Samba security on solaris 10

Is samba now considered a secure way to allow access to files on solaris 10?
When ever we have had security reports done on servers in the past, they always seem to complain that it is not a secure way to transfer files and advise that it is turned off.
We have always tried to use scripts using sftp where possible.
Is the general feeling that sftp/scp is the preferred method to samba?
Thank you.

Dear Fieropunk,
Now I have problem with wget utility below with the same URL, please kindly help to check to check and give advice.
If access with URL below is can receive data
#./wget no-check-certificate private-key=/cert/data.pem --certificate=/cert/data.crt "https://server1.com.kh"
10:29:13 https://server1.com.kh
=> `index.html'
Resolving https://server1.com.kh... 172.168.100.67
Connecting to https://server1.com.kh. connected.
WARNING: Certificate verification error for https://server1.com.kh: self signed certificate in certificate chain
HTTP request sent, awaiting response... 200 OK
Length: 285 [text/html]
100%[====================================>] 285 --.--K/s
10:29:13 (8.85 MB/s) - `index.html' saved [285/285]
If I access with long URL below is cannot receive data too but on Linux OS(Debian) can receive data
#./wget no-check-certificate private-key=/cert/data.pem --certificate=/cert/data.crt "https://server1.com.kh/data/?action=datano;datano=aaaa"
10:38:56 https://server1.com.kh/data/?action=datano;datano=aaaa
=> `index.html?action=datano;datano=aaaa'
Resolving server1.com.kh... 172.168.100.67
Connecting to server1.com.kh|172.168.100.67|:443... connected.
WARNING: Certificate verification error for server1.com.kh: self signed certificate in certificate chain
HTTP request sent, awaiting response... No data received.
Retrying.
Note: this domain (server1.com.kh) is running on CentOS
Please kindly give advice,
Thanks and regards,
Heng

Similar Messages

Samba problem in solaris 10

Hi Experts
I configure smb.conf file and i ran test parm and started my smbd and nmb service also i am getting given below error message when i used to connect from my XP box to solaris 10 i checked the firewall it is disabled.
Error: The network connection was aborted by the local system
Given is my smb.conf out put file...
# Global parameters
[global]
server string = Samba Server
log file = /usr/local/samba/var/log.%m
max log size = 50
dns proxy = No
comment = All Printers
path = /var/spool/samba
hosts allow = localhost, blr-abi, 192.168.1., 192.168.2., 127.
printable = Yes
browseable = No
[myshare]
comment = Mary's and Fred's stuff
path = /usr
valid users = root, apun
read only = No
create mask = 0765
guest ok = Yes
printable = No
browseable = Yes

hi all
issue resolved actually port was conflicting in /etc/services i have readded the entry in /etc/service
Thanks

Hardening security on Solaris 10

Dear All,
How to configure hardening on Solaris 10 by enable bsdmconv command and editing files in */etc/security* directory to allow and not allow to access to websites on Solaris 10.
Thanks and regards,
Heng

Dear Fieropunk,
Now I have problem with wget utility below with the same URL, please kindly help to check to check and give advice.
If access with URL below is can receive data
#./wget no-check-certificate private-key=/cert/data.pem --certificate=/cert/data.crt "https://server1.com.kh"
10:29:13 https://server1.com.kh
=> `index.html'
Resolving https://server1.com.kh... 172.168.100.67
Connecting to https://server1.com.kh. connected.
WARNING: Certificate verification error for https://server1.com.kh: self signed certificate in certificate chain
HTTP request sent, awaiting response... 200 OK
Length: 285 [text/html]
100%[====================================>] 285 --.--K/s
10:29:13 (8.85 MB/s) - `index.html' saved [285/285]
If I access with long URL below is cannot receive data too but on Linux OS(Debian) can receive data
#./wget no-check-certificate private-key=/cert/data.pem --certificate=/cert/data.crt "https://server1.com.kh/data/?action=datano;datano=aaaa"
10:38:56 https://server1.com.kh/data/?action=datano;datano=aaaa
=> `index.html?action=datano;datano=aaaa'
Resolving server1.com.kh... 172.168.100.67
Connecting to server1.com.kh|172.168.100.67|:443... connected.
WARNING: Certificate verification error for server1.com.kh: self signed certificate in certificate chain
HTTP request sent, awaiting response... No data received.
Retrying.
Note: this domain (server1.com.kh) is running on CentOS
Please kindly give advice,
Thanks and regards,
Heng

Is samba included in Solaris 9 / x86?

