Solaris 9 Security
Hi
Can someone recommend a good book on Solaris 9 Security please ?
I saw the Solaris 9 Security book by Ashish Daniel Wilfred, but I have read some bad reviews about this book, so if someone know a better book then this let me know.
Thanks
You should also look into the JASS package from Sun.
http://wwws.sun.com/software/security/jass/
Similar Messages
-
Solaris Security Toolkit 4.2
Hi!
I've downloaded the Solaris Security Toolkit 4.2 (http://www.sun.com/software/security/jass/) and I've installed on a Solaris 9 but when I try to run the jass-execute I got the folwong error:
./jass-execute: syntax error at line 974: `end of file' unexpected
Could anyone help me?
Thanks.I was running form /opt/SUNWjass/bin but it needs to be run from /opt/SUNWjass directory.
-
Hyperion Essbase on Solaris & Security issue in Shared services
I installed Hyperion system 9.3.1 in my dev environment. Every thing is working properlly.
But i still have questions on couple of things.
1) I installed essbase on solaris 10. I was just trying to configure the sql interface for ESSBASE.
I went through the documentation. It says i supposed to get a file called libesssql.so.1
But i can't able to see this file in ARBORPATH/bin location. But still I could able to load the data
into sample Essbase application. My essbase is working fine. when i ran the script inst -sql.sh
it created a file called libesssql.so in the ARBORPATH/bin location. But no libesssql.so.1.
Can some one help me regarding this................
2)In the shared services when i clicked under Hyperion system 9 BI+, i cant able to see
any reporting related files to assign security. i am seeing a message saying refer to the security guide to confiure
permissions for this application.
I logged into the shared services with admin privileges.
Please help me in this...........
Thanks,Hi,
What version are you using ?
Just to be clear are you saying that the utility only exported one native user and you expected it to export more ?
Cheers
John
http://john-goodwin.blogspot.com/ -
Solaris Security Toolkit 4.2 download format
I've downloaded the newest release of the ToolKit for Sol10 and it appears to be in compressed tar format.
(Solaris_Security_Toolkit_4_2_0_pkg.tar.Z)
According to docs it should be in compressed package format and I should be able to do a pkgadd after uncompressing.
What am I missing?
Thanks in advance!
sI think when I last installed SUNWjass (this was under solaris 9)I had to go into that directory (once moved to /opt) and run the install scripts something like:
~/jass-execute -d secure.driver (read the INSTALL file)
and then it showed up in things like pkginfo .
Hope this helps more.
cheers
Paul -
Not quite sure what you mean by the question - usual unix security
applies plus ACLs and kerberos. There are also some good whitepapers you can find at the Sun website
For serious applications Trusted Solaris for both Sparc and Intel
platforms can be purchased via www.sun.com/store
Product details at sun.com:
Home -> Products & Solutions -> Software -> Operating Environments & Platforms -> Solaris Product Line -> Products -> Trusted Solaris 8 -
Hi All,
I would like to ask some questions, I have an Solaris 10 and RHEL which is install in separate machine..
The question is:
1. how can I check the latest patches or latest update? (I need a step or command)
2. where can I get the latest security patch or necessary patch that I need to put in into my servers?
Please help to give me some guidance or information for this issue.. I would like to thank you first for your reply and help. GBU.Hi,
Where can I check the patch that installed in my servers? which directory or path..? so I will know what is the next patch that I should install into this servers.
oh btw, I check above link and I use the search function 'updatemanager' but it ended up lots of links in 'support'
Thanks for your reply. -
Accepting Manual Updates - Solaris Security Toolkit
I have hardened a Solaris 10 server with Security Toolkit 4.2 and since then have
modified the system.
How do I get the Toolkit (Jass) to accept the changes?
I suspect that I must create a new driver and do a Jass Execute but I would like to approach
this problem with some certainty. FYI - I created some new slices and mounted them
but the changes to vfstab do not seem to stick.
Any advice is appreciated.
LBI think I found the issue, only somewhat related to Security Toolkit ...
[http://groups.google.de/group/comp.unix.solaris/browse_frm/thread/93f6231c5bdc8409|http://groups.google.de/group/comp.unix.solaris/browse_frm/thread/93f6231c5bdc8409]
I activated smserver and the drive now works...
LB -
Solaris Security Toolkit (JASS) for Solaris 11?
Has anyone heard anything about an updated version of this for Solaris 11?
Or I'm curious if anyone has tried running the Solaris 10 version on 11?
