Re: [SunRay-Users] Can't turn on LAN connections (5.4 on OL 6.4)

2013-05-28 Thread Bob Doolittle

On 05/26/13 04:06 AM, Daniel Nordhoff-Vergien wrote:

Hi,

I resolved the problem: the package redhat-lsb was not installed,


Do you know how you got into this unusual state?

redhat-lsb is part of the Base installation group for OL 6.4 as well as 6.3.


but utpkgcheck did not complain about it.


utpkgcheck assumes that the Desktop group of RPMs has been installed, and can't 
fully sanity-check random missing or corrupted packages from the base OS.

-Bob

___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] SR 5.4, OL 6.3 gnome-screensaver not locking screen

2013-05-16 Thread Bob Doolittle

BugID 16808210 affects OL 6 only.

It locks manually, but not on an idle timeout.

-Bob

On 05/16/13 02:12 PM, Craig Bender wrote:

It's being looked at, was noticed last week.

On 5/16/13 11:07 AM, Karl Rossing wrote:

gnome-screensaver will not lock the screen. Has anyone else noticed this?

I even tried it gnome-screensaver-2.28.3-24.el6.x86_64 and still no luck.

Karl






CONFIDENTIALITY NOTICE:  This communication (including all attachments) is
confidential and is intended for the use of the named addressee(s) only and
may contain information that is private, confidential, privileged, and
exempt from disclosure under law.  All rights to privilege are expressly
claimed and reserved and are not waived.  Any use, dissemination,
distribution, copying or disclosure of this message and any attachments, in
whole or in part, by anyone other than the intended recipient(s) is
strictly
prohibited.  If you have received this communication in error, please
notify
the sender immediately, delete this communication from all data storage
devices and destroy all hard copies.
___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users

___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] SR 5.4, OL 6.3 gnome-screensaver not locking screen

2013-05-16 Thread Bob Doolittle

If you can lookup the bug id there are various workarounds published, but we've 
covered the main ones in this thread already.

-Bob

On 05/16/13 03:20 PM, Karl Rossing wrote:

That works too.

I'll create a case and reference the bug id. Looking forward to deploying the 
fix.

Karl

On 2013-05-16 2:15 PM, Craig Bender wrote:

Karl,
Assuming you are in a gnome desktop, does System - lock screen work?

On 5/16/13 12:04 PM, Karl Rossing wrote:

On 2013-05-16 1:19 PM, Bob Doolittle wrote:

It locks manually, but not on an idle timeout.

Thanks Craig and Bob!

Just in case someone is looking for the command.

gnome-screeensaver-command -l




CONFIDENTIALITY NOTICE:  This communication (including all attachments) is
confidential and is intended for the use of the named addressee(s) only and
may contain information that is private, confidential, privileged, and
exempt from disclosure under law.  All rights to privilege are expressly
claimed and reserved and are not waived.  Any use, dissemination,
distribution, copying or disclosure of this message and any attachments, in
whole or in part, by anyone other than the intended recipient(s) is
strictly
prohibited.  If you have received this communication in error, please
notify
the sender immediately, delete this communication from all data storage
devices and destroy all hard copies.
___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users

___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users




CONFIDENTIALITY NOTICE:  This communication (including all attachments) is
confidential and is intended for the use of the named addressee(s) only and
may contain information that is private, confidential, privileged, and
exempt from disclosure under law.  All rights to privilege are expressly
claimed and reserved and are not waived.  Any use, dissemination,
distribution, copying or disclosure of this message and any attachments, in
whole or in part, by anyone other than the intended recipient(s) is strictly
prohibited.  If you have received this communication in error, please notify
the sender immediately, delete this communication from all data storage
devices and destroy all hard copies.
___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] more help needed - Advice: Sunray on Solaris 11/SPARC with private interconnect

2012-08-22 Thread Bob Doolittle

The basic model for Solaris installation is that LiveCD is intended for laptops 
or workstations, and Text installation or AI is intended for servers. They 
install different sets of packages which target the intended model. 
multi-user-desktop is an optional package (group) intended for desktop servers 
(i.e. Sun Ray).

May I suggest that instead of using LiveCD for Sun Ray, you use the Text 
installer and then install group/feature/multi-user-desktop. This will do 
several useful things for you:
1. It will install a more minimal package subset for desktops.
2. It will configure networking appropriately for a server instead of a laptop 
(e.g. no NWAM, static address)
3. I will install the core dependent packages required by SRS (DHCP, CDE/Motif)
4. It will provide an SMF 'multi-user-desktop' service, which you can enable to 
provide some useful optimizations for Sun Ray deployments (mostly restricted 
choices for desktop users to mitigate desktop features that don't scale well in 
shared environments). We'd be interested in feedback regarding experiences with 
that service. There's a document that describes how to configure it, should you 
care to: http://docs.oracle.com/cd/E23824_01/html/E26032/index.html

Finally, regarding the updates available through MOS: Patch packages are 
generally *not* complete packages. I suspect you're looking at the wrong place 
in the update image. The update image consists of two things: A copy 
(identical) of the initial release image (suitable for fresh installs or 
release upgrades), and a Patch directory containing patches, which consist of 
*partial* packages with just the updated binaries. Our installer will first 
install/upgrade the release if necessary, then apply any patches. This doesn't 
yet work for S11 since S11 isn't supported in SRS 5.3. SROS is the one 
exception. In that case since SUNWutdfw only contains firmware we do release a 
new complete package in an update and utfwinstall simply replaces it (which 
will work fine on S11).

-Bob

On 08/22/12 06:01, Dave Price wrote:

Dear Toomas,

Thanks for latest advice.  I plan to start another go on a fresh
BE shortly, just got caught up in admin meetings :-(

I will report back...  I am trying to keep definitive
notes so I can post whole (hopefully sucessful) take later...

Dave Price

___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] SRSS on Solaris 11

2012-03-28 Thread Bob Doolittle

I just wanted to add that, when our SRS 5.3 release comes out, please share any 
issues you find using it with S11 on this alias.

Thanks,
Bob

On 03/28/12 11:14, Brad Lackey wrote:

I am unaware of the specific detail about if these are currently fixed bugs, 
open bugs, etc. for our development effort.

If you have something specific that you want/need fixed, please re-create on 
Sol 10 and open a support case.

Obviously any added platform support will have the same level of QA as our 
other platforms. Some minor things could be missed and if identified will be 
taken care of on the first maintenance release.

On Mar 28, 2012, at 7:18 AM, marty scholes wrote:


On 27/03/2012 19:49, Brad Lackey wrote:

Unfortunately, not one that I can comment on. The closest thing I can
say is this calendar year.

I too am interested in this.  I apologize, but I cannot seem to find the 
current bug list.  I am running the latest public (5.2.1?) SRS on Solaris 11 
and have noticed the following issues.  Do you know if these will be resolved 
in the next release, or are even documented?  For all I know, I have some 
strange misconfiguration and these problems are unique to my installation.
* Mounting a USB device makes /tmp/SUNWut/mnt/USER/* owned by root and unusable
* Key repeat sometimes stops and restarts, making key repeat unusable
* DTU bandwidth detection on 1G and 2 DTUs is still hit and miss, causing 
random refresh delays
* Key modifiers (Ctrl, Alt, Shift, etc.) sometimes get stuck in a pressed or 
unpressed state under VirtualBox

To be fair, the last one could be a VirtualBox issue, yet often the problem 
persists outside of VirtualBox.

Any idea if the above issues are flagged for fixes in the next release?

Many thanks,
Marty
___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Brad Lackey | Technical Enablement Manager
Mobile: +13038758616
Oracle Global Desktop Virtualization
San Diego , CA




___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] Shorting sunray network reconnect

2012-02-18 Thread Bob Doolittle

On 02/18/12 09:32, Arthurpeck wrote:

If it's any consequence, I have DTUs reset for no apparent reason and I'm not 
using VPN connections. I've seen things like one whole side of a classroom, 8 
seats, reset all at the same time. Fortunately, the user's desktop is 
reconnected and they can usually resume working after login.

Some of these resets we understand are probably faulty network wiring, but that 
would not explain clusters of resets.


Depending on your network topology, faulty network could easily produce a 
cluster of resets.

For example, if you had an 8-port switch which had a faulty link between it and 
the server.

You've probably looked into that already I imagine.

FWIW, in my experience it's far more likely to have a bad port on a switch than 
a bad cable/wire. I've had a couple of experiences with lightning that resulted 
in ports going bad.

-Bob


So far, all I've been able to do is crank up the logXXX= settings in the 
*.parms file. From that, I have seen what I think is a high number of 
KA_WARNING entries. I'm told that if the DTU loses 3 consecutive KA packets, it 
will reset so that could be some of it.

Just a little note, don't assume that all DTU network traffic is UDP. There is 
some TCP traffic as well. Look in the Installation Guide for the table that 
shows ports and protocols.

Art

Sent from my iPhone
___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] Is it possible to avoid LCD stretching with SunRays?

2011-09-17 Thread Bob Doolittle

Brad's probably right - I've not seen a monitor that does scaling that doesn't 
have a setting to disable it. When disabled you ought to see the black bands 
others have mentioned around the rendered area.

But if for some reason you can't disable scaling, the current firmware supports 
a resolution of 1440x900 that's closer to your aspect ratio and might look 
better scaled than 1600x1200. I'm not sure if your old firmware supports that 
resolution or not, many more resolutions are supported in current firmware than 
previously, particularly some with wider aspect ratios to match the current 
trend in monitors. 1600x1200 is a hardware limitation, however that the SR2 
can't exceed. The 1920 width you're remembering was probably from an SR2FS.

-Bob

On 09/17/11 10:01, Brad Lackey wrote:

The stretching is An artifact of your monitor. The Sun Ray doesn't control that 
feature. It sends the pixel data and the monitor decides how to deal with it. 
What kind of monitor is this? Have you looked in the menus or the manual of 
your monitor for setting the scaling mode? Hard to tell you what they call it 
because it's called different things by various vendors.

Sent from my mobile.

On Sep 17, 2011, at 4:30 AM, Jim Klimovjimkli...@cos.ru  wrote:


Hello all,

I am trying to get my Sun Ray 2 (non-FS) to work with a new LCD monitor.
It has a native resolution of 1920x1080, and in the SR2 specs I've seen
a claim that it can drive such resolution with a Sun 24 monitor, although
the device specs end at 1600x1200 or 1680x1050. (I think I saw some
articles suggesting it supports 1920x1080 over a digital connection,
but didn't find any texts like that yesterday).

I have successfully set both later resolutions, but the LCD panel is
stretching (or crumping) the image and the result is rather ugly.
The display has a mode to keep original aspect ratio, but the original
1680x1050 image is still a bit stretched to fit the 1080 height.

Is it possible to somehow use 1:1 pixels, i.e. have a 1680x1050 picture
in the middle of  larger display, or overdrive the SR2 video mode to
produce a 1680x1080 image (for example)?

Perhaps something can be faked with modeline settings to display
a 1050-height picture within an overdriven 1080-height canvas?

Currently the LCD is attached with analog cable; I'm going to get
a DVI-D one next week (I need to dual-attach the display to SR2
and to a laptop anyway). Should I hope/expect it to fix the problem? ;)

Finally, the server I'm attached to is rather old: a SPARC version
of 4.0_48,REV=2007.08.01.15.08. Is it possible that the problem
is fixed in newer releases of SRSS and/or SR Firmware?
Would I be in trouble if I use newer firmware with old software? ;)

While googling on this matter I found that Windows users with ATI
and NVidia cards have (or sometimes lack - leading to discussions)
the option to avoid stretching when using smaller video modes
(i.e. playing old games). It seems that the option may be effected
by the panel itself, by the video card or by the driver (using a native
big resolution and painting a smaller window in the middle of a
black area).

IF this can indeed be done by some standard command to the
LCD panel (i.e. over a DVI link), does SR2 or SRSS support it?
If not yet - please file a suggestion for an RFE ;)

Also please remind me what is the least intrusive way to enforce a
new resolution on a specific sunray DTU? So far I remove the setting
and add a new one with utresadm, but for it to take effect I have to
use utrestart -c, wait a few minutes, and power-cycle the DTU.
Breaking other users' sessions is uncool, so is there a better way? ;)

//Jim Klimov

___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users

___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] AMGH Problems: Switching between 2 FOGs

2011-09-08 Thread Bob Doolittle

On 09/07/11 18:38, Erik Riedel wrote:

Hi Bob,

Thanks for the reply.

On 09/ 7/11 11:35 AM, Bob Doolittle wrote:

Can you use utswitch explicitly to switch a DTU between B and C while
A is down?


It looks like I cannot switch between different FOGs with the command utswitch. 
When I do a utswitch -l I only can see the hosts within one FOG. Is there a 
special option to switch between FOGs?


utswitch -l can only report the local FOG, but utswitch -h will allow you to 
switch to any host in any FOG you like, assuming the DTU can be routed to that 
host. Just try it! :-)

-Bob

___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] AMGH Problems: Switching between 2 FOGs

2011-09-08 Thread Bob Doolittle

Is it possible that somehow the hosts in FOG A are routing traffic between the 
DTUs and B or C?

Something spooky about your network, I'm afraid. I can't say more without more 
data. Unless somebody else has something to contribute, you'll need to file a 
service request.

-Bob

On 09/08/11 18:17, Erik Riedel wrote:

Thanks Bob,

That I can switch between FOGs with utswitch was new to me.

When all 3 FOGs are online utswitch -h works flawlessly between all 3 FOGs

As soon as FOG A is offline I have following behavior:

I tested it on 3 DTUs.

- on two DTUs utswitch -h didn't work.

- on one DTU utswitch -h worked from FOB B to C and back, but it took a very 
long time, more then 3 minutes to switch. When all 3 FOGs are online the switch 
takes a couple of seconds.

Besides from this I see sometime the message 22C Look up 
sunray-config-servers when FOG A is offline.


Thanks,

Erik


On 09/ 8/11 10:36 AM, Bob Doolittle wrote:

On 09/07/11 18:38, Erik Riedel wrote:

Hi Bob,

Thanks for the reply.

On 09/ 7/11 11:35 AM, Bob Doolittle wrote:

Can you use utswitch explicitly to switch a DTU between B and C while
A is down?


It looks like I cannot switch between different FOGs with the command
utswitch. When I do a utswitch -l I only can see the hosts within one
FOG. Is there a special option to switch between FOGs?


utswitch -l can only report the local FOG, but utswitch -h will allow
you to switch to any host in any FOG you like, assuming the DTU can be
routed to that host. Just try it! :-)

-Bob





___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] AMGH Problems: Switching between 2 FOGs

2011-09-07 Thread Bob Doolittle

Can you use utswitch explicitly to switch a DTU between B and C while A is 
down?

Can you ping FOG B from C (and visa versa) when FOG A is down?

Do your DTUs boot up and connect to B and C when A is down - i.e. is it just a 
switching problem?

Do you have any shared resources used by your AMGH script, like NFS mounts to 
FOG A?

-Bob

On 09/06/11 17:54, Erik Riedel wrote:

Hi,

I have a AMGH problem and I have no clue where to start in order to fix it. 
Hopefully you can point me in the right direction.

I have three FOGs with one host in each FOG.

When all 3 FOGs (FOG A, FOG B and FOG C) are online switching between all three 
FOGs is working fine. Especially there is no problem between switching from FOG 
B to FOG C and back.

As soon as FOG A is not online (the single host in FOG A is powered down) it is 
not possible anymore to switch between FOG B and FOG C. When FOG A is brought 
back online everything works fine again.

The only messages I see during the problem are:


Sep  6 14:08:57 jacobi console-kit-daemon[520]: [ID 702911 daemon.warning] WARNING: signal 
open_session_request (from OpenSessionRequest) exported but not found in object class 
CkSeat
Sep  6 14:08:57 jacobi console-kit-daemon[520]: [ID 702911 daemon.warning] WARNING: signal 
close_session_request (from CloseSessionRequest) exported but not found in object 
class CkSeat
Sep  6 14:09:02 jacobi console-kit-daemon[520]: [ID 702911 daemon.warning] 
GLib-GObject-WARNING: g_object_set_property: construct property seat-id for 
object `CkSession' can't be set after construction
Sep  6 14:09:02 jacobi gdm-simple-slave[29738]: [ID 702911 daemon.warning] 
WARNING: GdmWelcomeSession: Error setting owner of run time directory: No such 
file or directory
Sep  6 14:09:02 jacobi gdm-simple-slave[29747]: [ID 702911 daemon.warning] 
WARNING: GdmWelcomeSession: Error setting owner of run time directory: No such 
file or directory
Sep  6 14:09:02 jacobi gnome-session[29747]: [ID 702911 daemon.warning] 
WARNING: IceListenForConnections returned 2 non-local listeners: 
inet/jacobi:34273,inet6/jacobi:35248
Sep  6 14:09:02 jacobi gnome-session[29747]: [ID 702911 daemon.warning] 
WARNING: GSIdleMonitor: IDLETIME counter not found
Sep  6 14:09:03 jacobi gnome-session[29747]: [ID 702911 daemon.warning] 
atk-bridge-WARNING: AT_SPI_REGISTRY was not started at session startup.
Sep  6 14:09:03 jacobi gnome-session[29747]: [ID 702911 daemon.warning] 
atk-bridge-WARNING: IOR not set.
Sep  6 14:09:03 jacobi gnome-session[29747]: [ID 702911 daemon.warning] 
atk-bridge-WARNING: Could not locate registry
Sep  6 14:09:06 jacobi syslog[29771]: [ID 702911 daemon.warning] Gtk-WARNING: 
gtkwidget.c:5628: widget not within a GtkWindow
Sep  6 14:09:06 jacobi syslog[29771]: [ID 702911 daemon.warning] WARNING: 
Failed to send buffer
Sep  6 14:09:11 jacobi gdm-session-worker[29772]: [ID 253639 daemon.error] 
pam_sunray:pam_sm_authenticate Cannot get sessionID for Xdisplay: [:16]
Sep  6 14:09:11 jacobi gdm-session-worker[29772]: [ID 540049 daemon.notice] 
sunray_get_user:pam_sm_auth: ut_getTokenByDisplay failed -1 for display :16


Any ideas? Any help is appreciated.

Thanks

Erik
___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] Duplicate log messages

2011-08-23 Thread Bob Doolittle

This is also easy to do with sloppy /etc/syslog.conf configuration.
Keep in mind that lower syslog priorities encompass higher ones, so for example 
if you had:
*.debug /tmp/foo
*.info /tmp/foo

You'd get duplicates of all log messages at debug level.

-Bob

On 08/23/11 17:41, Curtis Cunningham wrote:

sounds like you might have something like a duplicate process running.. the
one that does the logging.

On Tue, Aug 23, 2011 at 2:36 PM, Art Peckarthurp...@aol.com  wrote:


Anyone seen duplicate log entries in /var/opt/SUNWut/messages?? On my
primary, my messages file has almost every line twice, one right after the
other.

Art
--



__**_
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/**mailman/listinfo/sunray-usershttp://www.filibeto.org/mailman/listinfo/sunray-users





___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] Problems installing SRSS 5.2 on Fedora 15

2011-08-18 Thread Bob Doolittle

On 08/18/11 06:53, Kaya Saman wrote:

On 08/18/2011 11:42 AM, Jörg Barfurth wrote:

We haven't gotten to the stage of installing on Oracle Linux 6.1
yet. But, Oracle support has assured us that it does work.



They should not have. No released version of SRSS is supported on OEL 6.x - and 
afaik they won't work at all. SRSS 5.2 is supported on OEL 5.6 only.

- Jörg



So basically forget Linux for the moment as the provided GDM has become 
incompatible is the final verdict!!!

That's ok :-)


That would not be OK with us, and luckily that's not correct.
At the moment SRS 5.2 supports Oracle Linux 5.5 and 5.6.

See the list of supported OSs here:
http://download.oracle.com/docs/cd/E22662_01/E22659/html/Reqs-OS.html

We remain committed to supporting Oracle Linux. We'll no doubt support Oracle 
6.x in a future release.

-Bob

___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] utpolicy settings

2011-08-01 Thread Bob Doolittle

Ah - then I misunderstood your earlier post. Sorry about that.

In that case, the script could be easily used for OVDC clients in general by either changing the S1 to 
MD5 or changing the insert_token to terminal_cid (Joerg's right, using MD5 for 
the token type is probably best), but there's no easy way to distinguish iPad OVDC clients from PC OVDC clients.

-Bob


On 08/01/11 03:46, Jörg Barfurth wrote:

Bob Doolittle schrieb:


I created the ATI interface for one specific (big!) customer way back when, and 
I'd love to see it prove more widely useful. So in the interest of promoting 
its use I've written this script for you. Attached.

I'd attach the script to my blog, along with the AMGH examples and How-To I'd 
provided, but that was all lost in the move from Sun since I hadn't updated it 
recently (so it was presumed inactive/unimportant :-( ).

This script does rely on an assumption that iPad OVDC always creates tokens of the form 
S1.* and that no other OVDC clients do so. I don't know if this is true, 
since I don't have an iPad. Nor do I know if it's expected to be true going into the 
future - the token naming is not a documented/public interface so OVDC hasn't provided 
any stability guarantee regarding it (AFAIK), and is therefore free to change the naming 
convention in future. So caveat emptor and all that.



S1 is not a token prefix, so your script won't work as is. Like any other client OVDC gets 
assigned a pseudo token for non-card access. S1 is the prefix of the model 
identifier. Perceiving this as part of some kind of token probably comes from 'utwho -c', which creates a 
token-like string from model type identifier and the id part of the terminal CID. AFAICT that combination is 
used nowhere else.

Even this use of S1 can't be used to distinguish iPads from laptops or PCs, 
as it is used by all versions of OVDC. I don't know of any insert parameters that allows 
distinguishing iPad type clients from PC/laptop clients. Maybe the version (sw) parameter 
gives a clue, but even if it does, it probably isn't designed to be parseable.

IIRC the model identification or version parameters aren't readily available to ATI 
scripts. The most reliable - and documented, so reasonably stable - way to detect an OVDC 
client (versus a DTU) is the MD5 prefix on the terminal CID.

- Jörg



___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] 26d's on Linux

2011-08-01 Thread Bob Doolittle

If you're looking for a *stable* Linux distro, then of course using a distro we 
support is best, since that's what we'll have tested with extensively.

So RHEL 5.6 (or CentOS, if you want a free version) is going to be your best 
bet for use with SRS 5.2 (why would you be using 5.1.1?? That's not even the 
most recent 5.1.x release).

If you're looking for a Solaris 11 variant, you should be looking at Solaris 11 
Express (b151a), not b130.

-Bob

On 08/01/11 08:06, Hagen Heiduck wrote:

Karl, have you already been moved to Linux? Did you try to recompile gdm with 
MAX_CONNECTIONS=100 on OpenSolaris?

Our issues seem to be gone since changing that value (running 2009.06), though 
I changed it by a rather ugly way - poking around in the binary.. But it makes 
no odds, since it's unsupported, anyway.

Hagen

Karl Rossing wrote:

We have been using opensolaris b130(dtlogin) since it's release. As our sites 
grow(10+) we are getting more and more 26d.

The 26d's appear the most at our sites with 25+ dtu's. Our servers are not 
bogged down for the most part.  We have been able to mitigate some of the 26'd 
by deploying servers in a fog(25 dtu's per server) however they still persist.

The 26'd can be hard to clear, sometimes requiring the DTU to be unplugged for 
5 minutes after the session is terminated. Sometimes that does not fix it and 
people end up using someone else's card or a spare card.

We now need to move to Linux. I have testing various Linux distro's, trying to 
find one that works as well b130(minus the 26d's). It took a lot of work but I 
managed to get  Fedora 14 + gdm-2.16.7-2.1_01.sunray.i386 + SRS 4.2 (5.1.1) 
running. I not tested yet. So I might end up throwing it all out.

Which leads me to the following questions
1) Does gdm-2.16.7-2.1_01.sunray.i386.rpm provided with SRSS 4.2 have MAX 
Connections baked in?
2) Will my Fedora 14 + gdm-2.16.7-2.1_01.sunray.i386 + SRS 4.2 (5.1.1) be 
supported if I place a service call in regards to 26d? I got bounced from support in the 
past because of b130?
3) I would like to stay on the redhat side of things as SRS can be patched 
easier. Is there a Linux distro that has a better immunity to 26d's that has 
working sound working on with the DTU/gstreamer/adobeFlash?
4) Are GDM 26d's easier to clear than dtlogin 26d's?
5) Since GDM was rewritten, can someone give an update to what further needs to 
be fixed in GDM 2.30+ or GDM 3  in order to get SRS working properly?

Thanks
Karl


CONFIDENTIALITY NOTICE:  This communication (including all attachments) is
confidential and is intended for the use of the named addressee(s) only and
may contain information that is private, confidential, privileged, and
exempt from disclosure under law.  All rights to privilege are expressly
claimed and reserved and are not waived.  Any use, dissemination,
distribution, copying or disclosure of this message and any attachments, in
whole or in part, by anyone other than the intended recipient(s) is strictly
prohibited.  If you have received this communication in error, please notify
the sender immediately, delete this communication from all data storage
devices and destroy all hard copies.
___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] utpolicy settings

2011-07-29 Thread Bob Doolittle

On 07/29/11 08:07, Ivar Janmaat wrote:

Hello Craig,

I did not know of this option. Looks interesting for large numbers of OVDC 
clients when migrating to Sun rays from PC's
But I believe Paul only has one Ipad so to write an executable for this might 
be a bit to much to ask.


Yes, in that case simply using utuser to register the iPad is the simplest 
approach.

I created the ATI interface for one specific (big!) customer way back when, and 
I'd love to see it prove more widely useful. So in the interest of promoting 
its use I've written this script for you. Attached.

I'd attach the script to my blog, along with the AMGH examples and How-To I'd 
provided, but that was all lost in the move from Sun since I hadn't updated it 
recently (so it was presumed inactive/unimportant :-( ).

This script does rely on an assumption that iPad OVDC always creates tokens of the form 
S1.* and that no other OVDC clients do so. I don't know if this is true, 
since I don't have an iPad. Nor do I know if it's expected to be true going into the 
future - the token naming is not a documented/public interface so OVDC hasn't provided 
any stability guarantee regarding it (AFAIK), and is therefore free to change the naming 
convention in future. So caveat emptor and all that.

And of course it would not be difficult for somebody with some software chops 
to hack the client or the platform to cause the OVDC token to be rewritten so 
that it appears this way from non-iPad platforms, so as previously stated this 
isn't a secure solution.

As Joerg and I pointed out, utpolicy is all about creating secure access 
policies. If you're trying to prevent casual mis-use, but not protect against 
determined abusers, then this might be an acceptable approach. I don't want to 
see a front page NY Times story about this having been used to protect a bank's 
infrastructure, OK? ;-)

-Bob


Isn't it possible to register a token for the OVDC session? I thought i read 
something about people copying the smartcard token to the OVDC session so one 
could even hotdesk to de OVDC.

I need to look into this further. Interesting stuff this OVDC on the Ipad!

As for the netwerk security. You would not want to have unkown laptops in your 
network at all!
At best arrange for a separate wifi guest network access with no access to any 
server infra.

Ivar

Craig Bender schreef:

Did anyone see the suggestion I posted?  Registered mode for non-card use.

In fact, couldn't one use the Automated Token Import plugin and automatically have it automatically 
register all tokens that begin with S1. and registered them as an OVDC User

http://wikis.sun.com/display/SRSS4dot2/Solaris+Sun+Ray+Interface+Plugins+-+man%283%29#SolarisSunRayInterfacePlugins-man%283%29-manutatiscriptinterface3



On 7/28/11 8:14 PM, Paul Whitener wrote:

Ivar you hit the nail on the head.  I wanted to give access to an iPad
but require cards on the DTUs.  The DTUs are in a clinic at a
university.  So we want cards for the doctors and nurses so students can
not play.  Then iPads can be used to access in the office.