Hello... I have Solaris 9 x86 platform, and I need Samba to make my HD visible from a MS Win network... is Samba included in my Solaris? or I must download it...? from where?
Thanks!

It is included in Solaris 9:
ls -l /usr/sfw/bin/smb*"cp /etc/sfw/smb.conf-example /etc/sfw/smb.conf",
configure the smb.conf file, then "/etc/init.d/samba start" and other
windows boxes on your network can use your solaris machine as
a windows file and print server.

Samba Winbind and Solaris 8

I know this is a Solaris 9 forum, but I couldn't find a Solaris 8.
Basically, I'm having problems with winbindd crashing. While I'm watching ldap requests with snoop I see about 90% good traffic, then these stubborn IP's of domain controllers of a different domain on another network. I don't know how they got there, but too many of them and winbindd crashes with a PANIC in the log file. I do have a 2 way non transitive trust with this domain. I know this isn't a lot of info but maybe it's as simple as clearing out some sort of cache somewhere.

I had a bizarre problem with NIS+ many years ago that might be related to your issue. My NIS+ master server was connected to 2 networks, one for normal WAN traffic and one restricted to only backups (local LAN only connection). On a periodic basis, I think every hour, the NIS+ master communicates wiht its slaves (or whatever the politically correct term is now). For some reason, this periodic update failed, which resulted in the entire system going down. It took multiple unix, network, and SUN support staff 12 hours to figure out that the NIS+ master server was attempting to communicate to the slaves only through the backup LAN network and not through the WAN network. The LAN was on bge0 and the WAN was on bge1. The fix was to put the WAN on bge0 and the LAN on bge1.
Any chance that the netmask is incorrect?
Edited by: Paisley on Feb 18, 2011 3:49 PM

Samba client in solaris 8

Sorry for asking this question in Solaris 9 group.
We would like to mount Windows cifs to Soalris 8 server. Could you give some directions if there are the way to do it?
Thank you in advance

You can also do it in the other direction, but in Solaris with the bundle softwares we can only mount a CIFS file system in Solaris 11.x

Issues with Samba and Solaris 10 when number of group is greater than 16

Has anyone heard if Sun plan to increase the value of ngroups_max from 16 to something larger in the next release of Solaris.
I have just upgraded Samba from version 3.2 to 3.3-3.4 and now users that belong to more than 16 groups have no access the shares.
I know the value can be increased via /etc/system but this breaks other stuff.
What I need is either Samba to take this limitation into account or SUN to overcome the restriction.
Edited by: neilnewman on Sep 22, 2009 8:30 AM
Edited by: neilnewman on Sep 22, 2009 8:34 AM

After some more digging around to help myself, I found a way to get users that belong to more than 16 Windows groups access to the Samba shares under Solaris.
Using a source copy of Samba 3.2.15
cd source/lib
edit util.c
around line 460 I added the following of lines of code:
if (*num_gids >14)
*num_gids=15;
Provided the users in question that require Samba access have the group they need within the first 15 groups, all works OK.
I presume this could also be done with latter versions of Samba, but I have not taken a look at this point.

Solaris 10 + Samba + LDAP/PAM?

