Solaris 10 Kerberos problem

I have a problem with a kerberos installation on Solaris 10.
I modiefied the krb5.conf and pam.conf file, if I do a kinit or klist kerberos is working fine.
If I try to login with ssh I get this error:
[ID 537602 auth.error] PAM-KRB5 (auth): krb5_verify_init_creds failed: No such file or directory
What does this mean ?
Regards,
Ar_min

my first guess is you are missing your keytab (/etc/krb5/krb5.keytab). ssh uses a host/FQDN@<KRB5 REALM> entry in the keytab for auth. other kerbirized services may use the same entry or ftp/FQDN@<KRB5 REALM>, ldap/FQDN@<KRB5 REALM> (openldap for example).
if you created that host entry on your kdc (or in AD, and then used ktpass to export it), and you imported it ok, run sshd in debug mode to see more: /usr/lib/ssh/sshd -ddd -p 220 (-p 220 is the port to connect to)

Similar Messages

Kerberos problem, user authenticates as "nobody" on subsequent mounts

Hi all,
I have, what I think is a relatively simple kerberos problem that I am not seeing the obvious side to. I'll explain the scenario.
I have an OpenLDAP KDC or Directory Master. For the purposes of this conversation, it is the authentication server, and the bit that grants/hands out all the ticket information. I have a Solaris 10 system running the default Sun shipped Samba 3.0.28 (/usr/sfw/sbin/smbd).
This Solaris fileserver is connected via LDAP to the OpenLDAP master and has an appropriate /etc/krb5/krb5.conf and /etc/krb5/krb5.keytab installed.
In my /etc/sfw/smb.conf, I have the simple "magic lines" to connect my samba service to Kerberos as follows in the [global] section:
password server = somehost.somewhere.nowhere.interesting.here
   workgroup = STAFF
   realm = somehost.somewhere.nowhere.interesting.here
   netbios name = somehost.somewhere.nowhere.interesting.here
   netbios aliases = SUN SAM-FS HSM
   security = SERVER
   use kerberos keytab = yes
   encrypt passwords = yesSo, once I have created some shares, all seems to go swimmingly. Users connect using their SSO credentials, they are passed a ticket through the TGT process and they are then allowed to write to the share/directory/wherever I have specified.
The problem is, when my user decideds he/she/it has had enough of that network mounted volume, they eject it. No big deal there - however, when they REMOUNT the volume with their Kerberos ticket in-fact (default ticket time out is 10 hours in my policy), they for SOME reason authenticate as the "nobody" user - and as a result, get denied access:
Some logs. A "healthy" connection to the service:
[2008/08/09 09:43:18, 1, pid=3893] smbd/service.c:(1033)
aaa.bb.ccc.ddd (aaa.bb.ccc.ddd) connect to service group_IT initially as user zebra (uid=1027, gid=1028) (pid 3893)Now, lets disconnect the share on the desktop:
[2008/08/09 09:46:50, 1, pid=3893] smbd/service.c:(1230)
aaa.bb.ccc.ddd (aaa.bb.ccc.ddd) closed connection to service group_ITNow, lets try reconnecting with our kerberos ticket in-tact and see what happens:
[2008/08/09 09:53:16, 4, pid=3953] smbd/reply.c:(506)
Client requested device type [A:] for share [GROUP_IT]
[2008/08/09 09:53:16, 5, pid=3953] smbd/service.c:(1205)
making a connection to 'normal' service group_it
[2008/08/09 09:53:16, 2, pid=3953] smbd/service.c:(605)
*guest user (from session setup) not permitted to access this share (group_IT)*
*[2008/08/09 09:53:16, 3, pid=3953] smbd/error.c:(106)*
*error packet at smbd/reply.c(514) cmd=117 (SMBtconX) NT_STATUS_ACCESS_DENIED*
[2008/08/09 09:53:16, 5, pid=3953] lib/util.c:(484)
[2008/08/09 09:53:16, 5, pid=3953] lib/util.c:(494)
size=35
smb_com=0x75
smb_rcls=34
smb_reh=0
smb_err=49152
smb_flg=136
smb_flg2=49153
smb_tid=65535
smb_pid=1
smb_uid=100
smb_mid=8
smt_wct=0
smb_bcc=0
[2008/08/09 09:53:20, 3, pid=3953] smbd/process.c:(1068)
Transaction 9 of length 43
[2008/08/09 09:53:20, 5, pid=3953] lib/util.c:(484)
[2008/08/09 09:53:20, 5, pid=3953] lib/util.c:(494)
size=39
smb_com=0x74
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=8
smb_flg2=49153
smb_tid=65535
smb_pid=1
smb_uid=100
smb_mid=9
smt_wct=2
smb_vwv[ 0]= 255 (0xFF)
smb_vwv[ 1]=    0 (0x0)
smb_bcc=0What the? I've got a legit ticket:
zebraMacbookPro-2:~ zebra$ klist
Kerberos 5 ticket cache: 'API:Initial default ccache'
Default principal: [email protected]
Valid Starting     Expires            Service Principal
08/09/08 09:42:32 08/09/08 19:42:32 krbtgt/[email protected]where.interesting.here
     renew until 08/16/08 09:42:32Frustratingly, if I to a kdestroy on my ticket, then remount the share, everything is perfect - I am the correct user, and all goes according to plan again.
What on earth could be going wrong? Has anyone ever come up against such issues?
Thanks for your time.
z
Edited by: zebrac on Aug 8, 2008 5:00 PM

