Q on Solaris 11.2 DNS Client

Hi All,
Pls note that the mailq command is found hangup whenever the DNS Client is being enabled in our Solaris 11.2 server. So, do anyone have any clue on this behavior?
Thanks & Regards

Hi Carlos,
Solaris 10 and Solaris 11 are "apples and oranges", to use the popular comparitive expression. In this case, it's more like "grapes and watermelons", or "strawberries and raisins" . .you get the idea : )
This doc talks about it:
http://www.oracle.com/technetwork/server-storage/solaris11/documentation/solaris11-whatsnew-201111-392603.pdf
"System Configuration in the SMF repository
Some basic system configuration has been migrated into the SMF system configuration
repository with Oracle Solaris 11, as part of a wider move to reduce the number of
configuration files that are located in /etc and to improve the management of configuration
during system upgrade. . . . . ."
and specifically on S11 name services:
http://docs.oracle.com/cd/E23824_01/html/E24456/gliyc.html#gllcu
It's a whole new world.

Similar Messages

Configure DNS client

I new in solaris can anyone tell me how to configure dns client? thank you

1. Edit the /etc/resolv.conf file
vi /etc/resolv.conf
domain example.com
nameserver xxx.xxx.xxx.xxx # IP address of name server
nameserver xxx.xxx.xxx.xxx # IP address of sec name server
search test.example.com research.example.com
2. Configure DNS as the naming service .
cp /etc/nsswitch.dns /etc/nsswitch.conf
3. [b]Bounce the naming service .
svcadm restart network/dns/client
(OR)
Reboot the machine
4. Testing the DNS client
nslookup

If i have Dns Client service running, is it necessary to enable dns prefetch in the about:config section?

I've been wondering this for a while and can't seem to find the answer.
Whenever i set network.dns.disablePrefetch to true, the browser seems to load a bit more smoothly and even with the pref. disabled, the dns client service seems to still cache dns whenever i check on cmd using the ipconfig /displaydns command.
Does this mean that the browser still fetches dns even with the pref disabled?

I'm not really sure if it speeds up the loading process or not since it's a bit hard to tell but like i said, the loading is smoother.
Is Dns Client service different from Dns prefetch?

DNS client in a non-global zone

Hello,
I want to configure only the non-global zone as a DNS client, with
/etc/resolv.conf
/etc/defaultdomain
/etc/nsswitch.conf
Is this ok or is this a global wide issue?
-- Nick

Yes. The /etc file system is private to each zone (both in the sparse and whole root models) so each zone can have it's own DNS settings (as well as private things like a different time zone and such).