ThanksDon't run the Solaris 10 version on Solaris 11, it will not work correctly.
Many aspects of what SST did on Solaris 10 are part of Solaris 11. If there are things you need that aren't covered, I'd suggest opening a support case. -
Solaris 10, Tomcat 5 Cant connect to a database
Hi:
I installed Solaris 10 in a Sun Sunfire V100 Server and installed Tomcat 5.5.20 with JDK1.5, when my application needs to connect to my database server (MS Windows 2000 with MS SQL SERVER 2000 by Port 1433) using JDBC, the application do nothing, There's no information in Tomcat and System logs, I think it is related with Solaris Security (IPFilter) open/closed ports but I am not sure.
I tested the connection to the database using a java class program and got the next error: [Microsoft][SQLServer 2000 Driver for JDBC]Error establishing socket.
Thanks for the help.I know nothing about tomcat & DBs, but you could
try telnetting out from Solaris on various ports to
connect to other services on the MSWin box.
Eg,
$ telnet 192.168.1.244 80
will attempt to hit port 80 on the MSWin machine.
You'll know what services WIndows is running.
This'll help you isolate the problem, if you can get
through on some ports rather than others. If can't
get out at all at all, check that your network services
are ok with
# svcs -x
'snoop' is also worth trying out on the Solaris box.
snoop 192.168.1.244
will give you brief info on packets.
snoop -V 192.168.1.244
will give you more info
snoop -v 192.168.1.244
will give you shedloads
Apologies if these steps were already known to you. -
Security issue - or not? (remote trigger SMC startup)
Hi,
During installation of a few zones on a Sol10U2 system today, I noticed that simply running an nmap scan on a freshly installed and booted zone would cause the SMC to start:
Starting Solaris Management Console server version 2.1.0.
endpoint created: :898
Adding instance of solaris_providerpath
Adding class Solaris_LocalFileSystem
Adding class Solaris_Directory
Adding class Solaris_Mount
Adding class Solaris_UFS
Adding class Solaris_HSFS
Adding class Solaris_UFSMount
Adding class Solaris_HSFSMount
Adding class Solaris_LocalFSResidesOnExtent
Compilation succeeded.
Adding class Solaris_DiskDrive
Adding class Solaris_DiskPartition
Adding class Solaris_MediaPresent
Adding class Solaris_LogicalDisk
Adding class Solaris_PhysicalMedia
Adding class Solaris_Disk
Adding class Solaris_PhysicalPackage
Adding class Solaris_RealizesExtent
Adding class Solaris_RealizesDiskPartition
Adding class Solaris_RealizesDiskDrive
Adding class Solaris_DiskPartitionBasedOnDisk
Adding class Solaris_DiskPartitionBasedOnFDisk
Adding class Solaris_SCSIController
Adding class Solaris_IDEController
Adding class Solaris_MPXIOController
Adding class Solaris_USBSCSIController
Adding class Solaris_GenericController
Adding class Solaris_SCSIInterface
Adding class Solaris_MPXIOInterface
Adding class Solaris_IDEInterface
Adding class Solaris_ExtraCapacityGroup
Adding class Solaris_MPXIOGroup
Adding class Solaris_ControllerLogicalIdentity
Adding class Solaris_MPXIOCtrlrLogicalIdentity
Adding class Solaris_ControllerComponent
Adding class Solaris_MPXIOComponent
Adding class Solaris_StorageLibrary
Compilation succeeded.
Adding class CIM_ManagedElement
Adding class CIM_SettingData
Adding class CIM_Share
Adding class CIM_FileShare
Adding class CIM_NFSShare
Adding class CIM_SharedElement
Adding class CIM_HostedShare
Compilation succeeded.
Adding class Solaris_NFSShare
Adding class Solaris_NFSShareSecurity
Adding class Solaris_NFS
Adding class Solaris_PersistentShare
Adding class Solaris_MountSetting
Adding class Solaris_NFSMountSetting
Adding class Solaris_ShareSetting
Adding class Solaris_NFSShareSetting
Adding class Solaris_ShareService
Adding class Solaris_MountService
Adding class Solaris_NFSMount
Adding class Solaris_NFSShareSecurityModes
Adding class Solaris_NFSShareDefSecurityMode
Adding class Solaris_HostedShare
Adding class Solaris_PersistentShareConfiguration
Adding class Solaris_PersistentShareForSystem
Adding class Solaris_NFSShareEntry
Adding class Solaris_SharedElement
Adding class Solaris_NFSExport
Adding class Solaris_SharedFileSystem
Compilation succeeded.
