General Solaris 8 patch questions

I�m relatively new to Solaris administration, although I have managed HP-UX machines. Patch management seems to be an very important task. When installed the 8_Recommended bundle across various platforms, I notice that I get a variety of different ERROR return codes ( including 8, 2, and 25). If there is a place for more basic admin questions, please let me know. Here are my questions:
1.     Are the patch clusters typically cumulative? By this I mean does the cluster resolve all dependencies required to successfully install the full bundle? If not, how would you ensure that you have all of the patches required by the cluster. This seems as if it could be a very tedious process.
2.     Is there a way to specify saved patches in some location other then /var/sadm:
3.     When installing a patch, is it required to install the patch in /var/spool/sw? I had problems when I failed to do this.
4.     Is there a way to tell the patchadd or install_cluster command to enforce all patch dependencies.?
Any other patch management tips would be useful. It seems as if Solaris makes this very difficult considering that the logging is not very good the install_cluster command does not seem to check for dependencies, it just installs all the patches and you have to figure out what patches didn�t install and why. This can be very time consuming if you have to do this for 15-20 machines.
Many Thanks

I believe this is a list of exit codes for patches. You'll most likely see a lot of return code 8 and 2. Not typically an issue.
# Exit Codes:
# 0 No error
# 1 Usage error
# 2 Attempt to apply a patch that's already been applied
# 3 Effective UID is not root
# 4 Attempt to save original files failed
# 5 pkgadd failed
# 6 Patch is obsoleted
# 7 Invalid package directory
# 8 Attempting to patch a package that is not installed
# 9 Cannot access /usr/sbin/pkgadd (client problem)
# 10 Package validation errors
# 11 Error adding patch to root template
# 12 Patch script terminated due to signal
# 13 Symbolic link included in patch
# 14 NOT USED
# 15 The prepatch script had a return code other than 0.
# 16 The postpatch script had a return code other than 0.
# 17 Mismatch of the -d option between a previous patch
# install and the current one.
# 18 Not enough space in the file systems that are targets
# of the patch.
# 19 $SOFTINFO/INST_RELEASE file not found
# 20 A direct instance patch was required but not found
# 21 The required patches have not been installed on the manager
# 22 A progressive instance patch was required but not found
# 23 A restricted patch is already applied to the package
# 24 An incompatible patch is applied
# 25 A required patch is not applied
# 26 The user specified backout data can't be found
# 27 The relative directory supplied can't be found
# 28 A pkginfo file is corrupt or missing
# 29 Bad patch ID format
# 30 Dryrun failure(s)
# 31 Path given for -C option is invalid
# 32 Must be running Solaris 2.6 or greater
# 33 Bad formatted patch file or patch file not found
# 34 The appropriate kernel jumbo patch needs to be installed
#

Similar Messages

A small conglomerate of E450/Solaris 10 Questions!

To whom it shall concern or can just help out:
Solaris 10 Questions
If I wish to run an iSCSI target under Solaris 10, will GA do it or do I need the Express verison of Solaris 10 (for an E450, SPARC)?
If the GA version of Solaris 10 supports iSCSI targets, how capable is it to socialize that with ZFS in combination?
Can Solaris 10 (for SPARC) support any IDE PCI cards on the E450?
Can Solaris 10 (for SPARC) support any USB PCI cards on the E450?
Can Solaris 10 (for SPARC) support any FireWire (1394) PCI cards on the E450?
Other than Solaris Express being more experimental than the GA version, how problematic is it to run Express vice the GA in terms of daily reliability?
Taking a presumptive position that Solaris 10 Express or GA allows for an iSCSI target capability (with or without ZFS inclusive thereto) has anyone attempted to connect to such an alleged Solaris iSCSI target successfully from MacOS using this initiator:
http://www.studionetworksolutions.com/products/product_detail.php?t=more&pi=11
E450 Questions
What DVD drives are support on the SCSI bus for an E450 to boot from for the purposes of asserting a DVD based Solaris 10 installation?
I am also looking for any of the following hardware (if you have it at a good price, do contact me offline at 310-358-0202, or [email protected]):
(a) DVD Drives
(b) Backplane hardware and cables requisite to increase the amount of DASD that can be installed in an E450 from 4 to 12 or 20
(c) RAM
(d) Processors
(e) Multi-port Ethernet cards
Thanks in advance!
Stuart

