read first.
Moh Bob wrote:
I'm using J2ME platform SDK 3.0
db

Bandwidth manager with Solaris 10

Hi all
I newbie with solaris and would like to test the IPQoS feature to use for bandwidth limit in a isp.
I just readed the oficial IPQoS Sun tutorial but I looking for simples examples to limit the bandwidth per ip (clients).
Someone knows where can find more examples.
Thanks in advance.
roberto

Did you checked this one out already?
http://docs.sun.com/app/docs/doc/816-4554/6maoq028g?a=view
//M.

Sun LDAP with Solaris

Hi All,
i have very simple and short query, Is Sun Directory comes bundled with Solaris 10 ? or we need to download explicitely.
If we download that is a free version or we need to procure.
Thanks
Avninder

Hi Avninder,
No it does not come with Solaris 10, nor Solaris 10 current license gives you entitlement with support for it.
Please go and download from www.sun.com/dsee
Etienne

Error while configuring external LDAP user store with weblogic

Hi,
I have weblogic 10.3 installed and I can access weblogic admin console using weblogic (admin) user. I want to use external ldap user store to access admin console with users present in external ldap.
To do this, I have configured authentication provider and provided all the required details to connect to ldap.
For example:
Base DN: cn=admin,cn=Administrators,cn=dscc (user with which we will connect to LDAP)
User DN: ou=People,dc=test,dc=com
Group DN: ou=Groups,dc=test,dc=com
This authentication provider is set to SUFFICIENT mode. I have deleted the default authentication provider.
In the boot.properties file I have given the user name and password of the user with which LDAP instance was created something like below.
password=xxxxxxx
username=admin
Now while starting the admin weblogic server, I am getting the below error:
<Jul 25, 2012 2:22:28 PM IOT> <Critical> <Security> <BEA-090402> <Authentication denied: Boot identity not valid; The user name and/or password from the boot identity file (boot.properties) is not valid. The boot identity may have been changed since the boot identity file was created. Please edit and update the boot identity file with the proper values of username and password. The first time the updated boot identity file is used to start the server, these new values are encrypted.>
<Jul 25, 2012 2:22:28 PM IOT> <Critical> <WebLogicServer> <BEA-000386> <Server subsystem failed. Reason: weblogic.security.SecurityInitializationException: Authentication denied: Boot identity not valid; The user name and/or password from the boot identity file (boot.properties) is not valid. The boot identity may have been changed since the boot identity file was created. Please edit and update the boot identity file with the proper values of username and password. The first time the updated boot identity file is used to start the server, these new values are encrypted.
weblogic.security.SecurityInitializationException: Authentication denied: Boot identity not valid; The user name and/or password from the boot identity file (boot.properties) is not valid. The boot identity may have been changed since the boot identity file was created. Please edit and update the boot identity file with the proper values of username and password. The first time the updated boot identity file is used to start the server, these new values are encrypted.
at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.doBootAuthorization(CommonSecurityServiceManagerDelegateImpl.java:960)
at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.initialize(CommonSecurityServiceManagerDelegateImpl.java:1054)
at weblogic.security.service.SecurityServiceManager.initialize(SecurityServiceManager.java:873)
at weblogic.security.SecurityService.start(SecurityService.java:141)
at weblogic.t3.srvr.SubsystemRequest.run(SubsystemRequest.java:64)
Truncated. see log file for complete stacktrace
Caused By: javax.security.auth.login.FailedLoginException: [Security:090304]Authentication Failed: User admin javax.security.auth.login.FailedLoginException: [Security:090302]Authentication Failed: User admin denied
at weblogic.security.providers.authentication.LDAPAtnLoginModuleImpl.login(LDAPAtnLoginModuleImpl.java:261)
at com.bea.common.security.internal.service.LoginModuleWrapper$1.run(LoginModuleWrapper.java:110)
at java.security.AccessController.doPrivileged(Native Method)
at com.bea.common.security.internal.service.LoginModuleWrapper.login(LoginModuleWrapper.java:106)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
Truncated. see log file for complete stacktrace
>
<Jul 25, 2012 2:22:28 PM IOT> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to FAILED>
<Jul 25, 2012 2:22:28 PM IOT> <Error> <WebLogicServer> <BEA-000383> <A critical service failed. The server will shut itself down>
<Jul 25, 2012 2:22:28 PM IOT> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to FORCE_SHUTTING_DOWN>
Can anyone please suggest how to resolve this problem? If, anyone can suggest the exact steps to configure external ldap store to manage admin console via ldap users.
Regards,
Neeraj Tati.