Adding instance of solaris_providerpath
Adding instance of solaris_providerpath
Adding class Solaris_VMStateDatabase
Adding class Solaris_VMSoftPartition
Adding class Solaris_VMExtent
Adding class Solaris_VMStripe
Adding class Solaris_VMConcat
Adding class Solaris_VMMirror
Adding class Solaris_VMRaid5
Adding class Solaris_VMTrans
Adding class Solaris_VMHotSparePool
Adding class Solaris_VMDiskSet
Adding class Solaris_VMStorageVolume
Adding class Solaris_VMConcatComponent
Adding class Solaris_VMDriveInDiskSet
Adding class Solaris_VMExtentBasedOn
Adding class Solaris_VMSoftPartComponent
Adding class Solaris_VMExtentInDiskSet
Adding class Solaris_VMHostInDiskSet
Adding class Solaris_VMHotSpareInUse
Adding class Solaris_VMHotSpares
Adding class Solaris_VMMirrorSubmirrors
Adding class Solaris_VMRaid5Component
Adding class Solaris_VMStatistics
Adding class Solaris_VMStripeComponent
Adding class Solaris_VMTransLog
Adding class Solaris_VMTransMaster
Adding class Solaris_VMUsesHotSparePool
Adding class Solaris_VMVolumeBasedOn
Adding class Solaris_DiskIOPerformanceMonitor
Compilation succeeded.
Adding instance of solaris_providerpath
Adding class Solaris_ActiveUser
Adding class Solaris_ActiveProject
Adding class Solaris_ProcessStatisticalInformation
Adding class Solaris_UserProcessAggregateStatisticalInformation
Adding class Solaris_ProjectProcessAggregateStatisticalInformation
Adding class Solaris_ProcessStatistics
Adding class Solaris_ActiveUserProcessAggregateStatistics
Adding class Solaris_ActiveProjectProcessAggregateStatistics
Compilation succeeded.
Registration setup: 8/8 (Executing SUNWpmgr_reg.sh)
Registering components: 64/64 (Registering PatchMgrCli.jar) er)
Solaris Management Console server is ready.For interest, the nmap result is:
toby@deepthought ~ $ nmap -v 192.168.1.122
Starting Nmap 4.01 ( http://www.insecure.org/nmap/ ) at 2006-08-29 20:39 EDT
DNS resolution of 1 IPs took 0.23s. Mode: Async [#: 2, OK: 0, NX: 1, DR: 0, SF: 0, TR: 1, CN: 0]
Initiating Connect() Scan against 192.168.1.122 [1672 ports] at 20:39
The Connect() Scan took 44.49s to scan 1672 total ports.
Host 192.168.1.122 appears to be up ... good.
Interesting ports on 192.168.1.122:
(The 1662 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
21/tcp open ftp
22/tcp open ssh
23/tcp open telnet
79/tcp open finger
111/tcp open rpcbind
513/tcp open login
514/tcp open shell
898/tcp open sun-manageconsole
4045/tcp open lockd
7100/tcp open font-service
Nmap finished: 1 IP address (1 host up) scanned in 44.874 seconds(port 7100 is actually a non-standard VNC server which was carried over from the global zone)
Of course, this is immediately before running Solaris Security Toolkit (jass) to apply a secure profile.
Does it matter that this SMC startup can be triggered so easily remotely?It just struck me odd that simply port-scanning the
machine could produce this behaviour, and I wonder if
it might be a security issue.Probably not directly. Sun has distributed several items in the past that launch via inetd connections (calendar manager and font server were two common ones). Just because it launches doesn't mean it's a security problem. The application itself may require authentication after running.
Of course the resources required by the process may be non-trivial, and the application may have security issues, but the fact that it launches isn't a direct indication of a problem.
Darren -
Clarification Request on New Solaris Cert Exam Requirements.
Regarding:
Important Changes to Java, and Oracle Solaris Certifications
Beginning August 1, 2011, Java Architect, Java Developer, Solaris System Administrator and Solaris Security Administrator certification path requirements will include a new mandatory course attendance requirement.