Good idea.
Before connecting to the share. (This is all done on the client).
zebraMacbookPro:~ zebra$ klist -e
klist: No Kerberos 5 tickets in credentials cacheAfter authenticating:
zebraMacbookPro:~ zebra$ klist -e
Kerberos 5 ticket cache: 'API:Initial default ccache'
Default principal: [email protected]
Valid Starting     Expires            Service Principal
08/12/08 09:08:44 08/12/08 19:08:44 krbtgt/[email protected]
     renew until 08/19/08 09:08:44, Etype (skey, tkt): Triple DES cbc mode with HMAC/sha1, Triple DES cbc mode with HMAC/sha1
08/12/08 09:08:45 08/12/08 19:08:44 cifs/[email protected]
     renew until 08/19/08 09:08:44, Etype (skey, tkt): Triple DES cbc mode with HMAC/sha1, Triple DES cbc mode with HMAC/sha1So, works fine. Samba suggests we are authenticated as the correct user. It all works. Let's disconnect/unmount the volume.
zebraMacbookPro:~ zebra$ klist -e
Kerberos 5 ticket cache: 'API:Initial default ccache'
Default principal: [email protected]
Valid Starting     Expires            Service Principal
08/12/08 09:08:44 08/12/08 19:08:44 krbtgt/[email protected]
     renew until 08/19/08 09:08:44, Etype (skey, tkt): Triple DES cbc mode with HMAC/sha1, Triple DES cbc mode with HMAC/sha1
08/12/08 09:08:45 08/12/08 19:08:44 cifs/[email protected]
     renew until 08/19/08 09:08:44, Etype (skey, tkt): Triple DES cbc mode with HMAC/sha1, Triple DES cbc mode with HMAC/sha1...I've still got the ticket. Samba on the solaris host says I've disconnected from the "Service" like so:
some.ip.address.here (some.ip.address.here) connect to service group_IT initially as user zebra (uid=1027, gid=1028) (pid 5428)
[2008/08/12 09:46:05, 1, pid=5428] smbd/service.c:(1230)
some.ip.address.here (some.ip.address.here) closed connection to service group_IT
...and I still have my ticket on the client. It is not until I DESTROY the ticket, can I authenticate to the samba service correctly again.
My password isn't asked for again - it just denies connection to the service.
Thoughts?
Thanks for getting back to me, again.
z

Agent 2.2, Apache 2.0.59 and Solaris 10 - problem- Urgent

Hi,
We are using Solaris 10 (T2000), apache 2.0.59 and Policy Agent 2.2.. Apache Server 2.0.59 works just fine. When I installed Policy Agent 2.2. The Apache start gives following error:
/usr/local/apache2/bin/apachectl start
Syntax error on line 1 of /etc/opt/SUNWam/agents/apache/config/_usr_local_apache2_conf/dsame.conf:
Cannot load /opt/SUNWam/agents/apache/lib/libamapc_ssl.so into server: ld.so.1: httpd: fatal: relocation error: file /opt/SUNWam/agents/apache/lib/libamapc_ssl.so: symbol ap_pstrdup: referenced symbol not found
Does anybody knows whats going wrong?
Thanks,
Vivek

I'm not sure of the exact error issued, but if one uses the Apache version that comes bundled with Solaris, then problems arise. If that's not what you've done, then never mind. Here's the warning from the documentation
PDF = http://192.18.109.11/819-4770/819-4770.pdf
HTML = http://docs.sun.com/app/docs/doc/819-4770
Caution - Do not use the version of Apache HTTP Server that comes bundled with Solaris 9 Operating System or with Solaris 10 Operating System. The bundled Apache HTTP Server package is incomplete. Any attempt to Install Agent for Apache HTTP Server on a bundled version of Apache HTTP Server is likely to fail.
Therefore, download the desired version of Apache HTTP Server from the Apache web site at http://www.apache.org/ before attempting to install the agent.
John D.