Hi all,
I've got a long standing question that I need answered with relation to setup of Samba + LDAP on Solaris 10. Here is the general gist:
1. I've got a Solaris 10 host that is currently communicating with an OpenLDAP (OpenDirectory) master to provide user identity information. The Solaris 10 host simply acts as a place to have disk mounted via some large storage subsystems, which is then shared out via NFS to different places. Because I have used the ldapclient manual commands on the Solaris host, it understands UID's and GUID's from the OpenLDAP master
2. I want to change things a little bit. What I'd like to do, is have samba sharing out disk/exports/shares from the Solaris 10 host, but use my OpenLDAP credentials for users to log into the system with
What I'd like to know how to do is set up Samba on my Solaris 10 (x86) host so that a client can connect to it using their credentials stored on the OpenLDAP host, access their home directory etc.
I don't think it will be too hard - as most of the work is done in terms of the LDAP binds. I have used the following binding technique to make the Solaris 10 host aware of the OpenLDAP directory:
ldapclient -v manual -a credentialLevel=anonymous -a defaultSearchBase=dc=od-master,dc=example,dc=com -a serviceSearchDescriptor=passwd:cn=users,dc=od-master,dc=example,dc=com -a attributeMap=passwd:gecos=cn -a serviceSearchDescriptor=group:cn=groups,dc=od-master,dc=example,dc=com 192.168.0.1Because I've done this, I can now finger/id any UID or GUID that exists on the OpenLDAP host, and the Solaris host will know about it. The question is, how do I make samba aware of such things, let alone configure it to do so. I want users on their windows systems to simply be able to \\some.server.here.there\ and on their Mac OS X systems to smb://some.server.here.there with the credentials that are in the OpenLDAP master. There must be some simple way of telling samba where to get credential information from, right?
Thanks for your time!
z

Update 2 is pretty old, especially if you are talking about ZFS. There's been a variety of problems fixed in ZFS since U2. Were I to just guess out of the blue, you might be running into the ZFS eats all of RAM bug.
http://bugs.opensolaris.org/bugdatabase/view_bug.do?bug_id=6505658
If this is the case, it won't be just the samba server that's slow on the server. You should check this by doing the FTP after your samba server slows down and see if you get fast throughputs.
-r

Samba on Solaris 10 in native ADS environment

Despite crowing about Solaris 10 and integration with Active Directory, this is not quite ready for prime time.
Here's the issue:
In a native Active Directory Services environment (as opposed to 'mixed mode'), Samba on Solaris 10 cannot create an AD entry for the system. It turns out that the Sun provided Samba binaries are not compiled with ADS support. Crap.
So, time to rebuild Samba. Here, it turns out that Sun's native Kerberos support only talks GSS-API (for good and correct reasons, of course) but Samba prefers the older (and largely undocumented) MIT krb5.so interface. Crap.
So, time to build Kerberos. Both the MIT and Heimdal variations file in their compile, for reasons I won't bother elaborating on, because once you get over that hurdle, you still have to deal with the lack of LDAP interface libraries.
So, time to build OpenLDAP...
The long and the short of it is that I now have a Thumper that will not place nicely in our AD environment, so I cannot provide CIFS to our users from it.
Has anyone succeeded in getting Samba built on Solaris 10 x86 (11/06) with full ADS support? Are there pointers to docs that will help?
Chris

Looks like your picking up the wrong kerberos libraries.
Unfortunately, sun decided to add a special -R flag to the linker thats different to any other unix out there. Heaps of software doesnt know to add the -R flags and gets screwed up.
Its the worst decision that sun ever made...
They should have made the -R value default to the -L value and you could override it if you needed. But they didnt...
Heres the commands we use to configure samba
CPPFLAGS=-I/usr/local/openldap/include\ -I/usr/local/ssl/include
LDFLAGS="-L/usr/local/ssl/lib -R/usr/local/ssl/lib -L/usr/local/openldap/lib -R/usr/local/openldap/lib -L/usr/local/libiconv/lib -R/usr/local/libiconv/lib"
export LDFLAGS CPPFLAGS
cd source
./configure prefix=/usr/local/samba with-ldapsaml --with-libiconv=/usr/local/libiconv
with-automount with-ads with-krb5=/usr/local/krb5 with-quotas --with-utmp \
with-logfilebase=/var/samba with-acl-support
make

Secure Solaris 7 or 8 Installation

Hello,
i am looking for a tool to secure my solaris core installation. Does anybody know where i can get such thing or some information about?
Thanks a lot.
R-Richter

Hi,
What do you mean by 'secure'? Take the machine offline than do the install, that is secure. If you mean you want the OS configured so that there are no security holes, then you need to look for a guide on hardening a solaris install. I have found that the best ones are at sans.org
~James