Candidates may earn their certifications using the current track requirements found on the Oracle Certification website through July 31, 2011 .....References:
1) http://education.oracle.com/pls/web_prod-plq-dad/db_pages.getpage?page_id=449
2) SCSA/OSSA 10 OCP Oracle Certified Professional, Oracle Solaris 10 System Administrator : http://education.oracle.com/pls/web_prod-plq-dad/db_pages.getpage?page_id=328
3) SCSEA/OSSESA 10 OCE Oracle Certified Expert, Oracle Solaris 10 Security Administrator : http://education.oracle.com/pls/web_prod-plq-dad/db_pages.getpage?page_id=330
Reference (1) seems to indicate candidates wishing to obtain both OSSA and OSSESA would need to attend two classes, one for each.
- Or is it that a someone already SCSA/OSSA would not have to attend a further classs for OSSESA (As would be the case for DBA 10 OCP/RAC 10 OCE).
- If two classes are required, and a candidate has attended System Administration for the Solaris 10 OS Part 2 which is a common pre-req for both exams, would that single class be sufficient for both exams.
From my point of view, and I suspect a lot of other are in my situation, having an existing SCSA 10.
.... Does this mean that post July 31 2001 if it was desired to gain the OSSESA 10 OCE would a course then be needed to be attended after that date?
.... Looking forward to Solaris 11; does this mean existing existing OSSA/SCSA 10 holder will need to attend a course for the upgrade for what I assume will be Solaris 11 certifications at some point.
Thanx - bigdelboy
Edited by: bigdelboy on 25-Feb-2011 10:10pgoel wrote:
I wonder how administrator of this board has not answered your questions so far..
IMHO Certification Forum Moderator's response time is entirely reasonable and expected. She normally visits two or three times a week (has a day job as well!) and I posted this on Friday just after she had done a forum visit to clean up some inappropriated postings. IMHO She normally takes good time to check facts so she can answer with some authority (though a IMHO forum post can never really be totally authorative and contracturally bnding, it is best effort to be helpful). And I would not expect her to work the weekend .... it is important that people other than DBA's and Sysadmins have a life!
but it is true that you need to attend the required course separately for each certification, sometime this sounds crazy to me, where courses are very costly and it is mandatory to have them before you can write the exam.. Course are good specially for those who does not believe on self-study and specially who has got enough money to throw on.. sometime I do not find doing course was worth paying.. Course also depends on the Instructor, if he is good, you can benefit most but if he is not good then you feel lost money.I am assuming you response in this section is in terms of a question rather that an having an authorative source such as the link I gave earlier. While the webpage pubished earlier would seem authorative IMHO is is possilbe it is incomplete or contains an ambiguity or error (bigdelboy is suspicious and solaris can slow due to people who shout at their computers http://blogs.sun.com/brendan/entry/unusual_disk_latency perhaps causing the correct information some time to arrive).
Also it is worth remembering Oracle University have for a lot of courses a +satisifation guarentee' to retake the course if you were not satisfied (you still have to spend resource yourself reattending). (NB: WDP doesn't have this). -
Jumpstart of Solaris 10 halts when "Discovering additional network..."
Installing Solaris 10 using jumpstart from Solaris 9 server, using JASS 4.2 (Solaris Security Toolkit 4.2.0)
However, the install just hangs after the following printout:
Discovering additional network configuration...
I tried snoop on the install server, but that does not catch any packets after the stalling.
The machines are connected via a router, but broadcast should be transmitted and installing Solaris 9 was OK.
Client is added in ethers, using NIS.
Any hints?
Gerhard
~> sudo snoop -o nov.cap november
Using device /dev/bge0 (promiscuous mode)
93384
ok boot net - install
Resett
LOM event: +38d+3h18m33s host reset
ing ...
Sun Netra X1 (UltraSPARC-IIe 500MHz), No Keyboard
OpenBoot 4.0, 512 MB memory installed, Serial #51100009.
Ethernet address 0:3:ba:b:b9:69, Host ID: 830bb969.
Executing last command: boot net - install
Boot device: /pci@1f,0/ethernet@c File and args: - install
Timeout waiting for ARP/RARP packet
SunOS Release 5.10 Version Generic 64-bit
Copyright 1983-2005 Sun Microsystems, Inc. All rights reserved.
Use is subject to license terms.
Configuring devices.
Using RPC Bootparams for network configuration information.
Attempting to configure interface dmfe1...
Skipped interface dmfe1
Attempting to configure interface dmfe0...
Configured interface dmfe0
Beginning system identification...
Searching for configuration file(s)...
Using sysid configuration file 10.1.0.51:/opt/SUNWjass/Sysidcfg/Solaris_10/sysidcfg
Search complete.
Discovering additional network configuration...
