This shouldn't work:

 > privileges="basic,-proc_info,-file_link_any,net_privaddr,sys_resource"/>

If you want to remove privileges then use '!' instead of '-'.

-- Renaud

Michael A. Haines wrote:
> Hi All,
> 
> On to the next issue I seem to be having! Can someone please take a look
> for me.
> 
> svc:/network/adminserver:default (Sun Java System Administration Server)
>  State: maintenance since Tue Sep 19 16:52:55 2006
> Reason: Start method failed repeatedly, last exited with status 1.
>    See: http://sun.com/msg/SMF-8000-KS
>    See: /var/svc/log/network-adminserver:default.log
> Impact: This service is not running.
> 
> 
> # more /var/svc/log/network-adminserver:default.log
> [ Sep 19 15:30:32 Enabled. ]
> [ Sep 19 15:30:32 Rereading configuration. ]
> [ Sep 19 15:30:46 Rereading configuration. ]
> [ Sep 19 16:52:55 Executing start method ("/var/Sun/mps/start-admin") ]
> SunONE-WebServer-Enterprise/6.0SP3 B05/19/2004 05:32
> failure: could not log PID to PidLog /var/Sun/mps/admin-serv/logs/pid
> (Permission denied)
> [ Sep 19 16:52:55 Method "start" exited with status 1 ]
> [ Sep 19 16:52:55 Executing start method ("/var/Sun/mps/start-admin") ]
> SunONE-WebServer-Enterprise/6.0SP3 B05/19/2004 05:32
> failure: could not log PID to PidLog /var/Sun/mps/admin-serv/logs/pid
> (Permission denied)
> [ Sep 19 16:52:55 Method "start" exited with status 1 ]
> [ Sep 19 16:52:55 Executing start method ("/var/Sun/mps/start-admin") ]
> SunONE-WebServer-Enterprise/6.0SP3 B05/19/2004 05:32
> failure: could not log PID to PidLog /var/Sun/mps/admin-serv/logs/pid
> (Permission denied)
> [ Sep 19 16:52:55 Method "start" exited with status 1 ]
> [ Sep 22 14:57:33 Rereading configuration. ]
> [ Sep 22 15:28:51 Rereading configuration. ]
> [ Sep 22 15:30:07 Rereading configuration. ]
> 
> 
> I can start and stop this manually i.e /var/Sun/mps/start-admin and
> /var/Sun/mps/stop-admin using the "dsadmin" user. I can also write to
> the directory: /var/Sun/mps/admin-serv/logs/
> 
>>From the error log, I obviously I have a permissions problem. The
> following is from my directory.xml file.
> 
> <method_credential user="dsadmin" group="dsadmin"
> 
> privileges="basic,-proc_info,-file_link_any,net_privaddr,sys_resource"/>
>         </method_context>
> 
> Does this look OK?
> 
> What I also see is the following:
> 
> $ pwd
> /var/Sun/mps/admin-serv/logs
> $ ls -l
> total 10
> -rw-r--r--   1 dsadmin  dsadmin      479 Sep 22 15:54 access
> -rw-r--r--   1 root     root           5 Sep 22 15:30 admin.pid
> -rw-r--r--   1 dsadmin  dsadmin     2873 Sep 22 15:55 error
> 
> As you can see the admin.pid is owned by root!
> 
> Please let me know if you need the directory.xml file
> 
> 
> 
> 
> Many thanks.
> 
> 

-------------- next part --------------
A non-text attachment was scrubbed...
Name: renaud.manus.vcf
Type: text/x-vcard
Size: 218 bytes
Desc: not available
URL: 
<http://mail.opensolaris.org/pipermail/smf-discuss/attachments/20060922/fc85cb2b/attachment.vcf>

Reply via email to