/paul



___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


#!/bin/ksh -p

# Written by Bob Doolittle, Oracle Corporation, July 29, 2011

# Sun Ray ATI script to detect OVDC clients which generate tokens of
# the form S1.* (iPad?) and automatically register them, so a
# registered-pseudo-token policy can be used which allows access for
# such OVDC clients but no DTUs or other types of OVDC clients.

# Note this approach does not provide robust security, and cannot be
# used to differentiate such OVDC clients in a secure fashion.

while read INPUT; do
if [ ${INPUT%%=*} = insert_token ]; then
VAL=${INPUT#*=}
TOK_TYPE=${VAL%%.*}
if [ $TOK_TYPE = S1 ]; then
# flush the rest of the input to avoid
# something like SIGPIPE to caller
while read INPUT; do
:
done

print registered=1
print name=OVDC iPad User
exit 0
fi
fi
done

print registered=0
exit 0
___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] utpolicy settings

2011-07-28 Thread Bob Doolittle

There is no way to enable non-card access for the soft-client only, if that's 
what you're asking.

Generally, this seems to make little sense. If anything a soft client is *less* 
secure than hardware, since software is easier to spoof. So to restrict 
hardware clients from a policy, while allowing it for soft clients, is not 
something the product offers.

-Bob

On 07/28/11 12:17, Paul Whitener wrote:

Greetings all,

Thanks in advance for the help.  So here is what I would like to setup as an
access policy to SRSS.

   Card users  all can get a login

   non card users  no login

   soft client  all logins

I have tried every combination in the gui to get there but can not.  When I
go command line, I often get ERROR: unreasonable policy:    since some
of the options I want seem to be not possible?

I guess what I don't understand is how can I be a card user on an iPad?  Or
a PC without a reader for that matter.

Thanks in advance,

/paul



___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] Sun Rays hanging at log in

2011-07-19 Thread Bob Doolittle

There were a number of bugs related to S11 in SRSS 4.2, many of which were 
addressed in the latest release.

Of course, we still don't support S11 Express, but it does work much better now.

-Bob

On 07/18/11 06:33 PM, Michael Grenier wrote:

Hi all,

When trying to log in to Solaris 11x using the Sun Ray software 4.2, certain
users will hang.  After entering their password the red ORACLE logo and the
spinning dots will appear on the screen.  After a short time, the dots too
will freeze, and utdesktop will reveal a hung session.

Looking through the logs, these lines seem to point to an error:

Jul 18 16:56:43 t2000-1 nscloginGUI: [ID 634092 user.notice] Error opening
catalog nscloginGUI
Jul 18 16:56:43 t2000-1 nscloginGUI: [ID 693915 user.notice] Error opening
PAM message catalog: [libpam]
Jul 18 16:56:43 t2000-1 last message repeated 1 time
Jul 18 16:56:43 t2000-1 nscloginGUI: [ID 693915 user.notice] Error opening
PAM message catalog: [pam_unix]
Jul 18 16:56:43 t2000-1 last message repeated 1 time
Jul 18 16:56:43 t2000-1 nscloginGUI: [ID 693915 user.notice] Error opening
PAM message catalog: [pam_smartcard]

Has anyone else had this problem, or know what might be causing it?  I can
place any desired command output in a pastebin if needed.

Thanks for your time,
Michael



___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] Can't get IPAD app to work....

2011-07-18 Thread Bob Doolittle

On 07/18/11 12:52 PM, Blaster wrote:


I upgraded my SRSS install from 4.2 to 4.3 on Solaris 11E.

My DTUs are working, but the ipad client isn't connecting.

It won't find any SRSS servers, nor does entering a specific server work.

All I get is a little box with an X in it with the number 47.


This means you need to configure an appropriate policy on the server to allow 
the soft client to connect (e.g. utpolicy ... -u pseudo).
Because of security issues inherent in use of a soft client on a platform we 
don't control (e.g. trojans), the default policy does not allow them to 
connect. You must decide whether the security vulnerabilities are acceptable in 
your use model, and if so enable the policy.

-Bob



Any idea what's going on?


(an iPad app for SGD would be cool too :) )

Thanks...



___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] SRSS 5.2 on Ubuntu 10.04.2

2011-07-14 Thread Bob Doolittle

What happens when you run the following command by hand?

% print yes | /opt/SUNWut/lib/utdialog -H YesOrNo utreplica.ContinueNoPort 
2/dev/null
Y
%

This is the same result on Solaris and Red Hat Linux (RHEL 5.6). There is no 
blank line in the output.
Make sure you redirect stderr, so you don't mix up the blank lines before and 
after the prompt with the actual output.

This is a horrible hack, but a way you can collapse whitespace including blank 
lines in output from a program is to do something like:
echo $(utdialog ...) | read REPLY

You shouldn't *have* to do this, however. I wonder what difference between RHEL 
5.6 and your version of Ubuntu is causing this problem? If it's not an outright 
Ubuntu bug (as that ksh case-statement issue suspiciously appears to be) I 
suppose it's some change that hasn't yet made it to 5.6 that we're going to run 
into eventually.

-Bob

On 07/14/11 04:19 PM, Seth Galitzer wrote:

I'm doing some further debugging on this problem, and my patch from yesterday 
seems to not solve the problem.  It appears that utdialog does not behave as 
expected in ubuntu.  No matter if you choose Y or N, the result returned to the 
calling function ReplyYesOrNo in config_lib is always an empty string.  To 
compound the problem, the putting the return statement inside the case block 
simply does not work in the Ubuntu ksh.  If I use an intermediate variable 
replacement, I can conclusively show that utdialog is not working as expected 
on this platform.

Unfortunately, I can't debug any further because utdialog is a compiled binary 
and not a script.  I can see that if I run utdialog by itself (supplying 
appropriate options), it returns an extra blank line before the response.  
Perhaps this is due to a difference in glibc or some other core lib?  Since I 
can't fix the binary, what I'm going to attempt to do next is write a script 
replacement for it and hope it doesn't break anything else.  As it is now, 
utdialog is utterly useless on this platform.

Seth


On 07/13/2011 04:34 PM, Seth Galitzer wrote:

After a couple hours of debugging this, I finally found the problem. I'm
guessing it's a difference of ksh that ships w/ Ubuntu and that of
Solaris. Patch is below, and I've added it to my patch file.

# start patch
--- /opt/SUNWut/lib/support_lib/config_lib.orig 2011-07-13
16:15:54.598289938 -0500
+++ /opt/SUNWut/lib/support_lib/config_lib 2011-07-13 16:16:16.558289987
-0500
@@ -66,8 +66,8 @@
case $REPLY in
N) return 1;;
Y) return 0;;
+ *) return 2;;
esac
- return 2
}

UTLIBDIR=/etc/opt/SUNWut/basedir/lib
# end patch

Basically the ReplyYesOrNo function, sourced from
/opt/SUNWut/lib/support_lib/config_lib has a redundant return statement.
My assumption is that the outer return statement was meant as a fallback
if neither Y nor N was entered, and that Solaris' ksh handles it by
returning directly from within the case statement, terminating the
function. With Ubuntu's ksh, the inner return does not break out of the
function, just from the case statement, so the outer return always gets
executed. The function itself does not permit any reply other than Y or
N, so the fallback response should never be triggered. In any case, the
syntax for Ubuntu's ksh is to have the default clause within the case
statement itself.

FYI, I have learned that debugging ksh can be quite a pain. Including
set -x in Ubuntu's ksh does not follow down into functions. I had to add
'typeset -ft $(typeset +f)' to the DoConfig function before I got
sufficient debugging info to find the source of the problem.

Cheers.
Seth

On 07/13/2011 12:00 PM, Bob Doolittle wrote:

On 07/13/11 12:54 PM, Seth Galitzer wrote:

I've been generally following the howto in the wiki for 4.2 on Ubuntu
9.10 (and the addendum for 10.04), making adjustments and documenting
as I go. Everything is pretty comparable for the newer versions. A
couple of steps are no longer necessary (including patching the kernel
modules), and I hacked the patch file a bit to work with new system
files. Only one step has me concerned, and I don't know if it's
because of Ubuntu or new behavior from SRSS tools.

When I run utconfig after running utadm for the first time, it doesn't
produce any output or prompt me for any input. Is this normal for 5.2?


No, this is not normal. Offhand, I can't imagine why it would fail in
such a manner, but as it's a shell script it should be easy to diagnose
by instrumenting with a set -x.

-Bob



Is it better at figuring out application paths? Or did it silently
fail for some reason? Is there a config file to manually edit or check
to verify that utconfig did anything?

Really, I'm just checking to see how well SRS runs on Ubuntu, as
that's what we use for most everything else here. My next test was
going to be on CentOS 6. Is there documentation for that somewhere?

I'd be happy to provide my notes and patches to whoever is maintaining
the Ubuntu how-tos on the wiki. Feel free to email me off-list if
you're interested

Re: [SunRay-Users] SRSS 5.2 on Ubuntu 10.04.2

2011-07-14 Thread Bob Doolittle

On 07/14/11 05:22 PM, Seth Galitzer wrote:

That does produce expected output (no extra blank lines).  Encapsulating the 
call to utdialog in $() in the utconfig script also hacks around the problem.  
I'll look at adding that to the other scripts that call utdialog until a better 
solution comes along.


Personally, I'd investigate moving utdialog aside and replacing it with a 
wrapper that does this (assuming I couldn't figure out where the shell was 
going wrong and fix it), rather than trying to fix all callers.

Of course, since the problem appears to be with the shell, rather than utdialog 
itself, this might not help. How on earth are the shells messing this up? This 
is basic stuff.

-Bob

___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] SRSS 5.2 on Ubuntu 10.04.2

2011-07-14 Thread Bob Doolittle

Oh - by the way.

It will be a nightmare to try and rewrite utdialog as a script, don't go there. 
This was my original approach, but as the complexity of the options expanded, 
and particularly when it became important to handle non-tty input differently, 
a rewrite in C quickly became necessary.

Since we've already established that utdialog works as expected, and that the 
problem is somehow with the shells themselves, you probably won't accomplish 
anything that way in any case.

My guess is that there's some inadvertent conflation of stderr and stdout in 
the shell's command output handling - there's no place else the extra blank 
line could be coming from.

You might try replacing that invocation of utdialog with a simple script that 
does:
print -u2 
print -u2 Continue? 
print -u2 
print Y

This should exactly match what utdialog is producing.

-Bob

On 07/14/11 04:45 PM, Bob Doolittle wrote:

What happens when you run the following command by hand?

% print yes | /opt/SUNWut/lib/utdialog -H YesOrNo utreplica.ContinueNoPort 
2/dev/null
Y
%

This is the same result on Solaris and Red Hat Linux (RHEL 5.6). There is no 
blank line in the output.
Make sure you redirect stderr, so you don't mix up the blank lines before and 
after the prompt with the actual output.

This is a horrible hack, but a way you can collapse whitespace including blank 
lines in output from a program is to do something like:
echo $(utdialog ...) | read REPLY

You shouldn't *have* to do this, however. I wonder what difference between RHEL 
5.6 and your version of Ubuntu is causing this problem? If it's not an outright 
Ubuntu bug (as that ksh case-statement issue suspiciously appears to be) I 
suppose it's some change that hasn't yet made it to 5.6 that we're going to run 
into eventually.

-Bob

On 07/14/11 04:19 PM, Seth Galitzer wrote:

I'm doing some further debugging on this problem, and my patch from yesterday 
seems to not solve the problem.  It appears that utdialog does not behave as 
expected in ubuntu.  No matter if you choose Y or N, the result returned to the 
calling function ReplyYesOrNo in config_lib is always an empty string.  To 
compound the problem, the putting the return statement inside the case block 
simply does not work in the Ubuntu ksh.  If I use an intermediate variable 
replacement, I can conclusively show that utdialog is not working as expected 
on this platform.

Unfortunately, I can't debug any further because utdialog is a compiled binary 
and not a script.  I can see that if I run utdialog by itself (supplying 
appropriate options), it returns an extra blank line before the response.  
Perhaps this is due to a difference in glibc or some other core lib?  Since I 
can't fix the binary, what I'm going to attempt to do next is write a script 
replacement for it and hope it doesn't break anything else.  As it is now, 
utdialog is utterly useless on this platform.

Seth


On 07/13/2011 04:34 PM, Seth Galitzer wrote:

After a couple hours of debugging this, I finally found the problem. I'm
guessing it's a difference of ksh that ships w/ Ubuntu and that of
Solaris. Patch is below, and I've added it to my patch file.

# start patch
--- /opt/SUNWut/lib/support_lib/config_lib.orig 2011-07-13
16:15:54.598289938 -0500
+++ /opt/SUNWut/lib/support_lib/config_lib 2011-07-13 16:16:16.558289987
-0500
@@ -66,8 +66,8 @@
case $REPLY in
N) return 1;;
Y) return 0;;
+ *) return 2;;
esac
- return 2
}

UTLIBDIR=/etc/opt/SUNWut/basedir/lib
# end patch

Basically the ReplyYesOrNo function, sourced from
/opt/SUNWut/lib/support_lib/config_lib has a redundant return statement.
My assumption is that the outer return statement was meant as a fallback
if neither Y nor N was entered, and that Solaris' ksh handles it by
returning directly from within the case statement, terminating the
function. With Ubuntu's ksh, the inner return does not break out of the
function, just from the case statement, so the outer return always gets
executed. The function itself does not permit any reply other than Y or
N, so the fallback response should never be triggered. In any case, the
syntax for Ubuntu's ksh is to have the default clause within the case
statement itself.

FYI, I have learned that debugging ksh can be quite a pain. Including
set -x in Ubuntu's ksh does not follow down into functions. I had to add
'typeset -ft $(typeset +f)' to the DoConfig function before I got
sufficient debugging info to find the source of the problem.

Cheers.
Seth

On 07/13/2011 12:00 PM, Bob Doolittle wrote:

On 07/13/11 12:54 PM, Seth Galitzer wrote:

I've been generally following the howto in the wiki for 4.2 on Ubuntu
9.10 (and the addendum for 10.04), making adjustments and documenting
as I go. Everything is pretty comparable for the newer versions. A
couple of steps are no longer necessary (including patching the kernel
modules), and I hacked the patch file a bit to work with new system
files. Only one step has me concerned, and I don't know if it's

Re: [SunRay-Users] SRSS 5.2 on Ubuntu 10.04.2

2011-07-13 Thread Bob Doolittle

On 07/13/11 12:54 PM, Seth Galitzer wrote:

I've been generally following the howto in the wiki for 4.2 on Ubuntu 9.10 (and 
the addendum for 10.04), making adjustments and documenting as I go.  
Everything is pretty comparable for the newer versions.  A couple of steps are 
no longer necessary (including patching the kernel modules), and I hacked the 
patch file a bit to work with new system files.  Only one step has me 
concerned, and I don't know if it's because of Ubuntu or new behavior from SRSS 
tools.

When I run utconfig after running utadm for the first time, it doesn't produce 
any output or prompt me for any input.  Is this normal for 5.2?


No, this is not normal. Offhand, I can't imagine why it would fail in such a manner, but 
as it's a shell script it should be easy to diagnose by instrumenting with a set 
-x.

-Bob



Is it better at figuring out application paths?  Or did it silently fail for 
some reason?  Is there a config file to manually edit or check to verify that 
utconfig did anything?

Really, I'm just checking to see how well SRS runs on Ubuntu, as that's what we 
use for most everything else here.  My next test was going to be on CentOS 6.  
Is there documentation for that somewhere?

I'd be happy to provide my notes and patches to whoever is maintaining the 
Ubuntu how-tos on the wiki.  Feel free to email me off-list if you're 
interested.

Thanks.
Seth



___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] SRSS 5.2.1. DTU's with smart cards, OVDC without smart cards.

2011-07-06 Thread Bob Doolittle

On 07/ 6/11 11:18 AM, James Kissler wrote:

Aaron, I can understand where you are coming from.  I have a good
number of Sunrays deployed.  We require the use of smartcard and pin
for authentication on both PCs and Sunrays (used for terminal
services).  This is a hard requirement for all users, with the
exception of admin personnel, the only people to use OVDC.  It would
be nice to be able to enforce smartcard authentication for physical
clients while allowing a more liberal access policy for OVDC
connections.


How would you prevent a random person from running OVDC, and thus circumvent 
your hard security policies regarding smartcard use?

There's always a tension between security and convenience, you need to choose 
your comfortable balance point and pursue consistent and compatible policies 
throughout your enterprise. The most convenient policy is to not use passwords 
for users, but that's not very secure...

-Bob

P.S. 25 years ago I was a network admin (and developer :-) ) at a company where the 
policy was no root passwords, to make our job simpler when dealing with 
unattended workstations which were causing problems (it only took one misconfigured or 
broken machine to bring the entire corporate network down). Ah, the halcyon days of 
innocent trust :-). Things are certainly less convenient today.

___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] SRSS 5.2.1. DTU's with smart cards, OVDC without smart cards.

2011-07-06 Thread Bob Doolittle

I guess you use Linux. If you used Solaris, you'd have the benefit of 
Non-SmartCard Mobility policy, which allows mobility based on your username 
upon login. It's on our to-do list for Linux.

For your use scenario (smartcards for mobility only), you *could* use a 
registered-card policy and the soft-client-id aliasing trick (utuser -ai) 
that's been published to this list in the past, to bind one soft client to one 
smartcard to access the same session. If you have a lot of platforms running 
soft clients that can be management-intensive, unfortunately.

People actually using their smartcard for authentication with special PAM 
modules can't do this, however, unless they have a way to cause their PAM 
module to detect and ignore non-smartcard tokens, and there are the security 
implications to consider.

-Bob

On 07/ 6/11 03:05 PM, Aaron Wilson wrote:

Our smart card use isn't really for security. It forces users to be
mobile. Not every user has their own dedicated DTU and they share.
If we didn't force smart card use then people would login, forget to
logout and then the screensaver would kick on and lock the screen and
I'd be killing sessions all day so the next person that needed to use
the DTU could.

If I'm somewhere in the building where there isn't a Sun Ray or
Ethernet and all I had was my MacBook and WiFi and wanted to pull up
my Sun Ray desktop then I could.

At least that's the use I see for it.
Seems like it could completely eliminate our need for SGD too, or is
that OGD now? :)


--
Aaron


On Wed, Jul 6, 2011 at 8:49 AM, Bob Doolittlebob.doolit...@oracle.com  wrote:

On 07/ 6/11 11:18 AM, James Kissler wrote:

Aaron, I can understand where you are coming from.  I have a good
number of Sunrays deployed.  We require the use of smartcard and pin
for authentication on both PCs and Sunrays (used for terminal
services).  This is a hard requirement for all users, with the
exception of admin personnel, the only people to use OVDC.  It would
be nice to be able to enforce smartcard authentication for physical
clients while allowing a more liberal access policy for OVDC
connections.

How would you prevent a random person from running OVDC, and thus circumvent
your hard security policies regarding smartcard use?

There's always a tension between security and convenience, you need to
choose your comfortable balance point and pursue consistent and compatible
policies throughout your enterprise. The most convenient policy is to not
use passwords for users, but that's not very secure...

-Bob

P.S. 25 years ago I was a network admin (and developer :-) ) at a company
where the policy was no root passwords, to make our job simpler when
dealing with unattended workstations which were causing problems (it only
took one misconfigured or broken machine to bring the entire corporate
network down). Ah, the halcyon days of innocent trust :-). Things are
certainly less convenient today.

___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] firefox hangs without displaying on centos 5.2 after reboot

2011-06-30 Thread Bob Doolittle

On 06/30/11 05:55 AM, Gerard Henry wrote:

On 05/27/11 03:03 PM, Bob Doolittle wrote:


The FF bug is claimed to have been fixed in FF 4, but I don't know if
anyone has verified this. Is anyone out there running FF 4 on Linux with
Sun Ray at this point? Does audio work?



unfortunately, on CentOS 5.5, with FF5 (because it seems that FF4 isn't 
available anymore):
[ghenry@nemo ~]$ /var/tmp/firefox/firefox -ProfileManager
/var/tmp/firefox/firefox-bin: /usr/lib/libstdc++.so.6: version `GLIBCXX_3.4.9' 
not found (required by /var/tmp/firefox/libxul.so)

not very fun to upgrade the system to test FF5


This doesn't look like a Sun Ray specific error at all.

Did you try running FF5 on the console?

-Bob

___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] SRS 5.2 utstart vs. utrestart hung sessions (26d)

2011-06-27 Thread Bob Doolittle

On 06/27/11 10:47 AM, Beckman, Daniel wrote:

I've been using a cron job to perform a cold restart of Sun Ray services every morning. That has worked well 
in the past to ensure there are no DTUs stuck in an odd state. Since upgrading to 5.2.1, I noticed that 
running utrestart -c generates an error, saying it's been deprecated and to use 
utstart instead. I changed my cron job to use utstart, but it does not appear to work 
in the same way.


It's mostly just a rename from the old utrestart. It should work much the same 
way. What you describe below doesn't seem related to utstart.


After a few hours, utdesktop -lw shows several DTUs in an error state. The 
only fix for those is to terminate the idle UNIX session, then have the user hit 
CTRL-Moon.


Just Ctrl-Moon doesn't restore it?

What does idle UNIX session mean exactly?
Are you running kiosk policy? Or are users logging into Unix desktops first and 
then running uttsc manually?

Have your DTUs upgraded to 5.2.1 firmware? What does utfwload show?


Running utload -r -t pseudo.MAC  doesn't work -- I get:

cat: cannot open /tmp/SUNWut/config/tokens/pseudo/MAC
Session ID cannot be determined.


That's a surprising command to run in this circumstance. It's not a supported 
end-user command, and it's just for loading new firmware.
Why are you trying to load new firmware?
Why this way?

-Bob

___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] SRS 5.2 utstart vs. utrestart hung sessions (26d)

2011-06-27 Thread Bob Doolittle

If you have a support contract, I encourage you to open a case. They'll have 
you run ut_gather, and we can do some postmortem to determine your problem.

Thanks,
Bob

On 06/27/11 11:25 AM, Beckman, Daniel wrote:

If I just do CTRL-Moon, it returns to a 26D state and never gets a session.

By idle UNIX session, I mean in the Sun Ray web administration, I go under Desktop Units, see that 
Unix User shows No user logged in and click Terminate Idle Session. If I do that 
and then have user press CTRL-Moon, then it will successfully come up with a session.

We're running kiosk policy -- users get a Windows 2008 R2 (RDS) desktop.


After a few hours, utdesktop -lw shows several DTUs in an error state. The 
only fix for those is to terminate the idle UNIX session, then have the user hit 
CTRL-Moon.

Just Ctrl-Moon doesn't restore it?
What does idle UNIX session mean exactly?
Are you running kiosk policy? Or are users logging into Unix desktops first and 
then running uttsc manually?
Have your DTUs upgraded to 5.2.1 firmware? What does utfwload show?

Yes. Running utfwload shows:

4.3_146928-01_2011.06.03.14.41

(It doesn't show anything for those units that are in an error state)



Running utload -r -t pseudo.MAC   doesn't work -- I get:

cat: cannot open /tmp/SUNWut/config/tokens/pseudo/MAC
Session ID cannot be determined.

That's a surprising command to run in this circumstance. It's not a supported 
end-user command, and it's just for loading new firmware.
Why are you trying to load new firmware?
Why this way?
-Bob

Well, I was attempting to use utload to perform a remote CTRL-Moon so I didn't 
have to ask a user to do it. I had heard that it now supports the -r switch to 
reset.

Thanks,
Daniel



___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] Fw: SRS 5.2 Performance Regression Fixed

2011-06-26 Thread Bob Doolittle

What does utquery IP say for one of these DTUs that is not upgrading?

My guess is that your Firmware Server is not configured for them.

-Bob

On 06/26/11 06:27 AM, Kalle Anka wrote:

Right, it was late and my brain did not function. Now it works. Partly. I cd'ed
down to the newly downloaded install package and typed exactly as stated:

# /opt/SUNWut/sbin/utfwadm -A -a -V -f
Components/10-SRSS/Patches/solaris/sparc/146928-01/SUNWutfw/reloc/SUNWut/lib/firmware

CoronaP1 4.3_146928-01_2011.06.03.14.41 this is the new firmware!!!
:o)
SunRayP104.3_146928-01_2011.06.03.14.41
CoronaP2 4.3_146928-01_2011.06.03.14.41
CoronaP3 4.3_146928-01_2011.06.03.14.41
CoronaP4 4.3_146928-01_2011.06.03.14.41
CoronaP5 4.3_146928-01_2011.06.03.14.41
CoronaP6 4.3_146928-01_2011.06.03.14.41
CoronaP7 4.3_146928-01_2011.06.03.14.41
SunRayP8 4.3_146928-01_2011.06.03.14.41
SunRayP9 4.3_146928-01_2011.06.03.14.41



I reboot sunray 2 DTU, and I see the old firmware:
# /opt/SUNWut/sbin/utfwload
  11.0 gdm  192.168.1.2 P8.00144f946b024.3_50_2011.04.22.22.07



Ergo, there is no automatic upgrade of the SunRay2 DTU. So I try to force update
of firmware by command:
# /opt/SUNWut/sbin/utfwsync
Stopping Authentication Managers on frasse ...
Will restart Authentication Managers in 50 seconds
Restarting Authentication Managers ...



Still no success, it is the same old firmware. So I reboot the server, and do
utfwsync again. And still no success. It is the same old firmware. Then I tried

# ./utfwadm -A -e 00144f946b02
 Unit 00144F946B02 will be upgraded at its next power-on
 if it is served by host frasse and is connected to
 the  network and is not already running firmware
 version 4.3_50_2011.04.22.22.07.
### stopped DHCP daemon
### started DHCP daemon
### reinitialized DHCP daemon



And still no success because it want to keep the same old firmware. So now what?
But it feels like I am almost there. Soon... :o)










- Original Message 
From: Bob Doolittlebob.doolit...@oracle.com
To: SunRay-Users mailing listsunray-users@filibeto.org
Cc: Kalle Ankaknatte_fnatte_tja...@yahoo.com
Sent: Sat, June 25, 2011 11:42:02 PM
Subject: Re: [SunRay-Users] Fw: SRS 5.2 Performance Regression Fixed

In this case it's easy, since the only update is new firmware.

So just unpack the install image, cd to the top, and (assuming you're just using
.parms files) do:

/opt/SUNWut/sbin/utfwadm -A -a -V -f
Components/10-SRSS/Patches/solaris/sparc/146928-01/SUNWutfw/reloc/SUNWut/lib/firmware


If you have some more complex utadm configuration then you'll have to
extrapolate, but that's the path you want to the firmware.

Note the path specifies sparc, but it's irrelevant in this case. The firmware
doesn't depend on the server architecture, and is therefore identical for all
platforms.

-Bob

On 06/25/11 03:36 PM, Kalle Anka wrote:

It looks like 5.2.1 includes patch 146928-01.  Solaris 11 Express doesn't use
the S10 and older patch system and therefore the Sun Ray installer can't
install
the patch.  You can probably find the patch embedded in the 5.2.1 download and
manually copy the files into place and/or run the bundled action scripts.

I'll

let someone else comment if they've actually tried installing 5.2.1 on S11e.
William Yang
Ok, so does anyone has some pointers? How to do this on S11E? I am willing to
experiment and post upgrade instructions here with some help from people.







- Forwarded Message 
From: Kalle Ankaknatte_fnatte_tja...@yahoo.com
To: sunray-users@filibeto.org
Sent: Sat, June 25, 2011 7:01:45 PM
Subject: Fw: SRS 5.2 Performance Regression Fixed

And, how are you supposed to upgrade to the newest v5.2.1? I tried to
utinstall on my v5.2 but that did not work. There were error messages.






- Forwarded Message 
From: Kalle Ankaknatte_fnatte_tja...@yahoo.com
To: sunray-users@filibeto.org
Sent: Sat, June 25, 2011 6:49:29 PM
Subject: Fw: SRS 5.2 Performance Regression Fixed

I dont understand. I downloaded the SRS package anew and tried to update to
newest version. I did as it says in the manual: utsetup but it did not work.
There were some errors. So I backed to a fresh BE and reinstalled everything
from scratch (gtar apache-tomcat etc etc etc).