NFS server app01 not responding still trying
NFS server app01 not responding still tryingThe IP subnets are not technically the same (10.1/16 and 10.2/16), but they are handled by the same router.
Normal operation and Solaris9 jumpstart is fine. I got the same problem when I tried jumpstart in the same subnet as the jumpstart server.
The Solaris10 installer is doing something unexpected when detecting setting. Something like checking that address with DHCP is the same as the one gotten initially ( I do not believe this is the problem, this is just in the area where I believe that there is problems).
Any specific hints? -
Environment:
Solaris 10u10
vm server for sparc 2.0 V22736-01.zip
p10264419_420_SOLARIS64.zip --> SUNWjass-4.2.0.pkg.tar.Z
Problem: Documentation and LDOM/SST tool refer to "ldm_control-secure.driver", but the file does not exist.
bash-3.2# ./install-ldm -p
Welcome to the Oracle VM Server for SPARC installer.
You are about to install the LDoms Manager package, SUNWldm, that will enable
you to create, destroy and control other domains on your system. You will
also be given the option of running the Oracle VM Server for SPARC Configuration
Assistant (ldmconfig) to setup the control domain and create guest domains.
If the Solaris Security Toolkit (SST) is installed, you will be prompted to
optionally harden your control domain.
Oracle VM Server for SPARC Configuration
Once installed, you may configure your system for a basic LDoms
deployment. If you select "y" for the following question, the Oracle
VM Server for SPARC Configuration Assistant (tty) will be launched
following a successful installation of the packages.
(You may launch the Configuration Assistant at a later time with the
command: /usr/sbin/ldmconfig, or use the GUI Configuration Assistant
which is bundled in the Oracle VM Server for SPARC zip file - see
README.GUI for more details)
Select an option for configuration:
y) Yes, launch the Configuration Assistant after install
n) No thanks, I will configure the system manually later
Enter y or n [y]: n
Given the capabilities of the LDoms Manager, you can now change the
security configuration of this Solaris instance using the Solaris
Security Toolkit.
Select a security profile from this list:
a) Hardened Solaris configuration for LDoms (recommended)
b) Standard Solaris configuration
c) Your custom-defined Solaris security configuration profile
Enter a, b, or c [a]: a
The changes made by selecting this option can be undone through the
Solaris Security Toolkit's undo feature. This can be done with the
'/opt/SUNWjass/bin/jass-execute -u' command.
Verifying that all packages are fully installed. OK.
ERROR: Missing driver file
/opt/SUNWjass/Drivers/ldm_control-secure.driver. <-------------- DOES NOT EXIST
bash-3.2#
bash-3.2# ls -al /opt/SUNWjass/Drivers/
total 876
drwxr-xr-x 2 root root 32 May 8 10:24 .
drwxr-xr-x 15 root root 21 May 8 10:24 ..
-r--r--r-- 1 root root 63935 Jul 25 2005 audit_private.funcs
-r--r--r-- 1 root root 42960 Jul 25 2005 audit_public.funcs
-r--r--r-- 1 root root 312 Jul 25 2005 clean.driver
-r--r--r-- 1 root root 2401 Jul 25 2005 clean.run
-r--r--r-- 1 root root 3093 Jul 25 2005 clean_private.funcs
-r--r--r-- 1 root root 53510 Jul 25 2005 common_log.funcs
-r--r--r-- 1 root root 10155 Jul 25 2005 common_misc.funcs
-r--r--r-- 1 root root 1023 Jul 25 2005 config.driver
-r--r--r-- 1 root root 20904 Jul 25 2005 driver.init
-r--r--r-- 1 root root 7299 Jul 25 2005 driver.run
-r--r--r-- 1 root root 39699 Jul 25 2005 driver_private.funcs
-r--r--r-- 1 root root 90923 Jul 25 2005 driver_public.funcs
-r--r--r-- 1 root root 38268 Jul 25 2005 finish.init
-r--r--r-- 1 root root 3861 Jul 25 2005 hardening.driver
-r--r--r-- 1 root root 598 Jul 25 2005 install-Sun_ONE-WS.driver
-r--r--r-- 1 root root 485 Jul 25 2005 secure.driver
-r--r--r-- 1 root root 1056 Jul 25 2005 server-config.driver
-r--r--r-- 1 root root 3784 Jul 25 2005 server-hardening.driver
-r--r--r-- 1 root root 1788 Jul 25 2005 server-secure.driver
-r--r--r-- 1 root root 1467 Jul 25 2005 suncluster3x-config.driver
-r--r--r-- 1 root root 4329 Jul 25 2005 suncluster3x-hardening.driver
-r--r--r-- 1 root root 2092 Jul 25 2005 suncluster3x-secure.driver
-r--r--r-- 1 root root 1446 Jul 25 2005 sunfire_15k_sc-config.driver
-r--r--r-- 1 root root 5845 Jul 25 2005 sunfire_15k_sc-hardening.driver
-r--r--r-- 1 root root 1791 Jul 25 2005 sunfire_15k_sc-secure.driver
-r--r--r-- 1 root root 274 Jul 25 2005 undo.driver
-r--r--r-- 1 root root 13976 Jul 25 2005 undo.funcs
-r--r--r-- 1 root root 2557 Jul 25 2005 undo.run
-r--r--r-- 1 root root 2151 Jul 25 2005 user.init.SAMPLE
-r--r--r-- 1 root root 498 Jul 25 2005 user.run.SAMPLEApplied recommended patch cluster...
