So the point is that you can modify /etc/init.d/utsvc to stop this behavior if
you are using 3.1 on more recent S10 releases than it was designed for. Then
reboots will no longer re-insert the undesirable keyword.
SRSS tries to automate important tasks for admins to make things easier. You
can expect that trend to continue. When you use SRSS in ways it was not
designed for (e.g. running on unsupported releases) this does sometimes mean
unexpected or undesirable things may occur.
-Bob
On 11/13/10 03:34, Jens wrote:
Hi,
srss 3.1 works on S10u8. Customer can use that without pay, it was a present
of sun. As i know 4 and above are not free. Hardware are the old Rays beside
the monitor.
J
2010/11/13 P.S.M.Swamiji<[email protected]>
On 11/12/2010 6:59 PM, Jens wrote:
Hi
got it. Crazy little thing. But i cant reboot at the moment.
This is done in /etc/init.d/utsvc script if /etc/security/tsol/tnrhdb
file exists on the system. So when you reboot it automatically
comes back. However this is expected to be added only on TSOL,
which contains /etc/security/tsol/tnrhdb file .
What OS you are using?.
P.S: SRSS 3.1 was not supported with latest S10 updates , where
it is possibility to add that entry as TX packages available by default
and so the file /etc/security/tsol/tnrhdb available on system
Thanks
P.S.M.Swamiji
Note: These are my personal opinions, nothing to do with my employer
For now it works.
delete the "trusted" out of the /etc/inetd.conf and do a "inetconv -i
/etc/inet/inetd.conf" solve my little issue.
Regards
2010/11/12 Jens<[email protected]>
Hi,,
i find it
in the logs i get only a "connection refused".
I try (only a try) version 4.0. Customer will not use that version because
we can only use 3.1 (for free from sun years ago). Dont like to discuss
that, if they ask me im happy to use 4.X....
With 4.0 the "trusted" entry in the line is gone and i can attach a
secondary server. Switch back to version 3.1 - connection refused and i cant
kill user from the "WebGui".
With 3.1 and a Terminate session in WebGUI: utrcmd error
in the Log
Nov 12 11:05:13 sunray0 usersession[10910]: [ID 128587 user.info] utrcmd error:
sunray0: Connection refused
Nov 12 11:05:13 sunray0 usersession[10910]: [ID 702911 user.info]
ut_setUserSessionEnt(): utrcmd failed (1)
Regards
2010/11/12 Meik Hellmund<[email protected]>
On Fri, 12 Nov 2010 09:23:27 +0100
Jens<[email protected]> wrote:
Hi,
absolut scary. I dont no from where the "trusted" came.
-------------
cat /opt/SUNWut/lib/prototype/inetd.conf.SUNWut.prototype
#
# @(#)utinetd.conf 1.4 06/09/05
#
# The utrcmd service allows certain Sun Ray administrative commands to
be
# remotely run (by "root" or members of the "utadmin" group) from
systems
with
# the same group manager signature file. Sites concerned with security
may
# choose to disable it.
#
utrcmd stream tcp nowait root /opt/SUNWut/lib/in.utrcmdd
in.utrcmdd
-----------
I installed srss new, without using the backup.
My Secondary tells me that:
"ray01: Connection refused"
if try to kill a usersession i get a "utrcmd error" and utrcmd wrote in
the
logs that a connection is refused.
I cant find anyone who can tell me who work with the "trusted", i dont
no
what that mean or how can i use that.
Jens
2010/11/12 Meik Hellmund<[email protected]>
On Fri, 12 Nov 2010 07:53:59 +0100
Jens<[email protected]> wrote:
Hi,
i have a problem with srss 3.1. In my /etc/inetd.conf i find a
entry
"utrcmd stream tcp nowait,trusted
root /opt/SUNWut/lib/in.utrcmdd in.utrcmdd"
I guess the "trusted" make some problem. I cant attach a secondary
server. On my third server inetd.conf looks like
"utrcmd stream tcp nowait root /opt/SUNWut/lib/in.utrcmdd
in.utrcmdd"
Problem:
If i delete the "trusted" and i restart the server or the srss
software (utrestart -c) this entry come back.
Does anyone knows who do that ? How can i turn that of ?
Sorry, I do not have a Solaris installation of SRSS. I have no idea
whether removing the "trusted" keyword is the right thing or whether
your problem is something different.
But it should be possible to find the code in the SRSS scripts which
inserts the keyword.
Regards, Meik
--
Meik Hellmund
Mathematisches Institut, Uni Leipzig
e-mail: [email protected]
http://www.math.uni-leipzig.de/~hellmund<http://www.math.uni-leipzig.de/%7Ehellmund>
_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users
_______________________________________________
SunRay-Users mailing
[email protected]http://www.filibeto.org/mailman/listinfo/sunray-users
_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users
_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users
_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users
