Solaris 10 Resource Control

When utilizing Solaris 10 Resource Control, should one use "user.root", "user.oracle" or "oracle" for the project identifier? Does it really make a difference?
For example,
I. projadd -U oracle -K "project.max-shm-memory=(priv,2048MB,deny)" user.oracle
II. projadd -U oracle -K "project.max-shm-memory=(priv,2048MB,deny)" user.root
III. projadd -U oracle -K "project.max-shm-memory=(priv,2048MB,deny)" oracle
I realize the Oracle Install documentation indicates "user.root", but I've seen other indications of either "user.oracle" or "oracle".

thanks buddy. I was in this same tricky situation. and ur post solved my prblem.
Is this a bug with solaris 10.
Later i discovered.. on Oracle documentation that.. there r sum parameters that needed to be taken care while pre-installation of Oracle binaries.
Here is the excerpts.
The Oracle installer recognizes kernel parameters set using this method, but it is now deprecated in favour of resource control projects, explained below.
As the root user, issue the following command.
projadd oracle
Append the following line to the "/etc/user_attr" file.
oracle::::project=oracle
If you've performed a default installation, it is likely that the only kernel parameter you need to alter is "max-shm-memory". To check the current value issue the following command.
# prctl -n project.max-shm-memory -i project oracle
project: 100: oracle
NAME    PRIVILEGE       VALUE    FLAG   ACTION                       RECIPIENT
project.max-shm-memory
        privileged       254MB      -   deny
        system          16.0EB    max   deny
To reset this value, make sure at least one session is logged in as the oracle user, then from the root user issue the following commands.
# prctl -n project.max-shm-memory -v 4gb -r -i project oracle
# projmod -s -K "project.max-shm-memory=(priv,4gb,deny)" oracle
The first dynamically resets the value, while the second makes changes to the "/etc/project" file so the value is persistent between reboots.
# cat /etc/project
system:0::::
user.root:1::::
noproject:2::::
default:3::::
group.staff:10::::
oracle:100::::project.max-shm-memory=(priv,4294967296,deny)
The Oracle installer seems incapable of recognising kernel parameter set using resource control projects, but if you ignore the warnings the installation completes successfully.Even this method works.
Regards
Monu Koshy

Similar Messages

Solaris 10 zones - Resource Controls not persisting through reboot

Local zone was rebooted, but somehow the resource controls are not well configured and the oracle database did not start up.
The cat /etc/project shows this : The local zone has 10 gb. The oracle database was started manually with the startdb.sh, which conn /assysdba and issue a startup, adn also startups the listener.
cat /etc/project
system:0::::project.max-shm-memory=(privileged,8589934000,deny)
user.root:1::::project.max-shm-memory=(privileged,8589934000,deny)
noproject:2::::
default:3::::project.max-shm-memory=(privileged,6442450944,deny)
group.staff:10::::
user.oracle:100::oracle::project.max-shm-memory=(privileged,8589934000,deny)
group.dba:101::::project.max-sem-ids=(privileged,100,deny);project.max-shm-ids=(
privileged,100,deny);project.max-shm-memory=(privileged,6442450944,deny)

