Getting SunScreen work in Solaris 9

Hi all,
I installed Sunscreen in Solaris 9 from the CD, path
/cdrom/sol_9_1202_sparc_2/Solaris_9/ExtraValue/CoBundled/SunScreen_3.2/sparc
Now i am trying:
root# ssadm edit policyname
could not acquire read lock.
From sun docs:
"""""" could not acquire read lock
Return code: 242
Indicates that the configuration editor could not acquire a read lock.
Likely the lock file is corrupt or some process is hanging.
ss_lock -c policy is likely to be needed. """"""
Then i try root# ss_lock -c
ss_lock: Command not found.
root# locate ss_lock
Nothing comes.
Does anyone have an idea how can i configure it?
Thanks in advance ...
Bellow the interesting outputs from command locate sunscreen:
/dev/screen
/dev/screen_ipsec
/dev/screen_skip
/devices/pseudo/clone@0:screen
/devices/pseudo/clone@0:screen_ipsec
/devices/pseudo/clone@0:screen_skip
/etc/init.d/plumbsunscreen
/etc/init.d/plumbsunscreen2
/etc/init.d/sunscreen
/etc/init.d/sunscreenft
/etc/init.d/sunscreentr.sh
/etc/rc?.d/ (startup scripts here)
/etc/sunscreen
/etc/sunscreen/configs
/etc/sunscreen/configs/template.policy
/etc/sunscreen/configs/template.registry
/etc/sunscreen/httpd (and subfiles)
/etc/sunscreen/ike/crls
/etc/sunscreen/ike/publickeys
/etc/sunscreen/ipsec.algorithms
/etc/sunscreen/location
/etc/sunscreen/name
/etc/sunscreen/proxies
/etc/sunscreen/secret
/etc/sunscreen/secret/ike.privatekeys
/etc/sunscreen/tmpcerts
/etc/sunscreen/version.txt
/usr/lib/sunscreen (and subdirs)
/usr/lib/sunscreen/etc
/usr/lib/sunscreen/lib
/usr/lib/sunscreen/ssadm
/usr/lib/sunscreen/ssadm/activate
/usr/lib/sunscreen/ssadm/active
/usr/lib/sunscreen/ssadm/algorithm
/usr/lib/sunscreen/ssadm/backup
/usr/lib/sunscreen/ssadm/certdb
/usr/lib/sunscreen/ssadm/certlocal
/usr/lib/sunscreen/ssadm/certrldb
/usr/lib/sunscreen/ssadm/cmg
/usr/lib/sunscreen/ssadm/configure
/usr/lib/sunscreen/ssadm/configure_ts
/usr/lib/sunscreen/ssadm/debug_level
/usr/lib/sunscreen/ssadm/domain
/usr/lib/sunscreen/ssadm/edit
/usr/lib/sunscreen/ssadm/filter
/usr/lib/sunscreen/ssadm/ha
/usr/lib/sunscreen/ssadm/lock
/usr/lib/sunscreen/ssadm/log
/usr/lib/sunscreen/ssadm/logdump
/usr/lib/sunscreen/ssadm/logmacro
/usr/lib/sunscreen/ssadm/logstats
/usr/lib/sunscreen/ssadm/patch
/usr/lib/sunscreen/ssadm/policy
/usr/lib/sunscreen/ssadm/product
/usr/lib/sunscreen/ssadm/restore
/usr/lib/sunscreen/ssadm/skip
/usr/lib/sunscreen/ssadm/spf2efs
/usr/lib/sunscreen/ssadm/sys_info
/usr/lib/sunscreen/ssadm/traffic_stats
/usr/lib/sunscreen/ssadm/welfmt
/usr/lib/sunscreen/support/ (and subdirs)

Similar Messages

I am having trouble getting sqlplus working on solaris 9 with oracle 10g

When I type the command sqlplus I get the following issue.
I am new to a Solaris 9 environment and also new to Oracle DB.
bash: sqlplus: command not found
What are the few things I should do, and is there any good references for me to look into.
With many thanks,
Raki

Thanks guys I got it working now .....
I had to set the path correctly.
Now Im having issues logging in :(.
bash-3.00$ sqlplus
SQL*Plus: Release 10.1.0.3.0 - Production on Tue Oct 31 11:46:35 2006
Copyright (c) 1982, 2004, Oracle. All rights reserved.
Enter user-name: sample
Enter password:******
ERROR:
ORA-01034: ORACLE not available
ORA-27101: shared memory realm does not exist
SVR4 Error: 2: No such file or directory
does this mean Oracle is not installed yet?
--Raki

Using solaris 11 x86 I do not get usb audio in firefox or additions where can I redirect the internal audio to usb audio? Audio works through solaris

I upgraded to Solaris 11 x86 and Firefox 3.6.10. I have sound through Solaris but not through Firefox or any of the add-ons.
I am using USB speakers which work with Solaris Rythmbox. How can I redirect Firefox audio to my USB speakers?

It works fine, thank you. There is one glitch when I turn off my system and on the next day the audio is missing again. Applying the dsp to dsp 0 reboot and then back to dsp1 reboot I get the audio back.
Is there any way to restart the process?

Solaris 8 on a v440 where do I get drivers for older solaris version?

I have a db cluster of v880s on Solaris 8. I need to temporarily move the database to a v440. I created a flash archive on the v880s and, of course, it didn't work after installing (got tod error and couldn't boot). I know this is because it is too old a version of Solaris. My question is, can I apply the new drivers to the v880 and then create a new flar image? If so, where do I get the drivers? Also, is there any way to apply the drivers to a system that has been imaged already with a flar from a v880? Can I apply them as a post-install script under jumpstart? Can I somehow boot from cdrom and then apply them? Any information would be greatly appreciated. This is a fairly urgent matter as we have a firm date with movers that can't be changed.

