Patch-ID# 118389-08 NOTE: *********************************************************************** READ THE TERMS OF THE AGREEMENT ("AGREEMENT") IN THE LEGAL_LICENSE.TXT FILE CAREFULLY BEFORE USING THIS SOFTWARE. BY USING THE SOFTWARE, YOU AGREE TO THE TERMS OF THIS AGREEMENT. IF YOU DO NOT AGREE TO ALL OF THE TERMS, PROMPTLY DESTROY THE UNUSED SOFTWARE. *********************************************************************** Keywords: security blacksplat crashdump backup Synopsis: Sun Management Center 3.5.1: Patch for Solaris 9 Date: Jan/24/2006 Install Requirements: NA Solaris Release: 9 SunOS Release: 5.9 Unbundled Product: Sun Management Center Unbundled Release: 3.5.1 Xref: Topic: Sun Management Center 3.5.1: Patch for Solaris 9 Relevant Architectures: sparc BugId's fixed with this patch: 2126788 4854768 4916861 4969921 4969926 4971667 5012826 5020307 5023786 5027612 5061358 5093247 5093714 5095230 5095358 5102677 5104887 5106103 5109890 6176906 6176926 6185029 6191247 6195031 6201636 6207630 6214530 6216723 6218471 6219534 6219541 6234747 6242118 6243419 6243421 6243423 6251827 6252625 6263566 6263573 6268435 6270820 6276159 6277219 6319878 Changes incorporated in this version: 6319878 Patches accumulated and obsoleted by this patch: Patches which conflict with this patch: Patches required with this patch: Obsoleted by: Files included with this patch: /opt/SUNWsymon/base/bin/agent-update.bin /opt/SUNWsymon/base/bin/i386-sun-solaris/InstallClient /opt/SUNWsymon/base/bin/i386-sun-solaris/agent-update.bin /opt/SUNWsymon/base/bin/sparc-sun-solaris/InstallClient /opt/SUNWsymon/base/bin/sparc-sun-solaris/agent-update.bin /opt/SUNWsymon/base/bin/sparc-sun-solaris2.9/discover /opt/SUNWsymon/base/lib/sparc-sun-solaris2.9/libkr.so.1.0 /opt/SUNWsymon/base/lib/sparc-sun-solaris2.9/libprocess.so.1.0 /opt/SUNWsymon/base/lib/sparc-sun-solaris2.9/pkgkr.so.1.0 /opt/SUNWsymon/base/sbin/base-setup.sh /opt/SUNWsymon/classes/ArchiveTool.class /opt/SUNWsymon/classes/base/console/bin/es-console.sh /opt/SUNWsymon/classes/escon.jar /opt/SUNWsymon/classes/esmsg.jar /opt/SUNWsymon/classes/essrv.jar /opt/SUNWsymon/classes/essvc.jar /opt/SUNWsymon/install/classes/SunMCInst.class /opt/SUNWsymon/install/classes/SunMCSetup.class /opt/SUNWsymon/install/classes/SunMCUninst.class /opt/SUNWsymon/lib/locale/C/LC_MESSAGES/ES_SCRIPTS.mo /opt/SUNWsymon/lib/locale/agentupdate/classes/ArchiveToolResources.properties /opt/SUNWsymon/lib/locale/install/classes/message_setup.properties /opt/SUNWsymon/lib/sbin/archive-tool-functions.sh /opt/SUNWsymon/lib/sbin/db-common.sh /opt/SUNWsymon/lib/sbin/db-config-archive.sh /opt/SUNWsymon/lib/sbin/es-db /opt/SUNWsymon/lib/sbin/es-lhwebconsole /opt/SUNWsymon/lib/sbin/es-machine /opt/SUNWsymon/lib/sbin/gui-archivetool-archiving.sh /opt/SUNWsymon/lib/sbin/gui-archivetool-filtering.sh /opt/SUNWsymon/lib/sbin/gui-archivetool-functions.sh /opt/SUNWsymon/lib/sbin/gui-install-webserver.sh /opt/SUNWsymon/lib/sbin/gui-setup-port.sh /opt/SUNWsymon/lib/sbin/install-functions.sh /opt/SUNWsymon/lib/sbin/setup-functions.sh /opt/SUNWsymon/lib/sbin/start-stop-functions.sh /opt/SUNWsymon/lib/sbin/uninst-functions.sh /opt/SUNWsymon/sbin/es-backup /opt/SUNWsymon/sbin/es-backup-common /opt/SUNWsymon/sbin/es-common.sh /opt/SUNWsymon/sbin/es-config /opt/SUNWsymon/sbin/es-device /opt/SUNWsymon/sbin/es-imagetool /opt/SUNWsymon/sbin/es-makeagent /opt/SUNWsymon/sbin/es-restore /opt/SUNWsymon/sbin/es-setup /opt/SUNWsymon/sbin/es-validate /opt/SUNWsymon/sbin/esmultiip Problem Description: 6319878 Restore from a online Backup fails (from 118389-07) 6263573 Restore of a online Backup does not restore the 6263566 Restore of a online Backup can not verify if currently 2126788 Online Backup restart all SunMC components 6276159 es-restore of on line SunMC backup fails 4854768 RN: HWDiag successfully started