WebLogic 10.3.2.0 (11gR1) on Solaris 10 problems with jdbc

I have Solaris 10 10/09 running on a SPARC machine.
I install WebLogic 11gR1, use development mode (using the SUN 1.6 jvm) and create a JDBC connection to DB2 on another machine using Oracle's XA DB2 driver. The connection test is successful. A restart of WebLogic returns everything is good. I change the connection pool max capacity to 50 (up from the default of 15) in the web interface and save the settings, everything is fine. Then I shutdown WebLogic using the appropriate command and re-start it... only to find that the jdbc connection has failed with the following error:
<Feb 22, 2010 11:02:31 AM EST> <Error> <Deployer> <BEA-149205> <Failed to initialize the application 'jdbc/DB2DataSource' due to error weblogic.application.ModuleException: .
weblogic.application.ModuleException:
at weblogic.jdbc.module.JDBCModule.prepare(JDBCModule.java:290)
at weblogic.application.internal.flow.ModuleListenerInvoker.prepare(ModuleListenerInvoker.java:199)
at weblogic.application.internal.flow.DeploymentCallbackFlow$1.next(DeploymentCallbackFlow.java:391)
at weblogic.application.utils.StateMachineDriver.nextState(StateMachineDriver.java:83)
at weblogic.application.internal.flow.DeploymentCallbackFlow.prepare(DeploymentCallbackFlow.java:59)
Truncated. see log file for complete stacktrace
Caused By: sun.security.pkcs11.wrapper.PKCS11Exception: CKR_DEVICE_ERROR
at sun.security.pkcs11.wrapper.PKCS11.C_Verify(Native Method)
at sun.security.pkcs11.P11Signature.engineVerify(P11Signature.java:529)
at java.security.Signature$Delegate.engineVerify(Signature.java:1140)
at java.security.Signature.verify(Signature.java:592)
at sun.security.x509.X509CertImpl.verify(X509CertImpl.java:441)
Truncated. see log file for complete stacktrace
Nothing else is changed or deployed in WebLogic.
Switching back to a thread pool max of 15 doesn't work, and throws this error:
<Feb 22, 2010 11:09:41 AM EST> <Warning> <Deployer> <BEA-149004> <Failures were detected while initiating redeploy task for application 'jdbc/DB2DataSource'.>
<Feb 22, 2010 11:09:41 AM EST> <Warning> <Deployer> <BEA-149078> <Stack trace for message 149004
weblogic.application.ModuleException:
at weblogic.jdbc.module.JDBCModule.prepare(JDBCModule.java:290)
at weblogic.application.internal.flow.ModuleListenerInvoker.prepare(ModuleListenerInvoker.java:199)
at weblogic.application.internal.flow.DeploymentCallbackFlow$1.next(DeploymentCallbackFlow.java:391)
at weblogic.application.utils.StateMachineDriver.nextState(StateMachineDriver.java:83)
at weblogic.application.internal.flow.DeploymentCallbackFlow.prepare(DeploymentCallbackFlow.java:59)
Truncated. see log file for complete stacktrace
Caused By: java.lang.NoClassDefFoundError: Could not initialize class javax.crypto.SunJCE_b
at javax.crypto.SecretKeyFactory.a(DashoA13*..)
at javax.crypto.SecretKeyFactory.<init>(DashoA13*..)
at javax.crypto.SecretKeyFactory.getInstance(DashoA13*..)
at weblogic.jdbc.db2base.PropertyEncrypter.<init>(Unknown Source)
at weblogic.jdbc.db2base.BaseLicenseUtility.readBulkLoadRowLimit(Unknown Source)
Truncated. see log file for complete stacktrace
<Feb 22, 2010 11:09:42 AM EST> <Error> <Console> <BEA-240003> <Console encountered the following error weblogic.application.ModuleException:
at weblogic.jdbc.module.JDBCModule.prepare(JDBCModule.java:290)
at weblogic.application.internal.flow.ModuleListenerInvoker.prepare(ModuleListenerInvoker.java:199)
at weblogic.application.internal.flow.DeploymentCallbackFlow$1.next(DeploymentCallbackFlow.java:391)
Modifying the connection in the xml to lower the max pool size back to the default value of 15 doesn't net any progress.
Removing and re-creating the connection doesn't fix the problem. Creating a new WebLogic domain doesn't fix the problem. The only thing that fixes the problem (allows the jdbc connection to be re-created and run successfully) is to blow away the entire WebLogic install, reinstall and re-create the domain. Occasionally even this doesn't help.
This is repeatable like clockwork.
Moving the pool max up to 30 didn't throw the error, but moving to 50 did.
Edited by: second infinity on Feb 22, 2010 2:24 PM