Nikolay, thank you for your reply.
What I know is that the zone was rebooted saturday. sunady at 1:00 am the oracle database (I'am a Dba not sysadmin), perform coldbackup (veritas.) then Veritas call a unix script to starts the database.
I run the script to starts the database manually sunday. Veritas could not open the database because of the Out of Memory.
The box has 10 gb , the oracle user, the rot and system are configured to use 8 gb, the rest are configured to use less.
I'am oracle user.
id -p
uid=100(oracle) gid=100(dba) projid=100(user.oracle)
prctl -i process $$
process: 8928: -ksh
NAME PRIVILEGE VALUE FLAG ACTION RECIPIENT
process.max-port-events
privileged 65.5K - deny -
system 2.15G max deny -
process.max-msg-messages
privileged 8.19K - deny -
system 4.29G max deny -
process.max-msg-qbytes
privileged 64.0KB - deny -
system 16.0EB max deny -
process.max-sem-ops
privileged 512 - deny -
system 2.15G max deny -
process.max-sem-nsems
privileged 512 - deny -
system 32.8K max deny -
process.max-address-space
privileged 16.0EB max deny -
system 16.0EB max deny -
process.max-file-descriptor
basic 256 - deny 8928
privileged 65.5K - deny -
system 2.15G max deny -
process.max-core-size
privileged 8.00EB max deny -
system 8.00EB max deny -
process.max-stack-size
basic 8.00MB - deny 8928
privileged 8.00EB - deny -
system 8.00EB max deny -
process.max-data-size
privileged 16.0EB max deny -
system 16.0EB max deny -
process.max-file-size
privileged 8.00EB max deny,signal=XFSZ -
system 8.00EB max deny -
process.max-cpu-time
privileged 18.4Es inf signal=XCPU -
system 18.4Es inf none -
task.max-cpu-time
system 18.4Es inf none -
task.max-lwps
system 2.15G max deny -
project.max-contracts
privileged 10.0K - deny -
project.max-device-locked-memory
privileged 987MB - deny -
project.max-locked-memory
system 16.0EB max deny -
project.max-port-ids
privileged 8.19K - deny -
project.max-shm-memory
privileged 8.00GB - deny -
project.max-shm-ids
privileged 128 - deny -
project.max-msg-ids
privileged 128 - deny -
project.max-sem-ids
privileged 128 - deny -
project.max-crypto-memory
privileged 3.85GB - deny -
project.max-tasks
system 2.15G max deny -
project.max-lwps
system 2.15G max deny -
project.cpu-cap
system 4.29G inf deny -
project.cpu-shares
privileged 1 - none -
zone.max-swap
privileged 20.0GB - deny -
zone.max-locked-memory
system 16.0EB max deny -
zone.max-shm-memory
system 16.0EB max deny -
zone.max-shm-ids
system 16.8M max deny -
zone.max-sem-ids
system 16.8M max deny -
zone.max-msg-ids
system 16.8M max deny -
zone.max-lwps
system 2.15G max deny -
zone.cpu-cap
system 4.29G inf deny -
zone.cpu-shares
privileged 1 - none -
Print configured reso
urce control
ksh: Print: not found

Resource Controls on Oracle Systems

The normal resource controls for the oracle user are pretty straight forward -- per the Oracle documentation even though it is hugely Solaris 10 deficient. (we are deploying on solaris 10 u8)
We are deploying a new data center with 2 and 3-node SFRAC clusters and we have an onsite Sun prof. services person that claims we also need to limit the user.root and default projects in the following manner (systems have 64gb memory):
projmod -sK "project.max-shm-memory=(priv,6GB,deny)" user.root
projmod -sK "project.max-sem-nsems=(priv,256,deny)" user.root
projmod -sK "project.max-sem-ids=(priv,100,deny)" user.root
projmod -sK "project.max-shm-ids=(priv,100,deny)" user.root
projmod -sK "project.max-shm-memory=(priv,6GB,deny)" default
projmod -sK "project.max-sem-nsems=(priv,256,deny)" default
projmod -sK "project.max-sem-ids=(priv,100,deny)" default
projmod -sK "project.max-shm-ids=(priv,100,deny)" default
Has anyone see this done anywhere? Even when I was working at oracle on some of the largest oracle databases in existence I never saw such settings being deployed on Solaris 10.
Can anyone point me to any hard documentation or similar resource?
Much thanks,
CC
Edited by: rhugga1 on Jan 21, 2010 7:10 AM

Yes the oracle documentation is wrong. I know how to set the oracle parameters.. As my OP states I was inquiring about limits set on the user.root and default projects
Since Solaris 10 update 4, these oracle kernel parameters ARE IGNORED COMPLETELY when set in /etc/system (not to mention some are deprecated) You can easily do an empirical test of this yourself since there is so much conflicting documentation out there, including some of Sun's docs.
Solaris 10 update 4 and later method:
projadd -c "Oracle" 'user.oracle'
projmod -s -K "process.max-file-descriptor=(priv,1024,deny)" 'user.oracle'
projmod -s -K "project.max-shm-memory=(privileged,25769803770,deny)" 'user.oracle'
projmod -s -K "project.max-shm-ids=(privileged,1024,deny)" 'user.oracle'
projmod -s -K "project.max-sem-ids=(privileged,1024,deny)" 'user.oracle'
projmod -s -K "process.max-sem-nsems=(privileged,1024,deny)" 'user.oracle'
But back to the OT, I've been told there are root project tweaks that don't really make sense to me and I've yet to find any viable documentation supporting this guys claim.
-CC