Domain Controllers that are DNS servers DNS Client settings

[Copying verbatim from a mail by Joe ]
So I have been pinged by a few folks recently on configuration of client DNS settings on Domain Controllers that are also functioning as DNS Servers. Lots of debate. I understand there has been long time debate within MSFT as well.
From http://blogs.technet.com/b/askds/archive/2010/07/17/friday-mail-sack-saturday-edition.aspx there
is the quote
"3.When referencing a DNS server on itself, a DNS client should always use a loopback address and not a real IP address."
From http://www.microsoft.com/en-us/download/confirmation.aspx?id=9166 (Windows
Server 2008 R2 Core Network Guide)
"9. In Preferred DNS server, type the IP address of your DNS server. If you plan to use the local computer as the preferred DNS server, type the IP address of the
local computer.
10. In Alternate DNS Server, type the IP address of your alternate DNS server, if any. If you plan to use the local computer as an alternate DNS server, type the IP address of
the local computer."
From http://technet.microsoft.com/en-us/library/dd378900(v=ws.10).aspx (DNS:
DNS servers on <adapter name> should include their own IP addresses on their interface lists of DNS servers)
"The inclusion of its own IP address in the list of DNS servers improves performance and increases availability of DNS servers. However, if the DNS server is also a domain controller and it points only to
itself for name resolution, it can become an island and fail to replicate with other domain controllers. For this reason, use caution when configuring the loopback address on an adapter if the server is also a domain controller. The loopback address should
be configured only as a secondary or tertiary DNS server on a domain controller...
Add the loopback IP address to the list of DNS servers on all active interfaces. The loopback IP address should not be the first server in the list."
ESPECIALLY "For this reason, use caution when configuring the loopback address on an adapter if the server is also a domain controller. The loopback address should be configured only as a secondary or tertiary
DNS server on a domain controller." and "Add the loopback IP address to the list of DNS servers on all active interfaces. The loopback IP address should not be the first server in the list."
Why shouldn't loopback not be first, the justification is why you shouldn't only use loopback, not why it shouldn't be first.
From http://technet.microsoft.com/en-us/library/ff807362(v=ws.10).aspx (DNS:
DNS servers on <adapter name> should include the loopback address, but not as the first entry)
"If the loopback IP address is the first entry in the list of DNS servers, Active Directory might be unable to find its replication partners.
The inclusion of its own IP address in the list of DNS servers improves performance and increases availability of DNS servers. However, if the DNS server is also a domain controller and it points only to itself,
or points to itself first for name resolution, this can cause a delay during startup. For this reason, use caution when configuring the loopback address on an adapter if the server is also a domain controller. The loopback address should be configured only
as a secondary or tertiary DNS server on a domain controller."
This also seems like justification against only using loopback versus using it first.
Are there any actual real documented issues for using loopback first and a remote DNS server second and perhaps third? If the local DNS server service isn't working yet (or at all), I would expect the DNS Client process
to try to connect to it, fail, and then failover to the secondary just like I would expect it to failover if the remote DNS server was secondary and it was unavailable and it failed back to the loopback. Am I making a bad assumption?
And by documented I don't mean random responses to questions on the internet or other such items. I mean a KB article or technet article or properly researched and tested other web article from a reliable resource.
thanks,
joe

As I understand it, the scenario whereby a DC could become an 'island' if it points only to itself, or to itself first, was repaired in the Windows Server 2003 product cycle. See
http://support.microsoft.com/kb/275278 for information about this scenario.
However, there is still a known problem of slow boot times that can occur. See
http://support.microsoft.com/kb/2001093 for information about this. The scenario that is discussed assumes there is a power failure and servers shut down due to overheating while on backup power. When
multiple servers come online simultaneously after power is restored, there can be a significant delay.
The recommended configuration is one that avoids a single point of failure, but also tries to optimize the speed of resource record registration, so that Active Directory can properly synchronize.
-Greg

New Domain controller, DNS client settings before FSMO transfer

I recently promoted a new domain controller. It is the fourth domain controller and third in the site. I plan to decommission the other two domain controllers in the site leaving just the new one. Right now the new domain controller points
its tcp\ip client to the other other domain controller\DNS servers as primary and itself at the bottom. The other domain controllers point to themselves as primary and the newest domain controller on the bottom of the list. Clients on the network
use the original domain controllers as DNS from DHCP first and then the new domain controller DNS. Is it okay to transfer all the FSMO roles to the new domain controller or should I make all the DNS clients point to it first?

Hi,
It is possible to first change your FSMO roles and after this is done then point your DNS clients to the new DC. This should not be a problem.
some interesting information about assigning your FSMO Roles: http://www.windowsdevcenter.com/pub/a/windows/2004/06/15/fsmo.html
Hope this helps you out.

DNS Client Service Issues

Hi all,
We seem to be having some odd issues with about 50% of our Windows 7 clients. I'll give you a brief run down of what is occurring.
Server 2008 R2 Domain serving about 50 clients. Having changed a static entry in DNS to point an A record to a new server, the Windows 7 clients randomly can't resolve the IP.
So on testing using either the FQDN or just the host name the request doesn't resolve using ping.
Tried using NSLOOKUP and NSLOOKUP resolves just fine.
Tried ping again and no joy. Turned off the DNS Client Service and instantly the host name resolved to the correct IP.
Restart the DNS Client Service and there's about a 25% chance the hostname will no longer resolve. On ALL of the PCs that have this issue. Stopping or restarting the DNS Client Service resolves the problem.
Also it should be noted that running ipconfig /flushdns has no effect and the host still doesn't resolve to the IP. ONLY stopping the DNS Client service on the Windows 7 PCs does the trick.
Your suggestions are most welcome!
Thanks,
Simon.