But now I can not upgrade the firmware. As Jenz Langner wrote:
after having installed that update I can report that the included firmware
4.3_146928-01_2011.06.03.14.41 indeed solves the slow screen update and
stalling


problem which was previously reported here.  So everyone is suggested to

update

their firmwares to that one.  best regards, jens

But I have the same old firmware: 4.3_50_2011.04.22.22.07, the firmware has
not been upgraded to the version that Jenz talks about above:
4.3_146928-01_2011.06.03.14.41. What can be wrong? See below:




# utrelease
Sun Ray Software 5.2.1




# utfwsync
Stopping Authentication Managers on frasse ...
Will restart Authentication Managers in 5 seconds

Re: [SunRay-Users] Fw: SRS 5.2 Performance Regression Fixed

2011-06-26 Thread Bob Doolittle

Doh. Of course Craig is right. Don't do that!

But I believe there still may be problems with SRS using the S11 Express DHCP 
server, so my suggestions still apply.

-Bob

On 06/26/11 02:01 PM, Craig Bender wrote:

That's because you ran it twice and your second command just overwrote your 
first.  If you need to configure interconnects, then add the -N all to the 
first command.  Or if you are determined to run that second command then copy 
the contents of 
Components/10-SRSS/Patches/solaris/sparc/146928-01/SUNWutfw/reloc/SUNWut/lib/firmware
 to /opt/SUNWut/lib/firmware.


On 6/26/11 9:17 AM, Kalle Anka wrote:

It still doesnt work with Solaris 11 Express. It wants to use the old firmware.
Hmm... Tricky.

# /opt/SUNWut/sbin/utfwadm -A -a -V -f
Components/10-SRSS/Patches/solaris/sparc/146928-01/SUNWutfw/reloc/SUNWut/lib/firmware

CoronaP1 4.3_146928-01_2011.06.03.14.41
SunRayP104.3_146928-01_2011.06.03.14.41
CoronaP2 4.3_146928-01_2011.06.03.14.41
CoronaP3 4.3_146928-01_2011.06.03.14.41
CoronaP4 4.3_146928-01_2011.06.03.14.41
CoronaP5 4.3_146928-01_2011.06.03.14.41
CoronaP6 4.3_146928-01_2011.06.03.14.41
CoronaP7 4.3_146928-01_2011.06.03.14.41
SunRayP8 4.3_146928-01_2011.06.03.14.41
SunRayP9 4.3_146928-01_2011.06.03.14.41


# /opt/SUNWut/sbin/utfwadm -A -a -N all -f /opt/SUNWut/lib/firmware
 All the units served by frasse on the 192.168.1.0
 network interface, running firmware other than version
 4.3_50_2011.04.22.22.07 will be upgraded at their next power-on.
### stopped DHCP daemon
### started DHCP daemon
### reinitialized DHCP daemon









- Original Message 
From: P.S.M.Swamijipsm.swam...@oracle.com
To: SunRay-Users mailing listsunray-users@filibeto.org
Cc: Kalle Ankaknatte_fnatte_tja...@yahoo.com; Bob Doolittle
bob.doolit...@oracle.com
Sent: Sun, June 26, 2011 6:07:52 PM
Subject: Re: [SunRay-Users] Fw: SRS 5.2 Performance Regression Fixed

On 26-06-2011 08:24, Kalle Anka wrote:

How do I configure Firmware server?

You seems to be already having a  firmware server but that's configured
to serve
4.3_50_2011.04.22.22.07 firmware as the NewTVer shows in the below utquery
output.

After upgrading SRS one supposed to run utfwadm to get the latest firmware
upgrade to the DTUs.

In your case, you need to run utfwadm -A -a -N all -f /opt/SUNWut/lib/firmware

Thanks
P.S.M.Swamiji

Note: These are my personal opinions, nothing to do with my employer




   When I recently installed the v5.2 it
upgraded to this buggy firmware without configuring a Firmware server.


I installed according to my earlier instructions and this was all I did:
http://www.filibeto.org/pipermail/sunray-users/2011-June/017825.html
I did no configuration of Firmware server, but still I could upgrade to the
buggy firmware successfully. So, there is no need to configure a Firmware
server? So what could be the problem?

Is there no one out there besides me, that are using S11E?



# ./utquery 192.168.1.2
terminalID=00144f946b02
  terminalIPA=192.168.1.2
  model=SunRayP8
  currentAuth=192.168.1.3
  currentFW=4.3_50_2011.04.22.22.07
  currentBarrier=430
  currentBarrierLevel=430
  currentMTU=1500
  currentLease=69350
  Subnet=255.255.255.0
  Router=192.168.1.1
  MTU=1500
  LeaseTim=85304
  DHCPServer=192.168.1.1
  INFORMServer=192.168.1.3
  AuthSrvr=192.168.1.3
  AuthPort=7009
  LogHost=192.168.1.3
  FwSrvr=192.168.1.3
  NewTVer=4.3_50_2011.04.22.22.07
  FWservType=FWSrvr
  speed=100F
  parmsVersion=4.3_50_2011.04.22.22.07
  parmsBarrier=430
  configMTU=1500
  AltAuth=192.168.1.3
  dnsList=192.168.1.1
  confEnabled=1
  confNetType=DHCP
  conf.kbcountry=26
  kbcountry=26
  stopqon=0
  bandwidth=1
  cmdcachesize=512


# ./utfwload -L
Upgrading units to version 4.3_50_2011.04.22.22.07:










- Original Message 
From: Bob Doolittlebob.doolit...@oracle.com
To: Kalle Ankaknatte_fnatte_tja...@yahoo.com
Cc: SunRay-Users mailing listsunray-users@filibeto.org
Sent: Sun, June 26, 2011 4:01:47 PM
Subject: Re: [SunRay-Users] Fw: SRS 5.2 Performance Regression Fixed

What does utquery IP say for one of these DTUs that is not upgrading?

My guess is that your Firmware Server is not configured for them.

-Bob

On 06/26/11 06:27 AM, Kalle Anka wrote:

Right, it was late and my brain did not function. Now it works. Partly. I

cd'ed

down to the newly downloaded install package and typed exactly as stated:

# /opt/SUNWut/sbin/utfwadm -A -a -V -f
Components/10-SRSS/Patches/solaris/sparc/146928-01/SUNWutfw/reloc/SUNWut/lib/firmware
e
e

CoronaP1 4.3_146928-01_2011.06.03.14.41 this is the new firmware!!!
:o)
SunRayP104.3_146928-01_2011.06.03.14.41
CoronaP2 4.3_146928-01_2011.06.03.14.41
CoronaP3 4.3_146928-01_2011.06.03.14.41
CoronaP4 4.3_146928-01_2011.06.03.14.41
CoronaP5 4.3_146928-01_2011.06.03.14.41
CoronaP6

Re: [SunRay-Users] Fw: SRS 5.2 Performance Regression Fixed

2011-06-26 Thread Bob Doolittle

You shouldn't have had to edit the .parms file. The utfwadm command you 
executed should have updated it for you.

Your problem is that you still have DHCP configured, and the values in there are not 
updated and they're taking precedence over the .parms values. That's because you ran 
utfwadm -N all previously with the old firmware files.

Try doing svcadm disable dhcp-server, and then doing the utfwload -L 
command again.

-Bob

On 06/26/11 04:27 PM, Kalle Anka wrote:

I edited the file SunRay8.parms file to the new FW version (as Arthurpeck
suggested):

version=4.3_146928-01_2011.06.03.14.41
revision=3
barrier=430



And then I did
# /opt/SUNWut/sbin/utfwadm -A -a -V -f
Components/10-SRSS/Patches/solaris/sparc/146928-01/SUNWutfw/reloc/SUNWut/lib/firmware

CoronaP1 4.3_146928-01_2011.06.03.14.41
SunRayP104.3_146928-01_2011.06.03.14.41
CoronaP2 4.3_146928-01_2011.06.03.14.41
CoronaP3 4.3_146928-01_2011.06.03.14.41
CoronaP4 4.3_146928-01_2011.06.03.14.41
CoronaP5 4.3_146928-01_2011.06.03.14.41
CoronaP6 4.3_146928-01_2011.06.03.14.41
CoronaP7 4.3_146928-01_2011.06.03.14.41
SunRayP8 4.3_146928-01_2011.06.03.14.41
SunRayP9 4.3_146928-01_2011.06.03.14.41




And then I did
# /opt/SUNWut/sbin/utfwload -L
Upgrading units to version 4.3_146928-01_2011.06.03.14.41:
  11.0 gdm  192.168.1.2 P8.00144f946b024.3_50_2011.04.22.22.07



And something happened. The SunRay2 DTU rebooted and it said:
Decompressing file
Verifying Signature
Erasing Flash, DO NOT POWER OFF!
Programming flase, DO NOT POWER OFF




And now:
# /opt/SUNWut/sbin/utquery 192.168.1.2
terminalID=00144f946b02
 terminalIPA=192.168.1.2
 model=SunRayP8
 currentAuth=192.168.1.3
 currentFW=4.3_50_2011.04.22.22.07
 currentBarrier=430
 currentBarrierLevel=430
 currentMTU=1500
 currentLease=49176
 Subnet=255.255.255.0
 Router=192.168.1.1
 MTU=1500
 LeaseTim=49185
 DHCPServer=192.168.1.1
 INFORMServer=192.168.1.3
 AuthSrvr=192.168.1.3
 AuthPort=7009
 LogHost=192.168.1.3
 FwSrvr=192.168.1.3
 NewTVer=4.3_50_2011.04.22.22.07
 FWservType=FWSrvr
 speed=100F
 parmsVersion=4.3_50_2011.04.22.22.07
 parmsBarrier=430
 configMTU=1500
 AltAuth=192.168.1.3
 dnsList=192.168.1.1
 confEnabled=1
 confNetType=DHCP
 conf.kbcountry=26
 kbcountry=26
 stopqon=0
 bandwidth=1
 cmdcachesize=512




It is still the same old firmware. But maybe stale parms file in /tftpboot could
be the culprit.
So, what now? Should I edit every parms file? Why should I only edit the
SunRayP8.parms file, why not SunRayP9.parms too?


Or, should I copy all files as Craig suggested:
copy the contents of
Components/10-SRSS/Patches/solaris/sparc/146928-01/SUNWutfw/reloc/SUNWut/lib/firmware

to /opt/SUNWut/lib/firmware

I am closer to the solution!



___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] Fw: SRS 5.2 Performance Regression Fixed

2011-06-26 Thread Bob Doolittle

Wait - are you using the Sun Ray DHCP server to provide addresses for your 
DTUs, as well as boot parameters?
Don't you have another DHCP servers on your network for addresses?

-Bob

On 06/26/11 05:24 PM, Kalle Anka wrote:

I did that, and nothing happens. The SunRay2 DTU has no connection to my server.
I just see 27B broadcasted, it looks as if it is searching for a server.

Ok, now I am confused. There have been lots of different suggestions, I dont
mind to try them all. But now it seems some suggestions are messing up and I
should not do them.

So, let start from the beginning. I will do a new BE and try again. What should
I do to patch the firmware? Earlier, with the buggy v5.2 my firmwares got
upgraded. Now, with the new v5.2, the firmwares are not upgrading. Why is that?
Shouldnt the firmware upgrade just as in the buggy v5.2 version?

I will start from the beginning. What should I do? Copy all firmware files just
as Craig suggested? Craig is THE guru, right? Or?





- Original Message 
From: Bob Doolittlebob.doolit...@oracle.com
To: Kalle Ankaknatte_fnatte_tja...@yahoo.com
Cc: SunRay-Users mailing listsunray-users@filibeto.org
Sent: Sun, June 26, 2011 11:05:37 PM
Subject: Re: [SunRay-Users] Fw: SRS 5.2 Performance Regression Fixed

You shouldn't have had to edit the .parms file. The utfwadm command you executed
should have updated it for you.

Your problem is that you still have DHCP configured, and the values in there are
not updated and they're taking precedence over the .parms values. That's because
you ran utfwadm -N all previously with the old firmware files.

Try doing svcadm disable dhcp-server, and then doing the utfwload -L command
again.

-Bob

On 06/26/11 04:27 PM, Kalle Anka wrote:

I edited the file SunRay8.parms file to the new FW version (as Arthurpeck
suggested):

version=4.3_146928-01_2011.06.03.14.41
revision=3
barrier=430



And then I did
# /opt/SUNWut/sbin/utfwadm -A -a -V -f
Components/10-SRSS/Patches/solaris/sparc/146928-01/SUNWutfw/reloc/SUNWut/lib/firmware
e

CoronaP1 4.3_146928-01_2011.06.03.14.41
SunRayP104.3_146928-01_2011.06.03.14.41
CoronaP2 4.3_146928-01_2011.06.03.14.41
CoronaP3 4.3_146928-01_2011.06.03.14.41
CoronaP4 4.3_146928-01_2011.06.03.14.41
CoronaP5 4.3_146928-01_2011.06.03.14.41
CoronaP6 4.3_146928-01_2011.06.03.14.41
CoronaP7 4.3_146928-01_2011.06.03.14.41
SunRayP8 4.3_146928-01_2011.06.03.14.41
SunRayP9 4.3_146928-01_2011.06.03.14.41




And then I did
# /opt/SUNWut/sbin/utfwload -L
Upgrading units to version 4.3_146928-01_2011.06.03.14.41:
   11.0 gdm  192.168.1.2 P8.00144f946b024.3_50_2011.04.22.22.07



And something happened. The SunRay2 DTU rebooted and it said:
Decompressing file
Verifying Signature
Erasing Flash, DO NOT POWER OFF!
Programming flase, DO NOT POWER OFF




And now:
# /opt/SUNWut/sbin/utquery 192.168.1.2
terminalID=00144f946b02
  terminalIPA=192.168.1.2
  model=SunRayP8
  currentAuth=192.168.1.3
  currentFW=4.3_50_2011.04.22.22.07
  currentBarrier=430
  currentBarrierLevel=430
  currentMTU=1500
  currentLease=49176
  Subnet=255.255.255.0
  Router=192.168.1.1
  MTU=1500
  LeaseTim=49185
  DHCPServer=192.168.1.1
  INFORMServer=192.168.1.3
  AuthSrvr=192.168.1.3
  AuthPort=7009
  LogHost=192.168.1.3
  FwSrvr=192.168.1.3
  NewTVer=4.3_50_2011.04.22.22.07
  FWservType=FWSrvr
  speed=100F
  parmsVersion=4.3_50_2011.04.22.22.07
  parmsBarrier=430
  configMTU=1500
  AltAuth=192.168.1.3
  dnsList=192.168.1.1
  confEnabled=1
  confNetType=DHCP
  conf.kbcountry=26
  kbcountry=26
  stopqon=0
  bandwidth=1
  cmdcachesize=512




It is still the same old firmware. But maybe stale parms file in /tftpboot
could
be the culprit.
So, what now? Should I edit every parms file? Why should I only edit the
SunRayP8.parms file, why not SunRayP9.parms too?


Or, should I copy all files as Craig suggested:
copy the contents of
Components/10-SRSS/Patches/solaris/sparc/146928-01/SUNWutfw/reloc/SUNWut/lib/firmware
e

to /opt/SUNWut/lib/firmware

I am closer to the solution!



___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] Sunray Boot debugging

2011-06-25 Thread Bob Doolittle

On 06/25/11 05:45 AM, Chris Bull wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi List,

With all the shiny new oracle branding of the Sunray boot sequence, lots
of useful diagnostic information is now suppressed in favour of a
clean looking boot sequence.

Is there any way (perhaps via params file?) to re-enable the older
behaviour?


Stop-O, if typed after the keyboard reset has completed (about 4 seconds after 
power-on/reset), will enable the legacy OSD icon behavior, and will persist 
until the unit is powered off.

As always, on non-Sun keyboards, Stop can be emulated by pressing Control-Pause.

-Bob

___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] Fw: SRS 5.2 Performance Regression Fixed

2011-06-25 Thread Bob Doolittle

In this case it's easy, since the only update is new firmware.

So just unpack the install image, cd to the top, and (assuming you're just 
using .parms files) do:

/opt/SUNWut/sbin/utfwadm -A -a -V -f 
Components/10-SRSS/Patches/solaris/sparc/146928-01/SUNWutfw/reloc/SUNWut/lib/firmware

If you have some more complex utadm configuration then you'll have to 
extrapolate, but that's the path you want to the firmware.

Note the path specifies sparc, but it's irrelevant in this case. The firmware 
doesn't depend on the server architecture, and is therefore identical for all platforms.

-Bob

On 06/25/11 03:36 PM, Kalle Anka wrote:

It looks like 5.2.1 includes patch 146928-01.  Solaris 11 Express doesn't use
the S10 and older patch system and therefore the Sun Ray installer can't install
the patch.  You can probably find the patch embedded in the 5.2.1 download and
manually copy the files into place and/or run the bundled action scripts.  I'll
let someone else comment if they've actually tried installing 5.2.1 on S11e.
William Yang
Ok, so does anyone has some pointers? How to do this on S11E? I am willing to
experiment and post upgrade instructions here with some help from people.







- Forwarded Message 
From: Kalle Ankaknatte_fnatte_tja...@yahoo.com
To: sunray-users@filibeto.org
Sent: Sat, June 25, 2011 7:01:45 PM
Subject: Fw: SRS 5.2 Performance Regression Fixed

And, how are you supposed to upgrade to the newest v5.2.1? I tried to
utinstall on my v5.2 but that did not work. There were error messages.






- Forwarded Message 
From: Kalle Ankaknatte_fnatte_tja...@yahoo.com
To: sunray-users@filibeto.org
Sent: Sat, June 25, 2011 6:49:29 PM
Subject: Fw: SRS 5.2 Performance Regression Fixed

I dont understand. I downloaded the SRS package anew and tried to update to
newest version. I did as it says in the manual: utsetup but it did not work.
There were some errors. So I backed to a fresh BE and reinstalled everything
from scratch (gtar apache-tomcat etc etc etc).


But now I can not upgrade the firmware. As Jenz Langner wrote:
after having installed that update I can report that the included firmware
4.3_146928-01_2011.06.03.14.41 indeed solves the slow screen update and stalling


problem which was previously reported here.  So everyone is suggested to update
their firmwares to that one.  best regards, jens

But I have the same old firmware: 4.3_50_2011.04.22.22.07, the firmware has
not been upgraded to the version that Jenz talks about above:
4.3_146928-01_2011.06.03.14.41. What can be wrong? See below:




# utrelease
Sun Ray Software 5.2.1




# utfwsync
Stopping Authentication Managers on frasse ...
Will restart Authentication Managers in 5 seconds
Restarting Authentication Managers ...




# utfwadm -A -e 00144f946b02
 Unit 00144F946B02 will be upgraded at its next power-on
 if it is served by host frasse and is connected to
 the  network and is not already running firmware
 version 4.3_50_2011.04.22.22.07.
### stopped DHCP daemon
### started DHCP daemon
### reinitialized DHCP daemon





# ./utquery 192.168.1.2
terminalID=00144f946b02
 terminalIPA=192.168.1.2
 model=SunRayP8
 currentAuth=192.168.1.3
 currentFW=4.3_50_2011.04.22.22.07--- this is old firmware!
 currentBarrier=430
 currentBarrierLevel=430
 currentMTU=1500
 currentLease=56222
 Subnet=255.255.255.0
 Router=192.168.1.1
 MTU=1500
 LeaseTim=56278
 DHCPServer=192.168.1.1
 INFORMServer=192.168.1.3
 AuthSrvr=192.168.1.3
 AuthPort=7009
 LogHost=192.168.1.3
 FwSrvr=192.168.1.3
 NewTVer=4.3_50_2011.04.22.22.07
 FWservType=FWSrvr
 speed=100F
 parmsVersion=4.3_50_2011.04.22.22.07
 parmsBarrier=430
 configMTU=1500
 AltAuth=192.168.1.3
 dnsList=192.168.1.1
 confEnabled=1
 confNetType=DHCP
 conf.kbcountry=26
 kbcountry=26
 stopqon=0
 bandwidth=1
 cmdcachesize=512
___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] Fw: SRS 5.2 Performance Regression Fixed

2011-06-25 Thread Bob Doolittle

On 06/25/11 08:03 PM, Craig Bender wrote:

It's not a fresh install of 5.2.1 because it can't add the patch that makes it 
5.2.1.


Right. You need to run the command exactly as I stated it, pointing to the 
directory I specified. Then you'll have to reboot the Sun Rays for them to load 
the newly configured firmware. You can use utfwload or utwho -ac to see the 
firmware versions actually running on the Sun Rays.

-Bob



On 6/25/11 4:58 PM, Kalle Anka wrote:

Where id you run that command from?  /opt/SUNWut/sbin?  Note Bob's full  path,
that's the path of the new firmware.



I did the below on a fresh BE, it is a new fresh install of SunRay Server
v5.2.1:


# /opt/SUNWut/sbin/utfwadm -A -a -V -f /opt/SUNWut/lib/firmware/
CoronaP1 4.3_50_2011.04.22.22.07
SunRayP104.3_50_2011.04.22.22.07
CoronaP2 4.3_50_2011.04.22.22.07
CoronaP3 4.3_50_2011.04.22.22.07
CoronaP4 4.3_50_2011.04.22.22.07
CoronaP5 4.3_50_2011.04.22.22.07
CoronaP6 4.3_50_2011.04.22.22.07
CoronaP7 4.3_50_2011.04.22.22.07
SunRayP8 4.3_50_2011.04.22.22.07
SunRayP9 4.3_50_2011.04.22.22.07


# ls /opt/SUNWut/lib/firmware
CoronaP1   CoronaP2  CoronaP4  CoronaP6  CoronaP8  SunRay.disableGUI
CoronaP10  CoronaP3  CoronaP5  CoronaP7  CoronaP9  SunRay.enableGUI


# ls /opt/
apache-tomcat  apache-tomcat-5.5.20  DTT  install-testSUNWkio  SUNWut
SUNWutref  SUNWuttsc


# /opt/SUNWut/sbin/utquery 192.168.1.2
terminalID=00144f946b02
terminalIPA=192.168.1.2
model=SunRayP8
currentAuth=192.168.1.3
currentFW=4.3_50_2011.04.22.22.07
...


# /opt/SUNWut/sbin/utrelease
Sun Ray Software 5.2.1








- Original Message 
From: Bob Doolittlebob.doolit...@oracle.com
To: SunRay-Users mailing listsunray-users@filibeto.org
Cc: Kalle Ankaknatte_fnatte_tja...@yahoo.com
Sent: Sat, June 25, 2011 11:42:02 PM
Subject: Re: [SunRay-Users] Fw: SRS 5.2 Performance Regression Fixed

In this case it's easy, since the only update is new firmware.

So just unpack the install image, cd to the top, and (assuming you're just using
.parms files) do:

/opt/SUNWut/sbin/utfwadm -A -a -V -f
Components/10-SRSS/Patches/solaris/sparc/146928-01/SUNWutfw/reloc/SUNWut/lib/firmware


If you have some more complex utadm configuration then you'll have to
extrapolate, but that's the path you want to the firmware.

Note the path specifies sparc, but it's irrelevant in this case. The firmware
doesn't depend on the server architecture, and is therefore identical for all
platforms.

-Bob

On 06/25/11 03:36 PM, Kalle Anka wrote:

It looks like 5.2.1 includes patch 146928-01.  Solaris 11 Express doesn't use
the S10 and older patch system and therefore the Sun Ray installer can't
install
the patch.  You can probably find the patch embedded in the 5.2.1 download and
manually copy the files into place and/or run the bundled action scripts.

I'll

let someone else comment if they've actually tried installing 5.2.1 on S11e.
William Yang
Ok, so does anyone has some pointers? How to do this on S11E? I am willing to
experiment and post upgrade instructions here with some help from people.







- Forwarded Message 
From: Kalle Ankaknatte_fnatte_tja...@yahoo.com
To: sunray-users@filibeto.org
Sent: Sat, June 25, 2011 7:01:45 PM
Subject: Fw: SRS 5.2 Performance Regression Fixed

And, how are you supposed to upgrade to the newest v5.2.1? I tried to
utinstall on my v5.2 but that did not work. There were error messages.






- Forwarded Message 
From: Kalle Ankaknatte_fnatte_tja...@yahoo.com
To: sunray-users@filibeto.org
Sent: Sat, June 25, 2011 6:49:29 PM
Subject: Fw: SRS 5.2 Performance Regression Fixed

I dont understand. I downloaded the SRS package anew and tried to update to
newest version. I did as it says in the manual: utsetup but it did not work.
There were some errors. So I backed to a fresh BE and reinstalled everything
from scratch (gtar apache-tomcat etc etc etc).


But now I can not upgrade the firmware. As Jenz Langner wrote:
after having installed that update I can report that the included firmware
4.3_146928-01_2011.06.03.14.41 indeed solves the slow screen update and
stalling


problem which was previously reported here.  So everyone is suggested to

update

their firmwares to that one.  best regards, jens

But I have the same old firmware: 4.3_50_2011.04.22.22.07, the firmware has
not been upgraded to the version that Jenz talks about above:
4.3_146928-01_2011.06.03.14.41. What can be wrong? See below:




# utrelease
Sun Ray Software 5.2.1




# utfwsync
Stopping Authentication Managers on frasse ...
Will restart Authentication Managers in 5 seconds
Restarting Authentication Managers ...




# utfwadm -A -e 00144f946b02
  Unit 00144F946B02 will be upgraded at its next power-on
  if it is served by host frasse and is connected to
  the  network and is not already running firmware
  version 4.3_50_2011.04.22.22.07.
### stopped DHCP daemon
### started DHCP daemon
### reinitialized DHCP daemon





# 

Re: [SunRay-Users] Fw: SRS 5.2 Performance Regression Fixed

2011-06-25 Thread Bob Doolittle

On 06/25/11 09:03 PM, Craig Bender wrote:

I would guess when Solaris 11 is actually released and not in it's current 
Express form.


And we release a version of Sun Ray software that supports Solaris 11. We'll 
have to change the way we do updates since Solaris 11 won't support patchadd.

-Bob



On 6/25/11 5:56 PM, David Bullock wrote:

So when will it be supported to install patches to 5.2 on Solaris 11
Express? That seems to be the elephant in the room here?

On 26/06/2011 10:04 AM, Craig Bender craig.ben...@oracle.com
mailto:craig.ben...@oracle.com wrote:



___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users

___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] SRSS 5.2 RHEL6?

2011-06-24 Thread Bob Doolittle

SRS will *not* work on RHEL 6, due to the fact that it includes a rewritten GDM 
Display Manager which dropped functionality for multi-seat support required by 
Sun Ray software.

We have worked with Oracle Linux 6 to get that functionality ported in, but it 
has not been extensively tested at this time, as we don't officially support OL 
6 yet. It would be interesting to hear of any experiences using OL 6. We are of 
course fully committed to supporting Sun Ray on Oracle Linux, and will announce 
support for Oracle Linux 6 at some point in the future.

At this point in time, Red Hat still refuses to accept the multi-seat patch 
required for Sun Ray, so the prognosis going forward with Sun Ray on Red Hat is 
unclear.

-Bob

On 06/23/11 06:34 PM, Aaron Wilson wrote:

A quick Google search shows there is a change in GDM that prevents SRSS from
running right on RHEL6
It's an old bug though with no updates since January
https://bugzilla.redhat.com/show_bug.cgi?id=586487

Anyone tried installing SRSS on RHEL6 recently?

I'd really like to move to RHEL6 because glibc is much newer and supports
Firefox 4/5  Google Chrome.
We recently switched everything over to Google Apps so running browsers with
the latest and greatest javascript engines would be nice.

That gdm bug relates to gdm 2.28 in particular and I recently downloaded
RHEL6 and it ships with gdm 2.30.