What is the resource control corresponding to each kernel parameter

Hi
I am trying to prepare (i.e. tune) a Solaris 10 instance for an Oracle 10g install using a Solaris 10 project.
I am new to using Solaris 10 project resource controls so I might get some of this totally wrong.
I know all of the "old" kernel parameter names: what each represents and its' required value and I know some of the corresponding resource controls but not all of them.
That is I do not know the resource control corresponding to each and all of the kernel parameters.
e.g. I know:
semsys:seminfo_semmsl == process.max-sem-nsems == The maximum number of sempahores that can be in one semaphore set
shmsys:shminfo_shmmax == project.max-shm-memory == The maximum size(in bytes) of a single shared memory segment
shmsys:shminfo_shmmni == project.max-shm-ids == The number of shared memory identifiers
But I do not know, for example, what resource control corresponds to:
semsys:seminfo_semmns == The number of semaphores in the system
Is there a list somewhere of the resource control corresponding to each of the kernel parameters ?
I know I can set some kernel parameters in /etc/system but that should only be used for system - wide kernel parameters, right ?
I know there are project, process, task and zone classes of resource controls.
Can a resource control of any and all of these types be set in a project ?
Are zone resource controls equivalent to system-wide resource controls ?
Are there corresponding resource controls to all kernel parameters e.g. such as noexec_user_stack ?
I have set noexec_user_stack in /etc/system.
And finally - just to be sure - using a project makes the resource control values permanent, right ?
Thanks
Brett.

Hi;
Please check below which could be helpful for your issue:
Kernel setup for Solaris 10 using project files [ID 429191.1]
Regard
Helios

Solaris Resource Management.

Hi there, i'm using solaris resource management in a server with more thant 2thousand acounts.
Created profiles for users, defaul, staff, root and services.
But while using rctladm to enable syslog'ing, I set up global flags of "deny" and "no-local-action" in almos everything.
Now, many aplications don't work because they are denied enough process.max-stack-size and process.max-file-descriptor for them to work.
Aplications such has prstat.
I have warnings like this all over dmesg:
Sep 21 16:01:13 thor genunix: [ID 883052 kern.notice] basic rctl process.max-file-descriptor (value 256) exceeded by process 15080
Sep 21 16:01:13 thor genunix: [ID 883052 kern.notice] basic rctl process.max-stack-size (value 8388608) exceeded by process 15081
Sep 21 16:01:13 thor genunix: [ID 883052 kern.notice] basic rctl process.max-file-descriptor (value 256) exceeded by process 15081
Sep 21 16:01:13 thor genunix: [ID 883052 kern.notice] basic rctl process.max-stack-size (value 8388608) exceeded by process 15082
Sep 21 16:01:13 thor genunix: [ID 883052 kern.notice] basic rctl process.max-stack-size (value 8388608) exceeded by process 15083
Sep 21 16:01:13 thor genunix: [ID 883052 kern.notice] basic rctl process.max-file-descriptor (value 256) exceeded by process 15083
Sep 21 16:01:14 thor genunix: [ID 883052 kern.notice] basic rctl process.max-stack-size (value 8388608) exceeded by process 15084
Sep 21 16:01:14 thor genunix: [ID 883052 kern.notice] basic rctl process.max-file-descriptor (value 256) exceeded by process 15084
Sep 21 16:01:17 thor genunix: [ID 883052 kern.notice] basic rctl process.max-stack-size (value 8388608) exceeded by process 15085
Sep 21 16:01:17 thor genunix: [ID 883052 kern.notice] basic rctl process.max-stack-size (value 8388608) exceeded by process 15088
Sep 21 16:01:17 thor genunix: [ID 883052 kern.notice] basic rctl process.max-stack-size (value 8388608) exceeded by process 15089
Sep 21 16:01:17 thor genunix: [ID 883052 kern.notice] basic rctl process.max-stack-size (value 8388608) exceeded by process 15090
Sep 21 16:01:17 thor genunix: [ID 883052 kern.notice] basic rctl process.max-stack-size (value 8388608) exceeded by process 15091
Sep 21 16:01:24 thor genunix: [ID 883052 kern.notice] basic rctl process.max-stack-size (value 8388608) exceeded by process 15092
Sep 21 16:01:24 thor genunix: [ID 883052 kern.notice] basic rctl process.max-file-descriptor (value 256) exceeded by process 15092
I don't find a way to disable the global flags.
Can anyone tell me:
how to disable global flags?
how to disable and enable solaris resource management all together?

