The ilbd program runs as the user 'daemon' not 'dladm', so I think you
need to have the line added to /etc/user_attr be for the 'daemon' user.
Also, I think the set of authorizations can be narrowed down to just
solaris.smf.modify (or possibly something more specific).
So I think a correct line might be:
daemon::::auths=solaris.smf.modify
On Dec 22, 2009, at 7:44 PM, Sangeeta Misra wrote:
A user on Opensolaris filed the following bug:
------------
Installed pkg://opensolaris.org/
[email protected],5.11-0.129:20091205T100743Z
on OpenSolaris b129
When trying to run ilbadm commands such as:
ilbadm create-servergroup -s server=osol1:80 -s server=osol2:80
prodweb
I always get an error of:
ilbadm: no scf permit
The problem appears to be that ilbd is switching to the uid 'daemon'
and
doesn't have the necessary authorizations to update SMF with
properties when a
user runs the ilbadm command.
I was able to temporarily work around the problem by adding
daemon::::auths=solaris.smf.manage.ilb,solaris.smf.modify
to /etc/user_attr and restarting the service.
-------------------------
ILB project added the following entry to /etc/user_attr :
dladm::::auths=solaris.smf.manage.wpa,solaris.smf.modify
in build 128. I believe /etc/user_attr is delivered by SUNWcsr
package. Why would the entry not get installed in a system when
user upgrades to OpenSolaris b129 in Step 3? Shoud'nt Package
Manager automatically install this entry in the system's /etc/
user_attr by installing the build 129's SUNWcsr?
1. Install 2009.06 release (see
http://hub.opensolaris.org/bin/view/Main/downloads)
2. Change your publisher for "opensolaris.org" to
http://pkg.opensolaris.org/dev/
3. Type pkg image-update or use the Package Manager GUI to update to
the latest development build. If you are using Package Manager,
you need to refresh (GUI} and then install.
4. Reboot the system
5. Install the SUNWilb IPS package by typing pkg install SUNWilb
Since I dont have the expertise in Package Manager, I am not sure
what the problem the user is facing ( the user has been cced) . Can
you provide some clues?
Sangeeta
_______________________________________________
pkg-discuss mailing list
[email protected]
http://mail.opensolaris.org/mailman/listinfo/pkg-discuss