I have been running solaris 10 on an e450 for ages
and it works fine. I slid the drive out of a
Blade1000 to load the DVD.
Which version (specifically) of Solaris 10 are you running?
GA?
Express?
Which month/year release?
Regarding the DVD:
An interesting solution, though I do not have a Blade1000 handy, so I will continue to look for a compatible DVD player I can use within the e450 for an inexpensive price, unless you are suggesting that a Blade1000 with a DVD is cheaper than a DVD for the e450. Are you suggesting such?
HCL lists are available for the e450.Perhaps you can suggest where I might find them sir?
That truly would be helpful, as I had presumed already that such lists were existent.
>
The backplane can be bought cheap to expand the drive
number.Still investigating the part number, but yes, I'd imagine so. Do you perhaps know the part numer for this item sir?
>
Not sure about any of the iscsi stuff.Too bad, that was an important part of the information I was looking for.
>
Ebay ebay ebay for e450 gear. Once I know the part numbers, ebay will be a great tool for finding the hardware, I agree.
>
On another note, the e450 is a beast weighting in
around 300 pounds fully loaded. Sucks up more power
than NY city on a hot day and can heat a fairly large
building. Not to mention they sound like small
airplanes.
I live in Vegas, electricity is burned out here in outrageous amounts on a daily basis.
Indeed, I am presuming that when they (I have two) are running during the winter, that I will be able to heat my 1895 sq foot house (or at least one deck of it).
I know they are one of the most interesting computer
designs out there but unless you a glutten for slow
processors max 480 mhz I would suggest you buy
something a bit newer. One ultra45 would be better
and hold more drive space and ram.
Years in the computer industry and I will never understand why, when people ask technical questions others feel they are helping to say "replace your hardware", when indeed it is not broken and they are attempting to use it. I have to admit, you are not the first to do such a thing.
I understand you think there is something better, and honestly, I certainly am not inept enough to have not considered that, yet still I posted the query in the instant post asking about the e450.
Consider this: perhaps I was interested in using the e450 and getting the questions answered...nah...why would I want to do that?
If you do like the old hardware and redundancy is not
critical I would suggest getting a blade2000 off of
ebay for around 600 dollars. Still big and beautiful
but far far faster. I use a Blade1000 (wont die) and
have firewire drives plugged into it for more space.And what suggestion would you proffer if the $600 budget is not there?
Using the e450 perhaps? :)
Stuart

HTTP error while downloading solaris patches using wget

Hello,
I am getting a HTTP error while downloading solaris patches using wget.
'Downloading unsigned patch 113096-03.
--2010-06-18 03:51:15-- http://sunsolve.sun.com/pdownload.pl?target=113096-03&method=h
Resolving sunsolve.sun.com (sunsolve.sun.com)... 192.18.108.40
Connecting to sunsolve.sun.com (sunsolve.sun.com)|192.18.108.40|:80... connected.
HTTP request sent, awaiting response... 302 Moved Temporarily
Location: http://sunsolve.sun.com/pdownload.do?target=113096-03&method=h [following]
--2010-06-18 03:51:15-- http://sunsolve.sun.com/pdownload.do?target=113096-03&method=h
Reusing existing connection to sunsolve.sun.com:80.
HTTP request sent, awaiting response... 401 Unauthorized
Unknown authentication scheme.
Authorization failed.
Problem downloading 113096-03.
What am i missing here... The credentials to login to sunsolve are correct and are updated in the downloadpatch.sh script.
Please assist
Thanks
Sunny

Try download via browser url:
[http://sunsolve.sun.com/pdownload.pl?target=113096-03&method=h]
You need a valid support contract not just Sunsolve account for many patches.