I think we're running RHEL5.3. Looks like RHEL5.5 is up on the Red Hat site.
Anyone know if that supports Firefox 45 or Chrome?
If it did I could live without RHEL6 for the time being :)



___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] passing parms and firmware to remote sunrays

2011-06-17 Thread Bob Doolittle

On 06/17/11 11:37 AM, keith.i...@gdc4s.com wrote:

Want to pass parms and firmware to remote sunrays (getting IPs from
router).  Sessions work fine but of course utquery provides no info for
the remote sunrays.


utquery should always work. This is info only, of course, but can be useful for 
diagnostic purposes.
utfwload and utwho -c should show current firmware for remote, connected Sun 
Rays.
utfwload -l (or -L) can be used to load firmware to remote, connected Sun Rays 
(once only).


Is it just a matter of enabling option 66 on router
(option 49 already established).  Also read something about possibly
reducing MTU for remote sunrays.


The simplest approach for many is to configure DNS to offer sunray-config-servers to point to a 
Sun Ray Server configured with utfwadm -A -a -V. If you must use DHCP, then using option 66 is a 
reasonable approach (in which case option 49 is unnecessary if you include a servers= 
specification in your .parms files).

Resource:
http://wikis.sun.com/display/SRSS4dot2/Sun+Ray+DTU+Initialization+Requirements+Using+DHCP#SunRayDTUInitializationRequirementsUsingDHCP-GenericDHCPParameters

-Bob



Keith Ives
IT Network Engineer Staff
General Dynamics C4S
keith.i...@gdc4s.commailto:rogelio.mendoz...@gdc4s.com
379 E. Ramsey
San Antonio, TX 78216
ph. 210-308-6367

This message and/or attachments may include information subject to GDC4S
S.P. 1.8.6 and GD Corporate Policy 07-105 and are intended to be
accessed only by authorized recipients.  Use, storage and transmission
are governed by General Dynamics and its policies. Contractual
restrictions apply to third parties.  Recipients should refer to the
policies or contract to determine proper handling.  Unauthorized review,
use, disclosure or distribution is prohibited.  If you are not an
intended recipient, please contact the sender and destroy all copies of
the original message





___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] OpenOffice 3.2 font colours and SRSS 4.2

2011-06-09 Thread Bob Doolittle

On 06/09/11 07:33, Kevin Doyle wrote:

Hi

I have recently upgraded from SRSS 4.0 to 4.2. I am running Solaris 10
10/09 s10x_u8wos_08a X86 in a FOG
Everything is fine except just one thing. When I open a either a new or
existing document in Openoffice 3.2 and change the font colour, the
colour mapping is wrong. I choose blue font, the document displays red,
I choose turquoise1, it displays yellow. and so on. The chosen colour is
OK in the toolbar.  If I print the page to a colour printer the colours
are correct

Colour mappings seem fine if I open up an image or browse the web.

If I go to the SunRay server console and open up a document then
OpenOffice works fine. This rules out
a problem with OpenOffice


No, just the opposite. It points the finger squarely at OpenOffice.

In the X server, different framebuffers are allowed to implement different 
color packing orders, and inform the X server of the proper RGB byte masks to 
use. Applications are required to query the server for the proper RGB mask, and 
use it.

However, 90% of framebuffers these days implement an RGB byte order, whereas 
Sun Ray implements a different order (legitimately). Sometimes, app writers get 
lazy, and don't bother to query the mask and handle it as the X API specifies 
they should. This works for most hardware these days, but breaks for exceptions 
like Sun Ray. That's a bug in the application. In this case - OpenOffice. 
They're not following the X API properly.

-Bob


The problem points to the SunRay firmware upgrade ? or something else in
SRSS4.2 ?? as it was fine before
the upgrade.

The DTUs are Sunray 2 and 3.s both are effected.

Has anybody else seen this problem ?

Kevin

System Administrator
Scientific Analysis Laboratories
Hadfield House
Hadfield Street
Cornbrook
Manchester
M16 9FE





Scientific Analysis Laboratories Ltd aim to provide services of the highest 
quality.
Comments and suggestions which help us assess our performance and meet your 
requirements are appreciated.

Feedback should be submitted through the contact form on our website: 
http://www.salltd.co.uk or via Email Sales at salltd.co.uk

Scientific Analysis Laboratories Limited, Hadfield House, Old Trafford, 
Manchester, M16 9FE is a registered company in England and Wales, number 
2514788.  VAT Reg No: GB 560 8706 32.


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] OpenOffice 3.2 font colours and SRSS 4.2

2011-06-09 Thread Bob Doolittle

By the way, we fixed a similar bug (6971449 and 6968005) for *Linux only*. The 
fact that you're seeing this on Solaris x86 remains an outstanding issue. 
Please open a service call to get another bug filed to cover Solaris x86.

The fact that you're seeing this issue in flash actually might help the case for fixing 
this. At one point Adobe had fixed the color-flip issue by hard-coding a 
different mask for Solaris x86 (rather than querying the mask as appropriate), and we 
were concerned that changing to RGB order in Sun Ray protocol for Solaris x86 would wind 
up breaking Flash, which is of course a critical app for us, and that's why it was fixed 
only for Linux. But if Flash is also hard-coding RGB handling for Solaris x86 these days 
it would seem we can fix this and only goodness will ensue :-)

-Bob

On 06/09/11 08:09, Darrel Hankerson wrote:

Kevin Doyle writes:

I have recently upgraded from SRSS 4.0 to 4.2. I am running Solaris
10 10/09 s10x_u8wos_08a X86 in a FOG Everything is fine except just
one thing. When I open a either a new or existing document in
Openoffice 3.2 and change the font colour, the colour mapping is
wrong [...] Colour mappings seem fine if I open up an image or browse
the web.

On a similar config, we see blue in certain scenarios involving firefox
4 and flash 10.3.  Depending on what other flash objects come into the
panel (e.g., during scroll), a flash video will go blue.  We don't see
this behavior with firefox 3.6.17 and the same flash player.

--
Darrel Hankerson
___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] OpenOffice 3.2 font colours and SRSS 4.2

2011-06-09 Thread Bob Doolittle

On 06/09/11 11:26, Sean Walmsley wrote:

Yes - we've seen it running Staroffice 9 with SRSS 4.2 on Solaris 10 U9 on 
SPARC.

I hadn't tried on the Sunray server console so I thought it was some problem 
with Staroffice rather than with the Sunray software.


Please do try this on a SPARC console. If you're seeing this on SPARC it sounds 
like some other issue. You should only see the issue with color packing masks 
on Solaris x86 due to endianness issues.

-Bob



The odd thing is that changing the font background seems to work okay, it's 
only the foreground colour that is wrong.

We have not seem this issue with any other application.

Sean

On 06/09/11 07:33, Kevin Doyle wrote:

Hi

I have recently upgraded from SRSS 4.0 to 4.2. I am running Solaris 10
10/09 s10x_u8wos_08a X86 in a FOG
Everything is fine except just one thing. When I open a either a new or
existing document in Openoffice 3.2 and change the font colour, the
colour mapping is wrong. I choose blue font, the document displays red,
I choose turquoise1, it displays yellow. and so on. The chosen colour is
OK in the toolbar.  If I print the page to a colour printer the colours
are correct

Colour mappings seem fine if I open up an image or browse the web.

If I go to the SunRay server console and open up a document then
OpenOffice works fine. This rules out
a problem with OpenOffice

The problem points to the SunRay firmware upgrade ? or something else in
SRSS4.2 ?? as it was fine before
the upgrade.

The DTUs are Sunray 2 and 3.s both are effected.

Has anybody else seen this problem ?

Kevin

System Administrator
Scientific Analysis Laboratories
Hadfield House
Hadfield Street
Cornbrook
Manchester
M16 9FE


=
Sean Walmsley s...@fpp.nuclearsafetysolutions.com
Nuclear Safety Solutions Ltd.  416-592-4608 (V)  416-592-5528 (F)
700 University Ave M/S H04 J19, Toronto, Ontario, M5G 1X6, CANADA
___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] OpenOffice 3.2 font colours and SRSS 4.2

2011-06-09 Thread Bob Doolittle

I just tried OpenOffice 3.3.0 and Flash 10.2 r159, and colors appear correct on 
my S11 x86 system.

So something else appears to be going on for you. Try upgrading to the latest 
OpenOffice version, and see if that helps.

Note I'm running SRS 5.2 (SRSS 4.3). Not sure if that's making a difference 
here.

-Bob

On 06/09/11 09:24, Bob Doolittle wrote:

By the way, we fixed a similar bug (6971449 and 6968005) for *Linux only*. The 
fact that you're seeing this on Solaris x86 remains an outstanding issue. 
Please open a service call to get another bug filed to cover Solaris x86.

The fact that you're seeing this issue in flash actually might help the case for fixing 
this. At one point Adobe had fixed the color-flip issue by hard-coding a 
different mask for Solaris x86 (rather than querying the mask as appropriate), and we 
were concerned that changing to RGB order in Sun Ray protocol for Solaris x86 would wind 
up breaking Flash, which is of course a critical app for us, and that's why it was fixed 
only for Linux. But if Flash is also hard-coding RGB handling for Solaris x86 these days 
it would seem we can fix this and only goodness will ensue :-)

-Bob

On 06/09/11 08:09, Darrel Hankerson wrote:

Kevin Doyle writes:

I have recently upgraded from SRSS 4.0 to 4.2. I am running Solaris
10 10/09 s10x_u8wos_08a X86 in a FOG Everything is fine except just
one thing. When I open a either a new or existing document in
Openoffice 3.2 and change the font colour, the colour mapping is
wrong [...] Colour mappings seem fine if I open up an image or browse
the web.

On a similar config, we see blue in certain scenarios involving firefox
4 and flash 10.3.  Depending on what other flash objects come into the
panel (e.g., during scroll), a flash video will go blue.  We don't see
this behavior with firefox 3.6.17 and the same flash player.

--
Darrel Hankerson
___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users




___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] Fw: Install instructions of v5.2 for S11E? 44B

2011-05-25 Thread Bob Doolittle

Did you in fact install the Motif packages?

Things can appear as you say if you didn't install them, because on Solaris the 
default policy is NSCM, which requires a Motif greeter, and it will cycle 
trying to start up and failing to do so if the required packages are not 
installed.

Those packages are (from the How-To):

SUNWmfrun SUNWtltk SUNWdtbas


-Bob

On 05/25/11 05:41 PM, Kalle Anka wrote:

I dont get it. I did this:

1) Got static IP with ipadm with
  # svcadm disable svc:/network/physical:nwam
  # svcadm enable svc:/network/physical:default
  # ipadm create-add -T static -a 192.168.1.3/24 e1000g0/v4
  # route -p add default 192.168.1.1

  Modified /etc/resolv.conf:
   domain bredbandsbolaget.com
   nameserver 195.54.122.200
   nameserver 195.54.122.204

  # cp /etc/nsswitch.dns /etc/nsswitch.conf


2) pkg install SUNWdhcs SUNWdhcsb SUNWdhcm


3) utsetup

And I still get this output as shown below. utadm -l, seems to show IPv6 in
currentAuth.


The screen of the DTU flashes and power cycles. And the screen says 44B. What
the heck is wrong? This is getting tiresome. The install instructions are quite
high level. get static ip - yes but how? An example of each config file would
be enlightening.








- Original Message 
From: Simon Annearsi...@annear.org
To: sunray-users@filibeto.org; Kalle Ankaknatte_fnatte_tja...@yahoo.com
Sent: Wed, May 25, 2011 12:48:00 PM
Subject: Re: [SunRay-Users] Fw: Install instructions of v5.2 for S11E?

Hi Kalle

I have just upgraded to Solaris 11 Express + SRS 5.2 and it's working for me :-)

I used the steps on the sunray wiki, but it looks like you've got some
networking problems (Your CurrentAuth value is an IP6 address and should show
192.168.1.3 based on what you have in your config)

I setup my networking slightly differently (I installed S11 Express, ran
/usr/sbin/sys-unconfig and rebooted).  It then walked me through the basic
network/host configuration.  If you're not confident configuring IP on solaris
this is a good way to do it.  Sys-unconfig removes network config and shuts the
server down.  Then when you power it up again it walks you through basic network
setup tasks.

Perhaps you could include the output of /sbin/ifconfig e1000g0

Mine shows
e1000g0: flags=1000843UP,BROADCAST,RUNNING,MULTICAST,IPv4  mtu 1500 index 2
 inet 192.168.0.29 netmask ff00 broadcast 192.168.0.255


Here is the output of utquery on my sunray


me@sunray29:/opt/SUNWut/sbin$ ./utquery 192.168.0.199
terminalID=080020f94a6a
 terminalIPA=192.168.0.199
 model=CoronaP2
 currentAuth=192.168.0.29
 currentFW=4.3_50_2011.04.22.22.07
 currentBarrier=430
 currentBarrierLevel=430
 currentMTU=1472
 currentLease=5791
 Subnet=255.255.255.0
 Router=192.168.0.210
 MTU=1472
 LeaseTim=7200
 DHCPServer=192.168.0.210
 INFORMServer=192.168.0.29
 AuthSrvr=192.168.0.29
 AuthPort=7009
 LogHost=192.168.0.29
 FwSrvr=192.168.0.29
 NewTVer=4.3_50_2011.04.22.22.07
 FWservType=FWSrvr
 speed=100F
 parmsVersion=4.3_50_2011.04.22.22.07
 parmsBarrier=430
 configMTU=1472
 AltAuth=192.168.0.29
 dnsList=192.168.0.210
 dname=mydomain.org
 confEnabled=0
 stopqon=0
 bandwidth=1
me@sunray29:/opt/SUNWut/sbin$




On 05/25/11 09:48 AM, Kalle Anka wrote:

Ok, my earlier problem was that I had no static IP, because my install was
broken. I reinstalled and got static IP like this:

--

How to get static IP in Solaris 11 Express
# svcadm disable svc:/network/physical:nwam
# svcadm enable svc:/network/physical:default
# ipadm create-add -T static -a 192.168.1.3/24 e1000g0/v4
# route -p add default 192.168.1.1

Add the last line in /etc/resolv.conf:
nameserver 192.168.1.1
domain 195.54.122.200

# cp /etc/nsswitch.dns /etc/nsswitch.conf

And reboot.

-

Now I am trying to install SunRay v5.2 and does not succeed. This is what I

did

to install:

I installed these packages: SUNWdhcsb SUNWdhcs SUNWdhcm
and used /utsetup. Then I choose all default values - this means Lan
connections
is off. I turned on Lan connection with:
# utadm -L on

I modified /etc/hosts, I added this line at the bottom:
192.168.1.3 frasse

and rebooted. Now it seems the SunRay2 DTU power cycles? Something like that.
Every second it power cycles. I can see the cursor arrow for a half a second,
then I see the cross cursor. And now I have this output below. What could be
the
problem? Should I reinstall? I am almost there...


root@frasse:/opt/SUNWut/sbin# ./utadm -l
LAN connections: On
Use IPv4 multicast
Sun Ray interconnect framework is not configured
root@frasse:/opt/SUNWut/sbin# ./utquery 192.168.1.2
terminalID=00144f946b02
  terminalIPA=192.168.1.2
  model=SunRayP8
  currentAuth=b41a:508::56e3:d0fe:c0a8:102
  currentFW=4.2_77_2009.10.19.17.01
  currentBarrier=420
  currentBarrierLevel=420
  currentMTU=1500
  

Re: [SunRay-Users] CentOS 5.6 (64bit) - SRS 5.2 - modprobe failed

2011-05-19 Thread Bob Doolittle

Drivers are built and installed during activation, which typically happens when 
you (or utsetup) run utconfig. You should be able to find the activation log in 
/var/log/SUNWut/utctl.* where it should report what happened.

Please share what you find.

-Bob

On 05/19/11 02:37 AM, Guido Schwarzer wrote:

Hi,

The installation of SRS 5.2 under CentOS 5.6 (64bit) worked like a charm. 
However, we have problems to generate the devices needed for USB/sound:

[root@imbi32 ~]# uname -a
Linux imbi32.imbi.privat 2.6.18-238.9.1.el5 #1 SMP Tue Apr 12 18:10:13 EDT 2011 
x86_64 x86_64 x86_64 GNU/Linux

[root@imbi32 ~]# ls -l /dev/ut*
ls: /dev/ut*: No such file or directory

Accordingly, we get plenty of messages regarding utstoraged:
...
May 19 00:23:26 imbi32 utstoraged[3148]: Restarting ...
May 19 00:24:01 imbi32 last message repeated 7 times
May 19 00:25:06 imbi32 last message repeated 13 times
May 19 00:26:11 imbi32 last message repeated 13 times
May 19 00:27:16 imbi32 last message repeated 13 times
...


Compiling/installing the kernel drivers does work:

[root@imbi32 ~]# ls -l /lib/modules/
total 12
drwxr-xr-x 7 root root 4096 May 18 23:39 2.6.18-238.9.1.el5
drwxr-xr-x 6 root root 4096 May 18 23:58 2.6.18-238.el5

[root@imbi32 ~]# ls -l /lib/modules/*/misc/ut*
-rwxr-xr-x 1 root root 408089 May 19 00:15 
/lib/modules/2.6.18-238.9.1.el5/misc/utadem.ko
-rwxr-xr-x 1 root root 226076 May 19 00:15 
/lib/modules/2.6.18-238.9.1.el5/misc/utdisk.ko
-rwxr-xr-x 1 root root 265543 May 19 00:15 
/lib/modules/2.6.18-238.9.1.el5/misc/utdiskctl.ko
-rwxr-xr-x 1 root root 393878 May 19 00:15 
/lib/modules/2.6.18-238.9.1.el5/misc/utio.ko


However, the command modprobe fails:

[root@imbi32 ~]# /etc/init.d/utsyscfg stop
[root@imbi32 ~]# /etc/init.d/utsyscfg start
FATAL: Module utadem not found.
FATAL: Module utio not found.
FATAL: Module utdiskctl not found.
[root@imbi32 ~]# modprobe utadem
FATAL: Module utadem not found.


Any idea what went wrong during the installation process or how to fix this 
problem?

Yours,
Guido


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] Fw: Install instructions of v5.2 for S11E?

2011-05-19 Thread Bob Doolittle

Your configuration looks fine to me.

You just need your hostname/IP in /etc/hosts and /etc/hostname.INTERFACE. 
You'll need to update /etc/netmasks for your network/mask.

That's it [1]. You're have configured a static IP address and should be able to 
ping IP addresses on your local subnet, yet the ping is not working.

You can verify your configuration by observing that ifconfig is reporting correct information 
regarding your IP address, netmask, and broadcast address, and it's UP, so you've 
correctly configured a static IP. The fact that it's also RUNNING means your network is 
connected to *something*.

But you can't ping your router. That's not a machine configuration problem, 
that's a network wiring problem, or possibly a firewall blocking traffic 
between your host and your router, or some other router configuration issue. I 
don't think your problem is with your server at this point.

-Bob

[1] you also need to setup a name service such as DNS, but that won't affect 
ping of an IP address, and you may need to put the IP address of your router in 
/etc/defaultrouter if your router doesn't support auto discovery, but that 
won't affect ping of anything on your local subnet, such as the router itself. 
So don't worry about either of these things until you can successfully ping 
your router's IP address.

On 05/19/11 10:03 AM, Kalle Anka wrote:

Ok, let's start from the beginning. Does someone know how to get a static IP on
S11E? Are there a link anywhere?

When I get everything working, I will post install instructions here. I will do
the hard work and post them, so we can update the wiki. The community takes care
of this.




- Forwarded Message 
From: Kalle Ankaknatte_fnatte_tja...@yahoo.com
To: sunray-users@filibeto.org
Sent: Wed, May 18, 2011 7:05:23 PM
Subject: Fw: Install instructions of v5.2 for S11E?

Bob, I now tried to setup /etc/resolv.conf on a fresh install of S11E, but still


it dont work to get static ip.



I added dns at the end:
nsswitch.conf
...
hosts: files dns
...


I added the last line:
resolv.conf
nameserver 192.168.1.1
domain 195.54.122.200



Upon reboot, I can not ping 192.168.1.1. But I can ping 127.0.0.1. So how do I
setup an /etc/resolv.conf file?


Too bad that the SRS install instructions on the wiki doesn't work
http://wiki.sun-rays.org/index.php/SRS_5.1_on_Solaris_11_Express
When I get this working, I will post a how to how to install SRS v5.2 on a fresh
S11E. Hopefully someone can update the install instructions.



It sounds as though you did not set up your /etc/resolv.conf DNS control file?
Can you do ping 192.168.1.1? That would verify whether your network connection

itself is working.  -Bob


- Forwarded Message 
From: Kalle Ankaknatte_fnatte_tja...@yahoo.com
To: sunray-users@filibeto.org
Sent: Wed, May 18, 2011 12:29:33 AM
Subject: Fw: Install instructions of v5.2 for S11E?

Ok, to install v5.2, Ive tried to first get static IP but did not succeed. I did


these steps on my fresh installation of S11E:


/etc/hosts
127.0.0.1 localhostloghost
192.168.1.3Frasse


/etc/hostname.e1000g0
Frasse  netmask  +  broadcast  +


/etc/netmasks
192.168.1.0 255.255.255.0


/etc/defaultrouter
192.168.1.1


# cp /etc/nsswitch.dns /etc/nsswitch.conf
# svcadm disable network/physical:nwam
# svcadm enable network/physical:default






Then I rebooted and I have no internet connection. Look:
# netstat -rn
Routing Table: IPv4
   Destination   Gateway   Flags  Ref Use Interface
  - - -- -
default  192.168.1.1  UG1  0
127.0.0.1127.0.0.1UH2  4 lo0
192.168.1.0  192.168.1.3  U 2  0 e1000g0

Routing Table: IPv6
   Destination/MaskGateway   Flags Ref   UseIf
--- --- - --- --- -
::1 ::1 UH  2   0 lo0

# ifconfig -a
lo0: flags=2001000849UP,LOOPBACK,RUNNING,MULTICAST,IPv4,VIRTUAL  mtu 8232 
index


1
 inet 127.0.0.1 netmask ff00
e1000g0: flags=1000843UP,BROADCAST,RUNNING,MULTICAST,IPv4  mtu 1500 index 2
 inet 192.168.1.3 netmask ff00 broadcast 192.168.1.255
 ether 0:1b:21:1e:2e:d0
lo0: flags=2002000849UP,LOOPBACK,RUNNING,MULTICAST,IPv6,VIRTUAL  mtu 8252 
index


1
 inet6 ::1/128

# ping www.google.com
ping: unknown host www.google.com

# getent hosts Frasse
192.168.1.3Frasse


What can be the problem?

___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] Fw: Install instructions of v5.2 for S11E?

2011-05-19 Thread Bob Doolittle

On 05/19/11 03:59 PM, Kalle Anka wrote:

Hmmm... When I tried to get static IP, I also tried ipadm because it seemed
simpler. Maybe that messed my server up?

root@Frasse:~# ipadm show-if
IFNAME STATECURRENT  PERSISTENT
lo0ok   -m-v--46 ---
e1000g0ok   bm46 ---
root@Frasse:~# ipadm show-addr
ADDROBJ   TYPE STATEADDR
lo0/v4static   ok   127.0.0.1/8
e1000g0/_bdhcp ok   192.168.1.4/24
lo0/v6static   ok   ::1/128
e1000g0/_aaddrconf ok   fe80::21b:21ff:fe1e:2ed0/10


Look, I have two e1000g0 entries. Maybe it confuses the computer? How can I get
rid of one?


I don't know ipadm. But I can tell from your ifconfig output that you're 
configuration is correct for what you need to ping your router.
So it's not a server configuration problem.

You have an IPv4 entry and an IPv6 entry. That's normal.

-Bob


The weird thing is that I tried ipadm in another experimental BE, but it seems
that ipadm carries over to every BE - it seems to be global. Is it true?




- Original Message 
From: Bob Doolittlebob.doolit...@oracle.com
To: SunRay-Users mailing listsunray-users@filibeto.org
Cc: Kalle Ankaknatte_fnatte_tja...@yahoo.com
Sent: Thu, May 19, 2011 4:54:18 PM
Subject: Re: [SunRay-Users] Fw: Install instructions of v5.2 for S11E?

Your configuration looks fine to me.

You just need your hostname/IP in /etc/hosts and /etc/hostname.INTERFACE. You'll
need to update /etc/netmasks for your network/mask.

That's it [1]. You're have configured a static IP address and should be able to
ping IP addresses on your local subnet, yet the ping is not working.

You can verify your configuration by observing that ifconfig is reporting
correct information regarding your IP address, netmask, and broadcast address,
and it's UP, so you've correctly configured a static IP. The fact that it's
also RUNNING means your network is connected to *something*.

But you can't ping your router. That's not a machine configuration problem,
that's a network wiring problem, or possibly a firewall blocking traffic between
your host and your router, or some other router configuration issue. I don't
think your problem is with your server at this point.

-Bob

[1] you also need to setup a name service such as DNS, but that won't affect
ping of an IP address, and you may need to put the IP address of your router in
/etc/defaultrouter if your router doesn't support auto discovery, but that won't
affect ping of anything on your local subnet, such as the router itself. So
don't worry about either of these things until you can successfully ping your
router's IP address.

On 05/19/11 10:03 AM, Kalle Anka wrote:

Ok, let's start from the beginning. Does someone know how to get a static IP

on

S11E? Are there a link anywhere?

When I get everything working, I will post install instructions here. I will

do

the hard work and post them, so we can update the wiki. The community takes
care
of this.




- Forwarded Message 
From: Kalle Ankaknatte_fnatte_tja...@yahoo.com
To: sunray-users@filibeto.org
Sent: Wed, May 18, 2011 7:05:23 PM
Subject: Fw: Install instructions of v5.2 for S11E?

Bob, I now tried to setup /etc/resolv.conf on a fresh install of S11E, but
still


it dont work to get static ip.



I added dns at the end:
nsswitch.conf
...
hosts: files dns
...


I added the last line:
resolv.conf
nameserver 192.168.1.1
domain 195.54.122.200



Upon reboot, I can not ping 192.168.1.1. But I can ping 127.0.0.1. So how do I
setup an /etc/resolv.conf file?


Too bad that the SRS install instructions on the wiki doesn't work
http://wiki.sun-rays.org/index.php/SRS_5.1_on_Solaris_11_Express
When I get this working, I will post a how to how to install SRS v5.2 on a
fresh
S11E. Hopefully someone can update the install instructions.



It sounds as though you did not set up your /etc/resolv.conf DNS control file?
Can you do ping 192.168.1.1? That would verify whether your network
connection

itself is working.  -Bob


- Forwarded Message 
From: Kalle Ankaknatte_fnatte_tja...@yahoo.com
To: sunray-users@filibeto.org
Sent: Wed, May 18, 2011 12:29:33 AM
Subject: Fw: Install instructions of v5.2 for S11E?

Ok, to install v5.2, Ive tried to first get static IP but did not succeed. I
did


these steps on my fresh installation of S11E:


/etc/hosts
127.0.0.1 localhostloghost
192.168.1.3Frasse


/etc/hostname.e1000g0
Frasse  netmask  +  broadcast  +


/etc/netmasks
192.168.1.0 255.255.255.0


/etc/defaultrouter
192.168.1.1


# cp /etc/nsswitch.dns /etc/nsswitch.conf
# svcadm disable network/physical:nwam
# svcadm enable network/physical:default






Then I rebooted and I have no internet connection. Look:
# netstat -rn
Routing Table: IPv4
Destination   Gateway   Flags  Ref Use Interface
  - - -- -

Re: [SunRay-Users] Fw: Install instructions of v5.2 for S11E?

2011-05-18 Thread Bob Doolittle

Out of curiosity, how did you fix the hostname? What exactly did you have to 
correct?

We would like to know common mistakes customers are making configuring the 
system, so we can help protect against that and give proper guidance to 
customers.

Thanks,
Bob

On 05/18/11 04:18 AM, Jussi Sallinen wrote:

Does $ uname -a report Frasse?
I had errors regarding adding admin user to Sun Ray Data Store LDAP because of 
hostname being 'unknown' :-)
Fizing hostname fixed LDAP  all SRSS setup issues.