Hi. I've never seen anything like this, and it seems to be something which
the JDBC module is going to be an innocent victim of, rather than a
contributor to... Your best course is to open an official support case.
Joe

Solaris starting problem

Hello Guys,
I have encounter the problem that is after installation of solaris 10 on dell poweredge1000. I am rebooting this but after rebooting solaris is not started only Grub is coming on display so how can i restart the solaris10?
Edited by: 953912 on Aug 21, 2012 5:58 AM

hi will you please edit the grub with -v option
in grub
select second line and put -v
kernel /platform/i86pc/muliboot -v
provide the o/p of this
validate the o/p

Usb masse storage in solaris 10 problem !!

Hi all
i have srss 3.0 with solaris10-GA, all work well but the usb masse storage
does' nt recognize by srss3.0 are there solution for that problem.
or patch for srss 3.0.
thanks team

Congratulations on your choice of Os ;-)
To solve this problem you can try and create a directory called /rmdisk , then start vold running:
/etc/init.d/volmgt stop
/etc/init.d/volmgt start
if you are lucky your USB flash will show up under /rmdisk/<name> after a few seconds.
If not you should be able to see the flash with cfgadm, which list the status of USB ports (among other things).
Solaris should automatically create a /dev/dsk/ and /dev/rdsk/ entries for your flash memory, if its not automatically mounted by vold, try and stop vold using
/etc/init.d/volmgt stop
Then do a cd /dev/dsk and run an ls -lart, the USB devices should be among the last devices in that list, then mount it using:
mount -F pcfs /dev/dsk/<device> /some/directory
the device should end with s2 or p2, some flash devices might also need :c, aka /dev/dsk/<device>:c, it depends how its configured.
See man mount_pcfs for more information...
Hope this helps a bit (:
//Magnus

Mail and Kerberos problem

Mail client: 10.7.4
Mail server: 10.6.8
Mail protocol: imap
Authentication: Kerberos V5
The problem: when I login on my client, a TGT is acquired normally, klist shows it, and if I launch Mail, mail get a imap service ticket and all works fine.
When my TGT expires, I cannot get a new TGT otherwise than a kinit, which is unacceptable for my users. Before, whith Snow Leopard or Leopard mail client, if no TGT was present on client, mail poped up a specific kerberos dialog box to ask the password and then get a new TGT and imap service ticket. It is anyway the actual behavior with others services as AFP for example.
I have try to create an user Launch Agent which make a kinit periodically, but when the Mac client get out of long sleep state, the TGT is expired and I have no way to launch my script at this moment.
To reproduce the problem with no ticket at sequence start:
foo-mac1:~ foo$ klist
klist: krb5_cc_get_principal: No credentials cache file found
foo-mac1:~ foo$ kinit kinit [email protected]
foo-mac1:~ foo$ klist
Credentials cache: API:501:12
        Principal: [email protected]
Issued           Expires          Principal
Jul 5 10:41:50 Jul 5 20:41:50 krbtgt/[email protected]
A this point, I launch Mail, a service ticket is created, my account is connected and well working.
foo-mac1:~ foo$ klist
Credentials cache: API:501:12
        Principal: foo@XSERVER1. MYDOMAIN.NET
Issued           Expires          Principal
Jul 5 10:41:50 Jul 5 20:41:50 krbtgt/XSERVER1. MYDOMAIN.NET@XSERVER1. MYDOMAIN.NET
Jul 5 11:01:22 Jul 5 20:41:50 imap/xserver3.mydomain.net@XSERVER1. MYDOMAIN.NET
I quit mail and delete my TGT.
foo-mac1:~ foo$ kdestroy
foo-mac1:~ foo$ klist
klist: krb5_cc_get_principal: No credentials cache file found
If I launch Mail, my account cannot connect and does not propose password dialog as precedent versions so I cannot re-create TGT and imap service ticket otherwise than kinit.
moreover, Mail log a logic entry:
03/07/12 17:04:52,838 Mail: GSSAPI Error: Miscellaneous failure (see text (No credentials cache file found (negative cache))
03/07/12 17:04:52,838 Mail: [<_LibSasl2SASLClient: 0x7f951dd4f080> mechanism: GSSAPI security layer: no] Failed to start the SASL connection
SASL(-1): generic failure: GSSAPI Error: Miscellaneous failure (see text (No credentials cache file found (negative cache))
Do you have an idea to make Mail propose an user friendly dialog box when TGT expires or do you have an idea to launch a script when a Mac get out of sleep?