Explicitly applied 122608-08
bash-3.2# patchadd 122608-08
Validating patches...
Loading patches installed on the system...
Done!
bash-3.2# ls -al /opt/SUNWjass/Drivers/
total 966
drwxr-xr-x 2 root root 38 May 8 18:37 .
drwxr-xr-x 15 root root 21 May 8 10:24 ..
-r--r--r-- 1 root root 64345 Jul 23 2010 audit_private.funcs
-r--r--r-- 1 root root 41937 Jul 23 2010 audit_public.funcs
-r--r--r-- 1 root root 1007 Jul 23 2010 cis-config.driver
-r--r--r-- 1 root root 5311 Jul 23 2010 cis-hardening.driver
-r--r--r-- 1 root root 2242 Jul 23 2010 cis-secure.driver
-r--r--r-- 1 root root 312 Jul 25 2005 clean.driver
-r--r--r-- 1 root root 2434 Jul 23 2010 clean.run
-r--r--r-- 1 root root 3093 Jul 25 2005 clean_private.funcs
-r--r--r-- 1 root root 65067 Jul 23 2010 common_log.funcs
-r--r--r-- 1 root root 10298 Jul 23 2010 common_misc.funcs
-r--r--r-- 1 root root 1023 Jul 25 2005 config.driver
-r--r--r-- 1 root root 22242 Jul 23 2010 driver.init
-r--r--r-- 1 root root 9092 Jul 23 2010 driver.run
-r--r--r-- 1 root root 42969 Jul 23 2010 driver_private.funcs
-r--r--r-- 1 root root 96975 Jul 23 2010 driver_public.funcs
-r--r--r-- 1 root root 39218 Jul 23 2010 finish.init
-r--r--r-- 1 root root 3888 Jul 23 2010 hardening.driver
-r--r--r-- 1 root root 598 Jul 25 2005 install-Sun_ONE-WS.driver
-r--r--r-- 1 root root 1499 Jul 23 2010 ldm_control-config.driver
-r--r--r-- 1 root root 4809 Jul 23 2010 ldm_control-hardening.driver
-r--r--r-- 1 root root 840 Jul 23 2010 ldm_control-secure.driver
Thanks. -
Error when starting Sun ONE Web Server 6.1SP4 after successful installation
I have installed Sun ONE Web Server 6.1SP4 on my Solaris computer and I receive the following error when I try to start the Admin server:
Sun ONE Web Server 6.1SP4 B01/20/2005 17:43
failure: CORE3170: Configuration initialization failed: Error running init funct
ion load-modules: dlopen of /opt/SUNWwbsvr/bin/https/lib/libj2eeplugin.so failed
(ld.so.1: webservd: fatal: relocation error: file /opt/SUNWwbsvr/bin/https/lib/
libares3.so: symbol __res_state: referenced symbol not found)
I am running Solaris 8 and I have installed Patch 108993-22 as stated in chapter 2 of the installation and migration guide. I have also installed patches 116602-01, 115827-01, 113648-03, 112396-02, 111317-05, 111310-01, 111111-04, 111023-03, 110386-03, 108987-15, and 108528-24 since they are necessary for patch 108993-22.
I have been stumped by this error. I have tried several different ways to install this software but I always get the same error. I believe that I have the latest version of the Sun One Web Server and I received no error notifications when I installed it! Any help would be apeciated!