--
-Jussi Sallinen
  +358407007600
  ju...@jus.si

On 18.5.2011, at 1.29, Kalle Ankaknatte_fnatte_tja...@yahoo.com  wrote:


Ok, to install v5.2, Ive tried to first get static IP but did not succeed. I did
these steps on my fresh installation of S11E:


/etc/hosts
127.0.0.1 localhostloghost
192.168.1.3Frasse


/etc/hostname.e1000g0
Frasse  netmask  +  broadcast  +


/etc/netmasks
192.168.1.0 255.255.255.0


/etc/defaultrouter
192.168.1.1


# cp /etc/nsswitch.dns /etc/nsswitch.conf
# svcadm disable network/physical:nwam
# svcadm enable network/physical:default






Then I rebooted and I have no internet connection. Look:
# netstat -rn
Routing Table: IPv4
  Destination   Gateway   Flags  Ref Use Interface
  - - -- -
default  192.168.1.1  UG1  0
127.0.0.1127.0.0.1UH2  4 lo0
192.168.1.0  192.168.1.3  U 2  0 e1000g0

Routing Table: IPv6
  Destination/MaskGateway   Flags Ref   UseIf
--- --- - --- --- -
::1 ::1 UH  2   0 lo0

# ifconfig -a
lo0: flags=2001000849UP,LOOPBACK,RUNNING,MULTICAST,IPv4,VIRTUAL  mtu 8232 
index
1
inet 127.0.0.1 netmask ff00
e1000g0: flags=1000843UP,BROADCAST,RUNNING,MULTICAST,IPv4  mtu 1500 index 2
inet 192.168.1.3 netmask ff00 broadcast 192.168.1.255
ether 0:1b:21:1e:2e:d0
lo0: flags=2002000849UP,LOOPBACK,RUNNING,MULTICAST,IPv6,VIRTUAL  mtu 8252 
index
1
inet6 ::1/128

# ping www.google.com
ping: unknown host www.google.com

# getent hosts Frasse
192.168.1.3Frasse


What can be the problem?

___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users

___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] Fw: Install instructions of v5.2 for S11E?

2011-05-18 Thread Bob Doolittle


If you can't ping your router, the problem isn't DNS, it's your basic network 
connection.
Check the connection between your server and your router, and make sure you 
don't have a firewall or NAT configured.

The fact that you have the RUNNING flag set on your NIC is a good sign - it means you're 
plugged into something. But somehow that something isn't able to reach the 
router you want. Double-check your router's address also.

-Bob

On 05/18/11 01:05 PM, Kalle Anka wrote:

Bob, I now tried to setup /etc/resolv.conf on a fresh install of S11E, but still

it dont work to get static ip.



I added dns at the end:
nsswitch.conf
...
hosts: files dns
...


I added the last line:
resolv.conf
nameserver 192.168.1.1
domain 195.54.122.200



Upon reboot, I can not ping 192.168.1.1. But I can ping 127.0.0.1. So how do I
setup an /etc/resolv.conf file?


Too bad that the SRS install instructions on the wiki doesn't work
http://wiki.sun-rays.org/index.php/SRS_5.1_on_Solaris_11_Express
When I get this working, I will post a how to how to install SRS v5.2 on a fresh
S11E. Hopefully someone can update the install instructions.



It sounds as though you did not set up your /etc/resolv.conf DNS control file?
Can you do ping 192.168.1.1? That would verify whether your network connection
itself is working.  -Bob


- Forwarded Message 
From: Kalle Ankaknatte_fnatte_tja...@yahoo.com
To: sunray-users@filibeto.org
Sent: Wed, May 18, 2011 12:29:33 AM
Subject: Fw: Install instructions of v5.2 for S11E?

Ok, to install v5.2, Ive tried to first get static IP but did not succeed. I did

these steps on my fresh installation of S11E:


/etc/hosts
127.0.0.1 localhostloghost
192.168.1.3Frasse


/etc/hostname.e1000g0
Frasse  netmask  +  broadcast  +


/etc/netmasks
192.168.1.0 255.255.255.0


/etc/defaultrouter
192.168.1.1


# cp /etc/nsswitch.dns /etc/nsswitch.conf
# svcadm disable network/physical:nwam
# svcadm enable network/physical:default






Then I rebooted and I have no internet connection. Look:
# netstat -rn
Routing Table: IPv4
   Destination   Gateway   Flags  Ref Use Interface
  - - -- -
default  192.168.1.1  UG1  0
127.0.0.1127.0.0.1UH2  4 lo0
192.168.1.0  192.168.1.3  U 2  0 e1000g0

Routing Table: IPv6
   Destination/MaskGateway   Flags Ref   UseIf
--- --- - --- --- -
::1 ::1 UH  2   0 lo0

# ifconfig -a
lo0: flags=2001000849UP,LOOPBACK,RUNNING,MULTICAST,IPv4,VIRTUAL  mtu 8232 
index

1
 inet 127.0.0.1 netmask ff00
e1000g0: flags=1000843UP,BROADCAST,RUNNING,MULTICAST,IPv4  mtu 1500 index 2
 inet 192.168.1.3 netmask ff00 broadcast 192.168.1.255
 ether 0:1b:21:1e:2e:d0
lo0: flags=2002000849UP,LOOPBACK,RUNNING,MULTICAST,IPv6,VIRTUAL  mtu 8252 
index

1
 inet6 ::1/128

# ping www.google.com
ping: unknown host www.google.com

# getent hosts Frasse
192.168.1.3Frasse


What can be the problem?
___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] Can't start XDMCP sessions (GDM crashes) with Sun Ray modules enabled

2011-05-18 Thread Bob Doolittle

Does Linux have something equivalent to coreadm where you can configure core 
dumps to go into a particular directory? My guess is that you're looking in the 
wrong place for the core dump.

-Bob

On 05/18/11 01:37 PM, Jonathan C. Bailey wrote:

Hello,

Just wanted to follow up and see if there is any way to get the stack from the 
crashed gdm process since it's cleaned up before I can run pstack (it also 
doesn't drop any cores). Thanks!


-Jon


- Original Message -
From: Jonathan C. Baileyjbai...@co.marshall.ia.us
To: Bob Doolittlebob.doolit...@oracle.com
Cc: SunRay-Users mailing listsunray-users@filibeto.org
Sent: Monday, May 16, 2011 3:49:06 PM
Subject: Re: [SunRay-Users] Can't start XDMCP sessions (GDM crashes) with   
Sun Ray modules enabled

If I'm reading the logs right, it looks like GDM cleans up after itself which 
would leave me nothing to run pstack against. I also don't see any cores left 
behind

I'm probably missing something obvious (or my Google-fu is weak), but how do I 
collect the information you need?


-Jon

- Original Message -
From: Bob Doolittlebob.doolit...@oracle.com
To: SunRay-Users mailing listsunray-users@filibeto.org
Cc: Jonathan C. Baileyjbai...@co.marshall.ia.us
Sent: Monday, May 16, 2011 3:06:19 PM
Subject: Re: [SunRay-Users] Can't start XDMCP sessions (GDM crashes) with Sun 
Ray modules enabled

Can you send a pstack of the core dump please?

-Bob

On 05/16/11 12:23 PM, Jonathan C. Bailey wrote:

Hello,

I'm working on implementing SRS 5.2 under CentOS 5.6 to give users Linux desktops. So 
far, SRS runs without any issue. One thing I'd like to add is the ability to do xdmcp 
sessions. I've added enable=true under the xdmcp section in 
/etc/gdm/custom.conf, but it doesn't work. For some reason, when I connect via xdmcp, the 
Sun Ray PAM modules crash GDM (see the errors below). If I comment out the Sun Ray PAM 
modules, xdmcp works just fine.

Has anyone seen this before and have some insight as to what the issue could 
be? I'm thinking about opening a ticket, but I'm not sure what kind of response 
I'd get since I'm on an unsupported OS (although it is one that *should* be 
identical to RHEL5/OEL5).

May 16 14:03:56 apollo gdm[5940]: pam_sunray_hotdesk:pam_sm_auth: 
ut_getTokenByDisplay failed -6 for display 10.99.99.134:1
May 16 14:03:56 apollo gdm[5940]: sunray_get_user:pam_sm_auth: 
ut_getTokenByDisplay failed -6 for display 10.99.99.134:1
May 16 14:03:56 apollo kernel: gdm-binary[5940]: segfault at 0018 
rip 2b15bf1fcc8d rsp 7fff64f40540 error 4
May 16 14:03:56 apollo gdm[4301]: gdm_cleanup_children: child 5940 crashed of 
signal 11
May 16 14:03:56 apollo gdm[4301]: gdm_cleanup_children: Slave crashed, killing 
its children


-Jon
___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users

___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] Fw: Install instructions of v5.2 for S11E?

2011-05-17 Thread Bob Doolittle

It sounds as though you did not set up your /etc/resolv.conf DNS control file?

Can you do ping 192.168.1.1? That would verify whether your network 
connection itself is working.

-Bob

On 05/17/11 06:29 PM, Kalle Anka wrote:

Ok, to install v5.2, Ive tried to first get static IP but did not succeed. I did
these steps on my fresh installation of S11E:


/etc/hosts
127.0.0.1 localhostloghost
192.168.1.3Frasse


/etc/hostname.e1000g0
Frasse  netmask  +  broadcast  +


/etc/netmasks
192.168.1.0 255.255.255.0


/etc/defaultrouter
192.168.1.1


# cp /etc/nsswitch.dns /etc/nsswitch.conf
# svcadm disable network/physical:nwam
# svcadm enable network/physical:default






Then I rebooted and I have no internet connection. Look:
# netstat -rn
Routing Table: IPv4
   Destination   Gateway   Flags  Ref Use Interface
  - - -- -
default  192.168.1.1  UG1  0
127.0.0.1127.0.0.1UH2  4 lo0
192.168.1.0  192.168.1.3  U 2  0 e1000g0

Routing Table: IPv6
   Destination/MaskGateway   Flags Ref   UseIf
--- --- - --- --- -
::1 ::1 UH  2   0 lo0

# ifconfig -a
lo0: flags=2001000849UP,LOOPBACK,RUNNING,MULTICAST,IPv4,VIRTUAL  mtu 8232 
index
1
 inet 127.0.0.1 netmask ff00
e1000g0: flags=1000843UP,BROADCAST,RUNNING,MULTICAST,IPv4  mtu 1500 index 2
 inet 192.168.1.3 netmask ff00 broadcast 192.168.1.255
 ether 0:1b:21:1e:2e:d0
lo0: flags=2002000849UP,LOOPBACK,RUNNING,MULTICAST,IPv6,VIRTUAL  mtu 8252 
index
1
 inet6 ::1/128

# ping www.google.com
ping: unknown host www.google.com

# getent hosts Frasse
192.168.1.3Frasse


What can be the problem?

___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] Can't start XDMCP sessions (GDM crashes) with Sun Ray modules enabled

2011-05-16 Thread Bob Doolittle

Can you send a pstack of the core dump please?

-Bob

On 05/16/11 12:23 PM, Jonathan C. Bailey wrote:

Hello,

I'm working on implementing SRS 5.2 under CentOS 5.6 to give users Linux desktops. So 
far, SRS runs without any issue. One thing I'd like to add is the ability to do xdmcp 
sessions. I've added enable=true under the xdmcp section in 
/etc/gdm/custom.conf, but it doesn't work. For some reason, when I connect via xdmcp, the 
Sun Ray PAM modules crash GDM (see the errors below). If I comment out the Sun Ray PAM 
modules, xdmcp works just fine.

Has anyone seen this before and have some insight as to what the issue could 
be? I'm thinking about opening a ticket, but I'm not sure what kind of response 
I'd get since I'm on an unsupported OS (although it is one that *should* be 
identical to RHEL5/OEL5).

May 16 14:03:56 apollo gdm[5940]: pam_sunray_hotdesk:pam_sm_auth: 
ut_getTokenByDisplay failed -6 for display 10.99.99.134:1
May 16 14:03:56 apollo gdm[5940]: sunray_get_user:pam_sm_auth: 
ut_getTokenByDisplay failed -6 for display 10.99.99.134:1
May 16 14:03:56 apollo kernel: gdm-binary[5940]: segfault at 0018 
rip 2b15bf1fcc8d rsp 7fff64f40540 error 4
May 16 14:03:56 apollo gdm[4301]: gdm_cleanup_children: child 5940 crashed of 
signal 11
May 16 14:03:56 apollo gdm[4301]: gdm_cleanup_children: Slave crashed, killing 
its children


-Jon
___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] Xrandr rotation - slowness

2011-05-13 Thread Bob Doolittle

Regarding our likelihood to address this I couldn't say, sorry - out of my pay 
grade :-)

From a technical perspective it would be extremely difficult if not impossible 
to provide equivalent performance for rotated displays.

-Bob

On 05/12/11 09:06 PM, Jonathan C. Bailey wrote:

(oops - meant to go to the list - also sorry about the multiple copies, Bob)


That's too bad. Are there plans to eventually have this work the way I'm 
wanting?

Would I be correct that if I open a support case, it will just be counted as an 
RFE rather than actual bug?


-Jon

- Original Message -
From: Bob Doolittlebob.doolit...@oracle.com
To: SunRay-Users mailing listsunray-users@filibeto.org
Cc: Jonathan C. Baileyjbai...@co.marshall.ia.us
Sent: Thursday, May 12, 2011 3:18:11 PM
Subject: Re: [SunRay-Users] Xrandr rotation - slowness

Rotation was originally done to satisfy customers doing signage who didn't care 
about high performance.

Here's a response from the engineer who worked on this:


I'm not on the list, I'll let you respond. Yes, it is
expected behavior. Anything other than normal,
side by side, non-rotated Outputs will result in
a shadow framebuffer being used, and all rendering
optimizations disabled. Even on the non-rotated
Output, as dual-monitor DTU's look like a single
framebuffer to Xnewt.

-Bob


On 05/12/11 12:55 PM, Jonathan C. Bailey wrote:

Hello,

I'm currently playing with the Xrandr rotation features in SRS 5.2 and have run 
into a performance issue. Here's my configuration:

Sun Ray 2FS
DVI1 = 1680x1050 LCD
DVI2 = 1680x1050 LCD

What I'm trying to do is rotate the LCD on DVI2 to the left and keep DVI1 
normal. I issue:

/opt/SUNWut/bin/xrandr --output DVI2 --rotate left

..and the monitor rotates. Only issue is that performance on both monitors is 
SLOW (choppy, etc). Rotating DVI2 back to normal results in good performance.

Anyone have an idea what is going on? Is this something that should be working 
the way I expect?

-Jon
___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users

___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] Xrandr rotation - slowness

2011-05-12 Thread Bob Doolittle

Rotation was originally done to satisfy customers doing signage who didn't care 
about high performance.

Here's a response from the engineer who worked on this:


I'm not on the list, I'll let you respond. Yes, it is
expected behavior. Anything other than normal,
side by side, non-rotated Outputs will result in
a shadow framebuffer being used, and all rendering
optimizations disabled. Even on the non-rotated
Output, as dual-monitor DTU's look like a single
framebuffer to Xnewt.


-Bob


On 05/12/11 12:55 PM, Jonathan C. Bailey wrote:

Hello,

I'm currently playing with the Xrandr rotation features in SRS 5.2 and have run 
into a performance issue. Here's my configuration:

Sun Ray 2FS
   DVI1 = 1680x1050 LCD
   DVI2 = 1680x1050 LCD

What I'm trying to do is rotate the LCD on DVI2 to the left and keep DVI1 
normal. I issue:

/opt/SUNWut/bin/xrandr --output DVI2 --rotate left

..and the monitor rotates. Only issue is that performance on both monitors is 
SLOW (choppy, etc). Rotating DVI2 back to normal results in good performance.

Anyone have an idea what is going on? Is this something that should be working 
the way I expect?

-Jon
___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] Unwanted screen locks

2011-05-04 Thread Bob Doolittle

The easiest way to deal with setting like this for a small number of DTUs is 
through the firmware GUI (assuming you've loaded GUI firmware).
For more DTUs he easiest way is through the .parms files. Use 'utfwadm -A -a 
-V' and then edit /tftpboot/*.parms to set the value you want.
Or, if you're already using DHCP options, you can stick with that.

-Bob

On 05/ 3/11 08:22 PM, Erin Powers wrote:

I was a bit quick to respond a minute ago and I've now done a bit of
reading about MTU and sunrays.  Would you recommend setting the value
via the DHCP option 26?

Thanks again for this excellent hint!
Erin


Erin Powers wrote:

Hi OttoM,

   Thanks for the tidbit!  Sure enough, the disconnected sessions are
reconnected with a lower MTU value.  My only problem now is I'm not sure
what to do with this juicy bit of information...  Is there any way I can
force a lower value from the initial connection or set a higher
tolerance for change or is that just crazy talk?  Ultimately, my goal is
to get rid of the random disconnects.

Thanks again,
Erin


ottomeister wrote:


On Wed, Apr 27, 2011 at 2:22 PM, Erik Riedelriedel.e...@gmail.com  wrote:



Unfortunately I didn't find the source of this problem. Only thing I
recognized is that sometimes only one user gets locked and
sometimes several users get locked.



One thing you (both) might check is whether the 'MTU' attribute
in the /var/opt/SUNWut/log/messages logfile records for the
affected DTUs has different values before the unexpected
disconnect and after the subsequent reconnect.  If the DTU
experiences IP fragmentation it will lower its MTU and will
force a disconnect+reconnect cycle in order to force the new
value to be adopted by the server.

OttoM.
__
Disclaimer: I am employed by Oracle. The statements and opinions
expressed here are my own and do not necessarily represent those
of Oracle Corporation.
___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users



___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] Auto Reply: accessing sunray desktop

2011-05-03 Thread Bob Doolittle

+1

-Bob

On 05/ 3/11 11:50 AM, Alan Coopersmith wrote:

On 05/ 3/11 03:11 AM, Stoyan Angelov wrote:

On 05/03/11 09:36, daniel.cifuen...@oracle.com wrote:

I am away from the office, returning on May 04th 2011. For any urgent
requirerements, please contact damian.har...@oracle.com.


ughh here we go again :(

The Oracle vacation autoresponder doesn't do that to other mailman lists
I'm on - for instance, you never see them on opensolaris.org mailing lists
which are full of people using the Oracle e-mail system.

The difference I see in the headers there is Reply-To, which we know the
Oracle autoresponder uses since one of the internal workarounds to avoid
those messages is to set Reply-To to a address that sends them to /dev/null.
SunRay-Users sets it, but the other lists I'm on without this problem don't
set it.

Perhaps if you adjust the mailman configuration to stop setting it, it will
at least avoid them bouncing to the list for everyone.

(Fixing the autoresponder to not reply to mail with Precedence: list and
  similar headers has also been requested, but that's not something anyone
  here can fix.)



___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] login loop

2011-04-27 Thread Bob Doolittle

Were you in a Sun Ray session at the time? That's certainly not a good idea. You'll 
probably have to run utrestart -c after this also.

Otherwise, unless this is Linux, I can't explain why running 'utctl enable' 
should log you out. It is true that previous releases of SRS restarted GDM 
during activation. That's been fixed in our upcoming release. For dtlogin 
however it's always simply done a HUP of the master process to get it to 
re-read its configuration, and that should be sufficient.

As for where pam_sunray appears in the stack, I think you're mis-counting lines. You 
should be looking only at the auth stack if you're interested in 
authentication. The dtsession-SunRay stack normally looks like this:


dtsession-SunRay auth sufficient /opt/SUNWut/lib/pam_sunray.so syncondisplay
dtsession-SunRay auth requisite pam_authtok_get.so.1
dtsession-SunRay auth required pam_dhkeys.so.1
dtsession-SunRay auth required pam_unix_cred.so.1
dtsession-SunRay auth required pam_unix_auth.so.1


Note that pam_sunray is on the top, just as it is with xscreensaver. 
syncondisplay is necessary when used in the context of dtsession or 
xscreensaver, so that it will know to disconnect a session on a screen lock.

It's a little further down for dtlogin-SunRay primarily so that AMGH and Kiosk 
can do their jobs before authentication, and also for some initial RHA 
bookkeeping (pam_sunray_hotdesk).

-Bob

On 04/27/11 12:53 PM, Art Peck wrote:

pam_sunray.so with the syncondisplay argument is the first line in the
xscreensaver stanza; about halfway down the list in the dtlogin-SunRay stanza
with no arguments and first in the dtsession-SunRay stanza with no arguments.
Also, it's four lines up from the bottom of the dtsession-SunRay stanza with the
syncondisplay argument. I'm certainly a newbie with PAM, but that somehow
doesn't seem right. I tried running utctl enable but all the got me was logged
out of JDS.

Art
--


Arthur H. Peck  Associates, LLC
Cell Phone
904-614-7902
Skype
904-638-5056
Email
arthurp...@aol.com
Web
http://artpeck.net




___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] Firefox 4

2011-04-21 Thread Bob Doolittle

On 04/21/11 09:39 AM, Jacob Grundmeier wrote:

Thanks, I thought it was just me. It seems to be affecting Chrome as well. Is 
this a known issue?


Yes. It's Oracle BugDB number 12362196. I have updated it with Stuart's helpful 
information.

Thanks,
   Bob


Jake

- Original Message -
From: Stuartstu...@collectivesystems.com
To: sunray-users@filibeto.org
Sent: Wednesday, April 20, 2011 7:12:27 AM
Subject: [SunRay-Users] Firefox 4

Hi all,

In case anybody is trying to use Firefox 4 to access the Sun Ray admin gui and 
finding it not working to it's full potential, here is a script that fixes it.

#!/bin/sh
cd /tmp
unzip /opt/SUNWut/webadmin/webapps/ut/WEB-INF/lib/suntheme.jar 
com/sun/web/ui/suntheme/css/css_master.css
echo #f1\3Ap1\3At1 { display:block;}  
com/sun/web/ui/suntheme/css/css_master.css
zip -r /opt/SUNWut/webadmin/webapps/ut/WEB-INF/lib/suntheme.jar 
com/sun/web/ui/suntheme/css/css_master.css
rm -rf com
/etc/init.d/utwadmin stop; /etc/init.d/utwadmin start

It just updates a CSS file and restart the tomcat container.

BFN,

Stuart.


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] Login Loop

2011-04-21 Thread Bob Doolittle

On 04/21/11 03:19 PM, Lucas Fred R NGA-A USA CTR wrote:

Sorry if this is a duplicate as I just received my confirmation email and 
didn't know if I needed that before posting.  We have SRSS 4.1 running on 
Solaris 10.  Occasionally users come back to their DTU and try to login in via 
the screensaver window.  At this point it appears to be logging in and suddenly 
puts them right back @ the screensaver login.  I believe authentication is 
occurring because if they put in a bad password it tells them incorrect login.  
I did notice in the /var/opt/SUNWut/log/messages files notices referring to 
/var/tmp/gconfd-username/lock/ior file.  Specifically it says 'Failed to lock 
'/var/tmp/gconf-username/lock/ior'.  My utgstatus looks good I believe.  I'm 
new to the Sun Ray technology so I'd certainly appreciate a little help.  
Thanks.


That message I believe indicates multiple users trying to log in with the same 
username.

Are you using Kiosk mode? Or standard logins? If standard - is everyone using a 
unique login name?

What does /opt/SUNWut/sbin/utpolicy report?

Are you using smartcards?

Is your Solaris 10 up to date with patches?

-Bob

___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] login loop

2011-04-21 Thread Bob Doolittle

On 04/21/11 04:17 PM, Arthurpeck wrote:

This sounds like RHA, Bob. What do you think? I see the same behavior without 
cards. I have to enter my passwd twice.


Do you mean when NSCM policy is configured? Then your pam.conf is messed up 
somehow.
pam_sunray.so should be near the top of your dtlogin/gdm stack, and also your 
xscreensaver stack. It will ensure you don't have to authenticate a second time 
when logging in or unlocking your screen.

On Linux, where gnome-screensaver is now used instead of xscreensaver, a different 
technique had to be used because gnome-screensaver doesn't play by the PAM rules 
properly. For that case, a utaction should be running in the background of every 
logged-in session, which will run utxunlock upon hotdesking (which happens 
after an RHA authentication for out-of-session screen unlocks). utxunlock will use a 
gnome-screensaver-cmd remote operation to unlock the desktop.

You should never be entering passwords twice on a properly configured system.


Fred: The first login looks like a normal Solaris/JDS login screen? Then the 
user gets his/her JDS desktop? Then the smartcard is pulled and later 
reinserted, what happens then?

Unless you have direct session access enabled ( not good ) I would expect a JDS 
looking password solicitation followed by an Xscreensaver looking passwd 
solicitation. The RHA feature keeps you in jail until you enter the correct 
passwd, the you get connected to the original desktop where Xscreensaver is 
waiting. For me, when I enter my passwd the second time, I go right to my JDS 
desktop.


You should only need to do this if PAM is misconfigured.

To correct your PAM configurations, you can run '/opt/SUNWut/lib/utctl enable', 
which should rewrite your PAM stacks properly to avoid this duplicate 
authentication. Unless you manually edited your PAM stacks and somehow broke 
the configuration, the other possible root cause for duplicate authentication 
is forgetting to reboot after product installation (where utctl enable should 
be run from an RC script).

-Bob

___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] Unwanted screen locks

2011-04-13 Thread Bob Doolittle

 On 04/13/11 12:16 AM, Erik Riedel wrote:

Hi,

Currently I am running SRSS 4.2 on Solaris 11 Express. It runs pretty smooth 
most of the time. There is only one little issue. From time to time the screen 
locks itself. It happens when there is high load on the system (e.g. a lot of 
backup jobs) or almost every time when watching a youtube video in Firefox. 
After 2 to 3 minutes the screen locks itself.


When you say the screen locks itself, do you mean the in-session screen locker? Or does 
the session actually disconnect, and so you see the Motif-looking RHA screen lock type 
screen with the Sun Rays on the right?

What does utpolicy report? If you add the -D option (which disables RHA), does 
the problem go away?

-Bob

___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] VDA licenses hurting VDI

2011-04-13 Thread Bob Doolittle

 On 04/13/11 06:29 AM, Guido Schwarzer wrote:

It would be really interesting to know whether Oracle Linux 6 or Solaris 11 is 
the prefered OS for SRS in the (near) future.


I can only state the facts of our current (Beta) release.

SRS 5.2 supports neither Oracle Linux 6 nor Solaris 11.

We've always supported both Solaris and Linux desktops in the past, and we've 
not announced any plans to change this going forward.

-Bob

___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] Unwanted screen locks

2011-04-13 Thread Bob Doolittle

 Ah. If you're using NSCM (the -M policy), and not using smartcards, then the 
-D option has no effect.

You always get the Motif-looking screen both for login and upon session detach 
(e.g. screen lock) with NSCM. The -D option was to add similar security during 
screen locks for non-mobile sessions (smartcard sessions and non-smartcard 
sessions where NSCM is not configured).

So it appears that for some reason your session is detaching under load. Does 
it appear the your DTU is resetting/rebooting? What version of firmware are you 
running (try Stop-V)?

If you could record the time this happens, and look at 
/var/opt/SUNWut/log/messages for the few minutes around this time, there might 
be some clues in the logs.

-Bob

On 04/13/11 11:46 AM, Erik Riedel wrote:

Bob,

The session actually disconnect and I see the Motif-looking screen lock. My 
utpolicy looks like this:

# Current Policy:
-a -M -m -D -z both -u pseudo -g

which means -D is already added.

I use AMGH which gives me the Motig-looking screen lock. But I've got the same 
behavior when AMGH is disabled.

Thanks,
Erik

On 04/13/11 08:42 AM, Bob Doolittle wrote:

On 04/13/11 12:16 AM, Erik Riedel wrote:

Hi,

Currently I am running SRSS 4.2 on Solaris 11 Express. It runs pretty
smooth most of the time. There is only one little issue. From time to
time the screen locks itself. It happens when there is high load on
the system (e.g. a lot of backup jobs) or almost every time when
watching a youtube video in Firefox. After 2 to 3 minutes the screen
locks itself.


