If You break Sun Enterprise M3000/M4000/M5000/M8000/M9000 Servers Domain
Here I want share information about how to recover Sun Enterprise M3000/M4000/M5000/M8000/M9000 Servers Domain if you break it from Oracle/Sun Solaris 10 OS environment.
“Any word at all is a candidate.
Use words to see the entire dictionary”
This messages you can usually meet whet you trying in panic way to bring system back online ………
Now I will explain what exactly going on in similar scenarios.
This is example of log from XSCF of domain console:
Read the rest of this entry »new release of dns servers for solaris 10 os i386/spac platform
I’m glad to announce that the new DNS server with my custom developing and tuning bug-fixing is finally released for Oracle/Sun Solaris 10 i386 and sparc platform. This application is totally 64bit binary compiled specially for Solaris OS native environment and doesn’t required extra C/C++ library packages as from SunFreeWare.com (GnuCC).
I make 2 Solaris install packages stream files for I386/x64 and sparcv9 platform. All required startup scripts and system files included in this packages. This DNS server already was successfully tested on Enterprise class based ISP system and report high performance in response and stable for DoS attacks.
Read the rest of this entry »Solaris CPU run query report
Here I would like to provide small awk bases script to collect information about CPU run query statistic report on Sun Solaris OS.
In most Sun Solaris OS (9,10) after installation and put production mode you can detect too much processes are on sleep mode then in run mode. It often generate System Low Performance when Running non-stop online processes like with Database Instances or Java Based Application Servers. At first time when you try to investigate running processes on the systems everything can be looks fine – system can have less than average usage less CPU usage more System Idle percent. You can got this report from vmstat and prstat outputs. Bunt to any case the application part is reporting to slow performance ……
To detect what’s is gong on in real – you can use my script and detect current system status.
Read the rest of this entry »Solaris Zones migration with ZFS
Here I will demonstrate how to migrate a Solaris Zone running
on T5220 server to a new T5220 server using ZFS as file system for
this Zone.
Introduction to Solaris Zones
Solaris Zones provide a new isolation primitive for the Solaris OS,
which is secure, flexible, scalable and lightweight. Virtualized OS
services look like different Solaris instances. Together with the
existing Solaris Resource management framework, Solaris Zones forms the
basis of Solaris Containers.
Oracle Solaris. How-to migrate Data from storage luns in ZPOOL
In this article I will provide solution – How to migrate data between different storage luns in-range one ZFS POOL in Solaris 10.
Let take example – we have next ZFS POOL grid:
root@solaris10 # zpool status grid
pool: grid
state: ONLINE
scrub: none requested
config:
NAME STATE READ WRITE CKSUM
grid ONLINE 0 0 0
c14t60060E800428E400000028E40000010Cd0 ONLINE 0 0 0
c14t60060E800428E400000028E400000111d0 ONLINE 0 0 0
c14t60060E800428E400000028E400000113d0 ONLINE 0 0 0
c14t60060E800428E400000028E400000115d0 ONLINE 0 0 0
c14t60060E800428E400000028E400000117d0 ONLINE 0 0 0
c14t60060E800428E400000028E40000053Ed0 ONLINE 0 0 0
c14t60060E800428E400000028E400000536d0 ONLINE 0 0 0
c14t60060E800428E400000028E400000539d0 ONLINE 0 0 0
c14t60060E800428E400000028E400000547d0 ONLINE 0 0 0
c14t60060E800428E400000028E400000548d0 ONLINE 0 0 0
errors: No known data errors
root@solaris10 #
DNS 2010 v9.7.2 64bit version for Solaris 10 Ultar-sparc T2+ edition
There new build version of BIND v9 DNS server special edition for Sun UltraSparc T1/T2+ CPU platform
- Zones may be dynamically added and removed with the “rndc addzone” and “rndc delzone” commands. These dynamically added zones are written to a per-view configuration file. Do not rely on the configuration file name nor contents as this will change in a future release. This is an experimental feature at this time.
- Added new “filter-aaaa-on-v4” access control list to select which IPv4 clients have AAAA record filtering applied.
- A new command “rndc secroots” was added to dump a combined summary of the currently managed keys combined with statically configured trust anchors.
- Added support to load new keys into managed zones without signing immediately with "rndc loadkeys". Added support to link keys with "dnssec-keygen -S" and "dnssec-settime -S".
DNS BIND v9.7 Release for Sun Solaris 10 x86_x64 bit
BIND 9.7.0 includes a number of changes from BIND 9.6 and earlier releases. Most are intended to simplify DNSSEC configuration.
New features include:
- Fully automatic signing of zones by "named"
- Simplified configuration of DNSSEC Lookaside Validation (DLV).