Hi,
Please refer the below content that I found for Oracle 11g in the docs.
"If an LDAP Authentication provider is the only configured Authentication provider for a security realm, you must have the Admin role to boot WebLogic Server and use a user or group in the LDAP directory. Do one of the following in the LDAP directory:
By default in WebLogic Server, the Admin role includes the Administrators group. Create an Administrators group in the LDAP directory, if one does not already exist. Make sure the LDAP user who will boot WebLogic Server is included in the group.
The Active Directory LDAP directory has a default group called Administrators. Add the user who will be booting WebLogic Server to the Administrators group and define Group Base Distinguished Name (DN) so that the Administrators group is found.
If you do not want to create an Administrators group in the LDAP directory (for example, because the LDAP directory uses the Administrators group for a different purpose), create a new group (or use an existing group) in the LDAP directory and include the user from which you want to boot WebLogic Server in that group. In the WebLogic Administration Console, assign that group the Admin role."
Now in my LDAP directory, setup is in such a way that Administrators is a group created under following heirarchy " cn=Administrators,ou=Groups,dc=test,dc=com" and there is one user added in this Administrators group.
The problem that I am having is when I modify the Admin role in which Administrators group should be added what exaclty I should give in Admin role. Whether I should give only Administrators or full DN: cn=Administrators,ou=Groups,dc=test,dc=com ???
When i give full DN, it takes every attribute as different, i mean cn=Administrators as different and ou=Groups as different and shows a message that cn=Administrators does not exist.
Here not sure what to do.
Also if external ldap authentication provider is the only provider then I need to give the user information in boot.properties file also for weblogic to boot properly. Now, what should I give there in user? still complete DN ??
Regards,
Neeraj Tati.

[SOLVED] SGA_MAX_SIZE pre-allocated with Solaris 10?

Hi all,
I'm about to build a new production database to migrate an existing 8.1.7 database to 10.2.0.3. I'm in the enviable position of having a good chunk of memory to play with on the new system (compared with the existing one) so was looking at a suitable size for the SGA... when something pinged in my memory about SGA_MAX_SIZE and memory allocation in the OS where some platforms will allocate the entire amount of SGA_MAX_SIZE rather than just SGA_TARGET.
So I did a little test. Using Solaris 10 and Oracle 10.2.0.3 I've created a basic database with SGA_MAX_SIZE set to 400MB and SGA_TARGET 280MB
$ sqlplus
SQL*Plus: Release 10.2.0.3.0 - Production on Wed Jan 30 18:31:21 2008
Copyright (c) 1982, 2006, Oracle. All Rights Reserved.
Enter user-name: / as sysdba
Connected to:
Oracle Database 10g Enterprise Edition Release 10.2.0.3.0 - 64bit Production
With the Partitioning, OLAP and Data Mining options
SQL> show parameter sga
NAME                                 TYPE        VALUE
lock_sga                             boolean     FALSE
pre_page_sga                         boolean     FALSE
sga_max_size                         big integer 400M
sga_target                           big integer 280MSo I was expecting to see the OS pre-allocate 280MB of memory but when I checked the segment is actually the 400MB (i.e. SGA_MAX_SIZE) (my database owner is 'ora10g'):
$ ipcs -a
IPC status from <running system> as of Wed Jan 30 18:31:36 GMT 2008
T         ID      KEY        MODE        OWNER    GROUP CREATOR
CGROUP CBYTES QNUM QBYTES LSPID LRPID   STIME    RTIME    CTIME
Message Queues:
T         ID      KEY        MODE        OWNER    GROUP CREATOR
CGROUP NATTCH      SEGSZ CPID LPID   ATIME    DTIME    CTIME
Shared Memory:
m         22   0x2394e4   rw-r---   ora10g   10gdba   ora10g
10gdba     20 419438592 2386 2542 18:31:22 18:31:28 18:28:18
T         ID      KEY        MODE        OWNER    GROUP CREATOR
CGROUP NSEMS   OTIME    CTIME
Semaphores:
s         23   0x89a070e8 ra-r---   ora10g   10gdba   ora10g
10gdba   154 18:31:31 18:28:18
$ I wasn't sure whether Solaris 10 was one of the OSs with truly dynamic memory for the SGA but had hoped it was... this seems to say different. Really I'm just after some confirmation that I'm reading this correctly.
Thanks.
Joseph
Message was edited by:
Joseph Crofts
Edited for clarity