Error while working samba through Windows XP+SP2

Subject: Error while working samba through Windows XP+SP2
Hi,
I have problem with SAMBA Server on SOLARIS 10.0 while browsing shares through MS Windows XP Pro + SP2.
Descriptions:
1) SAMBA Configuration:
#==== global settings ======
[global]
security = user
hosts allow = 192.168.9. 200.0.0. 127. 127.0.0.1
unix password sync = yes
remote announce = 200.0.0.255/Workgroup
192.168.9.255/workgroup
remote browse sync = 200.0.0.255 192.168.9.255
restrict anonymous = yes
root directory = %H
deadtime = 5
#==== shares ======
[homes]
comment = Directory for User: %U
browseable = no
writable = yes
[%U]
comment = Private Directory for User: %U, R.Host: %m
path = %H
valid users = %U
browseable = yes
read only = no
profile acls = yes
[temp]
comment = Temporary file space
path = /tmp
read only = no
public = yes
2) This configuration tested with MS Windows 2000 family and Windows XP Pro+SP2
When I'm going to browse server by windows family stations, server asked for username/password, after authentication on both clients (Win XP and Win 2000) the share list appears correctly. for browsing shares contents through windows 2000 I have no problem but when i want to browse shares contents with windows xp+sp2 error message appears with "Access denied." subject.
How can I solve this problem?
Any help would be greatly appreciate.
M.Chitsaz

UPDATE
i was able to connect and synced songs yesterday.
but when i tried it again today. i cant connect again.
i tried to disconnect and reconnect million times and i even dropped
my iPOD and now it has some scratch and i hate it.