- Simplified configuration of Dynamic DNS, using the "ddns-confgen" command line tool or the "local" update-policy option. (As a side effect, this also makes it easier to configure automatic zone re-signing.)
- New named option "attach-cache" that allows multiple views to share a single cache.
- DNS rebinding attack prevention.
- New default values for dnssec-keygen parameters.
- Support for RFC 5011 automated trust anchor maintenance (see README.rfc5011 for additional details).
- Smart signing: simplified tools for zone signing and key maintenance.
- The "statistics-channels" option is now available on Windows.
- A new DNSSEC-aware libdns API for use by non-BIND9 applications (see README.libdns for details).
- On some platforms, named and other binaries can now print out a stack backtrace on assertion failure, to aid in debugging.
- A "tools only" installation mode on Windows, which only installs dig, host, nslookup and nsupdate.
- Improved PKCS#11 support, including Keyper support and explicit OpenSSL engine selection (see README.pkcs11 for additional details).
Solaris 10 wanboot installation or Solaris 10 installation over web / HTTP
In this articles I will provide the Solaris 10 Installation mode over HTTP named as WanBoot method for SPARC Systems.
This method is helpful for that systems where is not possible to use Install Server in the same Ethernet Network segment as client location and also not possible to place Boot Server too.
For Example: you have one or several new fresh servers which is located in DMZ Zone or isolated by Firewall and by Enterprise rules there not acceptable to open NFS,TFTP,SSH,RSH,Telnet,FTP services between Install Server and possible new systems, but Administrators agree to open one TCP port – HTTP or HTTPS. Here I will provide only HTTP installation way.
Another possible situation where you can use this method can be when new fresh system located on customer site with Internet access and you just have remote access to this system into ALOM over VPN or direct access though Internet. Therefore you can use your already prepared Installation WanBoot server for this systems.
Read the rest of this entry »BIND v 9.6.2 FINALL DNS 64BIT VERSION FOR SOLARIS 10 SPARC EDITION
| Today I released next BIND v 9.6.2 62bit version for Solaris 10 sparc Edition. It compiled with origin SUN Solaris 10 C/C++ library links and system shared sources without any links to GNU C (GCC) and other kind Free Foundation tools. You can download it from bellow link: binary_ready_BIND_9.6.2.tar.bz2To build right configuration file you can use full reference documentation: BIND 9 Administrator Reference ManualNew features in BIND 9.6.2:Full NSEC3 supportBIND 9.6 includes support for the NSEC3 record generation as defined in RFC 5155, DNS Security (DNSSEC) Hashed Authenticated Denial of Existence. As an alternative to NSEC, it can prevent walking DNSSEC zones (zone enumeration). It also permits gradual expansion of delegation-centric zones. (NSEC3 has an opt-out bit which lets the zone owner save overhead by skipping over signing delegations to unsigned children zones.) NSEC3 is not recommended unless there is a pressing need for the features NSEC3 provides. It is expensive for both the server and the client. Most zones do not need the addition expense incured by the use of NSEC3. |
Read the rest of this entry »
HOW TO INSTALL SOLARIS 10 ×86 ON HP PROLIANT BL460C G6 – PART V
Network configuration is ready, now we will install “Solaris JumpStart Installation Server”.
| PART I |
| PART II |
| PART III |
| PART IV |
# mkdir -p /Install/Solaris10/
# mkdir /Install/jumpstart
# /cdrom/sol_10_1009_x86/Solaris_10/Tools/setup_install_server /Install/Solaris10/
Now is necessary to customize Solaris 10 install miniroot image to include in it HP Proliant BL460c G6 2 drivers:
|
Broadcom BCM57710/BCM57711/BCM57711E 10 GigE Driver from BRCMbnxe-4.8.11-solaris10-i386.tar.gz file HP Smart Array Controller Drive from CPQary3-2.3.0-solaris10-i386.tar.gz file. Both of this files you can download from HP drivers web site or direct from this link.
1) Unpack miniroot image files for each architecture – x86 and amd64:#/boot/solaris/bin/root_archive unpack /Install/Solaris10/boot/x86.miniroot /var/tmp/x86.miniroot
#/boot/solaris/bin/root_archive unpack /Install/Solaris10/boot/amd64/x86.miniroot /var/tmp/amd64.miniroot # rm /var/tmp/amd64.miniroot/tmp/AdDrEm.lck 2) Unpack HP Proliant BL460c G6 Network and RAID controller drivers in to /var/tmp/Drivers:# unrar HP_Proliant_BL460c_G6.rar in to /tmp |
DNS and BIND (5th Edition) (9780596100575): Cricket Liu, Paul Albitz: Books
JumpStart Technology: Effective Use in the Solaris Operating Environment (With CD-ROM) (0076092011965): John S. Howard, Alex Noordergraaf: Books