Hmm, the V440 is a quite old box as well, so it should work with Solaris 8 7/03 or older.
There are three alternatives as far as i can see:
1: What version of Solaris 8 are you using? If you are using 7/03 or later it should be sufficent if you booted the V440 into singleuser mode (from cd/dvd or network) mounted the disk and ran devfsadm -R on it.
2: If the Solaris 8 would be older than 7/03, you should, as far as i can see, be able to install the flar archives from your jumpstart, and then boot of a Solaris 8 7/03 (or later) cd and run an upgrade from it.
3: Apply the following patches, either to your 880 before you create the image, or to your V440 after installing the flar (you would have to apply the patches from single-user as mentioned inn step 1, it should be possible to add the patches from a jumpstart image using the patchadd -R command).
108528-22 (or newer) Kernel Update patch
108974-31 (or newer) sd and ssd patch
109873-19 (or newer) libprtdiag_psr.so.1 patch
109888-24 (or newer) platform drivers patch
109889-06 (or newer) platform links & libc_psr patch
110819-04 (or newer) us driver patch
110460-30 (or newer) fruid/PICL plug-ins patch
112249-04 (or newer) Netra-12 libprtdiag_psr.so.1 patch
113679-04 (or newer) rmc* and librsc.so.1 patch
113684-03 (or newer) scadm patch
115274-01 (or newer) raidctl patch
115275-01 (or newer) mpt driver patch
109896-17 (or newer) USB and Audio Framework patch
110918-05 (or newer) openeepr and prtconf patch
113682-02 (or newer) pmugpio patch
109793-19 (or newer) su driver patch
7/M.

Can't get iscsi working

Hi,
First sorry about the long post but any help would be really appreciated. I can't seem to get iscsi working what am i doing wrong?
May 24 09:53:39 edsrvscdm-01 iscsi: NOTICE: iscsi connection(5) unable to connect to target iqn.1992-08.com.netapp:sn.135042183
bash-3.00# iscsiadm list target -v
Target: iqn.1992-08.com.netapp:sn.135042183
Alias: -
ISID: 4000002a0000
Connections: 0
Discovery Method: Static
Login Parameters (Negotiated):
Data Sequence In Order: -
Data PDU In Order: -
Default Time To Retain: -
Default Time To Wait: -
Error Recovery Level: -
First Burst Length: -
Immediate Data: -
Initial Ready To Transfer (R2T): -
Max Burst Length: -
Max Outstanding R2T: -
Max Receive Data Segment Length: -
Max Connections: -
Header Digest: -
Data Digest: -
This is the setup I have done:
# svcadm enable network/iscsi/initiator
Collect the IQN number of the system.
# iscsiadm list initiator-node
Initiator node name: iqn.1986-03.com.sun:01:00144fa05cee.4ddb6b11
Initiator node alias: edsrvscdm-01
Login Parameters (Default/Configured):
Header Digest: NONE/-
Data Digest: NONE/-
Authentication Type: NONE
RADIUS Server: NONE
RADIUS access: unknown
Tunable Parameters (Default/Configured):
Session Login Response Time: 60/-
Maximum Connection Retry Time: 180/-
Login Retry Time Interval: 60/-
Configured Sessions: 1
Create an lun on netapp filer
lun setupThis setup will take you through the steps needed to create LUNs
and to make them accessible by initiators. You can type ^C (Control-C)
at any time to abort the setup and no unconfirmed changes will be made
to the system.
Do you want to create a LUN? [y]: y
Multiprotocol type of LUN
(solaris/windows/hpux/aix/linux/netware/vmware/windows_gpt/windows_2008/xen/hyper_v/solaris_efi)
[linux]: solaris
A LUN path must be absolute. A LUN can only reside in a volume or
qtree root. For example, to create a LUN with name "lun0" in the
qtree root /vol/vol1/q0, specify the path as "/vol/vol1/q0/lun0".
Enter LUN path: /vol/edsrvss_01_iscsi/lun0
A LUN can be created with or without space reservations being enabled.
Space reservation guarantees that data writes to that LUN will never
fail.
Do you want the LUN to be space reserved? [y]: n
Size for a LUN is specified in bytes. You can use single-character
multiplier suffixes: b(sectors), k(KB), m(MB), g(GB) or t(TB).
Enter LUN size: 40873m
You can add a comment string to describe the contents of the LUN.
Please type a string (without quotes), or hit ENTER if you don't
want to supply a comment.
Enter comment string: lun for edsrvscdm-01
The LUN will be accessible to an initiator group. You can use an
existing group name, or supply a new name to create a new initiator
group. Enter '?' to see existing initiator group names.
Name of initiator group []: group0
Type of initiator group group0 (FCP/iSCSI) [FCP]: iSCSI
An iSCSI initiator group is a collection of initiator node names.Each
node name can begin with either 'eui.' or 'iqn.' and should be in the
following formats: eui.{EUI-64 address} or iqn.yyyy-mm.{reversed domain
name}:{optional string composed of alphanumeric characters, '-', '.'
and ':'}
Eg: iqn.2001-04.com.acme:storage.tape.sys1.xyz or eui.02004567A425678D
You can separate node names by commas. Enter '?' to display a list of
connected initiators. Hit ENTER when you are done adding node names to
this group.
Enter comma separated nodenames: iqn.1986-03.com.sun:01:00144fa05cee.4ddb6b11
Enter comma separated nodenames:
The initiator group has an associated OS type. The following are
currently supported: solaris, windows, hpux, aix, linux, netware,
vmware, xen or hyper_v.
OS type of initiator group "group0" [solaris]:
The LUN will be accessible to all the initiators in the
initiator group. Enter '?' to display LUNs already in use
by one or more initiators in group "group0".
LUN ID at which initiator group "group0" sees "/vol/edsrvss_01_iscsi/lun0" [0]:
LUN Path : /vol/edsrvss_01_iscsi/lun0
OS Type : solaris
Size : 39.9g (42858446848)
Comment : lun for edsrvscdm-01
Initiator Group : group0
Initiator Group Type : iSCSI
Initiator Group Members : iqn.1986-03.com.sun:01:00144fa05cee.4ddb6b11
Mapped to LUN-ID : 0
Do you want to accept this configuration? [y]:
Tue May 24 10:34:01 BST [lun.map:info]: LUN /vol/edsrvss_01_iscsi/lun0 was mapped to initiator group group0=0
Do you want to create another LUN? [n]:
lun show
/vol/edsrvss_01_iscsi/lun0 39.9g (42858446848) (r/w, online, mapped)
iscsi nodename
iSCSI target nodename: iqn.1992-08.com.netapp:sn.135042183
Set up the Solaris host to find the new lun:
iscsiadm modify discovery --static enable
iscsiadm add static-config iqn.1992-08.com.netapp:sn.135042183,10.21.17.30
Check it appears on the system:
iscsiadm list static-config
Static Configuration Target: iqn.1992-08.com.netapp:sn.135042183,10.21.17.30:3260
iscsiadm list target
Target: iqn.1992-08.com.netapp:sn.135042183
Alias: -
ISID: 4000002a0000
Connections: 0
Rescan the system to check for the new iscsi disk:
devfsadm -Cv -i iscsi
Chris