No solution at this point. Now we are seeing the same problem trying to authenticate radius users. Extremely frustrating!
/var/log/system.log:
Sep 19 11:22:58 hostname /usr/sbin/PasswordService[54]: wrong-sized secret 32
Sep 19 11:22:58 hostname /usr/sbin/PasswordService[54]: Unexpected State Reached in MS-CHAPv2 plugin
Sep 19 11:24:05 hostname /usr/sbin/PasswordService[54]: wrong-sized secret 32
Sep 19 11:24:05 hostname /usr/sbin/PasswordService[54]: Unexpected State Reached in MS-CHAPv2 plugin
Sep 19 11:26:27 hostname /usr/sbin/PasswordService[54]: wrong-sized secret 32
Sep 19 11:26:27 hostname /usr/sbin/PasswordService[54]: Unexpected State Reached in MS-CHAPv2 plugin
/var/log/radius/radius.log:
Fri Sep 19 14:21:56 2008 : Error: rlm_mschap: authentication failed -14090
Fri Sep 19 14:28:31 2008 : Auth: rlm_opendirectory: Could not get the user's uuid.
Fri Sep 19 14:28:31 2008 : Auth: rlm_opendirectory: Could not get the user's uuid.
Fri Sep 19 14:28:31 2008 : Auth: rlm_opendirectory: Could not get the user's uuid.
Fri Sep 19 14:28:48 2008 : Auth: rlm_opendirectory: Could not get the user's uuid.
I'm wondering if it's trying to use the wrong auth mech at first. I see the user come in with a successful DIGEST-MD5 during the problem, then successful MS-CHAPv2 following the password reset. Resetting the user's password "fixes" the issue. Until it happens again at an unspecified time.

Kerberos problem on Mac OS X Server

Hi,
Our corporate using Mac OS X 10.6.x server on Xserve, users can login server daily using OD with Kerberos enabled, they can also access files from the file server with no any problem, but if I run kinit <userid> and then type the password, it displays password is incorrect ! I am not trying all existing userid, but at least 3 existing userid have such problem, but if I create a new userid and password, running kinit, no problem found, can somebody tell me what is going on! Thanks.
patrick

Ok. I've did a bit more debugging. Console shows the following when you launch Pages.
2007-06-03 16:57:15.388 Pages[21515] invalid pixel format
2007-06-03 16:57:15.388 Pages[21515] invalid context
2007-06-03 16:57:15.626 Pages[21515] invalid pixel format
2007-06-03 16:57:15.627 Pages[21515] invalid context
2007-06-03 16:57:15.682 Pages[21515] invalid pixel format
2007-06-03 16:57:15.682 Pages[21515] invalid context
2007-06-03 16:57:15.683 Pages[21515] invalid pixel format
2007-06-03 16:57:15.684 Pages[21515] invalid context
2007-06-03 16:57:15.688 Pages[21515] invalid pixel format
2007-06-03 16:57:15.688 Pages[21515] invalid context
2007-06-03 16:57:15.689 Pages[21515] invalid pixel format
2007-06-03 16:57:15.690 Pages[21515] invalid context
2007-06-03 16:57:15.796 Pages[21515] invalid pixel format
2007-06-03 16:57:15.796 Pages[21515] invalid context
2007-06-03 16:57:15.797 Pages[21515] invalid pixel format
2007-06-03 16:57:15.798 Pages[21515] invalid context
2007-06-03 16:57:15.811 Pages[21515] Exception raised during posting of notification. Ignored. exception: * +[NSString stringWithCString:]: NULL cString
The Pages main document window does not show automatically. It seems to have problems raising it. Any clicks into the pages window or attempts to use it just show repeats of the above logs. From those messages I guess I will have to assume that the Server version of Mac OS X does not have some of the libraries needed by Mac OS X. Boooo!!!
Now I don't have any non-server Mac OS X machines here. Any know any apps that can convert Pages or Keynote files to Word or NeoOffice readable formats?