Hi Yolanda,
Nothing in any event log anywhere and I've checked all the AV logs and run scans already, drivers are up to date. Also there is no firewalling at the client end.
Had a read through the NRPT doc and I don't think that is relevant as the host they are trying to get to doesn't have anything different to anything else in the DNS Domain. All hosts are of the form host.contoso.com. All we've done is change
the IP address on one of the hosts manually within DNS.
It is almost as if on a reboot, the DNS Client Service picks up an old copy of the cache and refuses to overwrite it.
I'm considering changing the Parameters of the service to reduce the TTL of the cached entries from the default of one day to one hour and turn off caching of negative responses as follows:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Dnscache\Parameters]
"MaxCacheTtl"=dword:e10
"MaxNegativeCacheTtl"=dword:0
Thanks,
Simon.

DNS Client not Configured

Hello,
I have reviewed a number of other posts regarding this BPA error but have not found a specific solution.
Receiving the BPA Error: The DNS Client is not configured to point to the internal IP Address of the Server
If the DNS is currently functional, is this required? As a general practice, if it is working, don't change it....
If required, can someone list the steps to change this?

Hi:
The reason the Server should be the DNS server is to maintain _internal_ DNS so each station can find the server and each other. The Internet will work if the setting on the station can find a DNS server that can find the upstream DNS servers.
The way this is meant to work is the stations and the server query the DNS server on the Essentials server. If it knows the name to IP translation, as it should for LAN queries it will provide the results. If it does not, as it most likely would
not in the case of a new internet search, is uses forwarders or root hints (look up those terms if you don't recognize them) to find the name to IP translation and send it back to the station.
If you use DNS servers outside the LAN the usual results are slow startup times and slow network browsing.
Larry Struckmeyer[MVP] If your question is answered please mark the response as the answer so that others can benefit.

EVENT 1006, DNS Client Events

I have been getting these DNS client events And my internet connection has been limited and disconnected over and over again. My desktop (this event) is connected to my notebook computer that is connected to a wireless connection (Apt Managed)

Hi,
This issue can occur by incorrect DNS settings. I suggest you perform the following steps to troubleshoot the issue.
1. Click "Start", input "NCPA.CPL" (without quotation marks) and press Enter.
2. Right click on the connection that you use for the local connection, and then click "Properties".
3. Click to select "Internet Protocol Version 4 (TCP/IPv4)", and then click "Properties".
4. In the Internet Protocol window, let's change the "Preferred DNS server" to 208.67.222.222
5. Click 'OK' twice to complete the modification.
If the issue persists, please repeat the steps and change the "Preferred DNS server" to 208.67.220.220.
Kim Zhou
TechNet Community Support

DNS client service issue

I’ve got a DNS client service issue:
I have a webserver in my local Domain, which is accessible locally only.
One client machine with Windows Server 2012 sometimes cannot access the websites situated on this local webserver. Its event viewer does not contain any issues. The machine can still access the internet. The thing I need to do then, is to restart the DNS client
service on this Windows Server client. After that these local websites are reachable again. The DNS Server is installed on the DC.
What approach could I follow to solve this issue?
Patrick

Are you using the fqdn (host.domain.tld), a single label name or a custom dns name?
If you use the single label name, dns name resolution depends on the suffixes, make sure these are configured.
If the issue occurs, you could use nslookup to check if the communication with all configured dns servers is working and the required records are there.
Use ping to check if the correct ip with FQDN is returned. No FQDN implies netbios was used for name resolution - no good -> check the dns configuration
If you use a custom dns name, check what IP it resolves (ping/nslookup); is it a server local IP? If not, check if the issue resolves by putting the dns alias in the hostsfile with a local ip (or 127.0.0.1 if the bindings for your site allow)
The issue might also be solely related to the dns cache maintained by the service. You could check if ipconfig /flushdns resolves the issue to confirm. Their is not much configuration or debugging info available on this, but issues I've seen all boil down
to dns servers not being corretcly configured on the client's ip settings.
You could enable the DNS Client Events operational log (eventviewer->applications and services logs\Microsoft\Windows to maybe get more info on the issue.
MCP/MCSA/MCTS/MCITP

Problem on Solaris 10 Native ldap client.