Hi there, i'm using solaris resource management in a
server with more thant 2thousand acounts.
Created profiles for users, defaul, staff, root and
services.Seeing the contents of your /etc/project file could be helpful.
But while using rctladm to enable syslog'ing, I set up
global flags of "deny" and "no-local-action" in almos
everything.The flags on the right hand side of the rctladm(1M) output are read-only:
they are telling you the characteristics of the resource control in question (what
operations the system will allow the resource control to take).
Now, many aplications don't work because they are
denied enough process.max-stack-size and
process.max-file-descriptor for them to work.
Applications such has prstat.If prstat(1) is failing due to the process.max-file-descriptor control value, that's
probably a bug. prstat(1) is more likely bumping into the limit to assess how many file
descriptors are available, and then carrying on--you're just seeing a log message since
prstat(1) tested the file descriptor limit, and you've enabled syslog for that control. Please
post the prstat(1) output, and we'll figure out if something's breaking.
I don't find a way to disable the global flags. You can't. I would disable the syslog action on the process.max-stack-size control first;
there is an outstanding bug on this control, in that it will report a false triggering event--
no actual effect to the process. (If you send me some mail, I will add you as a call record
on the bug.)
Can anyone tell me:
how to disable global flags?
how to disable and enable solaris resource management
all together?You could raise all of the control values, but the resource control facility (like the resource
limit facility it superseded) is always active. Let's figure out if you're hitting the bug I mentioned,
and then figure out how to proceed.
- Stephen
Stephen Hahn, PhD Solaris Kernel Development, Sun Microsystems
[email protected]

Zone Resource Control example website

G'Day folks,
I've began work on a website to list examples of setting zone resource controls (processor sets, FSS, ...).
http://www.brendangregg.com/zones.html
Now before I get carried away, does anyone think that maybe I shouldn't - if so I will take it offline no problem.
Just checking I dont get replies like,
"please don't document zones as it's all about to change", or something like that ...
PS. I was pretty happy to see FSS work - that's really cool! :-)
thanks,
Brendan Gregg
[Sydney, Australia]

G'Day Gary,
Thanks for your comments!
Here are some corrections/additions:
The best way to check if pools are enabled is to run
pooladm and examine the output. poold may not be
running and pools may still be active, so performing
a pgrep for poold isn't conclusive.Yes, good point.
In commands 2, you don't need the "final pooladm -c".
The poolcfg -df command will have already done
e this.The final pooladm -c didn't make sense the first time I encountered it, so I had made pretty sure that it was necessary. I'll redo my checks and update the site. Without it, I'm only using poolcfg to make changes, and the man page for poolcfg has:
# man poolcfg
     If you use the -d option,
     the modifications occur to the kernel state. Actual activa-
     tion of the resulting configuration is achieved by way of
     the pooladm(1M) command.It seems to imply a pooladm command is necessary for activation (I used a pooladm -c).
In Resources CPU1 it may be worth mentioning that you
can immediately modify pool bindings for zones if you
use poolbind.
e.g.
/usr/sbin/poolbind -p work1-pool -i zoneid workzone1thanks, I hadn't seen this before!
At the end of Resource CPU 2. It isn't poold which
decides how to allocate CPUs when a configuration is
applied to a system using pooladm -c. This work is
done inside libpool (3LIB) by the pool_conf_commit
API.Ok, I haven't seen documentation on what specifically happens after typing pooladm -c. The documentation such as the poold man page draws a lot of attention to poold:
# man poold
     poold periodically examines the load on the system and
     decides whether intervention is required to maintain optimal
     system performance with respect to resource consumption.
     poold also responds to externally initiated (with respect to
     poold) changes of either resource configuration or objec-
     tives.
     If intervention is required, poold attempts to reallocate
     the available resources to ensure that performance objec-So a change in resource configuration sounds like it means "pooladm -c", and poold is responding.
I'm not sure you meant pool_conf_commit, the man page describes it as writing the config to permanent storage - not triggering an allocation of CPUs.
At my work blog, I have various hints, tips and
tricks for Solaris Resource Pools. If you want to add
a link to my blog (where I try and focus on Solaris
Resource Management issues) feel free. It's at:
http://blogs.sun.com/garypen
Great, I've linked it already, and uploaded a new version (and I imagine I'll upload more versions as I learn more about resource controls).
thanks,
Brendan