X86 Solaris 10 problems with ipfilter

Colleagues,
I'm install Solaris 10 on HP Proliant DL360 G4
(listed in HCL for Solaris OS http://www.sun.com/bigadmin/hcl/data/sol/systems/details/691.html)
Everything works fine till, but when I increase loading
(DNS server there, so too much UDP packets, about 2000/sec) Solaris panic with:
Nov 30 10:35:45 d0 ^Mpanic[cpu0]/thread=ffffffff85759820:
Nov 30 10:35:45 d0 genunix: [ID 103648 kern.notice] mutex_exit: not owner, lp=0 owner=0 thread=ffffffff85759820
Nov 30 10:35:46 d0 unix: [ID 100000 kern.notice]
Nov 30 10:35:46 d0 genunix: [ID 655072 kern.notice] fffffe8000c08190 unix:mutex_panic+6f (0, ffffffff860f5d98, fffffe)
Nov 30 10:35:46 d0 genunix: [ID 655072 kern.notice] fffffe8000c081b0 unix:mutex_vector_exit+39 ()
Nov 30 10:35:46 d0 genunix: [ID 655072 kern.notice] fffffe8000c081e0 ipf:ipf_stinsert+333e9215 ()
Nov 30 10:35:46 d0 genunix: [ID 655072 kern.notice] fffffe8000c08210 ipf:fr_updatestate+61 ()
Nov 30 10:35:46 d0 genunix: [ID 655072 kern.notice] fffffe8000c08250 ipf:fr_checkstate+10f ()
Nov 30 10:35:46 d0 genunix: [ID 655072 kern.notice] fffffe8000c08390 ipf:fr_check+629 ()
Nov 30 10:35:46 d0 genunix: [ID 655072 kern.notice] fffffe8000c08530 pfil:pfil_precheck+850 ()
Nov 30 10:35:46 d0 genunix: [ID 655072 kern.notice] fffffe8000c08560 pfil:pfilmodwput+9f ()
Nov 30 10:35:46 d0 genunix: [ID 655072 kern.notice] fffffe8000c085c0 unix:putnext+1f1 ()
Nov 30 10:35:46 d0 genunix: [ID 655072 kern.notice] fffffe8000c086d0 ip:ip_wput_ire+1a98 ()
Nov 30 10:35:46 d0 genunix: [ID 655072 kern.notice] fffffe8000c08780 ip:ip_output+ee9 ()
Nov 30 10:35:46 d0 genunix: [ID 655072 kern.notice] fffffe8000c08790 ip:ip_wput+18 ()
Nov 30 10:35:46 d0 genunix: [ID 655072 kern.notice] fffffe8000c087f0 unix:putnext+1f1 ()
Nov 30 10:35:46 d0 genunix: [ID 655072 kern.notice] fffffe8000c08870 udp:udp_wput+29d ()
Nov 30 10:35:46 d0 genunix: [ID 655072 kern.notice] fffffe8000c088d0 unix:putnext+1f1 ()
Nov 30 10:35:46 d0 genunix: [ID 655072 kern.notice] fffffe8000c08a70 genunix:strput+3bc ()
Nov 30 10:35:46 d0 genunix: [ID 655072 kern.notice] fffffe8000c08af0 genunix:kstrputmsg+1e8 ()
Nov 30 10:35:46 d0 genunix: [ID 655072 kern.notice] fffffe8000c08ba0 sockfs:sosend_dgram+181 ()
Nov 30 10:35:46 d0 genunix: [ID 655072 kern.notice] fffffe8000c08c10 sockfs:sotpi_sendmsg+1bc ()
Nov 30 10:35:46 d0 genunix: [ID 655072 kern.notice] fffffe8000c08c80 sockfs:sendit+f0 ()
Nov 30 10:35:46 d0 genunix: [ID 655072 kern.notice] fffffe8000c08ed0 sockfs:sendmsg+1bf ()
Nov 30 10:35:47 d0 unix: [ID 100000 kern.notice]
Nov 30 10:35:47 d0 genunix: [ID 672855 kern.notice] syncing file systems...
Nov 30 10:35:47 d0 genunix: [ID 733762 kern.notice] 34
Nov 30 10:35:48 d0 genunix: [ID 733762 kern.notice] 24
Nov 30 10:36:08 d0 last message repeated 20 times
Nov 30 10:36:09 d0 genunix: [ID 622722 kern.notice] done (not all i/o completed)
Nov 30 10:37:30 d0 genunix: [ID 540533 kern.notice] ^MSunOS Release 5.10 Version Generic_118844-20 64-bit
Nov 30 10:37:30 d0 genunix: [ID 943906 kern.notice] Copyright 1983-2005 Sun Microsystems, Inc. All rights reserved.
At some stage there are problems with creation of a new state...
I remember some time ago (Solaris 2.8) there where problems like that with ipfilter, but now ipfilter included in Solaris distribution, hardware tested and so on...
New reincarnation of a problem?
Somebody has similar problems with the software x86 Solaris 10?
Thanks, Roman Gnatenko (rvg at co.ru)