Thanks!!!!!I think this might occur if you don't have the patch for SunAlert 46042 installed. There's more information on this critical Solaris security vulnerability, which was reported back in 2002, at http://sunsolve.central.sun.com/search/document.do?assetkey=1-26-46042-1
Can you run the following command to check if you have patch 109326-09 installed and let us know the result?showrev -p | grep 109326If you don't have 109326-09 or higher installed, you should install it as soon as possible. You can follow the link from the SunAlert. Better yet, install the latest Solaris 8 recommended patch cluster from http://sunsolve.sun.com/pub-cgi/show.pl?target=patches/patch-access to make sure your system is fully patched and up to date. -
Java.io.NotSerializableException error when starting 8.1 app server
I am running JES 054Q with uwc deployed on the app server 8.1 (along with am, portal, and da). I am getting a java.io.NotSerializableException for com.sun.uwc.common.util.UWCPreferences when the application server starts. Any access to get attributes from UWCPreferences results more java.io.NotSerializableException errors. How do I get the app server to not load com.sun.uwc.common.util.UWCPreferences as Serializable?
Following is what is showing up the log file with finest level:
# grep -n UWCPreferences *
server.log:2:java.io.NotSerializableException: com.sun.uwc.common.util.UWCPreferences
server.log:44:java.io.NotSerializableException: com.sun.uwc.common.util.UWCPreferences
server.log_2006-08-28T03-08-05:10373:[#|2006-08-28T03:07:59.991-0600|FINE|sun-appserver-ee8.1_02|org.apache.catalina.loader.WebappClassLoader|_ThreadID=10;|loadClass(com.sun.uwc.common.util.UWCPreferences, false)|#]
server.log_2006-08-28T03-08-05:10383:[#|2006-08-28T03:07:59.994-0600|FINE|sun-appserver-ee8.1_02|org.apache.catalina.loader.WebappClassLoader|_ThreadID=10;| findClass(com.sun.uwc.common.util.UWCPreferences)|#]
server.log_2006-08-28T03-08-05:10385:[#|2006-08-28T03:07:59.995-0600|FINEST|sun-appserver-ee8.1_02|org.apache.catalina.loader.WebappClassLoader|_ThreadID=10;| findClassInternal(com.sun.uwc.common.util.UWCPreferences)|#]
server.log_2006-08-28T03-08-05:10397:[#|2006-08-28T03:08:00.001-0600|FINE|sun-appserver-ee8.1_02|org.apache.catalina.loader.WebappClassLoader|_ThreadID=10;| Returning class class com.sun.uwc.common.util.UWCPreferences|#]
server.log_2006-08-28T03-08-05:10781:[#|2006-08-28T03:08:00.154-0600|SEVERE|sun-appserver-ee8.1_02|org.apache.catalina.session.ManagerBase|_ThreadID=10;|IOException while loading persisted sessions: java.io.WriteAbortedException: writing aborted; java.io.NotSerializableException: com.sun.uwc.common.util.UWCPreferences
server.log_2006-08-28T03-08-05:10782:java.io.WriteAbortedException: writing aborted; java.io.NotSerializableException: com.sun.uwc.common.util.UWCPreferences
server.log_2006-08-28T03-08-05:10807:Caused by: java.io.NotSerializableException: com.sun.uwc.common.util.UWCPreferences
server.log_2006-08-28T03-08-05:10849:java.io.WriteAbortedException: writing aborted; java.io.NotSerializableException: com.sun.uwc.common.util.UWCPreferences
server.log_2006-08-28T03-08-05:10874:Caused by: java.io.NotSerializableException: com.sun.uwc.common.util.UWCPreferences
server.log_2006-08-28T03-08-05:11313:[#|2006-08-28T03:08:00.286-0600|FINE|sun-appserver-ee8.1_02|org.apache.catalina.loader.WebappClassLoader|_ThreadID=10;|loadClass(com.sun.uwc.common.util.UWCPreferencesFactory, false)|#]
server.log_2006-08-28T03-08-05:11323:[#|2006-08-28T03:08:00.289-0600|FINE|sun-appserver-ee8.1_02|org.apache.catalina.loader.WebappClassLoader|_ThreadID=10;| findClass(com.sun.uwc.common.util.UWCPreferencesFactory)|#]
server.log_2006-08-28T03-08-05:11325:[#|2006-08-28T03:08:00.290-0600|FINEST|sun-appserver-ee8.1_02|org.apache.catalina.loader.WebappClassLoader|_ThreadID=10;| findClassInternal(com.sun.uwc.common.util.UWCPreferencesFactory)|#]
server.log_2006-08-28T03-08-05:11327:[#|2006-08-28T03:08:00.292-0600|FINE|sun-appserver-ee8.1_02|org.apache.catalina.loader.WebappClassLoader|_ThreadID=10;| Returning class class com.sun.uwc.common.util.UWCPreferencesFactory|#]