but msg displayed 6268435 3.5.1b Agent Update feature cannot be used to deploy 6270820 es-gui-imagetool shows 2 Solris10 check boxes in the 6277219 "Unrecoverable error" encountered during addon install 6234747 es-guiinst stops after L10n package installation. (from 118389-06) 6251827 Online help shows Application error with Solaris 9u7 6252625 Not able to create base only image of Sol8, Sol7 and Sol2.6 OS using es-imagetool/es-gui-imagetool (from 118389-05) 6219541 Core product only install fails to install essential patch from image created by es-makeagent (from 118389-04) 4969926 To achieve HA a database backup should not require stopping SunMC 5027612 es-device takes 30 minutes or more to setup ESP addons 6214530 SunMC 3.5.1's oracle is consuming too much memory 6219534 Base only installation using agentupdate fails to add 6216723 Installclient should use the -G option for installing 6242118 Error while installing 3.5U1B Build due to Lockhart 6243419 GUI Installation does not install S10 bits on S10 host. 6243423 Script installer installs S9 bits on a S10 host even when add-on delivers S10 bits. 6243421 Lockhart Installation needs to be 2.2.3 in the SunMC (from 118389-03) 5109890 image tools-questions asked need to be refined to accomodate Solaris 10 6201636 Unnecessary questions posed during agentupdate S10 only image creation 5012826 Discovery failed on Solaris 10 6195031 Incorrect installation of addons on S10 host using symbolic links to S9 bits 6185029 Webconsole is not working on Solaris-10 due to esmultiip and suid related issues 5104887 Solaris 10 - disabling SNMP daemon does not disable snmpd 6176906 S10 - setup fails if agent port selected is 161 (in spite of SMA agent running there) 6176926 S10-Port161 free-Behavior inconsistent btwn script & GUI setup. Pop up message for GUI needs rewording 6191247 Uninstaller uses pkgrm with -A option in a not so diligent way. Needs to be more meticulous. 5023786 SunMC should not bundle XML2 libraries for Solaris 10 5102677 SunMC oracle and Security Alert 68 5095230 "Filter by OS" list not up-to-date 5095358 module add/remove takes too long ~10min and longer 5061358 typo in the es-dbexp script 6207630 pkcs11 based encryption for sunmc on S10 4969921 There should be a way to launch SunMC console using CLI or file based arguments. 5093714 Operating Systems list under Filter tab needs to be updated for Solaris 10 5106103 include S10 in OS drop-down list 6218471 Fix for bug#4971667 fails on S7 and 2.6, as strlcpy() is not backward-compatible (from 118389-02) 4916861 blacksplat on sunfire domain agents after upgrading to sunmc 3.5 4971667 SunMC3.0 agent kept busy in Process Details when /dev 5020307 Java-Console dies after closing bourne-shell 5093247 Regression: KR's cpuinfo wastes time in krgetProcessorId() 5095358 module add/remove takes too long ~10min and longer (from 118389-01) 4916861 blacksplat on sunfire domain agents after upgrading to sunmc 3.5 Patch Installation Instructions: -------------------------------- For Solaris 2.0-2.6 releases, refer to the Install.info file and/or the README within the patch for instructions on using the generic 'installpatch' and 'backoutpatch' scripts provided with each patch. For Solaris 7-10 releases, refer to the man pages for instructions on using 'patchadd' and 'patchrm' scripts provided with Solaris. Any other special or non-generic installation instructions should be described below as special instructions. The following example installs a patch to a standalone machine: example# patchadd /var/spool/patch/104945-02 The following example removes a patch from a standalone system: example# patchrm 104945-02 For additional examples please see the appropriate man pages. Special Install Instructions: ----------------------------- NOTE 1: JAVA Version must be at least "1.4.2". NOTE 2: In reference to bugids 4969926 and 5027612 1. This patch enables online Oracle option. This means SunMC database backup can be taken when SunMC processes are up and running without stopping them. 2. ARCHIVELOG mode must be enabled using /opt/SUNWsymon/sbin/es-config -a enable before taking online backup. 