Hi,
I have configured the DS 5.2 on Solaris 10 and it seems to be working.
I'm getting the answers from the ldapsearch command with the SSL.
./ldapsearch -h ismesl90 -p 636 -Z -P /var/ldap -D "cn=Directory Manager" -w password -b "cn=Password Policy,cn=config" "(objectclass=*)"
version: 1
dn: cn=Password Policy,cn=config
objectClass: top
objectClass: passwordPolicy
cn: Password Policy
passwordInHistory: 0
passwordStorageScheme: CRYPT
passwordUnlock: on
passwordMustChange: off
passwordNonRootMayResetUserpwd: off
passwordWarning: 86400
passwordExpireWithoutWarning: on
passwordLockout: off
passwordMinLength: 6
passwordMaxFailure: 3
passwordMaxAge: 8640000
passwordResetFailureCount: 600
passwordisglobalpolicy: off
passwordChange: on
passwordExp: off
passwordLockoutDuration: 3600
passwordCheckSyntax: off
passwordMinAge: 0
passwordRootdnMayBypassModsChecks: off
but on the client it complians about the connection:
ul 20 18:50:16 king ldap_cachemgr[2823]: [ID 293258 daemon.warning] libsldap: Status: 81 Mesg: openConnection: simple bind failed - Can't contact LDAP server
Jul 20 18:50:16 king ldap_cachemgr[2823]: [ID 293258 daemon.warning] libsldap: Status: 7 Mesg: Session error no available conn.
Jul 20 18:50:16 king ldap_cachemgr[2823]: [ID 186574 daemon.error] Error: Unable to refresh profile:default: Session error no available conn.
I have installed the latest patches on both machines and it didn't solved the problem.
The ldapsearch command that comes with the DS 5.2 works and the native doesn't.
I have create the keys and cert's and everything.
Have someone faced this problem?
Thanks,
Shalom
Message was edited by:
shalomG

I get the same error in /var/adm/messages of client and in client's cachemgr.log. Also, in cachemgr.log there is this error message:
Error: Unable to update from profile
I have searched Sun's JSDS documentation and I can't find any troubleshooting info for this problem, so I'm hoping that one of you has found a good solution to this problem-thanks. Some details of my setup:
Results of DS search issued from client:
myclient-root: /var/ldap:143)-> ldapsearch -h myserver -D "cn=pr
oxyagent,ou=profile,dc=example,dc=com" -w (removed) -b ou=profile,dc =example,dc=com objectclass=\*
version: 1
dn: ou=profile,dc=example,dc=com
ou: profile
objectClass: top
objectClass: organizationalUnit
dn: cn=proxyagent,ou=profile,dc=example,dc=com
cn: proxyagent
sn: proxyagent
objectClass: top
objectClass: person
userPassword: (removed)
dn: cn=myprofile1,ou=profile,dc=example,dc=com
objectClass: top
objectClass: DUAConfigProfile
defaultSearchBase: dc=example,dc=com
followReferrals: FALSE
defaultSearchScope: one
searchTimeLimit: 30
cn: myprofile1
bindTimeLimit: 10
preferredServerList: myserver
defaultServerList: myserver
authenticationMethod: none
credentialLevel: anonymous
profileTTL: 3600
dn: cn=myprovile2,ou=profile,dc=example,dc=com
objectClass: top
objectClass: DUAConfigProfile
defaultServerList: myserver
defaultSearchBase: dc=example,dc=com
followReferrals: FALSE
defaultSearchScope: one
searchTimeLimit: 30
preferredServerList: myserver
cn: myprofile2
bindTimeLimit: 10
profileTTL: 3600
authenticationMethod: simple
credentialLevel: proxy
serviceCredentialLevel: proxy
serviceAuthenticationMethod: simple
dn: cn=myprofile3,ou=profile,dc=example,dc=com
objectClass: DUAConfigProfile
objectClass: top
cn: myprofile3
serviceAuthenticationMethod: simple
authenticationMethod: simple
bindTimeLimit: 10
followReferrals: FALSE
searchTimeLimit: 30
defaultSearchBase: dc=example,dc=com
defaultSearchScope: one
attributeMap: shadow:userpassword=userPassword
attributeMap: group:gidnumber=gidNumber
attributeMap: group:userpassword=userPassword
attributeMap: passwd:gecos=cn
attributeMap: group:memberuid=memberUid
attributeMap: passwd:loginshell=loginShell
attributeMap: passwd:gidnumber=gidNumber
attributeMap: passwd:homedirectory=unixHomeDirectory
attributeMap: passwd:uidnumber=uidNumber
attributeMap: shadow:shadowflag=shadowFlag
preferredServerList: myserver
serviceSearchDescriptor: passwd:dc=example,dc=com?sub
serviceSearchDescriptor: group:dc=example,dc=com?sub
serviceCredentialLevel: proxy
credentialLevel: proxy
profileTTL: 3600
defaultServerList: myserver
objectclassMap: group:posixGroup=group
objectclassMap: passwd:posixAccount=user
When I use profile with no authentication ( myprofile1 ), I do not get this error, but, I cannot change my user password ( the documentation says this is expected behavior which is why I'm trying to use proxy authentication )
Info from systems ( client and server ):
(myserver-root: /:281)-> showrev
Hostname: myserver
Hostid: (removed)
Release: 5.10
Kernel architecture: sun4u
Application architecture: sparc
Hardware provider: Sun_Microsystems
Domain: example.com
Kernel version: SunOS 5.10 Generic_127111-01
Directory Server Version Info:
Sun-ldbm/6.0(64-bit) SunOS 5.10 sparc
(myclient-root: /var/ldap:147)-> showrev
Hostname: myclient
Hostid: (removed)
Release: 5.10
Kernel architecture: sun4u
Application architecture: sparc
Hardware provider: Sun_Microsystems
Domain: example.com
Kernel version: SunOS 5.10 Generic_127111-01
Hoping someone out there has a fix for this.
Thanks.

