Hi everyone.

I'm working on bug ID:
   8346 AI should work with NWAM

At issue is the script which installadm create-service runs to check 
network configuration of the system being set up.  It purposely fails 
installadm when NWAM is enabled.

This is marked as a blocker because systems on which installadm 
successfully worked previously now fail to run installadm.  At least two 
people have hit this regression.  The fix I suggest below is simple, low 
risk and high impact.

8346 is a direct result of 6252, which enforces that NWAM be turned
off.  The reasoning behind this: part of NWAM's purpose is to grab an IP 
address from an external source (DHCP) when it configures the network; 
this address could change from boot to boot.  The AI server should have 
a consistent IP address so that the AI clients can find it.

The fix appears to be incorrect and too strict, because the presence of 
NWAM doesn't imply a non-static address.  There are ways of configuring 
NWAM which can force a static IP address, so disabling NWAM is 
incorrect.  Furthermore, if NWAM gets the address from DHCP, it
is possible to configure the DHCPserver to dish up the same address
repeatedly.

As long as the system has a hostname which is mapped to an active,
non-loopback IP address, installadm should work.  While the address
should be consistent and well known so the clients can find it, it
really doesn't matter if NWAM is running or not.  (The additional checks
made for setting up the AI server as the DHCP server are orthogonal to
these checks.)

Since the NWAM configuration on OpenSolaris out of the box won't work, I
propose to leave the NWAM checks in, but change them to warnings instead
of failures.  Something like this:

if  svc:/network/physical:nwam is not disabled {
    print "Warning: NWAM is not disabled.  Please insure that the IP
        address for `hostname` is static."
} else if svc:/network/physical:default is disabled {
    print "Error: No networking SMF service is enabled."
    valid = "False"
}

An alternative is to remove the NWAM check altogether.

Comments / suggestions / questions?

    Thanks,
    Jack


Reply via email to