Hi. I've never seen anything like this, and it seems to be something which
the JDBC module is going to be an innocent victim of, rather than a
contributor to... Your best course is to open an official support case.
Joe

Solaris boot problem after Patch cluster install

just wondering if anyone can assist. i have just installed solaris 10 x86 recommended patches on a 16 disks server. where first 2 disks are mirrored called rpool, and remaining 14 disks are raid z called spool. upon installing the patches successfully and rebooting server, i am coming up with the following error:
NOTICE: Can not read the pool label from '/pci@0,0/pci8086,25f8@4/pci111d,801c@0/pci111d,801c@4/pci108e,286@0/disk@0,0:a /pci@0,0/pci8086,25f8@4/pci111d,801c@0/pci111d,801c@4/pci108e,286@0/disk@1,0:a'
NOTICE: spa_import_rootpool: error 5, Inc. All rights reserved.
Cannot mount root on /pci@0,0/pci8086,25f8@4/pci111d,801c@0/pci111d,801c@4/pci108e,286@0/disk@0,0:a /pci@0,0/pci8086,25f8@4/pci111d,801c@0/pci111d,801c@4/pci108e,286@0/disk@1,0:a fstype zfs
panic[cpu0]/thread=fffffffffbc28820: vfs_mountroot: cannot mount root
fffffffffbc4b190 genunix:vfs_mountroot+323 ()
fffffffffbc4b1d0 genunix:main+a9 ()
fffffffffbc4b1e0 unix:_start+95 ()
skipping system dump - no dump device configured
rebooting...
It looks like the solaris 10 os cannot find zfs filesystem and keeps on rebooting in normal solaris os mode, but when I go to safe mode and type: zfs list, I can see zfs rpool (mirrored) file system and cannot see the zfs spool (raid z) file system, any ideas on how i can fix the boot problem and get zfs spool back in the safest way possible?...

Same problem here with actual recomended patch set.
NOTICE: Can not read the pool label from '/pci@0,0/pci10de,375@f/pci1000,3150@0/sd@0,0:a /pci@0,0/pci10de,375@f/pci1000,3150@0/sd@1,0:a'
NOTICE: spa_import_rootpool: error 5
Cannot mount root on /pci@0,0/pci10de,375@f/pci1000,3150@0/sd@0,0:a /pci@0,0/pci10de,375@f/pci1000,3150@0/sd@1,0:a fstype zfs
panic[cpu0]/thread=fffffffffbc28820: vfs_mountroot: cannot mount root
fffffffffbc4b190 genunix:vfs_mountroot+323 ()
fffffffffbc4b1d0 genunix:main+a9 ()
fffffffffbc4b1e0 unix:_start+95 ()
What the hell happened to the bootsektor or the pool or what ever?

Solaris 10 Problem with Intel board network interface

I've just installed Solaris 10 on my Intel board with integrated fast ethernet interface. Installation went smoothly, except for the networking. I've already followed the guide on this link http://solaris-x86.org/documents/tutorials/network.mhtml. The problem is, I couldn't find anything such as /dev/iprb0 under /dev directory (iprb is for Intel Ethernet 100 VE). When checking from interactive boot, I got this line:
pci@0,0/pci8086,244e@1e/pci8086,3052@8 (which is the device for the ethernet on the pci bus)
Since there's no link such as iprb0 under /dev, I checked the /devices/pci@0,0 directory, and found these:
pci8086,244e@1e (directory, and in it, it contains no device file)
pci8086,244e@1e:devctl
My question is, how could I enable the network? Making link under /dev to pci8086,244e@1e:devctl doesn't seem to work. So I guessed there should be device file (ie. pci8086,3052@8) under pci8086,244e@1e directory. But how can I get this device file? Should I do mknod command? But I don't know how to get major and minor number under solaris.
Please help me... I am used to Linux, but Solaris is a totally different animal to me.
Edgar

If you didn't get any messages about iprb iline value being out of range, simply run (as root):
ifconfig iprb0 plumb
Otherwise run the BIOS setup and disable plug & play os. Then run the above command.