Discoverer 11g patching question

Discoverer 11g patching question
I need to apply patch 13643211 which asks us to
Set the ORACLE_HOME environment variable to WebTier home,
say "[MW_HOME]/Oracle_WT1" directory.
I am not able to figure out what is the web tier home. Can somebody point me in the right direction?
This is what we have by default
Middleware Home Location: /applmgr/Oracle/Middleware
Oracle Home Location: /applmgr/Oracle/Middleware/as_1
Oracle Instance Location: /applmgr/Oracle/Middleware/asinst_1
Oracle Instance: asinst_1
Domain Option: Create Domain
Domain Name: ClassicDomain
Domain Home: /applmgr/Oracle/Middleware/user_projects/domains/ClassicDomain
Thank you

I assumed that the webtier refers to the instance_home, but it looks like it is the oracle_home I should be patching (since the the patch is for OHS). Can somebody please clarify?

Solaris Patch Manager gets status:302 behind Proxy

Hi Colleagues,
I am trying to get Solaris Patch Manager on my Solaris 8 up and running.
But if I say "smpatch analyze", the smpatch just reports a "Response code was 302" I think this means something like: "temporary moved".
I think my problem is, that the proxy doesn't follow the moved object.
Can anybody tell me where I can manualy download the detectors.jar and patchdb.zip?

Any news on this posting? I'm trying to do the same thing, as I dont want to use a caching proxy to download patches, I just want to use
a local source to perform analysis, downloads, and updates.
Cheers.

Kernel Patch questions

Sorry but it has been a while. After reading all the kernel threads, I still have a few kernel patch questions.
1) Sequencing - Does it matter what sequence I apply all the patches? Alphabetic order? Date sequence? Always finish with DW?
2) Versioning info - some commands have a -v parameter to tell what version you currently have. Some don't. Is there some way to find out versioning info for all potential patches?
3) Marketplace - I see there is a "complete" kernel on the marketplace now (albeit in two parts). However it's never current. It looks like the hot setup to download that and patch that and then slip that in. Does everyone agree with that assessment?
4) Yes, I know the truly hot setup would be to contract with Volker to get s fully patched CD but since we were stuck on 4.0B for so long, I haven't had a chance to keep my skills up to date. This looks like a good opportunity.
Thanks,
Rick

Hi my friend
I assume you're referring to how to load new 700 kernel since you didn't mention. Here's the steps listed below, for details you could find in Note 912575 - iSeries: Using LODSAPKRN to load a 7.00 kernel
1. Download the latest SAPEXE.SAR, SAPEXEDB.SAR and IGSEXE.SAR from SWDC.
2. Create a directory in IFS and put 3 SAR files there, create a stream file called "parts" with content below:
SAPEXE.SAR,
SAPEXEDB.SAR,
IGSEXE.SAR,
P.S: I opt this way to patch IGS myself because it's more convenient, the formal IGS patching is introduced in
Note 937000 - iSeries: Installing and patching the IGS
3. Log on as QSECOFR or equivalent user (in 912575 it says SIDADM, which could lead to lack of authorization sometimes), and run command:
LODSAPKRN DEV(STMF) MNTPNT('<dir>') KRNLIB(<kernel library>) USERDEF(YES) LIST('<dir>/parts')
4. Stop SAP system and then remove old kernel:
RMVSAP SID(<SID>) DLTKRNLIB(*NO)
5. Change the library list (EDTLIBL) and replace the old kernel library with the new 7.00 kernel library.
6. Activate the new 7.00 kernel:
APYSAP TYPE(*KERNEL) SID(<SID>) DSTLIB(<new kernel library>)
7. Delete all SQL packages: DLTR3PKG SID(<SID>)
then start SAP system
Regards,

Solaris Patch 117846-20

Hi there,
Where can I download this Solaris patch?
I have found it here but am unable to download it.
http://wesunsolve.net/patch/id/117846-20
Many thanks,

Have you tried at https://support.oracle.com ? To download patches, you will need a vailid CSI
HTH
Srini

How do I find the latest Critical Sun Solaris Patches on Oracle site

Hello
How do I find the latest critical Solaris Patches available to the users. I was searching the list on Oracle's site it's hard to determine which patch is critcal or not. When I type uname -a this is what returns Generic_142909-17.
Any help you could provide would be appreciated.

