Oracle Solaris Cluster Manager Login to Cluster Node Fails Starting With Oracle Solaris 11.4 SRU 33 (32871272)

Problem Summary: Starting with Oracle Solaris 11.4 SRU 33, the OS delivers Version jdk1.8.0.291 of the JDK software. This JDK version causes an attempted login by the Oracle Solaris Cluster manager to a cluster node to fail with the following error:

Unable to connect to cluster-node. Ensure that the common agent container is online.

The Oracle Solaris Cluster manager and the cluster node to which you want to connect might be on a single machine or on two machines. Either or both of these machines might run at least Version jdk1.8.0.291 of the JDK software.

Workaround: Perform the following steps based on the machines that use JDK Version jdk1.8.0.291 in your environment:

  • The Oracle Solaris Cluster manager and the cluster node: Perform the following steps:

    1. On the machine that runs the Oracle Solaris Cluster manager, remove the TLSv1 value from the jdk.tls.disabledAlgorithms property in the /usr/jdk/instances/jdk1.8.0/jre/lib/security/java.security file.

      For example, remove the TLSv1 value from the following property assignment:

      jdk.tls.disabledAlgorithms=SSLv3, TLSv1, TLSv1.1, RC4, DES, MD5withRSA, \

      To result in the following property assignment:

      jdk.tls.disabledAlgorithms=SSLv3, TLSv1.1, RC4, DES, MD5withRSA, \
    2. On the cluster node to which you want to connect, remove TLSv1 from the jdk.tls.disabledAlgorithms property value in the /usr/jdk/instances/jdk1.8.0/jre/lib/security/java.security file.

      For example, remove the TLSv1 value from the following property assignment:

      jdk.tls.disabledAlgorithms=SSLv3, TLSv1, TLSv1.1, RC4, DES, MD5withRSA, \

      To result in the following property assignment:

      jdk.tls.disabledAlgorithms=SSLv3, TLSv1.1, RC4, DES, MD5withRSA, \
    3. On the machine that runs the Oracle Solaris Cluster manager, restart the svc:/system/cluster/manager-wls:default SMF service.

      # svcadm restart svc:/system/cluster/manager-wls:default
    4. On the cluster node to which you want to connect, restart cacao.

      # cacaoadm restart
  • Only the Oracle Solaris Cluster manager machine: Perform Steps 1 and 3.

  • Only the cluster node: Perform Steps 2 and 4.