opps forgot to enable iscsi on the filer! Enabled and all seems to be workin!

FrameMaker 8.0p277 Generated PDF-to-PDF Links Don't Work On Solaris

Currently I create a PDF of a book index pointing to several guides. The company logo in each guide's PDF provides a link back to the index.
All the links worked on Solaris & Windows OSs. Now they do not work on Solaris. I get an error saying, "There was an error opening this document. The file cannot be found."
All files are located in the same directory and they are all there.
The only thing that I have changed is the source was in FrameMaker 7 and it is now in FrameMaker 8. I use Acrobat 9 Pro Extended 9.4.6 and I have the latest updates for both Acrobat and FrameMaker.
I did some more digging and found a difference in the generated postscript file.
FM8
[/Rect[1409 2622 4926 2441]/Border[0 0 0] /Action << /Type /Action /S/GoToR /D /F /F << /Type/Filespec/UF <FEFF0063006D00690063002E007000640066> /F(cmic.pdf) >> >> /Subtype /Link /ANN FmPD2
FM7
[/Rect[1830 2661 4578 2430]/Border[0 0 0]/Dest /F/Action/GoToR/File(cmic.pdf)/Subtype /Link /ANN FmPD2
I am trying to get off of FM7 and it is counter productive to keep generating our final PDFs from FM7 just to get them to work.
Has anyone else had this problem and know how to resolve it?

Cross-file links in PDFs authored in FrameMaker 8 use Unicode-encoded file paths and file names, which are only supported in Windows Acrobat/Reader 8.x (MacOS Acrobat/Reader 7.x or later).
As a result, cross-file links are not functional when the PDF is displayed in earlier Acrobat/Reader versions, even though the target PDFs files are present in the target location.
While it is possible (through post-processing) to change the links so that they are backward-compatible, I suggest checking whether one of the Reader versions available for Solaris supports Unicode filenames and indicating that such a version is required to view the PDFs.
Shlomo Perets
MicroType, http://www.microtype.com
FrameMaker/TCS training & consulting * FrameMaker-to-Acrobat TimeSavers/Assistants

Does "top" command work in Solaris?

Does "top" command work in solaris?
# uname -a
SunOS rac1 5.10 Generic_120012-14 i86pc i386 i86pc
# top
top: not found
Edited by: user11936985 on Aug 29, 2011 8:44 AM

Top has two sections, the summary information at the top of the screen which gives load averages, process counts, etc. and a bottom section which lists the "top processes". The prstat command standard report is similar to the bottom section of top. So if that is what you need, then prstat is an adequate substitute. It doesn't report the information in top's summary section. On the other hand, prstat is actually a much more powerful tool than top, especially is you use some of the other options. For example, "prstat -a" gives you the "top process" report plus a summary report of usage by user. If you use "prstat -J" you get a top process report with a summary by project and "prstat -Z" gives a top process report with a summary by zone. You can use options like -v or -m to get more information on each process in the "top process" section. There are other options mentioned in the manual page.
Top works and works well on Solaris. You can get a copy form sunfreeware and probably other sources as well. It doesn't come from Oracle with Solaris 10 (but does come with Solaris 11). If you're a Linux shop you might want it because it is familiar. However, you may want to look at prstat as well because it can provide some useful information that top does not.

Ipfilter: does policy routing work on Solaris 10?