Sorry, I wrote "Monthly" when I meant to write "Quarterly". Apologies for the confusion. My bad.
From - http://www.oracle.com/technetwork/topics/security/alerts-086861.html
They are released on the Tuesday closest to the 15th day of January, April, July and October. Starting 2011, the scheduled dates for the release of Critical Patch Updates will be on the Tuesday closest to the 17th day of January, April, July and October. The next four dates are:
* 19 April 2011
* 19 July 2011
* 18 October 2011
* 17 January 2012
The CPU for the Solaris Operating System is a rebranded snapshot of the Recommended OS Cluster. The rebranding involves only superficial changes to the patch cluster, with the actual patch content remaining unchanged. The patches contained in this patch cluster are considered the most important and highly recommended patches for Solaris 10. They provide the least amount of change required to address known security, data corruption and availability issues.
If there's a particular CVE Alert which you're vulnerable to or interested in, then the fix will be released within the patch that corresponds to the area of code the vulnerability affects. You can then apply that patch and it's requirements separate to the clusters. Next time you apply the cluster it will either install the latest rev of the patch or skip it if you have the latest installed already.
The Recommended Patch Cluster bundle is a much larger collection of patches and contains all the latest patches (at the time of release) which include Solaris updates, Security, and Sun Alert fixes. Note that we merged "Recommended Patch Cluster/Kernel Jumbo Patchset" and the "Sun Alert Patch Clusters" back in June 2010. See http://blogs.sun.com/patch/entry/merging_the_solaris_recommended_and for more information regarding what happened and why.
Of course there will be a large overlap between the "Recommended OS Cluster" and the "Critical Patch Updates" patchsets will be rolled in to the "Recommended OS Cluster" whenever it's cut and released.
There's a lot of information in the README files for each cluster so you may want to read those to understand the subtle differences.
Regards,
Steve

Solaris 10 Patch Question

Assuming two identical systems installed side-by-side
and operated by the same owner. Both machines are
registered with Sun Microsystems and possess valid
licenses for Solaris 10. The owner has determined the
same Software Update (formerly called a �patch�) is
required for both systems. The SWU (Software Update)
is only available from Sun Microsystems. Only one of
the systems is covered by a Sun Service Plan that
provides access to the SWU, the other is a
self-maintained system without any service plans
whatsoever.
     System A     System B
Valid Solaris 10 License     yes     yes
Active Sun Service Plan     yes     no
Service Method     Sun Service Plan     Self Maintained
Questions:
Can SWU obtained from Sun for System A be used on
System B?
a.     if the SWU is only made available with a Sun Online
ID + Service Plan? (In other words, a �restricted� or
�behind-the-firewall� SWU)
b.     If the SWU is only made available with a Sun Online
ID? (In other words, a �public� SWU, such as a
hardware driver update).
c.     Will Sun accept time and materials POs for software
troubleshooting?
d.     Will Sun accept time and materials POs for hardware
troubleshooting?

No, it doesn't have an OBP, instead it uses a BIOS, which is quite different from the OBP.
Normally; doing init 0 on a x86 box will just bring you to a state where it offers to reboot.
On x86 you also have the "Configuration Assistant", which does some tasks which would be performed by the OBP on the SPARC architecture.
//Magnus

Solaris patch update

Hi ,
I have two questions in solaris 10.
1.Is there any equivalent YUM (in linux) in solaris-10?if so , can you provide the details as to how use them to update patch?
2. equivalent of RPM ( in Linux) in solaris - 10.
Thanks

Hi,
1. No YUM alike on Solaris but you can use pca to manage patches -> http://www.par.univie.ac.at/solaris/pca/
2. pkg-config (1)- return meta information about installed libraries
pkgadd (1m)- transfer software packages to the system
pkgadm (1m)- manage packaging and patching system
pkgask (1m)- stores answers to a request script
pkgchk (1m)- check package installation accuracy
pkginfo (1)- display software package information
pkginfo (4)- package characteristics file
pkgmap (4)- package contents description file
pkgmk (1)- produce an installable package
pkgparam (1)- display package parameter values
pkgproto (1)- generate prototype file entries for input to pkgmk command
pkgrm (1m)- remove a package from the system
pkgtrans (1)- translate package format
Marco