server.log_2006-08-28T03-15-11:22429:[#|2006-08-28T03:09:45.991-0600|FINE|sun-appserver-ee8.1_02|org.apache.catalina.loader.WebappClassLoader|_ThreadID=23;|loadClass(com.sun.uwc.common.util.UWCPreferences, false)|#]
server.log_2006-08-28T03-15-11:29542:java.io.NotSerializableException: com.sun.uwc.common.util.UWCPreferences
server.log_2006-08-28T03-15-11:29584:java.io.NotSerializableException: com.sun.uwc.common.util.UWCPreferences
server.log_2006-08-28T03-15-11:29626:java.io.NotSerializableException: com.sun.uwc.common.util.UWCPreferences
server.log_2006-08-28T03-15-11:29668:java.io.NotSerializableException: com.sun.uwc.common.util.UWCPreferences
ThanksI think this might occur if you don't have the patch for SunAlert 46042 installed. There's more information on this critical Solaris security vulnerability, which was reported back in 2002, at http://sunsolve.central.sun.com/search/document.do?assetkey=1-26-46042-1
Can you run the following command to check if you have patch 109326-09 installed and let us know the result?showrev -p | grep 109326If you don't have 109326-09 or higher installed, you should install it as soon as possible. You can follow the link from the SunAlert. Better yet, install the latest Solaris 8 recommended patch cluster from http://sunsolve.sun.com/pub-cgi/show.pl?target=patches/patch-access to make sure your system is fully patched and up to date. -
Error when starting sun one serv 7
I have this problem when I try to start (asadmin start-appserv) sun one app serv 7 in linux red hat 8.
Could not start the instance: domain1:admin-server
server failed to start: abnormal subprocess termination
Could not start the instance: domain1:server1
server failed to start: abnormal subprocess termination
Could not start one or more instances in the domain : domain1
Could not start one or more domains
log:
[13/Oct/2003:16:30:39] SEVERE ( 1412): CORE3092: Error receiving response from watchdog
[13/Oct/2003:16:30:39] SEVERE ( 1412): CORE3144: Watchdog admin channel has been closedI do not have firewall installed in the same machine.
Somebody can help me?
thanks.
mindu.I think this might occur if you don't have the patch for SunAlert 46042 installed. There's more information on this critical Solaris security vulnerability, which was reported back in 2002, at http://sunsolve.central.sun.com/search/document.do?assetkey=1-26-46042-1
Can you run the following command to check if you have patch 109326-09 installed and let us know the result?showrev -p | grep 109326If you don't have 109326-09 or higher installed, you should install it as soon as possible. You can follow the link from the SunAlert. Better yet, install the latest Solaris 8 recommended patch cluster from http://sunsolve.sun.com/pub-cgi/show.pl?target=patches/patch-access to make sure your system is fully patched and up to date.
Maybe you are looking for
-
I am getting really ******, been working on this for a couple of hours and appletv tells me to turn on the homesharing on the computers i want to share with. Never recognizing them. Apple is on the network thru ethernet, antd the others through wifi.
-
Reg: cancel GR tag printing
Hi All, how to cancel GR tag printing when receiving goods in plant XXXX / Storage location XXXX. Because the pallet/frame/bearer is in IM level and stored in a separated room. we donu2019t need the GR tag at all. So could you pls help to delete the
-
I'm confused about the best practice for sending attached XML messages. I had always felt that RPC was fine for this and yet I was recently told that Doc Literal is the preferred method that both IBM and Microsoft recommend for sending XML attachment
-
SP2-0915: Cookies may have been disabled
Hi folks: I am getting an error "SP2-0915: Cookies may have been disabled" when I try to run a query using iSLQ*Plus. My configuration is the following: Browser: Netscape 7.1 or IE 6.0 SP1 O/S: Windows 2K Workstation SP4 Oracle Database: Oracle 9i Pe
-
What are the suggested and preferred ways to apply EMET 4 GPO configuration changes?
Logon Scripts with emet_conf.exe don't work because admin privileges are required and startup scripts lag in time. It should be somewhat "event driven". Thanks and best regards.