Hello,
- Does the ipf redirection (aka policy routing) feature work with the
ipfilter that comes with Solaris 10?
I would like to use the the ipf redirection statements "to
interface:router_ip" or "reply-to interface:router_ip" as decribed in
http://coombs.anu.edu.au/~avalon/ipf.new.txt
(The syntax is mentionned in the BNF of the Solaris 10 ipf(4) man
page, but the explanations there are lacking.)
On a machine that has two interfaces, the purpose is to send output
reply packets of a TCP session to the same interface that the input
packets came from. The idea to use ipfilter to do this comes from the
blog entry:
Packets out of the wrong interface
http://blogs.sun.com/carlson/entry/packets_out_of_the_wrong
My first try was to use "reply-to" in a "keep state" rule:
pass in quick on e1000g305000 reply-to e1000g305000:10.13.5.1 proto tcp from any to any port = 443 keep state keep frags group i_sso-test1
Which I understand as "once a connection to port 443 starts on
interface e1000g305000 send all reply packets to the same interface to
the gateway 10.13.5.1"
But it does not work; in the ipf log it shows that the rule matched:
22:56:32.770690 e1000g305000 @i_sso-test1:1 p 10.194.17.11,5648 -> 10.13.5.181,443 PR tcp len 20 60 -S K-S K-F IN
22:56:32.770783 e1000g0 @i_sso-test1:1 p 10.13.5.181,443 -> 10.194.17.11,5648 PR tcp len 20 44 -AS K-S K-F OUT
But the reply packet is not seen on the router (10.13.5.1), nor does
it get to 10.194.17.11 through another route (no firewall on that
machine).
My second try was to use two stateless rules, and to do "source port
routing" for outgoing packets:
pass in quick proto tcp from any to any port = 443 group i_sso-test1
pass out quick on e1000g0 to e1000g305000:10.13.5.1 proto tcp from any port = 443 to any group o_sso-test1
pass out quick proto tcp from any port = 443 to any group o_sso-test1
Which I understand as "incoming packets to port 443 are allowed and
outgoing packets from port 443, if passing on interface e1000g0, are
redirected through interface e1000g305000 via the gateway 10.13.5.1,
if not, are just allowed".
It does not work either; in the ipf log it shows that both the in and
the first out rules matched:
23:09:00.591163 e1000g305000 @i_sso-test1:1 p 10.194.17.11,26080 -> 10.13.5.181,443 PR tcp len 20 60 -S IN
23:09:00.591363 e1000g0 @o_sso-test1:1 p 10.13.5.181,443 -> 10.194.17.11,26080 PR tcp len 20 44 -AS OUT
But again the reply packet seems to be lost in thin air.
I have tried various other rules to no avail.
- Should this work with ipfilter v4.1.9 (592) coming with Solaris 10
u7?
- Am I missing something in the configuration?
- Shouldn't the ipf log show the outgoing reply packet twice? (Once on
the "wrong" interface e1000g0 and once on the interface it is
redirected to e1000g305000.) Or indicate in another manner that the
redirection occurred (like it indicates K-S for "keep state")?
Context:
# netstat -rn
Routing Table: IPv4
Destination Gateway Flags Ref Use Interface
default 10.194.7.1 UG 1 2407
default 10.194.7.1 UG 1 5104 e1000g0
10.13.5.0 10.13.5.181 U 1 5 e1000g305000:1
10.194.7.0 10.194.7.81 U 1 3 e1000g0:2
224.0.0.0 10.194.7.81 U 1 0 e1000g0:2
127.0.0.1 127.0.0.1 UH 1 7 lo0:7
# cat /etc/release
Solaris 10 5/09 s10s_u7wos_08 SPARC
Copyright 2009 Sun Microsystems, Inc. All Rights Reserved.
Use is subject to license terms.
Assembled 30 March 2009
# ipf -V
ipf: IP Filter: v4.1.9 (592)
Kernel: IP Filter: v4.1.9
Running: yes
Log Flags: 0x70000000 = pass, block, nomatch
Default: pass all, Logging: available
Active list: 0
Feature mask: 0x107
If it matters, this is occuring in a Solaris 10 zone, whith virtual
interfaces one of which uses 801.q tagging (vlan 305, subnet
10.13.5.0/24), and the "router" is a Cisco ACE load balancer with
interface 10.13.5.1 on the server side.
Thanks in advance for your help in this matter!
Best regards,
Dominique
Mr Dominique Petitpierre Email: User@Domain
Division Informatique User=Dominique.Petitpierre
University of Geneva Domain=unige.ch

