Problem with SMC after applying Patchset 1-148888-03
Here is the problem:
I have several servers that now have been updated from PatchSet # 147440-19 to PatchSet # 148888-03.
The servers range from:
(1) SunFire T2000
(3) Enterprise T5140
(2) Enterprise T5220
Solaris 10 08/11 u10 on 1 and u7 on the others.
After the patch is applied I can no longer use the SMC tool to manage users. The tool launches fine, and comes up, but once you try to select users (local) or users (NIS+) in a toolbox there is a Java exception thrown. I have also tried several other options within the SMC, and I get several different errors with the same basic error as this one.
Error box pop up:
RMI_ERR: error unmarshalling return; nested exception is:
java.lang.ClassNotFoundException:
com.sun.admin.usermgr.server.SecurityService_Agent
Next pop up:
The authenticated user does not have rights to use this tool.
See your system or security administrator.
There is a large error on the command line that I can not post as it is on an isolated network.
I will reproduce some of it:
This previously worked with PatchSet 147440-19 installed, but now it doesn't.
I apologize if I have forgotten something important. Let me know if further info is needed. Extensive Google searching has not really turned up anything that useful. It seems like there is some sort of permission, or role change that is preventing this from working.
Last edited by DukeNuke2; 06-29-2013 at 01:22 PM..
Thanks, I am aware there are newer patches, but this does not guarantee that the next patch set will solve the issue. I will be testing a newer patch set on a test system, but we are not allowed to role out patches to Production systems with out going through all the security protocols of our environment. This problem was not seen in testing as there were rarely changes needed to user accounts. Most all "user" accounts on our systems are only Admins & Engineers.
Quote:
Originally Posted by MadeInGermany
Check your SMC patch level
It might help to patchrm the last patch, or to patchadd the latest patch 121308-23
Good point. As I said above, the SMC tool is used so rarely.
The current patch for 121308 is 20. I will see if I have access to 121308-23(or newer) under my support account.
Update - Out of curiosity, I just checked one of the other systems in the same Production group that is newer, and has Sol10 u10 loaded with the same patch set, and it has patch 121308-22. It exhibits the exact same symptoms as the system we use to manage the environment.
Last edited by Wraith_G2IC; 07-03-2013 at 11:51 AM..
Hey Wraith, looks like you and I have similar problems, probably for the same reason. I am running into the same issue with SMC being borked after applying a patchset. Unfortunately, I am running Trusted Extensions and there is no other "simple" way to edit user's labels without SMC.
I am trying various things and will let you know if I find a fix.
---------- Post updated at 09:49 AM ---------- Previous update was at 08:37 AM ----------
Got mine fixed. I was Googling all around and found this page:
This gave me the idea that Java was my issue, not SMC. I looked at my last patch cluster and looked for any Java updates. I found patch 118668-53 (this is an x86 box so look for 118667 for SPARC). Once I backed this patch out, normality was restored.
The general rule on problems is that you try the latest patch level, so you are not fighting solved problems. Of course, it would be nice if all the patches checked their dependencies so JAVA and SMC stay compatible.
I am running into the same issue with SMC being borked after applying a patchset. Unfortunately, I am running Trusted Extensions and there is no other "simple" way to edit user's labels without SMC.
I think you could have stopped at "issue with SMC being borked".
In my experience, and apparently everyone else's, SMC stands for sucky management console. In Fact, Oracle has removed SMC from Solaris 11 and recommends that you go old school to do those functions.
WRT labels you can edit prof_attr and user_attr manually. You just have to be able to map the hex string to the Label you want to attribute to that user. Which should simple be a matter of finding another user with the same label and cut and paste.
Does anyone know what is going on with Solaris 10 and oracle? I am unable to download any new patchset, says I do not have permissions any longer . I am unable to get a response from them. Reason I ask, is that we had no warning, and company has a contract? (3 Replies)
Hello
I recently downloaded and installed the latest patchset for Solaris 10 (update 5) running on SPARC.
Actually I am new to Solaris (I come from Red Hat) and the security department asked me to update the system for security fixes.
I logged in to Oracle support and used the recommended patch... (3 Replies)
I installed the smc and now I'm getting the below error when i try to access it via web.
Apache Tomcat/4.0.5 - HTTP Status 404 - /smconsole.jnlp
The service Apache2 is in maintenance mode and I can't get it online. Can someone help with this please?
Thanks. (5 Replies)
Hello,
I've a Solaris 10.
When I attemp to run SMC and click somthing there (for example "system information") , an error message is shown on the screen and says me WBEM is not running. (But actually WBEM is working). It says "if WBEM runing, I should stop/start wbem and try again." but I do it... (0 Replies)
After I run Jass , I can bring up the SMC GUI, but it wont let me log in as root. It works without Jass being run. Does anyone know what in Jass disables this. I have tried removing some things from jass like remote-root-login to no avail.
Any hints would be greatly appreciated.
I ram running... (0 Replies)
We changed our root password on one of our Master NIS machines. We tried going into the SMC after the password change and it keeps failing for root login. I can login to the server via the root account. Just cannot open the SMC with the root account. This user is required to manage the users. ... (2 Replies)