3. Online backup can be taken using newly implemented option : /opt/SUNWsymon/sbin/es-backup -o 4. Enabling Oracle Online backup might affect SunMC performance 5. Normal backup can be done and restored even if the ARCHIVELOG mode is enabled 6. ARCHIVELOG mode can be disabled using /opt/SUNWsymon/sbin/es-config -a disable FEATURES Launch the Java Console Through the Command Line (4969921) ========================================================== To start the console automatically, first create a file to specify the login information. The is used with the -c and -n options to specify a text file to retrieve login information. It has the following format: username : password : serverhost : serverport : For example, create a file named login.txt, with the following content: username : jching password : 1AxDh98 serverhost : sanjose1 serverport : 2099 The must be owned and readable-only (400) by the user who starts the console. The file would have the following permissions: -r-------- 1 jching other 83 Oct 27 07:55 login The command for launching the console with the information from the is: # /opt/SUNWsymon/sbin/es-start -c -n KNOWN ISSUES Solaris 10 Operating System =========================== You can run Sun Management Center on systems running the Solaris 10 Operating System. If you install and use the product on a system running Solaris 10, note the following: o The default SNMP port, 161, is assigned to the Systems Management Agent (SMA). We recommend that you use a different port number for Sun Management Center, such as, port 1161. o To enable encryption, you need to have the SUNWcry package installed. The SUNWcry package is part of the Solaris Encryption kit. To obtain the kit, see your Sun sales representative. For more information, see the "Sun Management Center 3.5 Update 1 Supplement." o On Netra systems, Lights Out Management (LOM) is not supported. Some tables within the Netra config-reader will be blank. (6216281) o The following systems do not support Solaris 10: Sun Fire B1600 System Service Processor (SSP) on Sun Enterprise 10000 o Install this product in the global zone only. o On Windows, discovery does not list the Solaris 10 OS for filtering. (6219691) o Remote installation (es-inst -R command) is not supported. (6216693) o JumpStart installation of the agent is not supported. (6216700) o Incremental patches are not supported (6219176). This is described below. o Agent-Update install client on S10 (6216723) Agent-Update's install client doesn't use the -G option (global zone) for installing the bootstrap package SUNWessmu. On a Solaris 10 system with zones running, the install client hangs during the pkgadd of SUNWessmu because the -G option is not used. Patchadd in S10 doesn't appear to be supporting incremental patching (6219176) ==================================================================== On Solaris 10 systems, installing a patch incrementally to a Sun Management Center layer (server, console, agent) or add-on works differently than on Solaris 9 and earlier systems. On Solaris 9 and earlier systems, you can install a patch to the Sun Management Center console and then add the agent layer and apply the same patch. The patch installer knows which packages within the patch applied to which layer or add-on. On Solaris 10 systems, if you install a patch to the Sun Management Center console and then add the agent layer and apply the same patch, the installer sees only that the patch was installed and exits. To work around this, remove the patch by using the