Solaris 10 - problem installation VMware

SunOS Release 5.10 Version Generic_141445-09 32 -bit
Copyright 1983-2009 Sun Microsystems, Inc. Allrights reserved.
Use is subject to license terms.
panic[cpu0]/thread=fec20160:page_unlock:page fe386f80 is not locked
is it a report during setting in Vmware 6, that to do?

Perhaps you should go ask the people at VMware . *<- link*
It is their product that is having the problem with Solaris.
VMware has a technical support department and they also have their own online discussion forum.
( Would be asking Microsoft if you saw a similar issue with VMware and Windows? I think not.)

Solaris 10 problem

I'm using a server with AMD Opteron 252 CPU and chipsets Nvidia CK8-04, Geforce2 MMX 400.
Solaris 10 installation goes smoothly. Except when installation is done and machine is rebooted, this error message appears before loading the Common Environment Desktop:
"Cannot take control from Bios. EHCI is disabled"
Can any Solaris gurus, tell me why EHCI is disabled?
In the Bios settings there is no EHCI item for selection.
Please advise.....thanks..

This hat to see with USB2.0 controller. I had the same message, 4x because i have 4 USB ports. Disabling "USB2.0" in the Bios (Amibios/Intel...), i don't get these error messages.
But this solves only, i think, the problem of the messages, which are not a pain for the use of the OS : more problematic is, if Solaris really after that enables her own USB control, e.g. for a joystick.
Other hand, i think that USB1 is standard enabled.
If anyone can simply explain what happens about this all, i'm also interested !
Best regards,
Sergio

Solaris 10 problem with installtion

I have problem with installtion Solaris 10 Early Access Software x86 Platform Edition.
I downloaded all images, and burned it.
When I try boot from first CD i see screen with primary boot subsystem
and computer it's frozen.
Solaris text at screen is changed to Aolaris.
that all what it's happen.
My computer hardware:
Intel 2,8 Prescot ( 1 MB cache ) HT
512 RAM
200 GB HardDrive SATA
Mainboard GIGABYTE 8S655TX Ultra ( chipset SIS 655TX )
Graphic Card Nvidia Geforce 5200 128 MB
Anybody know what is wrong ?

I cheked and evrythink ok at other computer.
Maybe is somthing with BIOS setting
( I have USB keyboard ) but i don't think that is problem
best regards
Marcin

WL 7.0 for Solaris - Installation problem

Hi
I am trying to install WL 7.0 with SP2 for Solaris which was downloaded from the
BEA Download Center.
The following is the extract of the error :
==============================================================
$ ./server702_solaris.bin
** The directory "/var/tmp/" does not have enough space for extraction.
Please input another directory: /opt/utl/tmp
Extracting 0%..................................................................)
.100%
** Error during extraction, error code = 2.
=====================================================
what could be the problem?
Thanks in advance
Regards
Ramkumar

"Ramkumar" <[email protected]> wrote in message
news:3ee5d2ca$[email protected]..
>
Hi
I am trying to install WL 7.0 with SP2 for Solaris which was downloadedfrom the
BEA Download Center.
The following is the extract of the error :
==============================================================
$ ./server702_solaris.bin
** The directory "/var/tmp/" does not have enough space for extraction.
Please input another directory: /opt/utl/tmp
Extracting0%..................................................................)
100%
** Error during extraction, error code = 2.
=====================================================
what could be the problem?The installer is actually a self-extracting Zip-archive. It tries to unpack
itself into /var/tmp/something-random, before starting the actual
installation.
If you do not have enough free space in /var/tmp, try creating a temporary
directory somewhere else, move the installer into the new directory, and do
an 'unzip server70..............bin'. Once you have unzipped the installer,
I think you can look in a file called AUTORUN or something for the java
command to run the installer manually.
Good luck,
Jan Bruun Andersen

Solaris 10 Kerberos problem

Similar Messages

Maybe you are looking for