I was saying
If it matters, this is occurring in a Solaris 10 zone, whith virtual
interfaces one of which uses 801.q tagging (vlan 305, subnet
10.13.5.0/24),...Well, it turns out that 802.1q tagging does matter: packets redirected
by an ipf policy based routing rule to an interface with tagging are
not transmitted.
In order to better see what was happening the ipf rules were extended
like this (stateless case):
@1 pass in quick on e1000g0 proto tcp from any to any port = 443 group i_sso-test1
@2 pass in quick on e1000g305000 proto tcp from any to any port = 443 group i_sso-test1
@1 pass out quick on e1000g0 to e1000g305000:10.13.5.1 proto tcp from 10.13.5.181/32 port = 443 to any group o_sso-test1
@2 pass out quick on e1000g305000 to e1000g0:10.194.7.1 proto tcp from 10.194.7.81/32 port = 443 to any group o_sso-test1
@3 pass out quick on e1000g305000 proto tcp from any port = 443 to any group o_sso-test1
@4 pass out quick on e1000g0 proto tcp from any port = 443 to any group o_sso-test1Also, for the purpose of the demonstration, the zone configuration was
modified to direct all packets to the same interface with tagging,
thus having just one default route:
zonecfg -z sso-test1 info net
net:
        address: 10.13.5.181/24
        physical: e1000g305000
        defrouter: 10.13.5.1
net:
        address: 10.194.7.81/24
        physical: e1000g305000
        defrouter: 10.13.5.1
netstat -rn
Routing Table: IPv4
Destination           Gateway           Flags Ref     Use     Interface
default              10.194.7.1           UG        1       2867
default              10.13.5.1            UG        1         86 e1000g305000
10.13.5.0            10.13.5.181          U         1          2 e1000g305000:1
10.194.7.0           10.194.7.81          U         1          0 e1000g305000:3
224.0.0.0            10.13.5.181          U         1          0 e1000g305000:1
127.0.0.1            127.0.0.1            UH        1          7 lo0:7     (In this peculiar case the default route to 10.194.7.1 is an artifact
displayed by netstat due to the zone isolation mechanism, but it is
not actually used for routing at the zone level; the interface without
tagging, e1000g0, is only displayed on the global zone where ipfilter
operates)
When testing from 10.194.17.11 with "telnet 10.13.4.180 443", it
works. And one can see in the ipf logs that it is the third out rule
that matched (@o_sso-test1:3), i.e. there was no redirection on
another interface (proof that there is nothing wrong with the context
setup):
16:59:30.479660 e1000g305000 @i_sso-test1:2 p 10.194.17.11,2111 -> 10.13.5.181,443 PR tcp len 20 60 -S IN
16:59:30.479844 e1000g305000 @o_sso-test1:3 p 10.13.5.181,443 -> 10.194.17.11,2111 PR tcp len 20 44 -AS OUT
16:59:30.480182 e1000g305000 @i_sso-test1:2 p 10.194.17.11,2111 -> 10.13.5.181,443 PR tcp len 20 40 -A INWhen testing from 10.194.17.11 with "telnet 10.194.7.81 443", it works
also. This time one can see in the ipf logs that it is the second out
rule that matched (@o_sso-test1:2), i.e. there was redirection from
e1000g305000 to e1000g0.
16:59:41.247101 e1000g0 @i_sso-test1:1 p 10.194.17.11,3851 -> 10.194.7.81,443 PR tcp len 20 60 -S IN
16:59:41.247206 e1000g305000 @o_sso-test1:2 p 10.194.7.81,443 -> 10.194.17.11,3851 PR tcp len 20 64 -AS OUT
16:59:41.247508 e1000g0 @i_sso-test1:1 p 10.194.17.11,3851 -> 10.194.7.81,443 PR tcp len 20 52 -A INA packet capture confirms this and one can see in the capture the
SYN-ACK reply packet go out on e1000g0.
The reverse case, essentially the original setup shown in my first
post, where the default route is the interface without tagging
(e1000g0) and the reply packet matches the redirection rule from
e1000g0 to the interface with tagging e1000g305000, the packet is lost
(i.e. is not visible in the packet capture on either interface).
Further tests with stateful redirection ("reply-to") show the same
pattern (does not work when packets are redirected to an interface
with tagging).
It looks like it is a bug: may be ipfilter injects the redirected
packet at a processing stage where it should already have a 802.1q tag
but does not, or something similar; in the working case, ipfilter acts
on a not yet tagged packet which can be used "as is" at the same
processing stage on the non tagging interface, and thus is correctly
transmitted.
Conclusion: ipfilter policy based routing does work on Solaris 10u7,
but, at least in my setup, not when redirection occurs to a 802.1q
tagging interface.
- Could somebody confirm this?
- Is this a known bug? (I didn't find anything relevant on sunsolve or
on the ipfilter mailing list)
Edited by: kleinstein on Oct 1, 2009 4:22 AM
Edited by: kleinstein on Oct 1, 2009 4:25 AM
Edited by: kleinstein on Oct 1, 2009 4:30 AM
Edited by: kleinstein on Oct 1, 2009 4:32 AM
Edited by: kleinstein on Oct 1, 2009 4:37 AM
Edited by: kleinstein on Oct 1, 2009 4:40 AM
Edited by: kleinstein on Oct 1, 2009 4:41 AM

I need help is takeing a solaris 9 soc drive to work in solaris 10

I need to get a Sparc Storage Array to run under solaris 10. The soc driver that is needed is not supportted under solairs 10. I took the packages needed off of solaris 9 cds and installed them but no luck. I tried to to do a modload and modinfo but it was not there.
The package loaded a file into /kernel/drv/sparcv9/soc. I have solaris 9 onanother disk on the same system and looked at the system trying to copy and edit the files on 10 but not device paths show up in the system. I copyied a file called soc that was in /kernel/drv/ I edited the /etc/device_aliases and path_to_inst but no good.
There are no entries in the /devices/ dir that reference the soc path. I do not if than can work but really would like to get this working.

http://forum.java.sun.com/thread.jspa?threadID=5276131
(never mind that this OpenSPARC forum is utterly wrong for your question)

Does OSB 2.6 solaris10 (32 bit) work with solaris 10(64 bit) also ?

Hi,
I want OSB 2.6 installer for solaris 10(64 bit). I found the installer for solaris 10(32 bit).
Will it work on solaris 10(64 bit) also?
If not, how can get it? As in the metalink it does not show download option for solaris 64 bit m/c.
Please help..

Don't know what a service id is, but you will need to be an oracle customer, which I assume you are if you are requesting old software.
here is the link I use
https://metalink2.oracle.com/metalink/plsql/f?p=130:14:5775706955868202591::::p14_database_id,p14_docid,p14_show_header,p14_show_help,p14_black_frame,p14_font:NOT,763603.1,1,1,1,helvetica
cheers
James