HOWTO: Create 2-node Solaris Cluster 4.1/Solaris 11.1(x64) using VirtualBox

I did this on VirtualBox 4.1 on Windows 7 and VirtualBox 4.2 on Linux.X64. Basic pre-requisites are : 40GB disk space, 8GB RAM, 64-bit guest capable VirtualBox.
Please read all the descriptive messages/prompts shown by 'scinstall' and 'clsetup' before answering.
0) Download from OTN
- Solaris 11.1 Live Media for x86(~966 MB)
- Complete Solaris 11.1 IPS Repository Image (total 7GB)
- Oracle Solaris Cluster 4.1 IPS Repository image (~73MB)
1) Run VirtualBox Console, create VM1 : 3GB RAM, 30GB HDD
2) The new VM1 has 1 NIC, add 2 more NICs (total 3). Setting the NIC to any type should be okay, 'VirtualBox Host Only Adapter' worked fine for me.
3) Start VM1, point the "Select start-up disk" to the Solaris 11.1 Live Media ISO.
4) Select "Oracle Solaris 11.1" in the GRUB menu. Select Keyboard layout and Language.
VM1 will boot and the Solaris 11.1 Live Desktop screen will appear.
5) Click <Install Oracle Solaris> from the desktop, supply necessary inputs.
Default Disk Discovery (iSCSI not needed) and Disk Selection are fine.
Disable the "Support Registration" connection info
6) The alternate user created during the install has root privileges (sudo). Set appropriate VM1 name
7) When the VM has to be rebooted after the installation is complete, make sure the Solaris 11.1 Live ISO is ejected or else the VM will again boot from the Live CD.
8) Repeat steps 1-6, create VM2 and install Solaris.
9) FTP(secure) the Solaris 11.1 Repository IPS and Solaris Cluster 4.1 IPS onto both the VMs e.g under /home/user1/
10) We need to setup both the packages: Solaris 11.1 Repository and Solaris Cluster 4.1
11) All commands now to be run as root
12) By default the 'solaris' repository is of type online (pkg.oracle.com), that needs to be updated to the local ISO we downloaded :-
+$ sudo sh+
+# lofiadm -a /home/user1/sol-11_1-repo-full.iso+
+//output : /dev/lofi/N+
+# mount -F hsfs /dev/lofi/N /mnt+
+# pkg set-publisher -G '*' -M '*' -g /mnt/repo solaris+
13) Setup the ha-cluster package :-
+# lofiadm -a /home/user1/osc-4_1-ga-repo-full.iso+
+//output : /dev/lofi/N+
+# mkdir /mnt2+
+# mount -f hsfs /dev/lofi/N /mnt2+
+# pkg set-publisher -g file:///mnt2/repo ha-cluster+
14) Verify both packages are fine :-
+# pkg publisher+
PUBLISHER                   TYPE     STATUS P LOCATION
solaris                     origin   online F file:///mnt/repo/
ha-cluster                  origin   online F file:///mnt2/repo/
15) Install the complete SC4.1 package by installing 'ha-cluster-full'
+# pkg install ha-cluster-full+
14) Repeat steps 12-15 on VM2.
15) Now both VMs have the OS and SC4.1 installed.
16) By default the 3 NICs are in the "Automatic" profile and have DHCP configured. We need to activate the Fixed profile and put the 3 NICs into it. Only 1 interface, the public interface, needs to be
configured. The other 2 are for the cluster interconnect and will be automatically configured by scinstall. Execute the following commands :-
+# netadm enable -p ncp defaultfixed+
+//verify+
+# netadm list -p ncp defaultfixed+
+#Configure the public-interface+
+#Verify none of the interfaces are listed, add all the 3+
+# ipadm show-if+
+# run dladm show-phys or dladm show-link to check interface names : must be net0/net1/net2+
+# ipadm create-ip net0+
+# ipadm create-ip net1+
+# ipadm create-ip net2+
+# ipadm show-if+
+//select proper IP and configure the public interface. I have used 192.168.56.171 & 172+
+# ipadm create-addr -T static -a 192.168.56.171/24 net0/publicip+
+#IP plumbed, restart+
+# ipadm down-addr -t net0/publicip+
+# ipadm up-addr -t net0/publicip+
+//Verify publicip is fine by pinging the host+
+# ping 192.168.56.1+
+//Verify, net0 should be up, net1/net2 should be down+
+# ipadm+
17) Repeat step 16 on VM2
18) Verify both VMs can ping each other using the public IP. Add entries to each other's /etc/hosts
Now we are ready to run scinstall and create/configure the 2-node cluster
19)
+# cd /usr/cluster/bin+
+# ./scinstall+
select 1) Create a new cluster ...
select 1) Create a new cluster
select 2) Custom in "Typical or Custom Mode"
Enter cluster name : mycluster1 (e.g)
Add the 2 nodes : solvm1 & solvm2 and press <ctrl-d>
Accept default "No" for <Do you need to use DES authentication>"
Accept default "Yes" for <Should this cluster use at least two private networks>
Enter "No" for <Does this two-node cluster use switches>
Select "1)net1" for "Select the first cluster transport adapter"
If there is warning of unexpected traffic on "net"1, ignore it
Enter "net1" when it asks corresponding adapter on "solvm2"
Select "2)net2" for "Select the second cluster transport adapter"
Enter "net2" when it asks corresponding adapter on "solvm2"
Select "Yes" for "Is it okay to accept the default network address"