When you say the screen locks itself, do you mean the in-session
screen locker? Or does the session actually disconnect, and so you see
the Motif-looking RHA screen lock type screen with the Sun Rays on the
right?

What does utpolicy report? If you add the -D option (which disables
RHA), does the problem go away?

-Bob



___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] Unwanted screen locks

2011-04-13 Thread Bob Doolittle

 Erik,

I see nothing unusual in this log.

I'm sorry, but I recommend you log a service call with Oracle to further 
investigate this issue.

Also, to correct a mis-statement previously:


The -D option was to add similar


I should have said RHA adds similar ...


security during screen locks for non-mobile sessions (smartcard sessions
and non-smartcard sessions where NSCM is not configured). 


The -D option *disables* RHA (at reduced security).

-Bob

On 04/13/11 01:30 PM, Erik Riedel wrote:

The DTU does not appear to resetting/rebooting.  I can log back in immediately.

Firmware version: fw=GUI4.2_140993-06_2010.10.08.21.53

Below I attached the output of /var/opt/SUNWut/log/messages at the time it 
happens.

Thanks for having a look,

Erik



On 04/13/11 10:51 AM, Bob Doolittle wrote:

Ah. If you're using NSCM (the -M policy), and not using smartcards, then
the -D option has no effect.

You always get the Motif-looking screen both for login and upon session
detach (e.g. screen lock) with NSCM. The -D option was to add similar
security during screen locks for non-mobile sessions (smartcard sessions
and non-smartcard sessions where NSCM is not configured).

So it appears that for some reason your session is detaching under load.
Does it appear the your DTU is resetting/rebooting? What version of
firmware are you running (try Stop-V)?

If you could record the time this happens, and look at
/var/opt/SUNWut/log/messages for the few minutes around this time, there
might be some clues in the logs.

-Bob

On 04/13/11 11:46 AM, Erik Riedel wrote:

Bob,

The session actually disconnect and I see the Motif-looking screen
lock. My utpolicy looks like this:

# Current Policy:
-a -M -m -D -z both -u pseudo -g

which means -D is already added.

I use AMGH which gives me the Motig-looking screen lock. But I've got
the same behavior when AMGH is disabled.

Thanks,
Erik

On 04/13/11 08:42 AM, Bob Doolittle wrote:

On 04/13/11 12:16 AM, Erik Riedel wrote:

Hi,

Currently I am running SRSS 4.2 on Solaris 11 Express. It runs pretty
smooth most of the time. There is only one little issue. From time to
time the screen locks itself. It happens when there is high load on
the system (e.g. a lot of backup jobs) or almost every time when
watching a youtube video in Firefox. After 2 to 3 minutes the screen
locks itself.


When you say the screen locks itself, do you mean the in-session
screen locker? Or does the session actually disconnect, and so you see
the Motif-looking RHA screen lock type screen with the Sun Rays on the
right?

What does utpolicy report? If you add the -D option (which disables
RHA), does the problem go away?

-Bob



___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users





Apr 13 11:15:07 jacobi utauthd: [ID 601737 user.info] Worker3 NOTICE: 
DISCONNECT IEEE802.00212812e416, auth.eriedel discReq-or-terminated
Apr 13 11:15:07 jacobi utauthd: [ID 213800 user.info] Worker3 NOTICE: 
DISCONNECT IEEE802.00212812e416, auth.eriedel destroy
Apr 13 11:15:07 jacobi utauthd: [ID 447681 user.info] Worker3 NOTICE: DESTROY 
auth.eriedel lifetime=2392901
Apr 13 11:15:17 jacobi utauthd: [ID 410759 user.info] Worker3 NOTICE: 
DISCONNECT IEEE802.00144f574f57, pseudo.00144f574f57 discReq-or-terminated
Apr 13 11:15:17 jacobi utauthd: [ID 976555 user.info] Worker3 NOTICE: DESTROY 
pseudo.00144f574f57 lifetime=2776000
Apr 13 11:15:17 jacobi utdtsession: [ID 702911 user.info] Delete 
(12,pseudo.00144f574f57)
Apr 13 11:15:17 jacobi utauthd: [ID 927710 user.info] SessionManager0 NOTICE: 
TERMINATE: inactive session
Apr 13 11:15:21 jacobi utauthd: [ID 141402 user.info] Worker3 NOTICE: 
DISCONNECT IEEE802.00144f861b37, auth.eriedel discReq-or-terminated
Apr 13 11:15:21 jacobi utauthd: [ID 174738 user.info] Worker3 NOTICE: DESTROY 
auth.eriedel lifetime=2407850
Apr 13 11:15:22 jacobi utauthd: [ID 494140 user.info] Worker3 NOTICE: CLAIMED 
by StartxlationSession.m4 NAME: pseudo.00144f861b37 PARAMETERS: 
{terminalIPA=172.16.128.201, type=pseudo, 
fw=GUI4.2_140993-06_2010.10.08.21.53,Boot:MfgPkg_4.15_2006.07.20.16.57; 
2006.07.20-17:04:56-PDT, state=disconnected, cause=insert, doamgh=true, 
barrierLevel=422, rawId=00144f861b37, terminalCID=IEEE802.00144f861b37, 
MTU=1472, tokenSeq=1, firstServer=ac108002, namespace=IEEE802, 
keyTypes=dsa-sha1-x1,dsa-sha1, ddcconfig=1:0, 
clientRand=bzcbO8.2Q5HjpU/wvYsZUt7jPD.KcuMkKRP4KUphPSm, id=00144f861b37, 
realIP=ac1080c9, startRes=1920x1200:1920x1200, isTerminalGroupPrimary=true, 
useReal=true, event=insert, sn=00144f861b37, rawType=pseudo, 
clientKeyStatus=unconfirmed, hw=SunRayP8-FS, initState=0, _=1}
Apr 13 11:15:22 jacobi utauthd: [ID 876056 user.info] Worker3 NOTICE: CONNECT 
IEEE802.00144f861b37, pseudo.00144f861b37, all connections allowed
Apr 13 11:15:22 jacobi utdtsession: [ID 702911 user.info] Add 
(12,pseudo.00144f861b37,special)
Apr 13 11:15:22 jacobi utdtsession: [ID 702911

Re: [SunRay-Users] utrcmd: connection refused

2011-04-05 Thread Bob Doolittle

 Connection refused implies that xinetd/inetd is not configured for utrcmdd 
on blimal2006.

I could imagine this happening if you installed SRSS but forgot to reboot 
afterwards...

-Bob

On 04/ 5/11 12:54 PM, Art Peck wrote:

  The following utrcmd returns Connection refused when executed on the host 
referenced in the command:

/opt/SUNWut/lib/utrcmd blima12006-bge0 /opt/SUNWut/sbin/utsession -p

I see this from both the commandline and in the utwebadmin.log when I attempt 
to terminate a session on the localhost either from the browser or commandline.

I've checked all the sercurity criteria used by utrcmd as described in the 
manpage and everything seems to be fine.

I must have something misconfigured, any hints as to what that might be?? For 
other reasons, I have the IPV6 localhost setting disabled in /etc/hosts, could 
that be the issue??

Anyway, all hints, suggestions, RTFM's are gratefully appreciated.

Art







___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] 26D problems SRSS 5.1

2011-02-09 Thread Bob Doolittle

You should not normally install the version of gdm included with the product 
manually.

That version will be installed automatically by the installer *if appropriate*.

I believe the only appropriate situation for installing that version is on SLES 
10, which had a significantly downrev version of GDM which had bugs affecting 
Sun Ray performance.

In spite of the apparent version number differences Red Hat has (apparently) 
incorporated the necessary patches in their recent releases, and thus should be 
preferentially used. Again, utinstall should do the right thing here.

What version of Red Hat are you running?

If you're experiencing problems this might be worth a try, but my expectation 
is that it will not help.

Thanks,
Bob

On 02/09/11 06:01, Detlev Habicht wrote:

Hello again,

i am a little bit confused. Maybe i have made a mistake.
And maybe a second time :-}

Normally i install the gdm from Sun.
Maybe i have forgotten this the last time.

So i find now from Red Hat this: gdm-2.16.0-56.el5

Sun has this: gdm-2.16.7-2.1_01.sunray.x86_64.rpm

Maybe some of the people here with 26D problems have also forgotten to install
the Sun version of gdm???

I can't test gdm in the moment. So i don't know if this helps.

But one questions: I don't find the source for the Sun version.
Is here someone who knows a URL to it?

Thanx.

Detlev






Am 08.02.2011 um 16:24 schrieb Meik Hellmund:


On Tue, 8 Feb 2011 15:58:43 +0100
Detlev Habichthabi...@ims.uni-hannover.de  wrote:


We have to recompile gdmdynamic?

Yes, in fact all of gdm


Or is there a config file somewhere in the system?

there is a comment in daemon/gdm-net.c:
  this should be configurable ..but it seems nobody did it


Detlev

P.S.: I am using Red Hat.

in Debian you just do:
  apt-get build-dep gdm(install all libraries etc neccessary for building 
gdm)
  apt-get source gdm   (get the source)
  cd gdm-2.20.11
  vi daemon/gdm-net.c  (change the parameter)
  dpkg-buildpackage -b -uc  (build the package)
  dpkg -i ../gdm_2.20.11-4_amd64.deb (install)


No idea what the equivalent yum/rpm commands are.

- Meik

--
Meik Hellmund
Mathematisches Institut, Uni Leipzig
e-mail: meik.hellm...@math.uni-leipzig.de
http://www.math.uni-leipzig.de/~hellmund

___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users

___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] Redhat 5.6 + firefox 3.6.13 + SRSS 5.1

2011-02-07 Thread Bob Doolittle

On 02/04/11 14:29, . wrote:


This is because firefox actually listens to what the LD_PRELOAD is set to. Your 
LD_PRELOAD for srss is setup via /etc/opt/SUNWut/xinitrc.d/0100.SUNWut

I had problems with other apps and LD_PRELOAD so I ended up commenting out the 
'export LD_PRELOAD' in the aforementioned script with no problems.


Does audio work?

-Bob



The problem I still have is with browser radio buttons not showing up. What's 
peculiar is that if I use console or VNC on the server running srss the radio 
buttons show up fine, but via dtu's the radio buttons do not display properly 
or are totally gone. It is however fixed if I downgrade to firefox 3.0, or use 
chrome.


On 2/2/2011 7:22 AM, Patrick wrote:


yeah or
unset LD_PRELOAD; firefox
also seems to work.

thanks for commenting.

On Wed, Feb 2, 2011 at 4:16 PM, Detlev Habicht habi...@ims.uni-hannover.de 
mailto:habi...@ims.uni-hannover.de wrote:

unsetenv LD_PRELOAD 

Detlev


Am 02.02.2011 um 15:54 schrieb Patrick:

 Hi all,

 Today I've updated one of our redhat servers to Redhat 5.6 and
which is running SRSS 5.1.
 Users all logon to the redhat desktop.

 Now i've noticed some ackward behavior in running firefox
3.6.13; it doesn't start at all and it doesn't show any errors
what so ever.
 When logged onto the console of the server through DRAC
interface or by creating a ssh X11 tunnel to the server firefox
starts just fine for that user.

 I've removed and installed firefox a couple of time's but i'm
unable to get it working again.
 Anyone running same setup noticed like behaviour and maybe some
pointers to solve this or a fix ?

 thanks,

 Patrick

 ___
 SunRay-Users mailing list
 SunRay-Users@filibeto.org mailto:SunRay-Users@filibeto.org
 http://www.filibeto.org/mailman/listinfo/sunray-users

___
SunRay-Users mailing list
SunRay-Users@filibeto.org mailto:SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users



___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users




___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] 26D problems SRSS 5.1

2011-02-04 Thread Bob Doolittle

Can you please share the output of gdmflexiserver --command VERSION?

-Bob

On 02/04/11 11:44, Carsten John wrote:

Hi folks,

we are still having problems.

What I found out in the meantime is that definitely gdm is the problem.

It works for about a day (or a few days?). Then suddenly gdm does not
provide login service any more, resulting the DTUs to hang in 26D.

Obviously gdmdynamic stops communication with gdm. A gdmdynamic -l -v
at the command line does not give any results and needs to be
interrupted via CTRL+c.

gdm also does not produce any further messages in syslog after the crash
(debug mode is enabled).

An ps -fax | grep gdm shows various alredy connected Xnewt sessions
and some :


  \_ [gdm]defunct

as well as

  gdmdynamic -b -d $SOME-NUMBER

processes.


The strange thing is that utsession -p shows sessions belonging to the
user gdm after the crash. That never showed up before:

utsession -p

Token ID   Registered Name  Unix IDDisp State
--  --  -
Payflex.5011eb6900130100   ???     13   D
Payflex.5011eb6b00130100   ???  gdm19   D
Payflex.5011eb7300130100   ???     11   U
Payflex.5011eb7600130100   ???  gdm31   D
Payflex.5011eb7d00130100   ???  gdm23   D
pseudo.00144f96d6c4???  gdm14   U
pseudo.00144f9826a0???  X  34   U
pseudo.00144f98290c???  gdm25   D
pseudo.00144fa17e25???  X  41   U
pseudo.00144fa65a8a???  gdm22   U
pseudo.00144fa65b1e???  gdm45   D
pseudo.00144fa7f723???  X  16   U
pseudo.00144fa7f75b???  X  30   U
pseudo.00144fa7f765???  XX 40   U
pseudo.00144fa807a3???  gdm28   D
pseudo.00144fa807b1???  gdm18   U
pseudo.00144fa807be???  X  42   U
pseudo.00144fa80858???  gdm37   U
pseudo.00144fd18b3a???     33   U
pseudo.00144fd37c84???     43   U
pseudo.00144fd37c8e???  gdm24   D
pseudo.0021283a2717???  gdm27   D
pseudo.002128763446???  gdm20   D
pseudo.002128763447???  gdm17   U
pseudo.00212876348f???  XXX12   U



Our gdm.conf (gdm 2.20) as follows:


grep -v -e ^# /etc/gdm/gdm.conf | sed -e '/^$/d'
[daemon]
AutomaticLoginEnable=false
AutomaticLogin=
TimedLoginEnable=false
TimedLogin=
TimedLoginDelay=30
Greeter=/usr/lib/gdm/gdmlogin
DefaultPath=/usr/local/bin:/usr/bin:/bin:/usr/bin/X11:/usr/games
RootPath=/usr/local/bin:/usr/local/sbin:/sbin:/usr/sbin:/bin:/usr/bin:/usr/bin/X11:/usr/games
User=gdm
Group=gdm
LogDir=/var/log/gdm
PostLoginScriptDir=/etc/gdm/PostLogin/
PreSessionScriptDir=/etc/gdm/PreSession/
PostSessionScriptDir=/etc/gdm/PostSession/
DisplayInitDir=/etc/gdm/Init
FailsafeXserver=
XKeepsCrashing=/etc/opt/SUNWut/gdm/XKeepsCrashing.sunray
RebootCommand=
HaltCommand=
SuspendCommand=
HibernateCommand=
SystemCommandsInMenu=HALT;REBOOT;HIBERNATE;SUSPEND;CUSTOM_CMD
AllowLogoutActions=HALT;REBOOT;HIBERNATE;SUSPEND;CUSTOM_CMD
RBACSystemCommandKeys=
ServAuthDir=/var/lib/gdm
BaseXsession=/etc/gdm/Xsession
SessionDesktopDir=/usr/share/gdm/BuiltInSessions/:/usr/share/xsessions/:/var/lib/menu-xdg/xsessions/:/etc/dm/Sessions/
DefaultSession=default.desktop
UserAuthDir=
UserAuthFBDir=/tmp
UserAuthFile=.Xauthority
StandardXServer=/usr/X11R6/bin/X
Xnest=/usr/share/gdm/gdmXnestWrapper -br -audit 0
XnestUnscaledFontPath=true
FirstVT=7
VTAllocation=false
SoundProgram=/usr/lib/gdmplay
DynamicXServers=true
GdmXserverTimeout=30
[security]
AllowRoot=true
AllowRemoteRoot=true
AllowRemoteAutoLogin=false
RelaxPermissions=1
CheckDirOwner=true
SupportAutomount=false
DisallowTCP=true
PamStack=gdm
UtmpLineAttached=/dev/console
UtmpLineRemote=
UtmpPseudoDevice=false
[xdmcp]
Enable=false
[gui]
GtkTheme=Human
[greeter]
Browser=true
MinimalUID=1000
Exclude=nobody
IncludeAll=true
LocaleFile=/etc/gdm/locale.conf
Logo=/usr/share/pixmaps/gdmDebianLogo.xpm
ConfigAvailable=false
DefaultWelcome=true
DefaultRemoteWelcome=true
BackgroundColor=#00
GraphicalThemedColor=#00
GraphicalTheme=Human
GraphicalThemeDir=/usr/share/gdm/themes/
GraphicalThemeRand=false
SoundOnLoginFile=/usr/share/sounds/question.wav
PreFetchProgram=/usr/lib/gdm/gdmprefetch @/etc/gdm/gdmprefetchlist
[chooser]
HostImageDir=/usr/share/hosts/
Hosts=
Broadcast=true
Multicast=false
[debug]
Enable=true

Re: [SunRay-Users] Is there a Batch method of entering 500 smartcards into the SRS datastore ?

2011-01-27 Thread Bob Doolittle

I presume you are familiar with utuser -a -f filename to register entries in 
a file.
So it's just a matter of generating that file somehow. There must be a million 
ways of doing so. There's probably an emacs macro for it :-)

But I don't have a prepared script, sorry.

-Bob

On 01/27/11 04:26, lars.tunkr...@bredband.net wrote:


  HI

  The process of interactively enterering 500 smartcards into
the SRS Datastore with the use of a token reader sunray,

  is a process
that could at best regarded as labour intensive. One alternative is
ofcourse to let the

  users do Self-registration. but self-registration
would lead to large inconsitensies in the data as people will fill

  in
different stuff in the Location and comment fields

  So we are
looking for a method where we can enter smartcards into the SRS
datastore in lots.

  Is there any scripts around that can enter
smartcards with a known sequence of card ID's

  with the sequence
generated by a counter ( N=N+1 ) style constucts

  Regards

  //Lars





___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] utaction -x?

2011-01-27 Thread Bob Doolittle

It's in the utaction Usage message but I see it's not in the man page. That's a 
man page bug, it should be documented.

It's a command to run upon session termination (note that logout does not imply 
session termination from the Sun Ray perspective, although a logged-out session 
will eventually time out and be terminated).

-Bob

On 01/27/11 16:10, Art Peck wrote:

Anyone aware of utaction having a -x option? It's not in the manpage and I 
don't recall ever seeing it. However, I have loads of :

/opt/SUNWut/bin/utaction -x /usr/lib/smartcard/pcscd -k -x :51 -P 17936

for example.

What does utaction -x do?

Art






___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] SRS 5.1.2 and VDI 3.2.2 available

2011-01-26 Thread Bob Doolittle

On 01/26/11 07:08, Kim Mount wrote:

Hi Matthias,

I went through this with a customer last night.

Unpack the new release and upon ./utinstall it will see your install  stop the Sun 
Ray services and apply the patches  ask for a reboot.

For the new windows connector 2.3.1 again ./installer and it will uninstall the 
old version + install the new.


This is incorrect. The Windows Connector is now an integrated part of SRS, and 
utinstall will install it. Here are the details of how the new utinstall now 
works, in case this helps:
- If the installed base release is older than the delivered base release (or 
non-existent), apply the base release installer for SRSS (currently 4.2)
- If any of the applied SRSS patches are older than the delivered patches, 
apply the delivered patch
- If the installed Windows Connector release is older than the delivered 
release, apply the installer for the delivered release
- If any of the applied Windows Connector patches are older than the delivered 
patches, apply the delivered patch

So, you don't need to and should not run the Windows Connector installer 
separately any more (if you can even manage to find it :-).

Nor should you need to run uttscadm any more. That utility is now deprecated 
and the functionality has been integrated into utconfig (which gets silently 
run during upgrades). You may have had to perform that step if you somehow 
managed to find and run the separate Windows Connector installer component, 
because that's unexpected and will result in an unknown state of the system.

We don't support S11 at this time, so as noted because Solaris patches contain 
partial packages which only include the updated objects, and because patchadd 
doesn't work on S11, the patch application phases will unfortunately fail, but 
the installation phases should work.

-Bob


I noted I had to run uttscadm -c -g group afterwards to fire it back up.

The new release looks to have fixed a crash we had with this customer so that's 
good too.

Regards,

Kim



- Original Message -
From: Matthias Ernstmatthias.er...@nmr.phys.chem.ethz.ch
To: SunRay-Users mailing listsunray-users@filibeto.org
Cc: m...@nmr.phys.chem.ethz.ch
Sent: Wednesday, 26 January, 2011 12:01:51 PM
Subject: Re: [SunRay-Users] SRS 5.1.2 and VDI 3.2.2 available

I am a bit confused now about what to install in order to upgrade from SRSS
5.1.1 to SRSS 5.1.2 on Solaris 10/Sparc. Is it just sufficient to install the
patches 140993-07 and 145212-02 that are included in the patch bundle in
order to have the same state as a fresh install of 5.1.2? Plus installation
of the Windows connector that has a new version number. Is this what the
installer will do and will it leave the base installation unchanged?

Regards,

Matthias




___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] SRS 5.1.2 and VDI 3.2.2 available

2011-01-26 Thread Bob Doolittle

I apologize. Please disregard, this is incorrect for SRS 5.1.

Kim was correct.

-Bob

On 01/26/11 11:32, Bob Doolittle wrote:

On 01/26/11 07:08, Kim Mount wrote:

Hi Matthias,

I went through this with a customer last night.

Unpack the new release and upon ./utinstall it will see your install  stop the Sun 
Ray services and apply the patches  ask for a reboot.

For the new windows connector 2.3.1 again ./installer and it will uninstall the 
old version + install the new.


This is incorrect. The Windows Connector is now an integrated part of SRS, and 
utinstall will install it. Here are the details of how the new utinstall now 
works, in case this helps:
- If the installed base release is older than the delivered base release (or 
non-existent), apply the base release installer for SRSS (currently 4.2)
- If any of the applied SRSS patches are older than the delivered patches, 
apply the delivered patch
- If the installed Windows Connector release is older than the delivered 
release, apply the installer for the delivered release
- If any of the applied Windows Connector patches are older than the delivered 
patches, apply the delivered patch

So, you don't need to and should not run the Windows Connector installer 
separately any more (if you can even manage to find it :-).

Nor should you need to run uttscadm any more. That utility is now deprecated 
and the functionality has been integrated into utconfig (which gets silently 
run during upgrades). You may have had to perform that step if you somehow 
managed to find and run the separate Windows Connector installer component, 
because that's unexpected and will result in an unknown state of the system.

We don't support S11 at this time, so as noted because Solaris patches contain 
partial packages which only include the updated objects, and because patchadd 
doesn't work on S11, the patch application phases will unfortunately fail, but 
the installation phases should work.

-Bob


I noted I had to run uttscadm -c -g group afterwards to fire it back up.

The new release looks to have fixed a crash we had with this customer so that's 
good too.

Regards,

Kim



- Original Message -
From: Matthias Ernstmatthias.er...@nmr.phys.chem.ethz.ch
To: SunRay-Users mailing listsunray-users@filibeto.org
Cc: m...@nmr.phys.chem.ethz.ch
Sent: Wednesday, 26 January, 2011 12:01:51 PM
Subject: Re: [SunRay-Users] SRS 5.1.2 and VDI 3.2.2 available

I am a bit confused now about what to install in order to upgrade from SRSS
5.1.1 to SRSS 5.1.2 on Solaris 10/Sparc. Is it just sufficient to install the
patches 140993-07 and 145212-02 that are included in the patch bundle in
order to have the same state as a fresh install of 5.1.2? Plus installation
of the Windows connector that has a new version number. Is this what the
installer will do and will it leave the base installation unchanged?

Regards,

Matthias






___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] 26D problems SRSS 5.1

2011-01-19 Thread Bob Doolittle

A few things to check:
- Does gdmdynamic -l list the same set of displays as utsession -p?
- Do you see an Xnewt process for every display in gdmdynamic -l?

-Bob

On 01/19/11 10:34, Carsten John wrote:

Hi everybody,

in the meantime I found out, that no new logins are possible even with a
newly connected DTU (so there are no hanging sessions involved).

The DTU that was never connected after the last reboot also remains in
26D when connected.


thx



Carsten


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] 26D problems SRSS 5.1

2011-01-19 Thread Bob Doolittle

On 01/19/11 16:19, Elmar Prüße wrote:

On 01/19/2011 05:38 PM, Bob Doolittle wrote:

A few things to check:
- Does gdmdynamic -l list the same set of displays as utsession -p?


Not really...

Server 1: 23 displays occur in both outputs, 4 are unique to gdmdynamic and 17 
to utsession.
Server 2: 18 displays occur in both outputs, 5 are unique to gdmdynamic and 1 
to utsession.


- Do you see an Xnewt process for every display in gdmdynamic -l?

Also a no...

Server 1: 13 displays listed in gdmdynamic have a xnewt process, 10 don't
Server 2: 20 displays have a process, 7 don't

Interestingly, if you substract display :0 which is happily running Xorg on the local 
display, there is a matching number (9 and 6) of gdm processes with exactly one child: [kill] 
defunct.


There are some session types that won't utilize an Xnewt process (mostly things displaying icons 
like insert smartcard or a multihead secondary waiting for primary to connect to 
FOG), so it's possible that the utsession -p count would be higher. Except for display 0, 
however all of the gdmdynamic sessions should be running an Xnewt.

The X server appears to be dying and GDM is not restarting it. Can you locate a core 
dump? Are your users in the habit of using the Control-Alt-Bksp-Bksp key 
sequence to abort the X server? GDM has had a history of bugs related to handling that.

-Bob
___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] utdesktop question

2011-01-14 Thread Bob Doolittle

On 01/13/11 19:57, Karl Rossing wrote:

Would the issue i'm seeing be CR# 6623505?


We can't know the answer to this without some of the information I requested.

-Bob


If so, I'll have to figure out how to place an IDR.

On 01/04/11, *Bob Doolittle *bob.doolit...@oracle.com  wrote:
  Well then there you go. The associated session is on Server 2, display 5. If
  you just want to clean the situation up, you can try a couple of things:

  1 Is there an Xnewt running for display :5 (the display number is visible on
  the command line via ps)?
I'll have to try that.
  2 If you reset the DTU, does the problem go away or persist?
On kiosks sessions, it's hit or miss. On card sessions it usually persists.
  3 If the problem goes away when the DTU is reset, the DTU is in a bad state.
  You can use /opt/SUNWut/lib/utload -r -t TOKEN (where TOKEN is reported by
  utwho -ac) to reset the DTU remotely when the problem occurs
Usually terminating the session using the gui doesn't fix the problem.
  4 If the problem persists when the DTU is reset, the session is somehow hung.
  You can use utsession -k -d 5 if you want to simply clear the session and
  processes.
I'll have to try that.
  It would be good to track down that's causing this situation. Is Server 2
  starved for resources (e.g. VM or /tmp space), or has it been starved in the
  recent past? Clues might be found in the logs (both /var/log/messages and
  /var/opt/SUNWut/log/messages) around the time in question (when the current
  time minus No-Session time occurred).
I'll have to investigate this more. Sometimes /tmp can be a bit low and the
server can be bogged down. I can try assigning more memory to the vm.