Vlan stopped working after Solaris 11.1 upgrade

Sorry for the long post.
I upgraded a test server to Solaris 11.1 from 11/11 a few days ago. After I did the upgrade my one VLAN-based network connection stopped working. I've been messing with it for days and am a bit baffled.
Note that everything was up and working just before the upgrade. This is not a switch configuration problem or a cables issue.
All of the other networking survived the upgrade just fine...
The link that stopped working is a VLAN running on top of a two-link LAG. The untagged link running over the same LAG works just fine.
So here's the strange part. As I was trying to get underneath it all today I fired up wireshark to see if I could figure it out. As soon as I put wireshark up on the interface (in its default promiscuous mode) the link started working. All the packets in the trace looked normal. All was good. As soon as I stopped the trace the link was dead again. Start a trace - link in promiscuous mode - and all is good again. Stop and it stops...
If I bring bring up wireshark on the link without promiscuous mode the link does NOT start working. If I initiate a ping that should go out on the broken VLAN I see a series of ARP requests but no answers (running wireshark on the machine being ping'd I see all of the ARP request come in and the answers go out, but the Solaris machine never sees the answers).
So - did Oracle manage to break VLANs in 11.1? Any ideas how to get it working again?
A few bits on info from the machine. The only thing that looks odd/wrong I've highlighted below.
Phil@TEST:~$ dladm show-link
LINK CLASS MTU STATE OVER
e1000g1 phys 1500 up --
e1000g0 phys 1500 up --
ixgbe0 phys 9000 up --
ixgbe1 phys 9000 up --
aggr2 aggr 9000 up ixgbe0 ixgbe1
aggr2vlan5 vlan 9000 up aggr2
Phil@TEST:~$ dladm show-vlan
LINK VID OVER FLAGS
aggr2vlan5 5 aggr2 -----
Phil@SE11_SAN:~$ ipadm show-addr aggr2vlan5
ADDROBJ TYPE STATE ADDR
aggr2vlan5/v4 dhcp ok 192.168.5.101/24
Phil@TEST:~$ dladm show-linkprop aggr2vlan5
LINK PROPERTY PERM VALUE DEFAULT POSSIBLE
aggr2vlan5 autopush rw -- -- --
aggr2vlan5 zone rw -- -- --
aggr2vlan5 state r- unknown up up,down
aggr2vlan5 mtu rw 9000 1500 1500-9000
aggr2vlan5 maxbw rw -- -- --
aggr2vlan5 cpus rw -- -- --
aggr2vlan5 cpus-effective r- 0-7 -- --
aggr2vlan5 rxfanout rw -- 8 --
aggr2vlan5 rxfanout-effective r- 16 -- --
aggr2vlan5 pool rw -- -- --
aggr2vlan5 pool-effective r- -- -- --
aggr2vlan5 priority rw high high low,medium,high
aggr2vlan5 forward rw 1 1 1,0
aggr2vlan5 protection rw -- -- mac-nospoof,
restricted,
ip-nospoof,
dhcp-nospoof
aggr2vlan5 mac-address r- 0:1b:21:6b:23:98 0:1b:21:6b:23:98 --
aggr2vlan5 allowed-ips rw -- -- --
aggr2vlan5 allowed-dhcp-cids rw -- -- --
aggr2vlan5 rxrings r- -- -- --
aggr2vlan5 rxrings-effective r- -- -- --
aggr2vlan5 txrings r- -- -- --
aggr2vlan5 txrings-effective r- -- -- --
aggr2vlan5 txrings-available r- 0 -- --
aggr2vlan5 rxrings-available r- 0 -- --
aggr2vlan5 rxhwclnt-available r- 0 -- --
aggr2vlan5 txhwclnt-available r- 0 -- --
aggr2vlan5 vsi-mgrid rw -- -- --
aggr2vlan5 etsbw-lcl rw -- 0 --
aggr2vlan5 etsbw-lcl-effective r- -- -- --
aggr2vlan5 etsbw-rmt-effective r- -- -- --
aggr2vlan5 etsbw-lcl-advice r- -- -- --
aggr2vlan5 cos rw -- 0 --
Edit/Delete Message

Fixed. Don't know exactly how/why, but fixed.
When I came home this afternoon I deleted the all of the IPs associated with the VLAN and the LAG. I deleted the VLAN itself and deleted the LAG. Basically tore down all of the datalink and IP layers leaving only the raw interface cards. Rebuilt the LAG, rebuilt the VLAN and reinstalled the IPs. And like magic, the whole thing is happy.
Something in the configs of the LAG or the VLAN must have been corrupted during the upgrade. But now its all fat, dumb and happy again.
Very odd.

APEX Oracle 11g HTTP Server - Cannot get SSL working

I have installed APEX on Oracle 11g with the Oracle HTTP Server on MS Windows server.
Data base up and running, APEX up an running.
All works as expected on port 7777
When I try 4443 I get error message re self signed certificate by Oracle, but if I click through error message I get an https connection.
I want to replace default cert with a locally signed cert, and get SSL working on 4443, then switch to port 443.
I have used the Oracle Wallet manager, generated a CSR, had this signed by my corproate CA, and installed the corporate CA cert and the newly signed server cert into the wallet (with Auto Login Set) and saved it in:
D:\orahttp\Oracle_WT1\instances\apex\config\OHS\ohs1\keystores\infosec2wallet
This creates two files: ewallet.p12 and cwallet.sso
I then manually add the group/users "SYSTEM" and "Administrators" to these two files to match the security tab on the default wallet.
I T then go to the ssl.conf file located at:
D:\orahttp\Oracle_WT\instances\apex\config\OHS\ohs1\ssl.conf
and changed the entry:
#SSLWallet "${ORACLE_INSTANCE}/config/${COMPONENT_TYPE}/${COMPONENT_NAME}/keystores/default"
SSLWallet "${ORACLE_INSTANCE}/config/${COMPONENT_TYPE}/${COMPONENT_NAME}/keystores/infosec2wallet"
I then stop and start the Oracle HTTP Server - ohs1 from the start menu.
Then I try to connect from my desk top machine using the following URL:
https://us-pghinfosec2.ariba.com:4443/pls/apex/f?p=101:1:
I get the clasic MS IE Message:
==========
Internet Explorer cannot display the webpage
Most likely causes:
You are not connected to the Internet.
The website is encountering problems.
There might be a typing error in the address.
What you can try:
Diagnose Connection Problems
More information
This problem can be caused by a variety of issues, including:
Internet connectivity has been lost.
The website is temporarily unavailable.
The Domain Name Server (DNS) is not reachable.
The Domain Name Server (DNS) does not have a listing for the website's domain.
If this is an HTTPS (secure) address, click Tools, click Internet Options, click Advanced, and check to be sure the SSL and TLS protocols are enabled under the security section.
For offline users
You can still view subscribed feeds and some recently viewed webpages.
To view subscribed feeds
Click the Favorites Center button , click Feeds, and then click the feed you want to view.
To view recently visited webpages (might not work on all pages)
Click Tools , and then click Work Offline.
Click the Favorites Center button , click History, and then click the page you want to view.
==========
I am at a loss as to what to do. It acts like Oracle HTTP can not open my wallet.
I suspect it needs the password to the wallet but I cannot find any place to specify the password, and Auto Login should have addressed that issue.
Any insights welcome.
Thanks - Elton Hay