I don't want to get bogged down in too many details, as the links provided in previous posts have many details of SGA tests and the results of what happened. I just want to add a bit of explanation about the Oracle SGA and shared memory on UNIX and Solaris in particular.
As you know Oracle's SGA is generally a single segment of shared memory. Historically this was 'normal' memory and could be paged out to the swap device. So a 500 MB SGA on a 1 GB physical memory system, would allocate 500 MB from the swap device for paging purposes, but might not use 500 MB of physical memory i.e. free memory might not decrease by 500 MB. How much physical memory depended on what pages in the SGA were accessed, and how frequently.
At some point some people realised that this paging of the SGA was actually slowing performance of Oracle, as now some 'memory' accesses by Oracle could actually cause 'disk' accesses by paging in saved pages from the swap device. So some operating systems introduced a 'lock' option when creating a shared memory segment (shmat system call if memory serves me). And this was often enabled by a corresponding Oracle initialisation parameter, such as lock_sga.
Now a 'locked' SGA did use up the full physical memory, and was guaranteed not to be paged out to disk. So Oracle SGA access was now always at memory speed, and consistent.
Some operating systems took advantage of this 'lock' flag to shared memory segment creation to implement some other performance optimisations. One is not to allocate paging storage from swap space anyway, as it cannot be used by this shared memory segment. Another is to share the secondary page tables within the virtual memory sub-system for this segment over all processes attached to it i.e. one shared page table for the segment, not one page table per process. This can lead to massive memory savings on large SGAs with many attached shadow server processes. Another optimisation on this non-paged, contiguous memory segment is to use large memory pages instead of standard small ones. On Solaris instead of one page entry covering 8 KB of physical memory, it covers 8 MB of physical memory. This reduces the size of the virtual memory page table by a factor of 1,000 - another major memory saving.
These were some of the optimisations that the original Red Hat Enterprise Linux had to introduce, to play catch up with Solaris, and to not waste memory on large page tables.
Due to these extra optimisations, Solaris chose to call this 'locking' of shared memory segments 'initimate shared memory' or ISM for short. And I think there was a corresponding Oracle parameter 'use_ism'. This is now the default setting in Oracle ports to Solaris.
As a result, this is why when Oracle grabs its shared memory segment up front (SGA_MAX_SIZE), it results in that amount of real physical memory being allocated and used.
With Oracle 9i and 10g when Oracle introduced the SGA_TARGET and other settings and could dynamically resize the SGA, this messed things up for Solaris. Because the shared memory segment was 'Intimate' by default, and was not backed up by paging space on the swap device, it could never shrink in size, or release memory as it could not be paged out.
Eventually Sun wrote a work around for this problem, and called it Dynamic Intimate Shared Memory (DISM). This is not on by default in Oracle, hence you are seeing all your shared memory segments using the same amount of physical memory. DISM allows the 'lock' flag to be turned on and off on a shared memory segment, and to be done over various memory sizes.
I am not sure of the details, and so am beginning to get vague here. But I remember that this was a workaround on Sun's part to still get the benefits of ISM and the memory savings from large virtual memory pages and shared secondary page tables, while allowing Oracle to manage the SGA size dynamically and be able to release memory back for use by other things. I'm not sure if DISM allows Oracle to mark memory areas as pageable or locked, or whether it allows Oracle to really grow and shrink the size of a single shared memory segment. I presumed it added yet more flags to the various shared memory system calls.
Although DISM should work on normal, single Solaris systems, as you know it is not enabled by default, and requires a special initialisation parameter. Also be aware that there are issues with DISM on high end Solaris systems that support Domains (F15K, F25K, etc.) and in Solaris Zones or Containers. Domains have problems when you want to dynamically remove a CPU/Memory board from the system, and the allocations of memory on that board must be reallocated to other memory boards. This can break the rule that a locked shared memory segment must occupy contiguous physical memory. It took Sun another couple of releases of Solaris (or patches or quarterly releases) before they got DISM to work properly in a system with domains.
I hope I am not trying to teach my granny to suck eggs, if you know what I mean. I just thought I'd provide a bit more background details.
John