Solaris 11.1 AI client: solaris.zlib download times out

Hi all,
I am trying to install a client off the current AI image. I have not modified any manifests and just run the default config after "installadm create-service" which should give me an interactive text install mode. The client has the Intel I350-T2 adapter ( [http://ark.intel.com/products/59062/Intel-Ethernet-Server-Adapter-I350-T2] ) installed. The PXE part finishes quite fine, the client receives the IP from the DHCP server, the boot loader and the subsequent boot_archive download quite fine over TFTP.
But just after the Solaris installer loads ("Probing for device nodes ..."), the connectivity is lost (ICMP echo requests are not answered anymore) and subsequently, the HTTP download of the solaris.zlib network image fails ("Connecting to: <IP address>:5555... failed: Connection timed out.") . I would suspect that the NIC driver's probing simply is unable to recognize the i350 network adapter, but when I can drop to the shell (after 10 failed connection retries), I can run "ifconfig -a" and see the "igb0" interface plumbed and configured with DHCP (at least for a while until the lease expires) - so something appears to be detected by the driver and configured according to the lease granted to the host in the PXE phase. /system/volatile/install_log does not exist at that point, /var/log/syslog is empty and the command set is very limited (no "dmesg"), so I am a bit stuck without any usable log files available.
Am I guessing correctly that I would need a specific NIC driver set upon install for the i350? If so, how would I go about integrating an additional NIC driver into the AI install procedure?
Thanks, kind regards,
Denis
Edited by: user13673072 on 11.12.2012 06:18

After having performed a manual installation from media, I have noticed problems with the Ethernet interfaces on this system - packets were timing out, connections seemed dropped. A look into "fmadm faulty" presented me with a couple of events for pci@0,0/pci8086,3c08@3/pci15d9,1521. According to "prtconf -v" it is a "pciclass 0200" (Network Controller) and is carrying a "compatible" alias of pci8086,1521 (Intel i350 Powerville NIC). I double-checked with other OSes and the NICs seem running quite fine on the same machine, so the problem is apparently with the hardware's driver.
At least I am sufficiently positive now that it is not an AI issue, thanks for reading.