Hello Lakshmi,
>
I got your point but in our case HTTP Server and Oracle Database (APEX) running on different machines.
Oracle HTTP Server running on a Windows 2003 server and Oracle Database running on Sun Solaris machine.
So do i need to change Oracle 10g HTTP Server? do i need to install Oracle 11g HTTP SErver?
Please let me know if my question is not clear.
>
<ul><li>
I got your point but in our case HTTP Server and Oracle Database (APEX) running on different machines.Did I missed something?
You should have mentioned this additional information in the original question itself.
</li>
<li>Oracle HTTP Server running on a Windows 2003 server and Oracle Database running on Sun Solaris machine.As long as [url http://docs.oracle.com/cd/E37097_01/doc/install.42/e35123/otn_install.htm#BHAFJJDA]dads.conf is configured correctly there should not be a problem with this.
From Original question:
We are having Oracle APEX 3.1 version on Oracle 10g Database and Oracle 10g HTTP Server as web server in our organization.How did this setup of APEX worked?(i.e. on different machines)
If you still have doubt about this you can do the setup and find out before upgrading.
</li>
<li>So do i need to change Oracle 10g HTTP Server? do i need to install Oracle 11g HTTP SErver?This question is answered in the above post. As long as you fulfill the [url http://docs.oracle.com/cd/E37097_01/doc/install.42/e35123/pre_require.htm#CFHIIJBE]HTTP Server Requirements for APEX 4.2 (Also we are discussing this long about only Oracle 10g HTTP Server but which version?)
</li></ul>
Hope now I am more clear!
Regards,
Kiran

How to get SAPRFC working on XAMPP 1.6.2? Try this.

Hi
I have just managed to get SAPRFC working with XAMPP 1.6.2 (released on 29/05/2007). I noticed there was not much information on XAMPP in the PHP Development forum, so thought this might be useful for anyone who may wish to use it.
I originally started with Craig Cmehil's post <a href="/people/sap.user72/blog/2005/05/15/getting-started-with-php started with PHP</a>. I already had XAMPP installed, so just needed to update it and add SAPRFC support.
I am using the following:
Windows XP SP2
XAMPP 1.6.2 - <a href="http://www.apachefriends.org/en/xampp-windows.html">http://www.apachefriends.org/en/xampp-windows.html</a>
This includes:
1. Apache 2.2.4
2. MySQL 5.0.41
3. PHP 5.2.2 + 4.4.7 + PEAR + Switch
4. And other modules included. See XAMPP website for more information on the extra modules included.
SAPRFC 1.4-5.20 - Re: PHP 5.2 and saprfc 1.4.1. This provided me with a link to SAPRFC 1.4-5.2.0. Using the php_saprfc.dll file included in this ZIP file solved the problem.
Instructions
1. Install XAMPP and follow setup taking defaults (I installed to C:\DEV\XAMPP)
2. Extract SAPRFC to a suitable location (e.g. C:\DEV\SAPRFC)
3. Copy the php_saprfc.dll file to the XAMPP\PHP\EXT folder (as defined in the extensions_dir in PHP.INI).
4. Copy the remainder of the SAPRFC ZIP file to the XAMPP\HTDOCS folder. Create subdirectory if required.
4. Edit PHP.INI and add the line extensions=php_saprfc.dll You will need to add this after the last extensions=<some_extension>.dll line.
5. Shutdown and restart Apache using the XAMPP Control.
6. Launch Internet Explorer and go to page http://localhost/saprfc_test.php or if you have put the SAPRFC PHP files in a subdirectory go to http://localhost/yoursubdirectory/saprfc_test.php.
7. By running the saprfc_test.php file you should see a logon page.
It should now be working on the PHP 5.2.2. I have not tested with the 4.4.7 version.
That's all you need to do, so you should now be able to test some of the examples that are in the Blogs.
Best of luck
Nick

Hello everybody,
I've found simple solution for all problems with "Generate Activation Context failed for ... php_saprfc.dll". This has something to do with missing libraries at your system.
The next trace in Event viewer -> System was:
"Dependent Assembly Microsoft.VC80.CRT could not be found and Last Error was The referenced assembly is not installed on your system.
The solution is install: Microsoft Visual C++ 2005 Redistributable Package (x86)
"vcredist_x86.exe" available at Microsoft downloads page.
Good luck
Michal.

Problem to get 3d work on HP Compaq Business Desktop dx2000

I bought a brand new HP with linux - mandrake - a month ago. I installed mandrake but then I got so confused that I through it all away and started on again with Archlinux that I have become used to.
Everything (well, of course not everything but most :? ) works all right but a few things doesn't.
First I couldn't get CUPS to work properly but that I solved - but don't ask me how. I think I did the same things over 5 times and then suddenly it worked as it should.
Then I had problems with the sound - but that worsk now after following the wiki.
Then I had problems with playing CD and DVD but that I managed to get to work.
But now I am stuck.
The 3d doesn't work. I tried to install all 3d modules I could find in arch but no result. I tried through hwd -e and lokalsed the modules named there with no result. I even tried NVIDIA (the computer have a intel graphics on board and no Nvidia-card) with the result that now the CD can't play sound-CD and the DVD doesn't work for multimedia despite newest xine and mplayer, koffeine etc I installed.
So I have 3 major problems:
1) the 3d card I want to start working
2) the CD-rom should be able to play sound-CD
3) the DVD should be able to play dvd-films.
Some hard-data:
HP Compaq Business Desktop dx2000
Intel celeron with MMX technology 2.6 Ghz and 400 Mhz system bus
Integrated ADI AD1888 Audio
Integrated Intel extreme Graphics 2 with GDI/GDI+ and Direct Show controller
Graphics memory 16 Mb + extra through Intel Dynamic Video Memory. Complete OpenGL 1.3 support.
2 DVD-drives installed Toshiba Samsung
Any one that could giv me a hint on how to start the solving of this?