General Airport Extreme questions

I have some general questions regarding the dual band technology and how it relates to my specific setup. A bit of background:
I have 20Mbps cable internet and I am running the new Airport Extreme on a pc running XP to broadcast my wireless signal. I have an iPhone 3GS, iPhone 4 and iPad. I also have an Airport Express that I use in bridge mode so that I can connect my PS3 in a wired fashion.
My questions:
-How do wireless networks work when you have both "g" and "n" devices? (which I do)
Does the router send out simultaneously a 2.4 and 5.0 signal for each capable device to pick up? Do the g devices pick up the 2.4 signal while the n devices pick up the 5.0? Or do all devices pick up the 2.4 signal since there are non "n" rated devices on the network? I have read many conflicting ideas on this.
- I have spoken with multiple Apple customer service people and have gotten differing advice on how to improve my devices' connectivity to the network as I have been experiencing unacceptable levels of interference on all devices.
One rep reccomended that in the Airport Utilities, under wireless options that I check the 5GHz box to setup a seperate 5GHZ network for the n devices. Another rep dismissed this idea.
Does creating this new 5.0 network keep the network signal from being bumped down to "g" speeds when "g" rated devices are connected?
How am I to better off setting my networks up so that my n devices as well as my g devices get the best performance and connectivity?
-I use an Airport Express in bridge mode with my PS3 and it seems to be helping my connections speeds. When I was connected wirelessly, the speeds would either be non-existent or unacceptable. I know the PS3 has a "g" antenna. I have the airport express connected to the 5.0ghz wireless network in Airport Utilities. Am I actally now connecting to the 5.0ghz signal and converting to the PS3 at higher bandwidth then I would be otherwise if I was connected to the 2.4ghz wireless signal?
I appologize for the longwinded post.
Any insight I will be most appreciated as I am banging my head against the wall here.
Scott

The default setup for the AirPort Extreme provides a dual band wireless network with a Radio Mode that looks like this:
802.11a/n --- 802.11n/g/b
The 5 GHz band is on the left and the 2.4 GHz is on the right of the --- dashes
Also as a default, the same wireless network name is used for both bands. The theory here is that any device will automatically connect to the best signal quality. This works great for older "g" devices because they can only connect to the 2.4 GHz band, so you know where they will be at all times. You never need to be concerned about a "g" device slowing down a faster "n" device on the 5 GHz band because the "g" device cannot even connect to the 5 GHz band.
But note that newer "n" devices can connect to either the 5 GHz band or the 2.4 GHz band. So, it's possible that you may have a "n" device and a "g" device on the 2.4 GHz band and the "n" connection will slow a bit if the "g" device is really active.
It gets a bit more complicated if you have a new iPhone, which can connect at "n" speeds, but only to the 2.4 GHz band. The new iPad can connect to either 2.4 GHz or 5 GHz.
Most users are better off if they leave the settings as recommended on the AirPort Extreme. That's because each device will connect to the band with the best available signal quality. Isn't that what you really want?
If you will concentrate on signal quality, which is a combination of signal strength and low noise, you'll be fine.
Most problems arise when users think that they want to connect to the 5 GHz band because the speeds can be faster there. So, they assign a separate name to the 5 GHz network and then "point" their computer at that band. The potential issue with doing this is that 5 GHz signals are much weaker than 2.4 GHz signals.
So, if the computer is several rooms away and you have "forced" it to connect to 5 GHz, you are likely telling it to connect to a signal that is both +weaker and slower+ than the 2.4 GHz signal at that location. The signal always slows down as it moves further from the router or encounters obstructions.
As I said, most users will do well to use the default settings and let each device find the best connection automatically. With a mix of a number of devices, you'll never be able to find the single "perfect" setting. With wireless, there are always compromises. No way to avoid that, I'm afraid.