Select "Yes" for "Is it okay to accept the default network netmask"Now the IP addresses 172.16.0.0 will be plumbed in the 2 private interfaces
Select "yes" for "Do you want to turn off global fencing"
(These are SATA serial disks, so no fencing)
Enter "Yes" for "Do you want to disable automatic quorum device selection"
(we will add quorum disks later)
Enter "Yes" for "Proceed with cluster creation"
Select "No" for "Interrupt cluster creation for cluster check errors"
The second node will be configured and 2nd node rebooted
The first node will be configured and rebootedAfter both nodes have rebooted, verify the cluster has been created and both nodes joined.
On both nodes :-
+# cd /usr/cluster/bin+
+# ./clnode status+
+//should show both nodes Online.+
At this point there are no quorum disks, so 1 of the node's will be designated quorum vote. That node VM has to be up for the other node to come up and cluster to be formed.
To check the current quorum status, run :-
+# ./clquorum show+
+//one of the nodes will have 1 vote and other 0(zero).+
20)
Now the cluster is in 'Installation Mode' and we need to add a quorum disk.
Shutdown both the nodes as we will be adding shared disks to both of them
21)
Create 2 VirtualBox HDDs (VDI Files) on the host, 1 for quorum and 1 for shared filesystem. I have used a size of 1 GB for each :-
*$ vboxmanage createhd --filename /scratch/myimages/sc41cluster/sdisk1.vdi --size 1024 --format VDI --variant Fixed*
*0%...10%...20%...30%...40%...50%...60%...70%...80%...90%...100%*
*Disk image created. UUID: 899147b9-d21f-4495-ad55-f9cf1ae46cc3*
*$ vboxmanage createhd --filename /scratch/myimages/sc41cluster/sdisk2.vdi --size 1024 --format VDI --variant Fixed*
*0%...10%...20%...30%...40%...50%...60%...70%...80%...90%...100%*
*Disk image created. UUID: 899147b9-d22f-4495-ad55-f9cf15346caf*
22)
Attach these disks to both the VMs as shared type
*$ vboxmanage storageattach solvm1 --storagectl "SATA" --port 1 --device 0 --type hdd --medium /scratch/myimages/sc41cluster/sdisk1.vdi --mtype shareable*
*$ vboxmanage storageattach solvm1 --storagectl "SATA" --port 2 --device 0 --type hdd --medium /scratch/myimages/sc41cluster/sdisk2.vdi --mtype shareable*
*$ vboxmanage storageattach solvm2 --storagectl "SATA" --port 1 --device 0 --type hdd --medium /scratch/myimages/sc41cluster/sdisk1.vdi --mtype shareable*
*$ vboxmanage storageattach solvm2 --storagectl "SATA" --port 2 --device 0 --type hdd --medium /scratch/myimages/sc41cluster/sdisk2.vdi --mtype shareable*
The disks are attached to SATA ports 1 & 2 of each VM. On my VirtualBox on Linux, the controller type is "SATA", whereas on Windows it is "SATA Controller".
The "--mtype shareable' parameter is important
23)
Mark both disks as shared :-
*$ vboxmanage modifyhd /scratch/myimages/sc41cluster/sdisk1.vdi --type shareable*
*$ vboxmanage modifyhd /scratch/myimages/sc41cluster/sdisk2.vdi --type shareable*
24) Start both VMs. We need to format the 2 shared disks
25) From VM1, run format. In my case, the 2 new shared disks show up as 'c7t1d0' and 'c7t2d0'.
+# format+
select disk 1 (c7t1d0)
[disk formated]
FORMAT MENU
fdisk
Type 'y' to accept default partition
partition
0
<enter>
<enter>
1
995mb
print
label
<yes>
quit
quit26) Repeat step 25) for the 2nd disk (c7t2d0)
27) Make sure the shared disks can be used for quorum :-
On VM1
+# ./cldevice refresh+
+# ./cldevice show+
On VM2
+# ./cldevice refresh+
+# ./cldevice show+
The shared disks should have the same DID (d2,d3,d4 etc). Note down the DID that you are going to use for quorum (e.g d2)
By default, global fencing is enabled for these disks. We need to turn it off for all disks as these are SATA disks :-
+# cldevice set -p default_fencing=nofencing-noscrub d1+
+# cldevice set -p default_fencing=nofencing-noscrub d2+
+# cldevice set -p default_fencing=nofencing-noscrub d3+
+# cldevice set -p default_fencing=nofencing-noscrub d4+
28) It is better to do one more reboot of both VMs, otherwise I got a error when adding the quorum disk
29) Run clsetup to add quorum disk and to complete cluster configuration :-
+# ./clsetup+
=== Initial Cluster Setup ===
Enter 'Yes' for "Do you want to continue"
Enter 'Yes' for "Do you want add any quorum devices"
Select '1) Directly Attached Shared Disk' for the type of device
Enter 'Yes' for "Is it okay to continue"
Enter 'd2' (or 'd3') for 'Which global device do you want to use'
Enter 'Yes' for "Is it okay to proceed with the update"
The command 'clquorum add d2' is run
Enter 'No' for "Do you want to add another quorum device"
Enter 'Yes' for "Is it okay to reset "installmode"?"Cluster initialization is complete.!!!
30) Run 'clquorum status' to confirm both nodes and the quorum disk have 1 vote each
31) Run other cluster commands to explore!
I will cover Data services and shared file system in another post. Basically the other shared disk
can be used to create a UFS filesystem and mount it on all nodes.