  -Bob

  On 01/04/11 11:59, Karl Rossing wrote:
  Server 1
  -bash-4.0$ /opt/SUNWut/sbin/utdesktop -lw
  
  Desktop ID   Location No-Session (H:M:S)
    --
  00144f7f456e  1:35:21
  
  1 desktop currently in error state without a session.
  -bash-4.0$ /opt/SUNWut/bin/utwho -ac|grep 00144f7f456e
  -bash-4.0$
  
  Server 2
  -bash-4.0$ /opt/SUNWut/sbin/utdesktop -lw
  
  Desktop ID   Location No-Session (H:M:S)
    --
  00144f7f456e  1:33:21
  
  1 desktop currently in error state without a session.
  -bash-4.0$ /opt/SUNWut/bin/utwho -ac|grep 00144f7f456e
 5.0 pseudo.00144f7f456e  utku310.1.9.236  
P8.00144f7f456e
  
  Server 3
  -bash-4.0$ /opt/SUNWut/sbin/utdesktop -lw
  
  Desktop ID   Location No-Session (H:M:S)
    --
  00144f7f456e  1:37:1
  
  1 desktop currently in error state without a session.
  -bash-4.0$ /opt/SUNWut/bin/utwho -ac|grep 00144f7f456e
  -bash-4.0$
  
  Karl
  
  On 11-01-04 10:42 AM, Bob Doolittle wrote:
  Perhaps we can help. Can you answer my question please? Does utwho -ac on
  any of the servers show the DTUs which are reported by utdesktop -lw?
  
  -Bob
  
  On 01/04/11 11:27, Karl Rossing wrote:
  What I'm trying to do is to proactively find dtu's that are showing 26d.
  
  I have 110 DTU's on 3 servers in a fog. 26d errors get worse over time.
  
  Karl
  
  On 11-01-04 10:04 AM, Bob Doolittle wrote:
  On 01/04/11 10:43, Karl Rossing wrote:
  
  utdesktop -lw will show me desktops that are in an errored state.
  
  How can I find out a process id for the errored session?
  
  When you see DTUs in this state, do they show up anywhere with utwho 
-c?
  If so, that should indicate the display number. You should be able to find 
the
  associated processes from that. I imagine you'd only care about the Xnewt
  server. This state can occur in some circumstances if the X server is hung or
  has crashed.
  
  Your problem is going to be that if there is a large number of servers at
  your site you will have to track down which server is hosting the session for
  the DTU.
  
  -Bob
  
  
  
  
  CONFIDENTIALITY NOTICE:  This communication (including all attachments) is
  confidential and is intended for the use of the named addressee(s) only 
and
  may contain information that is private, confidential, privileged, and
  exempt from disclosure under law.  All rights to privilege are expressly
  claimed and reserved and are not waived.  Any use, dissemination,
  distribution, copying or disclosure of this message and any attachments, 
in
  whole or in part, by anyone other than the intended recipient(s) is 
strictly
  prohibited.  If you have received this communication in error, please 
notify
  the sender immediately, delete this communication from all data storage
  devices and destroy all hard copies.
  
  
  
  
  CONFIDENTIALITY NOTICE:  This communication (including all attachments) is
  confidential and is intended for the use of the named addressee(s) only and
  may contain information that is private, confidential, privileged, and
  exempt from disclosure

Re: [SunRay-Users] Bob, Craig - Sun Ray 26B - several models - SRS 5.1.1

2011-01-11 Thread Bob Doolittle

26B means that communications between the client and the X server (or YUV 
client) has been interrupted.

Typical causes are:
- network failure
- X server crashed, and wasn't properly restarted
- X server hung
- it's a YUV session (used to display error or state-indicating icons without 
an X server) and the YUV client (yuvfile) isn't rendering to the screen 
properly or has died undetected

So the first step is to test whether you can ping the DTU from the server. If 
you can, you need to investigate the X server.
I wouldn't suspect that PAM could cause the X server to become horribly hung, 
although theoretically anything could tickle a bug resulting in an X server 
crash. Seems unlikely to me.

It appears you're on Solaris. Is it Solaris 10 or OpenSolaris?
What version and patch rev of SRSS?

I'd first of all try to identify the session that the client is supposedly 
servicing. utwho -ca should help there.

What type of session is it? Is it a greeter, RHA (session locked), YUV (error icon of 
some sort), or logged-in session? You can look in /var/opt/SUNWut/displays/DISPLAYNUM at 
the SESSION_TYPE. If it's default then the Display Manager (dtlogin for S10, 
GDM for OpenSolaris/S11/Linux) is responsible to restart the server if it dies. Otherwise 
it's SRSS's responsibility.

Then I'd look for the Xnewt process servicing that display. Is there one? If 
so, I'd try a pstack and also look in the Xserver error log for clues:
S10: /var/dt/Xerrors
S11 (or Linux): /var/log/gdm/:DISPLAYNUM

Sometimes we've observed that 26 can occur when /tmp gets clobbered and the 
/tmp/SUNWut directory structure has been disturbed, or the host has run out of 
VM/swap space at some point and couldn't write to /tmp/SUNWut when it needed 
to. We do a lot of book-keeping in that area and if it's corrupted the software 
can misbehave. Check /var/adm/messages for signs of VM starvation.

-Bob

On 01/11/11 13:30, Devin Nate wrote:

Dear SunRay users (hopefully Bob, Craig also?);

We're continuing to have problems with random 26B's, and don't even know where 
to begin to help debug.

We don't see any particular errors in log files, besides several pam messages. 
The 26B's are happening on new sun ray 3's and older sun ray 2's.

So far, our only theory is a PAM problem ... we appear to have many of the 
following style messages.

dtlogin[990]: [ID 691260 user.notice] pam_sunray_hotdesk:pam_sm_auth: 
ut_getTokenByDisplay failed -1 for display :51

We run fully stock PAM, no customizations.

In any event, does anyone have any theories as to how to debug 26B's? In the 
most recent case, card removal corrected (went back to solaris login screen), 
and card insert worked exactly as expected and 26B was gone.

Please, any ideas on trouble shooting? We don't even really know what likely 
candidates for a 26B are to start a process.

Thanks,
Devin





From: sunray-users-boun...@filibeto.org 
[mailto:sunray-users-boun...@filibeto.org] On Behalf Of Devin Nate
Sent: Tuesday, January 04, 2011 6:00 PM
To: 'sunray-users@filibeto.org'
Subject: [SunRay-Users] Sun Ray 26B - several models - SRS 5.1.1

Hi Folks;

We recently applied some sun ray patches, and are now experiencing some new 
problems. In particular, the following updates:

1. Applied all patches from smpatch for Solaris 10, x86-64. Approx 300 patches 
were applied.
a. Performed prescribed reboots, single user patching, and configuration 
reboots.

2. Applied Java SDK 1.6.0_23, and activated as default java instance. 
Previously, we were at 1.5 (for some unknown reason).

3. Applied SRS 5.1.1. We were previously at patch level -03 (now -06 it seems), 
as well as SRWC 2.3 (previously 2.2).



The new undesirable behavior we are seeing:

1. Our users all use a Kiosk app to access windows terminal servers using 
uttsc. Intermittently, with card inserted and the kiosk app running (i.e. 
uttsc), the sun ray will display a 26B dialog box floating around for no 
apparent reason. The user is still able to fully use the system, just the 
annoyance of the 26B window floating around.
a. Our policy requires full encryption + client authentication. These dtu's are 
all authenticated and have worked continuously for a long time without this 
symptom.
b. A stop-A tends to be able to make it go away. It ?sometimes? comes back 
after ?some? unknown period of time, and doesn't impact all users.
c. Removal of the card properly takes the user back to the standard login 
solaris login screen. Re-insertion of the card back to the terminal server 
session.
d. Seen on SunRay 2 DTU and new SunRay 3.

2. Possibly related: When in the srs management website, after first patching 
(and still viewable), sessions show as disconnected that are clearly  
connected. In the most extreme case, I was in a OVDC session logged into a 
kiosk session (into a terminal server). I was on that terminal server looking 
at the srs website, at my session, which was identified as 'disconnected'. 
Further investigation showed that on 

Re: [SunRay-Users] options to disable power-off function for sunray3

2011-01-11 Thread Bob Doolittle

On 01/11/11 17:30, Karl Rossing wrote:

On 10-08-13 9:18 AM, Jörg Barfurth wrote:

Jörg Barfurth schrieb:

keith.i...@gdc4s.com schrieb:

I want to disable power off on sunray3.


[...]
The following should work for you:

  # cat  /tftpboot/SunRayP9.parms  EOF
  version=_NONE_
  poweroff=0
  EOF
  # chmod +r /tftpboot/SunRayP9.parms


Just to be clear: the poweroff parms key controls the automatic poweroff of 
the Sun Ray unit after a certain time of non-use.


My parms file looks like
more SunRayP9.parms
version=4.2_140993-06_2010.10.08.21.53
revision=0
poweroff=0
barrier=422

But for some reason, the DTU's still power off.

Do i need to rerun utfwsync after I change the parms file?


You shouldn't have to, if they're powering down. When they come up they should 
pick up the proper firmware version and parms.
What does utfwload -a report? Are the DTUs running the version of firmware you 
expect?

-Bob

___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] PAM configuration on Solaris

2011-01-05 Thread Bob Doolittle

Yes, dtlogin is just for CDE.

However, it's incorrect to say that only the auth stack is used (thanks IBM).

The other stacks are all important:

account is for accounting, if you want to user logins/logouts to be logged 
(which is sort of the main point IMO).
password is to implement password aging, so that people are forced to specify a 
new password after some period of time.
session is to manage the user session context. Sun Ray uses this stack for 
example to implement parts of RHA, because it's the earliest hook available 
after the user has successfully authenticated within the session.

Any Display Manager (e.g. dtlogin and gdm) will need all these stacks.

utnsclogin doesn't need these, because it's not actually a Display Manager - it doesn't manage 
displays/sessions. It only does authentication and potentially redirection to the server hosting 
the token's session (if a session already exists). If a session doesn't yet exist, it uses the 
underlying Display Manager to create the actual session, so the stacks for the underlying DM will 
get utilized. The underlying DM's auth stack is effectively bypassed after NSCM 
authentication (to avoid duplicate authentication) via the pam_sunray sufficient module 
near the top of the DM's auth stack so the DM doesn't expose its greeter and is therefore 
relatively transparent to users, but it's being used.

-Bob

On 01/05/11 16:57, William Yang wrote:

I was working on overhauling our PAM configuration today and wondered, as
before, what the dtsession-SunRay entries are for.  As far as I can tell,
dtsession is only for unlocking a locked CDE session, and this IBM link
(http://publib.boulder.ibm.com/infocenter/aix/v6r1/index.jsp?topic=/com.ibm.
aix.cmds/doc/aixcmds2/dtsession.htm) implies that only the auth stack is
used.  If that's the case, why are account, session, and password all
duplicated as well?  I don't see any modifications to those parts of the
stack; perhaps that's an oversight?  Similarly, I was wondering if the
account, session, and password stacks are called by utnsclogin.



Thanks,

William Yang




___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] PAM configuration on Solaris

2011-01-05 Thread Bob Doolittle

Slight mis-statement:

On 01/05/11 17:16, Bob Doolittle wrote:

utnsclogin doesn't need these, because it's not actually a Display Manager - it 
doesn't manage displays/sessions. It only does authentication and potentially 
redirection to the server hosting the token's session (if a session already 
exists).


In fact, NSCM utilizes two PAM services - utgulogin and utnsclogin. It's 
utgulogin that does potential redirection, after acquiring the user's name. 
Then utnsclogin is invoked, and it just does authentication. Together, 
utgulogin and utnsclogin perform the function that a DM's greeter would 
normally perform in part of its auth stack.

-Bob

___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] utdesktop question

2011-01-04 Thread Bob Doolittle

On 01/04/11 10:43, Karl Rossing wrote:


utdesktop -lw will show me desktops that are in an errored state.

How can I find out a process id for the errored session?


When you see DTUs in this state, do they show up anywhere with utwho -c? If 
so, that should indicate the display number. You should be able to find the associated 
processes from that. I imagine you'd only care about the Xnewt server. This state can 
occur in some circumstances if the X server is hung or has crashed.

Your problem is going to be that if there is a large number of servers at your 
site you will have to track down which server is hosting the session for the 
DTU.

-Bob

___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] utdesktop question

2011-01-04 Thread Bob Doolittle

Perhaps we can help. Can you answer my question please? Does utwho -ac on any of the 
servers show the DTUs which are reported by utdesktop -lw?

-Bob

On 01/04/11 11:27, Karl Rossing wrote:

What I'm trying to do is to proactively find dtu's that are showing 26d.

I have 110 DTU's on 3 servers in a fog. 26d errors get worse over time.

Karl

On 11-01-04 10:04 AM, Bob Doolittle wrote:

On 01/04/11 10:43, Karl Rossing wrote:


utdesktop -lw will show me desktops that are in an errored state.

How can I find out a process id for the errored session?


When you see DTUs in this state, do they show up anywhere with utwho -c? If 
so, that should indicate the display number. You should be able to find the associated 
processes from that. I imagine you'd only care about the Xnewt server. This state can 
occur in some circumstances if the X server is hung or has crashed.

Your problem is going to be that if there is a large number of servers at your 
site you will have to track down which server is hosting the session for the 
DTU.

-Bob





CONFIDENTIALITY NOTICE:  This communication (including all attachments) is
confidential and is intended for the use of the named addressee(s) only and
may contain information that is private, confidential, privileged, and
exempt from disclosure under law.  All rights to privilege are expressly
claimed and reserved and are not waived.  Any use, dissemination,
distribution, copying or disclosure of this message and any attachments, in
whole or in part, by anyone other than the intended recipient(s) is strictly
prohibited.  If you have received this communication in error, please notify
the sender immediately, delete this communication from all data storage
devices and destroy all hard copies.


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] utdesktop question

2011-01-04 Thread Bob Doolittle

Well then there you go. The associated session is on Server 2, display 5. If 
you just want to clean the situation up, you can try a couple of things:

1 Is there an Xnewt running for display :5 (the display number is visible on 
the command line via ps)?

2 If you reset the DTU, does the problem go away or persist?

3 If the problem goes away when the DTU is reset, the DTU is in a bad state. You can use 
/opt/SUNWut/lib/utload -r -t TOKEN (where TOKEN is reported by utwho -ac) to 
reset the DTU remotely when the problem occurs

4 If the problem persists when the DTU is reset, the session is somehow hung. You can use 
utsession -k -d 5 if you want to simply clear the session and processes.

It would be good to track down that's causing this situation. Is Server 2 starved for 
resources (e.g. VM or /tmp space), or has it been starved in the recent past? Clues might 
be found in the logs (both /var/log/messages and /var/opt/SUNWut/log/messages) around the 
time in question (when the current time minus No-Session time occurred).

-Bob

On 01/04/11 11:59, Karl Rossing wrote:

Server 1
-bash-4.0$ /opt/SUNWut/sbin/utdesktop -lw

Desktop ID   Location No-Session (H:M:S)
  --
00144f7f456e  1:35:21

1 desktop currently in error state without a session.
-bash-4.0$ /opt/SUNWut/bin/utwho -ac|grep 00144f7f456e
-bash-4.0$

Server 2
-bash-4.0$ /opt/SUNWut/sbin/utdesktop -lw

Desktop ID   Location No-Session (H:M:S)
  --
00144f7f456e  1:33:21

1 desktop currently in error state without a session.
-bash-4.0$ /opt/SUNWut/bin/utwho -ac|grep 00144f7f456e
  5.0 pseudo.00144f7f456e  utku310.1.9.236  P8.00144f7f456e

Server 3
-bash-4.0$ /opt/SUNWut/sbin/utdesktop -lw

Desktop ID   Location No-Session (H:M:S)
  --
00144f7f456e  1:37:1

1 desktop currently in error state without a session.
-bash-4.0$ /opt/SUNWut/bin/utwho -ac|grep 00144f7f456e
-bash-4.0$

Karl

On 11-01-04 10:42 AM, Bob Doolittle wrote:

Perhaps we can help. Can you answer my question please? Does utwho -ac on any of the 
servers show the DTUs which are reported by utdesktop -lw?

-Bob

On 01/04/11 11:27, Karl Rossing wrote:

What I'm trying to do is to proactively find dtu's that are showing 26d.

I have 110 DTU's on 3 servers in a fog. 26d errors get worse over time.

Karl

On 11-01-04 10:04 AM, Bob Doolittle wrote:

On 01/04/11 10:43, Karl Rossing wrote:


utdesktop -lw will show me desktops that are in an errored state.

How can I find out a process id for the errored session?


When you see DTUs in this state, do they show up anywhere with utwho -c? If 
so, that should indicate the display number. You should be able to find the associated 
processes from that. I imagine you'd only care about the Xnewt server. This state can 
occur in some circumstances if the X server is hung or has crashed.

Your problem is going to be that if there is a large number of servers at your 
site you will have to track down which server is hosting the session for the 
DTU.

-Bob





CONFIDENTIALITY NOTICE:  This communication (including all attachments) is
confidential and is intended for the use of the named addressee(s) only and
may contain information that is private, confidential, privileged, and
exempt from disclosure under law.  All rights to privilege are expressly
claimed and reserved and are not waived.  Any use, dissemination,
distribution, copying or disclosure of this message and any attachments, in
whole or in part, by anyone other than the intended recipient(s) is strictly
prohibited.  If you have received this communication in error, please notify
the sender immediately, delete this communication from all data storage
devices and destroy all hard copies.






CONFIDENTIALITY NOTICE:  This communication (including all attachments) is
confidential and is intended for the use of the named addressee(s) only and
may contain information that is private, confidential, privileged, and
exempt from disclosure under law.  All rights to privilege are expressly
claimed and reserved and are not waived.  Any use, dissemination,
distribution, copying or disclosure of this message and any attachments, in
whole or in part, by anyone other than the intended recipient(s) is strictly
prohibited.  If you have received this communication in error, please notify
the sender immediately, delete this communication from all data storage
devices and destroy all hard copies.


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] SRSS 4.1 to SRS 5.1 upgrade on RHEL

2010-12-08 Thread Bob Doolittle

On 12/08/10 09:55, Art Peck wrote:

  Just completed an upgrade from SRSS 4.1 + SRWC 2.2 to SRS 5.2 + SRWC 2.3 on 
RHEL 5.4. To say the least, it did not go smoothly. What is usually about an 
hour on Solaris servers took 8 hours on RHEL 5.4 do to a comedy of 
errors/problems. So I have the following questions:

(1) I know changing the hostname is definitely not a recommended procedure, but 
I can't see why you would not be able to change the IP address of the server. 
However, nothing we did would convince SRSS that the server had a new IP 
address. The admin BUI was especially impacted. Any thoughts?


Not by me, sorry.


(2) How DOES one determine if the installed version of GDM is appropriate. I 
assume there is some form of the rpm command to give output similar to pkginfo? 
This of course is a RHEL/Linux question, but it cost us some time trying to 
figure it out, so I thought I'd ask. In the end we stuck with the installed 
version rather than install the version in the release. Is this a bad thing? Is 
the version in the release customized for SRSS? If so, what do we do now? can 
we go back an install the released version or do we need to start completely 
over (NOT!).


This isn't something anyone should worry about. If the version of GDM needs to 
be replaced, the installer will take care of it. The version on RHEL is used 
natively, it's only on SLES 10 that the Sun Ray version is utilized.

That's why there's no mention of this in the installation documentation:
http://wikis.sun.com/display/SRSS4dot2/START+HERE+to+Install+SRSS+%28Linux%29

If you really cared to check, you could run rpm -q gdm. There's a sunray 
suffix to the version string for the RPM we provide.


(3) Following a successful utinstall,is a complete run of utconfig, that is, 
without options, required?


No. If you do try to run utconfig on a system that is already configured, then 
after the standard preamble you will get a message like this:


WARNING: Sun Ray Datastore is enabled. This script may clobber the current 
configuration.


Continue (y/[n])?


Note that the default is no, since it's harmful to continue. You must have 
not noticed this and overrode the default? It should be in the logs... On Linux the 
utconfig logs are in /var/log/SUNWut.


harmful? really dumb?


Yes, probably.


OR do you just need utconfig -w to reconfigure the admin BUI with the location 
of Tomcat?


Why did the location change? Normally you wouldn't need this, either. If you need to 
change the location, it's best to do utconfig -uw; utconfig -w and 
reconfigure it from scratch (there's not much configuration required for the web server).


I did a complete utconfig, without options, which complained about port 
1660/1661 being in use which I completely understand but did not expect. We go around it, 
but I don't see that you should really encounter that problem so I suspect we did not 
want utconfig without options.


You didn't want utconfig at all :-(


(4) Same question as (3) but regarding utconfig -k.


Same answer. Upgrades should not require reconfiguration of *any* sort. There's 
actually a special invocation of utconfig run *by the installer* after an 
upgrade which takes care of any necessary data migration required by the new 
version of SRS. Admins never need to do this.


(5) We did out own preservation of the Data Store contents by putting the 
output of utuser/utdesktop/utresadm -o into files and reloading them later. I 
was under the impression that utconfig would preserve these for us, but out 
skepticism paid off since we wound up with an empty Data Store. We were able to 
recover of course, but I would like to understand where we went wrong. Is this 
a result of (3)??


Probably, yes, as the warning should have indicated.


(6) RFE: a pre-upgrade script that inspects the current installation and spells 
out exactly what needs to be upgraded in the OS and current SRSS installation 
prior to the SRS upgrade.

I have not encountered these problems in past upgrades. Is there something 
fundementally different with SRS 5.2? Aside from what is in the Release Notes 
that is.


Presumably you've not tried to reconfigure after an upgrade before. That trick 
never works...

The bottom line is: you're trying way too hard here. utinstall should have been 
sufficient. utconfig is not designed to be run twice, and tries to protect you 
from doing so. Perhaps it doesn't try hard enough - I can think of no valid 
reason to allow utconfig to continue if it detects an existing configuration. 
It should perhaps require an explicit unconfiguration first, rather than 
allowing you to override its warnings and continue down a path that's certain 
to have issues (such as the port 1660 issue).

I also think the warning is a bit subtle, since it comes up after a somewhat 
lengthy standard preamble and then gives a Continue prompt which looks similar 
to the normal prompt (even though the default is changed).

-Bob


Re: [SunRay-Users] sunray 2 not connection

2010-12-08 Thread Bob Doolittle

On 12/08/10 11:47, Karl Rossing wrote:

On 10-12-07 05:08 PM, Bob Doolittle wrote:

They get set in different files, both should be in /etc/X11/xinitrc/xinitrc.d
$SUN_SUNRAY_TOKEN gets set in 0010.SUNWut.xdmEnv.sh
$AUDIODEV gets set when utaudio is run in 0100.SUNWut.sh

It's possible that utaudio isn't working in your environment for some reason. 
Try running it by hand in a terminal window and see if it issues an error, or 
if you see a device path on stdout as you should...

-Bob



SUN_SUNRAY_TOKEN (Payflex.500b873500130100) gets set but $AUDIODEV does not get 
set. When I run utaudio manually I get the following error:
master control open: No such file or directory


That's a sign that the product has not been activated properly. Did you 
reboot after running utinstall? Reboot automatically activates the product.

On Linux, product activation involves building and installing the various SRS 
device drivers. Once installed, during bootup time the various device nodes are 
created and the drivers are loaded. It's the /etc/init.d/utsyscfg script that 
both activates the product (on the first reboot after utinstall) and does the 
device node creation and driver loading.

Activation can be manually invoked by running /opt/SUNWut/lib/utctl enable, which in 
turn runs a number of scripts in /opt/SUNWut/lib/utctl.d/features/, all with the enable 
option. These can be run individually for diagnostic purposes if you like. It's the 
utpkg-utkau.Linux-ctl script that's responsible for building the utadem audio driver. You then have 
to reboot as mentioned above.

-Bob

___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] sunray 2 not connection

2010-12-08 Thread Bob Doolittle

On 12/08/10 11:34, Karl Rossing wrote:




On Linux, product activation involves building and installing the various SRS 
device drivers. Once installed, during bootup time the various device nodes are 
created and the drivers are loaded. It's the /etc/init.d/utsyscfg script that 
both activates the product (on the first reboot after utinstall) and does the 
device node creation and driver loading.

Activation can be manually invoked by running /opt/SUNWut/lib/utctl enable, which in 
turn runs a number of scripts in /opt/SUNWut/lib/utctl.d/features/, all with the enable 
option. These can be run individually for diagnostic purposes if you like. It's the 
utpkg-utkau.Linux-ctl script that's responsible for building the utadem audio driver. You then have 
to reboot as mentioned above.

I ran utpkg-utkau.Linux-ctl enable and still no sound. See the log below.


And did you then reboot?
You can try running /etc/init.d/utsyscfg start to see if that shows any 
errors.

-Bob




ka...@xubuntu-10:/opt/SUNWut/lib/utctl.d/features$ sudo ./utpkg-utkau.Linux-ctl 
enable
[sudo] password for karlr:

+++ Making and installing Sun Ray Audio module ...

rm -rf .tmp_versions *.cmd *.ko *.o *.mod.c .*.cmd
make -C /lib/modules/2.6.35-23-generic/build SUBDIRS=/usr/src/SUNWut/utadem 
modules
make[1]: Entering directory `/usr/src/linux-headers-2.6.35-23-generic'
  CC [M]  /usr/src/SUNWut/utadem/utadem.o
  Building modules, stage 2.
  MODPOST 1 modules
WARNING: register_sound_mixer [/usr/src/SUNWut/utadem/utadem.ko] undefined!
WARNING: unregister_sound_dsp [/usr/src/SUNWut/utadem/utadem.ko] undefined!
WARNING: register_sound_dsp [/usr/src/SUNWut/utadem/utadem.ko] undefined!
WARNING: unregister_sound_mixer [/usr/src/SUNWut/utadem/utadem.ko] undefined!
  CC  /usr/src/SUNWut/utadem/utadem.mod.o
  LD [M]  /usr/src/SUNWut/utadem/utadem.ko
make[1]: Leaving directory `/usr/src/linux-headers-2.6.35-23-generic'
install -d /lib/modules/2.6.35-23-generic/misc
install -c utadem.ko /lib/modules/2.6.35-23-generic/misc

+++ Done.



CONFIDENTIALITY NOTICE:  This communication (including all attachments) is
confidential and is intended for the use of the named addressee(s) only and
may contain information that is private, confidential, privileged, and
exempt from disclosure under law.  All rights to privilege are expressly
claimed and reserved and are not waived.  Any use, dissemination,
distribution, copying or disclosure of this message and any attachments, in
whole or in part, by anyone other than the intended recipient(s) is strictly
prohibited.  If you have received this communication in error, please notify
the sender immediately, delete this communication from all data storage
devices and destroy all hard copies.
___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] sunray 2 not connection

2010-12-08 Thread Bob Doolittle

Actually, looking more closely those warnings don't look good.

Perhaps you're running into a Ubuntu issue and need help from the other Ubuntu 
experts.

-Bob

On 12/08/10 11:34, Karl Rossing wrote:




On Linux, product activation involves building and installing the various SRS 
device drivers. Once installed, during bootup time the various device nodes are 
created and the drivers are loaded. It's the /etc/init.d/utsyscfg script that 
both activates the product (on the first reboot after utinstall) and does the 
device node creation and driver loading.

Activation can be manually invoked by running /opt/SUNWut/lib/utctl enable, which in 
turn runs a number of scripts in /opt/SUNWut/lib/utctl.d/features/, all with the enable 
option. These can be run individually for diagnostic purposes if you like. It's the 
utpkg-utkau.Linux-ctl script that's responsible for building the utadem audio driver. You then have 
to reboot as mentioned above.

I ran utpkg-utkau.Linux-ctl enable and still no sound. See the log below.


ka...@xubuntu-10:/opt/SUNWut/lib/utctl.d/features$ sudo ./utpkg-utkau.Linux-ctl 
enable
[sudo] password for karlr:

+++ Making and installing Sun Ray Audio module ...

rm -rf .tmp_versions *.cmd *.ko *.o *.mod.c .*.cmd
make -C /lib/modules/2.6.35-23-generic/build SUBDIRS=/usr/src/SUNWut/utadem 
modules
make[1]: Entering directory `/usr/src/linux-headers-2.6.35-23-generic'
  CC [M]  /usr/src/SUNWut/utadem/utadem.o
  Building modules, stage 2.
  MODPOST 1 modules
WARNING: register_sound_mixer [/usr/src/SUNWut/utadem/utadem.ko] undefined!
WARNING: unregister_sound_dsp [/usr/src/SUNWut/utadem/utadem.ko] undefined!
WARNING: register_sound_dsp [/usr/src/SUNWut/utadem/utadem.ko] undefined!
WARNING: unregister_sound_mixer [/usr/src/SUNWut/utadem/utadem.ko] undefined!
  CC  /usr/src/SUNWut/utadem/utadem.mod.o
  LD [M]  /usr/src/SUNWut/utadem/utadem.ko
make[1]: Leaving directory `/usr/src/linux-headers-2.6.35-23-generic'
install -d /lib/modules/2.6.35-23-generic/misc
install -c utadem.ko /lib/modules/2.6.35-23-generic/misc

+++ Done.



