Security Privilege Error Messages Are Incomplete

Error messages displayed during failure of creation, modification, or deletion of Zone, Pool, or Project are incomplete and does not provide enough details. Following are the error messages you might encounter:

• Cannot create the resource pool

• Cannot create the zone

• Cannot update the project, zone, or pool

• Cannot activate the container for valid user

• Cannot associate the container to the host

Workaround: If you encounter any of the above errors, refer to the points mentioned below. But first ensure that the user is a valid SunMC user and has the necessary administration privileges (part of esadm, esdomadm groups).

Ensure that the user is associated with the necessary profiles by running the following command:

$ profiles <username>

Following are the necessary profile:

• On Solaris 10 - Zone Management, Pool Management, Project Management

• On Solaris 9 - Pool Management, Project Management

• On Solaris 8 - Project Management

If you find the necessary profiles missing, run the following command (as the superuser) and modify the profiles associated with a user:

# usermod -P "<comma separated list of necessary profiles>" <username>

If any profile does not exist on the system, please add the missing entries in the format mentioned below to the prof_attr file in the /etc/security directory.

Pool Management:::Resource pool management profile:help=RtPoolMgmt.html

Project Management:::Manage Solaris projects:auths=solaris.project.read,solaris.project.write;help=RtProjManagement.html

Run the following command to find if the user is a part of the local access user list for the SCM module.

<BASEDIR>/SUNWsymon/sbin/es-config -M scm-container -s

If user is not part of the access list, run the following command:

<BASEDIR>/SUNWsymon/sbin/es-config -M scm-container -l <user_name>