Error while creating a Solaris Resource

I got the following error while creating the following solaris resource:
Test connection failed for resource(s):
Solaris: Script failed waiting for "ASSWORD:" in response "_,)#+(:" ==> com.waveset.util.WavesetException: Script processor timed out with nothing to read and the following unprocessed text: "_,)#+(:".\n
I have the sudo permissions for the following commands:
(ALL) NOPASSWD: /usr/bin/auths, /usr/sbin/groupadd, /usr/sbin/groupdel, /usr/sbin/groupmod, /usr/bin/last, /usr/bin/listusers, /usr/bin/logins, /usr/bin/passwd, /usr/bin/profiles, /usr/bin/roles, /usr/sbin/useradd, /usr/sbin/userdel, /usr/sbin/usermod, /usr/bin/ypmatch, /usr/bin/ypcat, /usr/bin/ypasswd, /usr/bin/awk, /usr/bin/cat, /usr/bin/chmod, /usr/bin/chown, /usr/bin/cp, /usr/bin/cut, /usr/bin/diff, /usr/bin/echo, /usr/bin/grep, /usr/bin/ls, /usr/bin/mv, /usr/bin/rm, /usr/bin/sleep, /usr/bin/sort, /usr/bin/tail, /usr/bin/touch, /usr/bin/which
Please let me know what could be the problem?

This doesn't look like a Sun Directory Server issue. You may want to post this to another forum.
Regards,
Ludovic.

Using VISA Resource control with Windows 7 64-bit

Hi.
My company recently upgraded our laptops, and I'm now working on Windows 7 64-bit rather than Windows XP 32-bit. I reinstalled LabVIEW 2009 Base Package, trusting that the Windows 7 64-bit OS would be able to handle LabVIEW 2009 32-bit without problems. But when trying to run our test system, the VISA Resource control doesn't work.
We use it to get a list of the available COM (RS232) ports on the computer. But now the list comes up blank. The only option that comes up in the list, is the text "Refresh". But nothing happens when I press it. Is this a bug in LabVIEW? I've installed the latest patch I found, so now I'm running LabVIEW v9.0f3 (32-bit).
Thanks alot for any and all assistance!
Solved!
Go to Solution.

Sorry for not replying to you earlier. I've been busy on other projects.
I'm not sure what you refer to with MAX, but I'm able to access the com ports using other tools/loggers. So it's not an issue with Windows 7 itself. But it seems logical that the problem would have something to do with running 32-bit drivers on a 64-bit OS. Referring to this list from NI (http://digital.ni.com/public.nsf/allkb/71E9408E6DEAD76C8625760B006B6F98), I'm downloading the 64-bit installer now.
But if I understand it correctly, you cannot run applications from a 64-bit Application Builder on a 32-bit OS. So basically you need the Application Builder installed on both a 32-bit and 64-bit OS to have all bases covered. But in the FAQ, it's asked if it's possible to have both 32-bit and 64-bit LabVIEW 2009 installed on the same 64-bit OS. Why would this be wanted? If you cannot use the 32-bit Application Builder, and you cannot trust that the 32-bit LabVIEW runs successfully (i.e. driver issues etc.), why would you want to have a 32-bit installation on a 64-bit OS?