patchrm command and then use the es-inst command to install the patch. Base-only installation using agent-update fails to add essential patches (6219534) =============================================================== NOTE: If you create an agent-update image that included the base product AND any add-on product, this information does NOT apply. This information applies when you use either es-imagetool or es-gui-imagetool to create an agent-update image of the base product only (that is, no add-ons in the image). To deploy Solaris 2.6 to Solaris 9 base agent images from a 3.5.1a server (Solaris 8 Sun Management Server with patch 118388-03, Solaris 9/10 Sun Management Server with patch 118389-03) using agent-update.bin or Job Manager, follow these steps: a. Deploy the agent image on the target host. b. Deploy the patch image on the target host. To deploy Solaris 10 base agent only image from a 3.5.1a server (Solaris 8 Sun Management Server with patch 118388-03, Solaris 9/10 Sun Management Server with patch 118389-03) using agent-update.bin, follow these steps: a. Pull the agent image using agent-update.bin and ignore the following message at the end of agent-update.bin: es-inst command will be timed out in 3600 seconds es-inst passed Doing setup of base product ... setup of base product will be timed out in 1800 seconds base setup failed install scripts failed Error: running InstallClient Error: running InstallClient with error code -1 b. Apply the patch for the base agent on S10 (patch id 118389-03) located on the second CD at: /image/Patches/Essential/Solaris_9 c. Run es-setup and complete the agent installation. Core product only install fails to install essential patch from image created by es-makeagent (6219541) ===================================================================== Apply the patch manually on the agent host. The patches for the core product are located on second CD at: /image/Patches/Essential CD1 gets locked during server install using GUI install utility (6219648) ====================================================================== To work around this problem, you have two options: a. Use the command-line installation (es-inst) for server-layer installation. b. For GUI based installation utility (es-guiinst) only the following options will work 1. Copy both disks (CD1 and CD2) onto a disk drive locally as explained below. CD1 should be copied to /disk1 and CD2 to to /disk2. 2. Load CD1 and CD2 in different CD drives and NFS mount them so that CD1 is mounted on the target host as /disk1 and CD2 is mounted as /disk2 3. Download the web-image onto a system which will give the structure as specified in step "1" above. After doing any of the above steps run es-guiinst from disk1/sbin area. DOCUMENTS ========= The documentation for Sun Management Center 3.5 Update 1a is available in PDF and HTML format on the second CD (Disk 2 of 2) and can be viewed using a browser, for example, file:/cdrom/cdrom0/image/index.html For information on: Read this: Installing and configuring Sun Management Center 3.5 Installation and Configuration Guide Using the product Sun Management Center 3.5 User's Guide Update 1 features Sun Management Center 3.5 Update 1 Sup- plement Update 1 issues Sun Management Center 3.5 Update 1 Release Notes (latest version is on http://docs.sun.com) NOTE 2: 1. ARCHIVELOG mode must be enabled using /opt/SUNWsymon/sbin/es-config -a enable before taking online backup. 2. User MUST NOT change again back to NOARCHIVELOG mode inorder to run the online backup smooth. That is for online backup functionality: /opt/SUNWsymon/sbin/es-config -a disable option is forbidden. 3. While restoring the online backup the only the latest backup copy MUST be enabled. es-restore of old backup should NEVER be tried. README -- Last modified date: Tuesday, January 24, 2006