3 doubts about solaris 10 ldap native client

i have a client solaris 10 autenticating with a ldap directory (S1 DS 5.2) and
the comunication between them is "working" ok.
but the login is denied because the user haven't a home directoy, so lookin documents
i keep this this doubts:
1) in all documents that i can see, users home directory are mounted, but if i dont
want mount de homes because i "want" to do like linux, �how i can config this? (i
looking in smc but when i set a option to keep mounted he launch a exception)?
�why i musn't to do this?
3) if i can't do (1) or its not recomended, i must to resolve mounting home
directory from localhost using automount schema (expended with automountKey), but
�these requiered that exist a home directory for the users?
3) if the user login for firts time, he dont have a home directory, so somebody must
create this home for this user, �who must have the responsabilities of them?
�when i must start see to resolve?
Salu2

Hi Lister
Please provide more information on what you're trying to achieve. By the way, I'm in Perth and I've done some JES work out there at Curtin before - let me know if you'd like to get in touch! I'm available at tom.shaw [at] solidsystems.com.au
In general, I see several inconsistencies here.
1. I can't tell whether you're trying to use SSL or not. You have an ldapsearch using SSL and you have a certificate database but your ldap_client_file is using "simple" not "tls:simple". (You should try and get it working without SSL first though.)
2. The objectclassmap entries look like they aren't needed.
3. You haven't listed nsswitch.conf - are you using local files for passwd, group and shadow entries, or are you using LDAP?
4. I'm not sure about the BindDN you have. I believe it needs to be the full DN, not just the RDN, and it needs to have the right ACI permissions.
Useful information would be: the output of a command like "ldaplist passwd" (obviously with sensitive information censored), and the relevant lines of the LDAP access log. But again, I'm in Perth so let me know if you'd like arrange some more direct assistance.
Regards
Tom

DNS: Client can't connect because .local domain isn't in DNS. How can I connect over the WAN to server.domain.local?

So my 2012 server is set up on the LAN with a .local domain name.
Remote Desktop Services are set up and remoteapp stuff works fine on the LAN.
I've set up port forwarding so I can connect to the server over the WAN too, but remoteapp stuff is a bit different. I can connect to the server by specifying the correct IP address. Giving a Web browser the address
https://serverIPAddress/RDWeb
lets me get the login screen and see the range of apps for me to run. I select one, the connectoid is downloaded correctly (in Chrome) and I click on the downloaded connectoid.
Unfortunately, rather than pursuing the sensible IP-address approach that I started with, the connectoid has been given the server's name on the LAN: server.domain.local. Clearly, the client machine tries to look this up but DNS hasn't heard of
it because it's a .local address.
I cannot be the only one to have come across this apparent oversight on Microsoft's part. Any ideas as to how this can sensibly be overcome? Obviously, I could put the IP address translation into every client's hosts file (and I've done this and shown it
works) but I've got too many clients to mess about like this. Anybody know 'the Microsoft way' to fix this?
Thank you for checking this out -- I am confident the details of the problem are completely specified in this query but, if I'm wrong, please ask.
Many thanks again,
Biffo

Hi,
I would like to suggest you to follow the checklist.
Checklist: Make RemoteApp Programs Available from the Internet
http://technet.microsoft.com/en-us/library/cc772415.aspx
Thanks.
Jeremy Wu
TechNet Community Support

Change DNS client settings

Hi,
I have the following problem.
We are using ZENworks 3.2 and we have some clients which have the internal
DNS server manually configured in the TCPIP settings. I want to change
that to "automatically", so the client gets the DNS Servers from the DHCP
server. Hava anybody experience how can I do that with ZENworks?
Many thanks
Josef

There are some freeware tools that can do this.
Sorry I can't recall the name.
I think they may even be provided by MS.
ZEN could be used to simply call the tools if found.
[email protected] wrote:
> Hi,
> I have the following problem.
> We are using ZENworks 3.2 and we have some clients which have the internal
> DNS server manually configured in the TCPIP settings. I want to change
> that to "automatically", so the client gets the DNS Servers from the DHCP
> server. Hava anybody experience how can I do that with ZENworks?
>
> Many thanks
> Josef
Craig Wilson
Novell Product Support Forum Sysop
Master CNE, MCSE 2003, CCN

Q on Solaris 11.2 DNS Client

Similar Messages

Maybe you are looking for