CONFIDENTIALITY NOTICE:  This communication (including all attachments) is
confidential and is intended for the use of the named addressee(s) only and
may contain information that is private, confidential, privileged, and
exempt from disclosure under law.  All rights to privilege are expressly
claimed and reserved and are not waived.  Any use, dissemination,
distribution, copying or disclosure of this message and any attachments, in
whole or in part, by anyone other than the intended recipient(s) is strictly
prohibited.  If you have received this communication in error, please notify
the sender immediately, delete this communication from all data storage
devices and destroy all hard copies.
___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] Hotdesking on Ubuntu?

2010-12-08 Thread Bob Doolittle

On 12/08/10 13:55, Karl Rossing wrote:

On 10-09-13 06:25 PM, Ken Mandelberg wrote:

As Jorg Barfurth points out, the reason that smartcard cloining didn't work for 
me on Ubuntu is at least that the hotdesk pam module was not installed.

In fact from

http://wiki.sun-rays.org/index.php/SRSS_4.2_on_Ubuntu_9.10_%28i386,_amd64%29

comment out all pam entries in /etc/pam.d/gdm-2.20 referring to 
pam_sunray_hotdesk.so as hotdesking seems to be currently broken 

Has anyone made Hotdesking work on Ubuntu?


I'm wondering if you got hotdesking to work under ubuntu?

I did find 
http://www.filibeto.org/pipermail/sunray-users/2010-January/014506.html and 
tried that but it's not working for me yet.


This is an incorrect use of the term hotdesking. Hotdesking means to be able 
to access your session from different Sun Rays. On Linux this is currently only available 
when you use smartcards, because non-smartcard sessions are not mobile. On Solaris we 
support Non-SmartCard Mobility, which allows you to access your session on any Sun Ray 
simply by authenticating (e.g. entering your username and password).

If SRS works at all, then hotdesking works. pam_sunray_hotdesk.so is not 
required for hotdesking functionality.

That PAM module supports another feature, called Remote Hotdesk 
Authentication or RHA, which provides extra security when hotdesking with 
smartcards (and also when unlocking non-mobile non-smartcard sessions, which are what you 
get on Linux without smartcards today), by performing the authentication outside of the 
desktop environment. That feature can be disabled through use of the -D option to 
utpolicy or via the admin BUI, and then you don't need that PAM module at all.

The mail message you reference was for somebody who wanted to access their 
smartcard session from a non-smartcard environment. They were probably using 
the OVDC soft client, in the days before it could use smartcard readers. 
Otherwise there's not much point - just use your smartcard.

-Bob

___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] sunray 2 not connection

2010-12-07 Thread Bob Doolittle

On 12/07/10 12:24, Karl Rossing wrote:

 I managed to fix this by changing /etc/opt/SUNWut/gdm/SunRayPreSession/Default

if [ -x $i ]; then
. $i
fi

to

if [ -x $i ]; then
$i
fi


This will create other problems.
The scripts being executed attempt to set certain environment variables, and if 
you execute them as subprocesses those variables will not become set for the 
desktop environment. These include things like the $AUDIODEV variable, and (I 
think) $SUN_SUNRAY_TOKEN. Without those variables set other things will not 
work properly.

A better solution would be to change 
/etc/opt/SUNWut/gdm/SunRaySession/helpers/Xstartup to use the

foo() {
}

syntax instead of the

function foo {
}

syntax. Nothing within the function needs to change.

-Bob



I have been testing with Xubuntu 10.10. I decided to change the GDM theme and 
ever since then, I only seem to have a resolution of 640x480.

I'm not sure how to fix it. I guess the adventure continues.

Karl

On 10-12-06 01:49 PM, Karl Rossing wrote:

Randy,

Did you find a work around for this? I'm getting the same error on ubuntu 10.10 
with gdm 2.20.

Karl

On 11/26/10 00:27, Randy wrote:

/etc/opt/SUNWut/gdm/SunRayPreSession/helpers/Xstartup:23 Function not found
Xstartup error:
/etc/opt/SUNWut/gdm/SunRaySession/helpers/Xstartup: 26 Syntax error: '}' 
unexpected
gdm[2405]: ERROR: session_child_run: Execution ot PreSession script returned ?O 
Aborting



CONFIDENTIALITY NOTICE: This communication (including all attachments) is 
confidential and is intended for the use of the named addressee(s) only and may 
contain information that is private, confidential, privileged, and exempt from 
disclosure under law. All rights to privilege are expressly claimed and 
reserved and are not waived. Any use, dissemination, distribution, copying or 
disclosure of this message and any attachments, in whole or in part, by anyone 
other than the intended recipient(s) is strictly prohibited. If you have 
received this communication in error, please notify the sender immediately, 
delete this communication from all data storage devices and destroy all hard 
copies.


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users





CONFIDENTIALITY NOTICE:  This communication (including all attachments) is
confidential and is intended for the use of the named addressee(s) only and
may contain information that is private, confidential, privileged, and
exempt from disclosure under law.  All rights to privilege are expressly
claimed and reserved and are not waived.  Any use, dissemination,
distribution, copying or disclosure of this message and any attachments, in
whole or in part, by anyone other than the intended recipient(s) is strictly
prohibited.  If you have received this communication in error, please notify
the sender immediately, delete this communication from all data storage
devices and destroy all hard copies.


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] sunray 2 not connection

2010-12-07 Thread Bob Doolittle

On 12/07/10 18:56, Karl Rossing wrote:

On 10-12-07 11:25 AM, Bob Doolittle wrote:


This will create other problems.
The scripts being executed attempt to set certain environment variables, and if 
you execute them as subprocesses those variables will not become set for the 
desktop environment. These include things like the $AUDIODEV variable, and (I 
think) $SUN_SUNRAY_TOKEN. Without those variables set other things will not 
work properly.

A better solution would be to change 
/etc/opt/SUNWut/gdm/SunRaySession/helpers/Xstartup to use the

foo() {
}

syntax instead of the

function foo {
}

syntax. Nothing within the function needs to change.


Thanks Bob. That worked out well. I still need to chase down why $AUDIODEV 
variable isn't being set but $SUN_SUNRAY_TOKEN is being set.


They get set in different files, both should be in /etc/X11/xinitrc/xinitrc.d
$SUN_SUNRAY_TOKEN gets set in 0010.SUNWut.xdmEnv.sh
$AUDIODEV gets set when utaudio is run in 0100.SUNWut.sh

It's possible that utaudio isn't working in your environment for some reason. 
Try running it by hand in a terminal window and see if it issues an error, or 
if you see a device path on stdout as you should...

-Bob


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] Sun Ray 3 GUI_firmware interesting delima

2010-11-30 Thread Bob Doolittle

But you can't force downgrading firmware of new hardware which didn't have 
firmware available ever before!

There was no firmware available for the new line in SRSS 4.2, because it didn't 
exist yet. As Craig suggested, your only recourse is to apply a patch which 
contains newer firmware, which will include GUI firmware.

-Bob

On 11/30/10 10:55, James Kissler wrote:

Paul, you can force a firmware update, even if downgrading to an older
firmware version.  I believe the flag to be used in the command line.  I
would suggest pulling the firmware from one of the newer updates srss
updates to replace your current firmare repository.  That's the easiest/best
solution in my opinion.

On Nov 30, 2010 8:42 AM, Paul Whitenerpwhite...@earthlink.net  wrote:

Greetings all,

After waiting over a month for the delivery, our first 2 Sun Ray 3s came in.
  A 3 and a 3+.

Now I have an interesting problem.  I am running a 4.2 SRSS server on
OpenSolaris b_108 (which has been rock solid BTW).  Since the DTUs default
to non_gui_firmware, I always connect them to a dedicated lan and let them
re-flash to GUI_firmware.

Problem is, the SRSS server firmware is at a lower rev than the new DTUs and
they will not flash.  So GUI_firmware will not turn on.  Is there a keyboard
combo (all be it undocumented) that will turn on the GUI_firmware menus for
me?  Otherwise I will have to build a new SRSS server.  (I think I already
know the answer, but thought I would give it a shot!)

Thanks in advance!

/paul


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users



___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] Instructions for installing SRS 5 or 5.1 on Solaris 11 Express posted

2010-11-27 Thread Bob Doolittle

On 11/27/10 06:36, Jens wrote:

Hi,

i dont get that to work. The Remote Login or Loginscreen dosent work
at my S11Exp installtion.
That should be a problem with xdmpc, but i cant get that tow rok.


Yes, I hear that configuring XDMCP with GDM is tricky. Joerg recently published 
instructions on how to do that, I believe. For more help you could study up on 
the docs:
http://library.gnome.org/admin/gdm/

Or you could send mail to gdm-l...@gnome.org.


If you have the Solaris 11 text installer you have no gdm. You have
to install that
http://blogs.sun.com/stw/entry/getting_gdm_to_work_on


I tried the text installer but couldn't get SRSS to work, even after installing 
and enabling GDM. Did you do anything else?

-Bob

___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


[SunRay-Users] Instructions for installing SRS 5 or 5.1 on Solaris 11 Express posted

2010-11-19 Thread Bob Doolittle

I just added a How-To with simplified instructions required to install SRS 5.1 
on Solaris 11 Express:

http://wiki.sun-rays.org/index.php/SRS_5.1_on_Solaris_11_Express

As clearly indicated on the page, this is unsupported, but hopefully will 
reduce confusion for those intrepid souls who wish to try it out.

-Bob

___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] Solaris 11 Express released

2010-11-15 Thread Bob Doolittle
support , no. But most features will work. Notable exception: kiosk

-Bob

Paul Whitener pwhite...@earthlink.net wrote:


greetings all,

I see that Solaris 11 Express has been released.  Does it support SRSS?

thanks!

/paul


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users
___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] Solaris 11 Express released

2010-11-15 Thread Bob Doolittle

It's worth mentioning as well that the Solaris update model introduced with SRS 
5.1.1 doesn't work with Solaris 11, because it doesn't support patchadd. So 
effectively on Solaris 11 Express at this time there's no clean way to apply 
SRS updates. You'll be stuck with SRS 5.1 until we release 5.2. Caveat Emptor. 
Not supported at this time.

-Bob

On 11/15/10 12:56, Bob Doolittle wrote:

support , no. But most features will work. Notable exception: kiosk

-Bob

Paul Whitenerpwhite...@earthlink.net  wrote:


greetings all,

I see that Solaris 11 Express has been released.  Does it support SRSS?

thanks!

/paul


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users
___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] inetd.conf - crazy entry everytime

2010-11-13 Thread Bob Doolittle

So the point is that you can modify /etc/init.d/utsvc to stop this behavior if 
you are using 3.1 on more recent S10 releases than it was designed for. Then 
reboots will no longer re-insert the undesirable keyword.

SRSS tries to automate important tasks for admins to make things easier. You 
can expect that trend to continue. When you use SRSS in ways it was not 
designed for (e.g. running on unsupported releases) this does sometimes mean 
unexpected or undesirable things may occur.

-Bob

On 11/13/10 03:34, Jens wrote:

Hi,

srss 3.1 works on S10u8. Customer can use that without pay, it was a present
of sun. As i know 4 and above are not free. Hardware are the old Rays beside
the monitor.

J

2010/11/13 P.S.M.Swamijipsm.swam...@sun.com


  On 11/12/2010 6:59 PM, Jens wrote:

Hi

got it. Crazy little thing. But i cant reboot at the moment.


This is done in /etc/init.d/utsvc script if /etc/security/tsol/tnrhdb
file exists on the system. So when you reboot it automatically
comes back. However this is expected to be added only on TSOL,
which contains /etc/security/tsol/tnrhdb file .

What OS you are using?.

P.S: SRSS 3.1 was not supported with latest S10 updates , where
it is possibility to add that entry as TX packages available by default
and so the file /etc/security/tsol/tnrhdb available on system

Thanks
P.S.M.Swamiji

Note: These are my personal opinions, nothing to do with my employer


  For now it works.
delete the trusted out of the /etc/inetd.conf and do a inetconv -i
/etc/inet/inetd.conf solve my little issue.

Regards


2010/11/12 Jenssoftr...@googlemail.com


Hi,,


i find it


in the logs i get only a connection refused.
I try (only a try) version 4.0. Customer will not use that version because
we can only use 3.1 (for free from sun years ago). Dont like to discuss
that, if they ask me im happy to use 4.X
With 4.0 the trusted entry in the line is gone and i can attach a
secondary server. Switch back to version 3.1 - connection refused and i cant
kill user from the WebGui.

With 3.1 and a Terminate session in WebGUI: utrcmd error
in the Log

Nov 12 11:05:13 sunray0 usersession[10910]: [ID 128587 user.info] utrcmd error: 
sunray0: Connection refused


Nov 12 11:05:13 sunray0 usersession[10910]: [ID 702911 user.info] 
ut_setUserSessionEnt(): utrcmd failed (1)



Regards




2010/11/12 Meik Hellmundmeik.hellm...@math.uni-leipzig.de


On Fri, 12 Nov 2010 09:23:27 +0100
  Jenssoftr...@googlemail.com  wrote:


Hi,

absolut scary. I dont no from where the trusted came.
-
cat /opt/SUNWut/lib/prototype/inetd.conf.SUNWut.prototype
#
# @(#)utinetd.conf  1.4 06/09/05
#
# The utrcmd service allows certain Sun Ray administrative commands to

be

# remotely run (by root or members of the utadmin group) from

systems

with
# the same group manager signature file. Sites concerned with security

may

# choose to disable it.
#
utrcmd  stream  tcp nowait  root/opt/SUNWut/lib/in.utrcmdd
in.utrcmdd
---

I installed srss new, without using the backup.
My Secondary tells me that:
ray01: Connection refused

if try to kill a usersession i get a utrcmd error and utrcmd wrote in

the

logs that a connection is refused.
I cant find anyone who can tell me who work with the trusted, i dont

no

what that mean or how can i use that.

Jens


2010/11/12 Meik Hellmundmeik.hellm...@math.uni-leipzig.de


On Fri, 12 Nov 2010 07:53:59 +0100
Jenssoftr...@googlemail.com  wrote:


Hi,

i have a problem with srss 3.1. In my /etc/inetd.conf i find a

entry

utrcmd  stream  tcp nowait,trusted
root/opt/SUNWut/lib/in.utrcmdd in.utrcmdd

I guess the trusted make some problem. I cant attach a secondary
server. On my third server inetd.conf looks like
utrcmd  stream  tcp nowait  root/opt/SUNWut/lib/in.utrcmdd
in.utrcmdd

Problem:
If i delete the trusted and i restart the server or the srss
software (utrestart -c) this entry come back.

Does anyone knows who do that ? How can i turn that of ?


  Sorry, I do not have a Solaris installation of SRSS. I have no idea
whether removing the trusted keyword is the right thing or whether
your problem is something different.

But it should be possible to find the code in the SRSS scripts which
inserts the keyword.

Regards, Meik

--
Meik Hellmund
Mathematisches Institut, Uni Leipzig
e-mail: meik.hellm...@math.uni-leipzig.de
http://www.math.uni-leipzig.de/~hellmundhttp://www.math.uni-leipzig.de/%7Ehellmund

___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users




___
SunRay-Users mailing 
listsunray-us...@filibeto.orghttp://www.filibeto.org/mailman/listinfo/sunray-users



___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users





___
SunRay-Users mailing list

Re: [SunRay-Users] upgrade srs-5 to srs-5.1 ... datastore?

2010-11-10 Thread Bob Doolittle

On 11/10/10 10:12, P.S.M.Swamiji wrote:

On 11/10/2010 8:15 PM, Niki W. Waibel wrote:

i am about to upgrade srs-5

Is it a GA version of SRS-5 ?.
SRS 5 GA delivers SRDS package version 3.2_04 .


Also, have you applied any OBIs? They must be removed manually before upgrading.

-Bob

___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] upgrade srs-5 to srs-5.1 ... datastore?

2010-11-10 Thread Bob Doolittle

On 11/10/10 10:23, Bob Doolittle wrote:

On 11/10/10 10:12, P.S.M.Swamiji wrote:

On 11/10/2010 8:15 PM, Niki W. Waibel wrote:

i am about to upgrade srs-5

Is it a GA version of SRS-5 ?.
SRS 5 GA delivers SRDS package version 3.2_04 .


Also, have you applied any OBIs? They must be removed manually before upgrading.


Sorry, wrong TLA. I meant to ask if you had installed any IDRs (i.e. binary 
relief).

-Bob

___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] uttsc session freezing

2010-11-04 Thread Bob Doolittle

Hi,

I'm adding back in the CC's because yes, I could believe this could cause things like 
black screen. It depends on when it happens.
If it happens immediately upon inserting a smartcard, then this is a candidate. 
If it happens in the middle of working in a session than probably not.

When this error occurs, an exception is thrown in utauthd. I am not familiar enough with 
the code to say at this time but if that exception were not handled gracefully then 
symptoms such as you describe on card insertion are at least plausible. This is happening 
at a critical time while utauthd is attempting to construct a token name for the inserted 
smartcard. It's *supposed* to generate an unknown token name in this case, 
which would result in a special OSD session displaying an error icon, but maybe there's a 
bug - this code path is not exercised much. It would have to be either a hardware 
problem, maybe with the reader in a particular DTU (or a damaged card?), or a bug 
probably both in the smartcard config file for this type of card as well as the error 
handling code in the getprop processing of SmartCardWordsImpl. I've CC'd Mike Bender who 
is more familiar with the code in SmartCardWordsImpl (and smartcard processing in 
general) to get his opinion.

Do you see this problem on a particular DTU or DTUs?

-Bob

On 11/04/10 10:08, Dark Bass wrote:

Hi Bob

no, i did not write a config file

you are right, we are using normal sun payflex cards and this ones
GEMPLUS-MPCOS_8K.0101891**.
i've just went over the logs for the last day and it seems that the error is
only on this cards not on payflexes.

but i guess this is not a significant issue and is not causing screen freeze
or black screen ?

regards

2010/11/4 Bob Doolittlebob.doolit...@oracle.com


  On 11/04/10 06:25, Dark Bass wrote:

i am seeing this message in logs

Nov  4 09:10:48 server1 utauthd: [ID 775283 user.info] Worker7 CONFIG_ERROR:
Property [d643] not found (caught)

any ideas what this is ?


This indicates a problem talking to a smartcard.

Did you write your own smartcard config file?

What type of smartcards do you use? What do your smartcard token names look
like?

If you use more than one type of smartcard, can you isolate which type of
smartcard is in use when this error is seen?

-Bob


  2010/11/3 Ivar Janmaatijanm...@xs4all.nl  ijanm...@xs4all.nl

  I changed the poweroff time in .parms to 8 hours to see it this would help.
But it did notso I guess it is not the sleep.


Ivar

darko...@gmail.com schreef:


  Yeah well i have srss 5.1 so i guess its not fixed.

Utcapture doesnt show any packet loss but it sometimes shows great
latency, but i was thinking its because sr3 uniits go to sleep or poweroff.



--- Original message ---


  From: Ivar Janmaatijanm...@xs4all.nl  ijanm...@xs4all.nl
To: sunray-users@filibeto.org
Sent: 3.11.'10,  11:54

Yes I have seen this too.
Setup was VDI 3.2 with Sun Ray 3 Plus and SR 2 FS.  With Setup VDI 3.2.1
it has not been reported yet but that does not mean it is resolved in 3.2.1
I hope it is though ;-)

Ivar


darko...@gmail.com schreef:


  Hi

i am having issues with session freezing. It displays the last working
screen on windows, i can move the mouse (maybe its the x mouse not windows
mouse) but windows doesnt respond. Windows is working fine if  i rdp to it.
I need to kill the session (ctr alt  2bksp doesnt help)  to get it working
again. Usually it happens after some period of inactivity. Windows screen
saver is disabled and it doesnt go into suspend..
i am running srss 5.1 with vdm 1.2. Sunray 3 clients.
It was happening with srss 5 also.

any thoughts what i might check?

regards ___
SunRay-Users mailing 
listsunray-us...@filibeto.orghttp://www.filibeto.org/mailman/listinfo/sunray-users

  ___
SunRay-Users mailing 
listsunray-us...@filibeto.orghttp://www.filibeto.org/mailman/listinfo/sunray-users

  ___
SunRay-Users mailing 
listsunray-us...@filibeto.orghttp://www.filibeto.org/mailman/listinfo/sunray-users

  ___
SunRay-Users mailing 
listsunray-us...@filibeto.orghttp://www.filibeto.org/mailman/listinfo/sunray-users


___
SunRay-Users mailing 
listsunray-us...@filibeto.orghttp://www.filibeto.org/mailman/listinfo/sunray-users






___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] Ubuntu 10.10

2010-10-28 Thread Bob Doolittle

On 10/28/10 04:27, Jörg Barfurth wrote:

Dave McGuire schrieb:

On 10/27/10 1:34 PM, Bob Doolittle wrote:

Anyone tried a fresh install of SRSS 4.2 on Ubuntu 10.10? It appears
that gdm-2.20 was removed from the repository. I have downloaded a
gdm-2.20 package but wanted to see if anyone has already run down this
road and might steer me out of trouble :)


2.20 ought to work. Avoid 2.21 or later, however.


  Do we know the nature of the 2.21 incompatibility?  I'm just curious.



Despite the innocuous minor version change, GDM 2.21 was a complete rewrite of 
GDM, which significantly changed architecture and brought along several feature 
regressions.

One of these feature regressions is loss of support for multiple 'seats', i.e. 
sets of monitor and input devices. There are other changes that also impact Sun 
Ray features.

Sun Rays are represented on the server as multiple full-featured seats and 
require the capability to dynamically add and remove seats. Patches (from 
Sun/Oracle) to implement this are available in the GDM and ConsoleKit projects, 
but have not yet been accepted into the main development line.


I should mention (again) that this looks like a major roadblock for people 
running SRS on unsupported Linux distros. The patches have been available for 
review for several months now and there has been no public indication that the 
GDM maintainers (who happen to work for Red Hat) are planning to give them 
consideration in the foreseeable future. Of course you can always apply the 
patches yourselves.

Most likely if you are serious about wanting to continue to use SRS on 
unsupported Linux distros you will need to file bugs against your distros once 
they pick up GDM 2.21 and lobby for this change to be picked up. Only by 
expressing your needs will the distro maintainers be able to properly assess 
the significance and importance of supporting this feature.

You might also consider sending a note to the GDM FOSS community at 
gdm-l...@gnome.org expressing the importance you feel this feature warrants, 
and encourage distros to pick up the multi-seat patches for GDM and ConsoleKit 
submitted by Sun.

These patches will be *required* for any SRS operation with GDM version 2.21 or 
later (e.g. as delivered in RHEL 6).

-Bob

___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] Ubuntu 10.10

2010-10-27 Thread Bob Doolittle

On 10/27/10 12:32, Matthew C. Aycock wrote:


Anyone tried a fresh install of SRSS 4.2 on Ubuntu 10.10? It appears that 
gdm-2.20 was removed from the repository. I have downloaded a gdm-2.20 package 
but wanted to see if anyone has already run down this road and might steer me 
out of trouble :)

The


2.20 ought to work. Avoid 2.21 or later, however.

-Bob

___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] resetting Sunray session

2010-10-25 Thread Bob Doolittle

Starting with SRSS 4.2, /opt/SUNWut/lib/utload takes a -r option that will 
reset a Sun Ray remotely.

But have you tried using AMGH and returning use_firstserver=true for pseudo 
tokens? That would be a much cleaner solution.

-Bob

On 10/25/10 16:37, Clinton Wayne Baker wrote:

I never saw an answer to Andreas' post, so I thought I'd try to revive it.

I have a similar setup - one Solaris 10 FOG doing kiosk stuff and another for 
Solaris 10 desktop logins.  If a user clicks the Solaris button and freaks out 
because it isn't the Windows login they were expecting, they run away leaving 
it at a Solaris login screen.  Since most of my DTU's across campus are used 
for Windows logins, it tends to confuse just about everyone - even with text on 
the login screen saying to hit CTRL-Moon if this isn't what they want.  Running 
utsession -k on these sessions just kills that particular session, but the DTU 
reconnects to the Solaris FOG.

The crazy thing is, up until the end of the summer, I've been running a mix of 
srss4.0 and 4.1, and this worked.  A utsession -k seemed to cause the DTU to 
effectively reset, find sunray-servers again and end up going back to the kiosk 
FOG.  I acquired new hardware over the summer, rebuilt everything with srss 5, 
and I've not found a way to redirect a DTU back to the kiosk FOG remotely 
without restarting srss.

Searching around I've found people poisoning the ARP cache to force the DTU to 
time out and reset, but my DTU's are on several different subnets.  I've been 
thinking of possibly requiring client authentication in my policy and maybe 
removing that DTU from the datastore temporarily before I kill the session, but 
I've not had time to set up a test environment yet.

Does anyone have a way to force the DTU to restart remotely without disrupting 
other user sessions as a utrestart would?

Thanks,
clint

On 03/17/10 02:37, Andreas Bock wrote:

We use the Sunray Server Software on 2 different servers, both running
Solaris 10 5/09 Sparc. Server-A is configured for kiosk sessions, using
the good old utsplash/utmsgbox scripts. We made a menu to run a windows
terminal or unix session. The Sunray Clients are configured via DHCP to
connect to the kiosk server-A.

If one chooses unix session the script forwards the session via
utswitch -h server-B. On logout the session should return to the kiosk
server-A.

For what I see one can only switch back form server-B to server-A after
logout with Ctrl-Moon. We tried to kill the Session on server-B in
/etc/dt/config/Xreset with utsession -k without success.

Does anybody have another idea to switchback the sunray client to
server-A without using utrestart -c on server-B?

Cheers, Andreas
___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users

___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


Re: [SunRay-Users] /dev/utdiskctl: no file or directory

2010-09-24 Thread Bob Doolittle

 Did you reboot after applying the upgrade? That automatically activates the 
product which should wind up building and installing the drivers and devices.

-Bob

On 09/24/10 17:32, Brobeck, Kenneth C. wrote:

I just upgraded to SRSS 4.0-48.23 and now the utstorage keeps restarting 
because the /dev/utdiskctl is missing.  I am running on RHEl4 2.6.9-78.ELsmp #1 
SMP.

I will be upgrading to SRSS4.2 in March, but I would like to fix this problem.  
I google'd this issue and found no good answer.  Does anyone know how to fix 
the /dev/utdiskctl missing problem?


SUNWuti-4.0-48
SUNWutdsr-3.0-06
SUNWutref-4.0-48.23
SUNWutwh-4.0-48
SUNWutm-4.0-48.23
SUNWutio-4.0-48
SUNWuta-4.0-48.23
SUNWutwl-4.0-48
SUNWutgsm-4.0-48.23
SUNWutstr-4.0-48
SUNWutdso-3.0-06
SUNWutsto-4.0-48.23
SUNWuto-4.0-48.23
SUNWutkau-4.0-48
SUNWutwa-4.0-48
SUNWutfw-4.0-48.23
SUNWutps-4.0-48
SUNWutdsk-4.0-48
SUNWutwar-4.0-48
SUNWutu-4.0-48.23
SUNWutr-4.0-48.23


Ken Brobeck
Building 5, Room 212
2575 Sand Hill Rd., MS46
Menlo Park, CA  94025
Ph: 650 926-2558
Fax: 650 926-3515
brob...@slac.stanford.edu






___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


___
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users


  1   2   3   4   5   6   7   8   9   >