Resource control assignment failed for project

I've setup a new project (we run sap), and keep getting the following msg
pam_unix_cred: project.max-sem-ids resource control assignment failed for
project "PAB"
I know you can get this sort of msg if you have wrong syntax in your project, but it all looks well to me. Any ideas gratefully received. cheers Lou
/etc/project >
PAB:1000:SAP System PAB:orapab,pabadm::
process.max-sem-nsems=(priv,2048,deny);project.max-sem-ids=(priv,1024,deny);project.max-shm-i
ds=(priv,256,deny);project.max-shm-memory=(priv,18446744073709551615,deny)

Hi
The original entries were created with projadd.
I've just done a projdel and another projadd (as below) and watching out for error msgs - will post again when I get the error msgs - cheers Lou
root@sappab # projadd -p 1000 -c "SAP System PAB" -U pabadm,orapab \
root@sappab > -K "project.max-sem-ids=(priv,1024,deny)" \
root@sappab > -K "process.max-sem-nsems=(priv,2048,deny)" \
root@sappab > -K "project.max-shm-ids=(priv,256,deny)" \
root@sappab > -K "project.max-shm-memory=(priv,18446744073709551615,deny)" \
root@sappab > PAB
root@sappab # more /etc/project
system:0::::
user.root:1::::
noproject:2::::
default:3::::
group.staff:10::::
PAB:1000:SAP System PAB:orapab,pabadm::process.max-sem-nsems=(priv,2048,deny);project.max-sem-ids=(priv,1024,deny);project.max-shm-i
ds=(priv,256,deny);project.max-shm-memory=(priv,18446744073709551615,deny)

Visa resource control loses value set during config and saved to step properties in TestStand

I'm using a Visa resource control to set the instrument handle in my VI (edit sub-step) and it gets saved into a step property of a custom step I've built at edit time. At run time the control value is intermittantly changed to "temp 0" value and I don't understand why. I have LabVIEW 7.1, TestStand 3.0

Hi kphite,
Are you using the Refnum to Session.vi and Session to Refnum.vi?
You would use the Refnum to Session.vi to convert your Visa session value to a U32. Then you can pass this back to TestStand.
Going back to LabView you use the Session to Refnum.vi to convert a U32 back to the Visa session.
Regards
Ray Farmer
Regards
Ray Farmer

IDM Solaris resource sync problem

Hi.
I am setting up IDM in our company Lab.
For NT and AD resources is everything ok, but when I try TEST CONNECTION to solaris server resource, I get this error message:
Test connection failed for resource(s):
Solaris: Script failed waiting for "/bin/sh" in response " Last login: Thu Apr 7 09:35:04 from localhost Sun Microsystems Inc. SunOS 5.9 Generic May 2002 bash-2.05$ " ==> com.waveset.util.WavesetException: Script processor timed out with nothing to read and the following unprocessed text: " Last login: Thu Apr 7 09:35:04 from localhost Sun Microsystems Inc. SunOS 5.9 Generic May 2002 bash-2.05$ ".\n
Can anybody help me?
Thanks.

Please check the Prompt attribute in the Solaris Resource form (first page). Is the prompt exactly the same as you see when logging to the solaris host as the adapter user?
Also, you didn't specify, if you use telnet, ssh, su, sudo... Although this does not seem to be the problem, we've had some problems with sudo setting, so you better take care.
And please, check that "Prompt" setting. The adapter didn't see the prompt. Password is probably ok, because the "last login" information has been already captured be the adapter.

Finding the resource controls of a given project

Currently, one can use "*prctl*" to list resource control limits of a given project. However, to gather the statistics of the usage by all processes associated with a given project in relation to these resource control limits, we would need to execute multiple commands/utilities.
For some, information outputs can be direct, yet for others, outputs can be indirect. Even then it is not guaranteed that all statistics are collected.
I thought of developing a command/utility acting like "sar" or "vmstat" that gathers statistics on usage of all resource controls for a given project.
Could you please drop in your suggestions on the features such a command should have ?
Thanks

Do you know how to find the minimum value of a collection? You will want to do the same here but search for the minimum difference instead of the minimum value. Math.abs() will help deal will negative differences.