Solaris patching on solaris 10 x86

just wondering if anyone can assist. i have just installed solaris 10 x86 recommended patches on a 16 disks server. where first 2 disks are mirrored called rpool, and remaining 14 disks are raid z called spool. upon installing the patches successfully and rebooting server, i am coming up with the following error:
NOTICE: Can not read the pool label from '/pci@0,0/pci8086,25f8@4/pci111d,801c@0/pci111d,801c@4/pci108e,286@0/disk@0,0:a /pci@0,0/pci8086,25f8@4/pci111d,801c@0/pci111d,801c@4/pci108e,286@0/disk@1,0:a'
NOTICE: spa_import_rootpool: error 5, Inc. All rights reserved.
Cannot mount root on /pci@0,0/pci8086,25f8@4/pci111d,801c@0/pci111d,801c@4/pci108e,286@0/disk@0,0:a /pci@0,0/pci8086,25f8@4/pci111d,801c@0/pci111d,801c@4/pci108e,286@0/disk@1,0:a fstype zfs
panic[cpu0]/thread=fffffffffbc28820: vfs_mountroot: cannot mount root
fffffffffbc4b190 genunix:vfs_mountroot+323 ()
fffffffffbc4b1d0 genunix:main+a9 ()
fffffffffbc4b1e0 unix:_start+95 ()
skipping system dump - no dump device configured
rebooting...
It looks like the solaris 10 os cannot find zfs filesystem and keeps on rebooting in normal solaris os mode, but when I go to safe mode and type: zfs list, I can see zfs rpool (mirrored) file system and cannot see the zfs spool (raid z) file system, any ideas on how i can fix the boot problem and get zfs spool back in the safest way possible?...

I finally figured it out. It seems that kernel patch 137138-09 was the culprit. It took me a while to test each kernel patch but I found out that if you have a mirrored volume or a virtual logical volume this will affect you. Also, after I did all this testing I finally found the sunsolve article referencing this patch. Seems you can install the patch, but you have to install 125556-01 first. Here's the article: http://sunsolve.sun.com/search/document.do?assetkey=1-66-246206-1

Domain Name settings in Solaris - Newbie question

Sorry for a newbie question!
I am already pointing a domain name to web hosting for email account. Now, I need an application server to run ERP software and Oracle, and installing Solaris and Oracle need a domain name.
If I point my domain name to the server, how do I receive emails from web hosting???
Install an email server to the application server instead? What can I do if I want the same domain name?

Your questions are completely off-topic for the forum.
These SunOS forums are for questions on <i>"how do I install my OS"</i>
You particular question is in the <i>"how can I install Solaris while using the CD drive"</i> forum.
So, if you had a question on how to edit the /etc/inet/hosts file to establish a FQDN on the computer, then it might be appropriate for the forum.
Unfortunately, I don't have a clue on where to redirect you, except perhaps to the Sun Java Enterprise System suite of applications?

Tomcat 3.1 on Solaris 8 question

I would like to use the above product as my JSP container.
I am running into a problem when it comes to "mod_jserv.so".
I can get this to work all day under Linux. Now that I have
moved my application to a Solaris 8 machine, I can't get my
apache web server to properly load the mod_jserv.so library.
My question is, is there a mod_jserv.so for Solaris? I can't
seem to find any answers on jakarta.apache.org.
Thank you.

Actually, if you read further and see the large table with the performance comparisons using the different threading options on machines with different CPUs/configurations, it says:
"Here's a table of results on various Solaris boxes, all running Solaris 8 with JVM 1.3.1: "
So it looks like it should work fine with 1.3.1.
- Chris

8.1.7.2.1 patch questions

I am currently in the process of installing the 8.1.7.2.1 patch set. (8i server patch set for windows nt)
I have two questions.
1. I have two databases on my server. Do I have to apply the patch to each one?
2. Item number 10 of the install notes says to edit the jserv.properties file. I am currently running 8.1.7 and 9ias on the same machine but in different oracle homes. (I am using the databases and listener out of 8.1.7 and the http server out of 9ias.) Since I have the http server turned off in my 8.1.7 home, there is no point in me editing the jserv.properties file that is in there. Should I edit the one in the 9ias home instead, or just skip this step all together?
I would appreciate any ideas. Thanks.

1. If both databases are using the same ORACLE_HOME , then yes you will be need to shut down both databases and patch each one. Youa re patching the Oracle binaries as well as running new versions of catalog/catproc/catrep etc.
2. Not srue about number 2. I don't use the web server piece. My guess would be no since you are using a different version.

General Solaris 8 patch questions

Similar Messages

Maybe you are looking for