This chapter covers issues related to the installation of the Solaris 8 Admin Pack software or that may arise while you are using Solaris 8 Admin Pack software.
The known issues with Solaris Management Console (SMC) are listed in the following sections.
If the machine on which the SMC server is running does not have sufficient swap space and the Java garbage collector is not given enough time to release allocated memory, the servlet may run out of memory and cause a segmentation fault.
As a result, all client machines disappear and the initial server remains with a red slash through it, indicating that it is not available.
Workaround: To resume, become superuser and restart the SMC servlet by executing these commands:
/etc/init.d/ehttpd stop
/etc/init.d/ehttpd start
This problem can be avoided by spacing authentication requests far enough apart to allow the Java garbage collector to do its work, adding sufficient swap space, or periodically restarting the servlet or rebooting the machine.
If multiple clients are accessing the same SMC server, and one of the clients updates the SMC registry on the server, the others will not be notified of the change. SMC displays only the old registry information in the Applications View and SMC Server View. This display causes Already exists errors to be reported to the older clients when they attempt to manually add the same registry changes.
Workaround: Log out and log in again to refresh the SMC client display.
SMC uses smc_console as its pam service name when SMC calls pam_start(). The default /etc/pam.conf file does not have an entry for the smcconsole service. This causes pam to correctly use the pam module other in pam.conf, which refers to the pam_unix module.
Applications that are registered with Solaris Management Console to be launched with user, root, or group 14 permission can have their SMC registry information modified or removed by any user.
Workaround: None
When running SMC client on a remote xhost, launched applications may not be displayed.
Workaround: Add each remote server to your X authorization list, for example xhost + .
The known issues with Adminsuite are listed in the following section.
The Rights tab of the User Properties dialog box lists all possible user rights for the domain you are currently managing. This list is in English because the rights shown are obtained from tables that cannot be translated in this version of the product. To learn more about the rights, refer to the context-sensitive help provided when clicking on each Right shown in the Rights tab.
You cannot enter multi-byte characters in any of the AdminSuite dialog boxes, and specifically in the description fields.
Workaround: Click anywhere in the HTML renderer pane in the left side of the dialog box. Then press the Ctrl and Space keys (or whatever control sequence is configured). Note that the pre-edit status window opens; by default, it is at the bottom of the dialog box. Toggle the control sequence until it is in the input mode that you want, and then click on the field in which you want to enter multi-byte characters. If the pre-edit status window disappears, try the workaround again, starting with clicking anywhere in the HTML renderer pane.
If you receive java.lang.OutOfMemory errors, first follow the directions in the Out-of-Memory Error section of AdminSuite's online Troubleshooting guide. That should solve the problem, but if it does not then you might have insufficient "descriptors" (open files). Insufficient descriptors is more likely to be the cause of the out-of-memory errors if you have one server with multiple clients.
To view the number of descriptors, type "limit" in a c shell window:
% limit
cputime unlimited filesize unlimited datasize 2097148 kbytes stacksize 8192 kbytes coredumpsize unlimited descriptors 64 memorysuze unlimited
In this case, the default is set to 64, which may be fewer than you need. Try increasing the number of descriptors to 1024 by issuing the limit descriptors command.
% limit descriptors 1024
Mounts on file systems that contain the /dev= option in the /etc/mnttab file are displayed incorrectly by AdminSuite. When a user selects on a Mounts node or attempts any Mount administration operation, the following error is displayed:
Invalid or unsupported mount option, dev, for mount file_sys mounted at mount point mount_point. This mount cannot be managed by this application.
All such mounts are displayed with a Mount Status of At Boot.
AdminSuite cannot manage the High Sierra File System (HSFS). An attempt to view a mount of HSFS CD-ROM will generate an error similar to the following:
Invalid or unsupported mount option maplcase for mount /vol/dev/dsk/c0t6d0/network_client_3_2. This mount cannot be managed by this application.
The known issues with SEAM 1.0 are listed in the following section.
Password fields in Sun Enterprise Authentication Mechanism (SEAM) do not accept Extended (8-bit) characters. SEAM documentation does not document this restriction.
When upgrading to the Solaris 8 operating environment, you must also upgrade SEAM to the 1.0.1 version contained in the Solaris 8 Admin Pack. Otherwise, you will not be able to use Kerberos V5 security with NFS. This could cause NFS sharing to fail on the server, which would prevent clients from gaining access to filesystems shared with strong security. A machine sharing or using Kerberos V5 security for NFS should not upgrade to Solaris 8 without a simultaneous upgrade to the Solaris 8 Admin Pack.
After installation, several lines in the /etc/nfssec.conf file are left commented, thus preventing use of Kerberos V5 with NFS.
Workaround: Remove comment indicator (#) at the beginning of the following lines in the /etc/nfssec.conf file:
#krb5 390003 kerberos_v5 default - #RPCSEC_GSS
#krb5i 390004 kerberos_v5 default integrity #RPCSEC_GSS
After installation, several lines in the /etc/pam.conf file are left commented, which prevents Kerberos security from being applied to the applications indicated in the commented lines.
Workaround: Remove comment indicator (#) at the beginning of all lines in /etc/pam.conf that begin with SEAM.