Error reconciliating solaris resource

I have tried reconcilie a solaris resource from identity manager I get this error:
Servlet.service() for servlet jsp threw exceptionjava.lang.StackOverflowError at java.lang.Exception.<init>(Exception.java:41) at java.io.IOException.<init>(IOException.java:40) at java.net.UnknownHostException.<init>(UnknownHostException.java:28) at java.net.Inet6AddressImpl.lookupAllHostAddr(Native Method) at java.net.InetAddress$1.lookupAllHostAddr(InetAddress.java:838) at java.net.InetAddress.getAddressFromNameService(InetAddress.java:1176) at com.waveset.view.ReconcileViewer.getReconcilerId(ReconcileViewer.java:240) at com.waveset.view.ReconcileViewer.getReconcilerId(ReconcileViewer.java:240) at com.waveset.view.ReconcileViewer.getReconcilerId(ReconcileViewer.java:240)
Any idea about which one is the problem? .
Thanks in advance

I have tried reconcilie a solaris resource from identity manager I get this error:
Servlet.service() for servlet jsp threw exceptionjava.lang.StackOverflowError at java.lang.Exception.<init>(Exception.java:41) at java.io.IOException.<init>(IOException.java:40) at java.net.UnknownHostException.<init>(UnknownHostException.java:28) at java.net.Inet6AddressImpl.lookupAllHostAddr(Native Method) at java.net.InetAddress$1.lookupAllHostAddr(InetAddress.java:838) at java.net.InetAddress.getAddressFromNameService(InetAddress.java:1176) at com.waveset.view.ReconcileViewer.getReconcilerId(ReconcileViewer.java:240) at com.waveset.view.ReconcileViewer.getReconcilerId(ReconcileViewer.java:240) at com.waveset.view.ReconcileViewer.getReconcilerId(ReconcileViewer.java:240)
Any idea about which one is the problem? .
Thanks in advance

Guide Line for zone resources control

Hi,
i'm looking for guide line or best practices about zone resource control, especially cpu-shares, swap and RAM.
I need this information to make decision when customers has no idea but has a lot of zone configured.
For example:
t2000, 32gb ram, 32gb swap and 20 zones
Applications run only in zones.
How can I set cpu-shares, max-swap and capped memory just for security purpose?
Thanks

I'm of the opinion that the safest strategy for proactive resource management is CPU only. Playing with memory can have some effects that I'm not crazy about. Nothing unmanageable, but it can really confuse end-users unless you spend a lot of time educating them. The other consideration is that behind most resource pulls are increases in CPU use. Not always, but a lot of the time. So, if you must be proactive, go with CPU.
The best practice will depend heavily on your environment. Do you migrate zone containers in and out of the box often? Are the apps very similar or wildly differing? Many things need to be decided before mapping out a strategy. Let's take a simple case: Fairly similar apps that don't move in and out often. Figure out what percentage of the box you want each to have, then set up dynamic resource pools to match this model.
If you have a lot of zones and some degree of change, dynamic pools can get unwieldy, so you may prefer using the Fair share scehduler (FSS). In many cases however, proactive use of SRM means that you need to rebalance resources when you add/remove a zone.
I think once you understand the various resource controls available to you it's best to just make a bunch of scribbles on a white board to depict what you want at a high level and then map it into a resource constraint that best implements it. The hard part is defining what you want.

Solaris resource adapter

Wanted to Know whether the out of the box Solaris resource adapter manages passwords for users in the Solaris resource from IDM.
like changing passwords, Unlocking accounts etc..

I don't quite see what you need it for? As I can see (and use in my custom shellscript adaptors) IDM simply calls the passwd command with either -l og -u to lock or unlock a user, which then sets the password to a LK. This value is probably retrieved by IDM whenever a query on any given user is made, to see if it has been locked or not.
There is a inactive value in the resource schema, but I think this is only used by the adaptor to know if a useraccount should be locked.

Solaris 10 Resource Control

Similar Messages

Maybe you are looking for