RZ20 - Missing sub-tree entries in CCMS_Selfmonitoring

Hello,
Please could some let me know how to restore missing monitoring sub-tree entries in RZ20 in a Sol Man 7.01 system ?
Due to an error message displayed when trying to start a ccmsping agent on a satellite system I found SAP Note 517533 which advised the following steps to refresh the System Component Repository (SCR) : -
Repeat the SCR upgrade process.
Here is the procedure:
    1. Start transaction RZ20.
    2. Open monitor collection SAP CCMS Monitors for Technical Experts.
    3. Open the monitor CCMS Selfmonitoring.
    4. Open the branch CCMS_Selfmonitoring.
    5. Choose Extras -> Activate maintenance function
    6. In the CCMS_Selfmonitoring branch, delete the subtree labelled 'System Component Repository' (Edit -> Nodes -> Delete -> Option 4).
    7. Switch to transaction RZ21.
    8. Choose Techn. Infrastructure -> Method execution -> Activate background dispatching.
I carried out these steps in the Solution Manager environment and when I ran step 6 a number of entries vanished from the RZ20 - CCMS Selfmonitoring - CCMS_Selfmonitoring subtree.
I then did as the note suggests and made sure the CCMS background dispatching job SAP_CCMS_MONI_BATCH_DP had ran (it does every 5 minutes) but the tree entries have still not re-appeared.
For example, in RZ20 - SAP CCMS Techincal Expert Monitors - CCMS Selfmonitoring - <SID> - CCMS_Selfmonitoring only the following subtree entries are present:
- Tooldispatching (long running tasks)
- Tooldispatching (central system)
- Central Performance History
Previously the CCMS_Selfmonitoring sub tree looked more like our other Solman systems with entries such as: -
- Tooldispatching (long running tasks)
- Tooldispatching (central system)
- Central Performance History
- Startuptools once per system
- Runtime
- Availability Monitoring
- SapmssyT
- CCMS Agents
- System Component Repository
- XML_SelfMonitoring
- GRMG_Self-Monitoring
To find a resolution I've searched multiple SAP notes and Google without success.
Please can someone advise how to get these entries back into the monitoring sub-tree ?
Thank you.

Hello Jansi
Thanks for your responding.
I can confirm that no Technical Views have been changed. Even when I change them for testing the missing tree entries do not return.
I have carried out the steps as described to reset the entire self monitoring node but the entries that were present are still not present.
Any further suggestions ?
Thanks,
Dave.

Managing ldap sub tree with Solaris Mnagement Console

Similar Messages

Maybe you are looking for