The Solaris Cluster 4.1 Installation and Concepts Guide are available at :-
http://docs.oracle.com/cd/E29086_01/index.html
Thanks.

Mount NTFS volumes in Solaris 10 update 8

Hi All,
I have a requirement to mount a windows share to two different Solaris 10 update 8 hosts . The below are the steps that i have done for the same but it got failed .
Please suggest a procedure and solution .
1 . Created the network share named " csv_source " on windows 2008 server . The share is given permission to everyone full access
2 . I have enabled the samba service on solaris server
3 . Created a directory on solaris server using mkdir /data
4 . Used the " mount " command to mount the volume but its failed .

Can you boot from DVD and do an "upgrade?"

Solaris 10 shared memory config/ora 11g

The ora 11 install guide for spark solaris 10 is very confusing wrt shared memory and my system does not seem to using memory correctly, lots of swapping on an 8GB real memory system.
The doc says to set /etc/system to:
shmsys:shminfo_shmmax project.max-shm-memory 4294967296
but infers that this is not used.
Then, the doc states to set a project shared mem value of 2GB:
# projmod -sK "project.max-shm-memory=(privileged,2G,deny)" group.dba
Why is this number different?
By setting to to 2G as documented oracle did not work at all and so I found Note:429191.1
on the solaris 10 memory which hints that these numbers should be big:
% prctl -n project.max-shm-memory -r -v 24GB -i project oracle_dss
% prctl -n project.max-shm-memory -i project oracle_dss
project: 101: oracle_dss
NAME PRIVILEGE VALUE FLAG ACTION RECIPIENT
project.max-shm-memory
privileged 24.0GB - deny -
system 16.0EB max deny
Is there some logic in how to get solaris 10/ora 11 to hold hands. The install doc does not seem to contain it.

system does not seem to using memory correctly, lots of swapping on an 8GB real memory system.We could start (for example) with this question - How big is your SGA or how much of 8GB RAM takes your SGA?
The doc says to set /etc/system to:
shmsys:shminfo_shmmax project.max-shm-memory 4294967296
but infers that this is not used.From documentation:
In Solaris 10, you are not required to make changes to the /etc/system file to implement the System V IPC. Solaris 10 uses the resource control facility for its implementation. However, Oracle recommends that you set both resource control and /etc/system/ parameters. Operating system parameters not replaced by resource controls continue to affect performance and security on Solaris 10 systems.
Then, the doc states to set a project shared mem value of 2GB:
# projmod -sK "project.max-shm-memory=(privileged,2G,deny)" group.dba
Why is this number different?It's an example how "To set the maximum shared memory size to 2 GB"
By setting to to 2G as documented oracle did not work at all Docs says:
On Solaris 10, verify that the kernel parameters shown in the following table are set to values greater than or equal to the recommended value shown.
If your SGA was greater than 2G I'm nor wondering why "oracle did not work at all".
So for 4GB SGA (for example) you need allow allocation of 4G of shared memory.
Note: shmsys:shminfo_shmmax != project.max-shm-memory. "project.max-shm-memory" is replacement of "shmsys:shminfo_shmmax" but function of these parameters differs.
"project.max-shm-memory resource control limits the total amount of shared memory of one project, whereas previously, the shmsys:shminfo_shmmax parameter limited the size of a single shared memory segment."
Relevant link to Sun docs: http://docs.sun.com/app/docs/doc/819-2724/chapter1-33

Solaris 10 compile samba4 error

Hi all
First, sorry for my poor English.
I am trying to compile Samba 4 on Solaris 10 ( Sunfire v250 machine)
Here are list of things I did:
+) got errors about option "-mt" of gcc so I wrote a short shell script to replace CC ( remove option "-mt")
+) then I set environment varibles: YACC=binson, LEX=flex, MAKE=gmake
+) I also set CFLAGS,LDFLAGS (LDFLAGS is set to get strsep function, not present in Solaris)
+)Now I got errors:
GCC: bin/subsystem/*.o : No such file or directory
"*" means a lots of file.
Have you ever compiled Samba4 on Solaris 10, please help me!
Thank in advance.

Did you try to compile with default options? ie., without env variables YACC, LEX, LDFLAGS, etc.,
Also did you try to compile with Sun Studio compilers? In case if you do not have the suite installed, you can get it for free from: http://developers.sun.com/prodtech/cc/downloads/index.jsp.
Sometimes Sun Studio provides more diagnostic error messages than GCC.

Samba security on solaris 10

Similar Messages

Maybe you are looking for