These modules I have loaded:
% lsmod
odule Size Used by
dummy 3460 0
ehci_hcd 35332 0
i810 86420 0
snd_pcm_oss 56612 0
snd_mixer_oss 21120 1 snd_pcm_oss
snd_intel8x0 34336 1
snd_ac97_codec 78176 1 snd_intel8x0
snd_pcm 101252 3 snd_pcm_oss,snd_intel8x0,snd_ac97_codec
snd_timer 27140 1 snd_pcm
snd 59108 8 snd_pcm_oss,snd_mixer_oss,snd_intel8x0,snd_ac97_codec,snd_pcm,snd_timer
soundcore 10848 1 snd
snd_page_alloc 10244 2 snd_intel8x0,snd_pcm
parport_pc 28996 1
lp 12296 0
parport 38600 2 parport_pc,lp
usb_storage 71232 0
uhci_hcd 34576 0
eepro100 30988 0
e100 36992 0
mii 5760 2 eepro100,e100
usbserial 31336 0
usbcore 125560 5 ehci_hcd,usb_storage,uhci_hcd,usbserial
when I try hwd -e this results come:
% hwd -e
HARDWARE DETECT ver 4.1.2
Starting... (expert mode)
Detecting pci, usb, and pcmcia devices.
PCI DEVICE
VendID DevID Module Description
8086 1050 "e100" "Intel Corp.|82801EB (ICH5) PRO/100 VE Ethernet Controller"
8086 1229 8086 1050 "eepro100" "Intel Corp.|EtherExpress PRO/100 S Server Adapter"
8086 244e "hw_random" "Intel Corp.|82820 815e (Camino 2) Chipset PCI"
8086 24d0 "i810-tco" "Intel Corp.|82801EB ISA Bridge (LPC)"
8086 24d2 "usb-uhci" "Intel Corp.|USB Controller"
8086 24d3 "i2c-i801" "Intel Corp.|82801EB SMBus"
8086 24d4 "usb-uhci" "Intel Corp.|USB Controller"
8086 24d5 "snd-intel8x0" "Intel Corp.|82801EB AC'97 Audio"
8086 24d7 "usb-uhci" "Intel Corp.|USB Controller"
8086 24db "ata_piix" "Intel Corp.|82801EB ICH5 IDE"
8086 24dd "ehci-hcd" "Intel Corp.|USB Enhanced Controller"
8086 24de "unknown" "Intel Corp.|82801EB USB EHCI Controller #2"
8086 2570 "intel-agp" "Intel Corp.|82865G [Springdale-G] Chipset HostBridge"
8086 2572 "Card:Intel 865" "Intel Corp.|865 Chipset Graphics Controller"
PCMCIA DEVICE
no pcmcia driver in /proc/devices
VendID DevID Module Description
USB DEVICE
VendID DevID Module Description
Press any key to continue...
HD PARITIONS
/dev/hda /dev/hda1 /dev/hda2 /dev/hda3 /dev/hdc /dev/hdd
MODULES
dummy ehci_hcd i810 snd_pcm_oss snd_mixer_oss snd_intel8x0 snd_ac97_codec snd_pcm snd_timer snd soundcore snd_page_alloc parport_pc lp parport usb_storage uhci_hcd eepro100 e100 mii usbserial usbcore
INFORMATION
hwd -s - generates howto and sample X configure.
% hwd - s
HARDWARE DETECT ver 4.1.2
Starting... : (simple mode)
Kernel : 2.6.10-ARCH
CPU & Cache: Processor 0 is Intel(R) Celeron(R) CPU 2.53GHz 2534MHz, 256 KB Cache
ALSA(sound): Intel Corp.|82801EB AC'97 Audio module: snd-intel8x0
Video : Intel Corp.|865 Chipset Graphics Controller server: Xorg (i810)
Monitor : MAX1b6c H:28.0-96.0kHz V:50.0-75.0Hz
Mouse : Generic PS/2 Wheel Mouse device: /dev/psaux
Hard Disk : SAMSUNG SP0411N device: /dev/hda
SCSI : No scsi disk
Swap : Swap found device: /dev/hda2
Scanner : No scanner
CDROM 1 : TSSTcorpDVD-ROM TS-H352A device: /dev/hdc
CDROM 2 : TSSTcorpDVD-ROM TS-H352A device: /dev/hdd
Floppy : 3.5 1.44MB floppy drive device: /dev/fd0
USB : USB found module: ehci-hcd
Ethernet : Intel Corp.|82801EB (ICH5) PRO/100 VE Ethernet Controller module: e100 device: eth0
PCMCIA : Detect PCMCIA cards run hwd -d
Modem : No pci modem
Howto : View howto run hwd -h
Testing : File /etc/X11/xorg.conf already exist!!
: Read more in howto.
in hwd - h the following part is about monitor:
XWindows:
Video Card : Intel Corp.|865 Chipset Graphics Controller
Monitor : MAX1b6c
H kHz : 28.0-96.0
V Hz : 50.0-75.0
Xserver : Xorg
Xmodule : i810
Mouse : Generic PS/2 Wheel Mouse at /dev/psaux module: msintellips
/2
anyone that can help me on?

HT5622 My apple I'd has been disabled. How do I get it working again.

My apple id has been disables. How do I get it working again?

Here's a knowledge base article that tells you what to do:
http://support.apple.com/kb/TS2446

Getting SunScreen work in Solaris 9

Similar Messages

Maybe you are looking for