Sconadm & JASS - unable to register
Hi,
I have a newly installed system (SPARC/6-06) that I am unable to register. When running
sconadm register -a -r sconadm.register -e softwareUpdate
the command just sits there and never comes back.
I have tried to verify the connection with
/usr/lib/cc-cfw/platform/transport/bin/cctrunner -p
and get the following error:-
unhandled exception: Shared CNS CCR lacks required properties: cns.security.privatekey, cns.transport.serverurlcns.assetid/cns.clientid
Does JASS disable anything that is required by sconadm?
Thanks for any suggestions.
Message was edited by:
kjdavidson
[653 byte] By [
kjdavidson] at [2007-11-26 10:24:33]
# 1
There shouldnt be an issue with JASS as far as I'm aware. The error you get trying to run the cctrunner is simply because the host is not registered yet and does not have an asset id.
Have you verified that the host can connect to both https://updates.sun.com (for patches once the host is registered) and https://cns-services.sun.com (to actually register the host).
Additionally, there was a brief outage last night which may have impacted your ability to register. Are you still seeing this issue now?
# 2
Connetivity to both of those hosts is OK:-
bash-3.00# telnet updates.sun.com 443
Trying 198.232.168.132...
Connected to updates.sun.com.
Escape character is '^]'.
^]
telnet> quit
Connection to updates.sun.com closed.
bash-3.00# telnet cns-services.sun.com 443
Trying 198.232.168.133...
Connected to cns-services.sun.com.
Escape character is '^]'.
^]
telnet> quit
Connection to cns-services.sun.com closed.
Still seeing the same issue however:-
sconadm register -a -r sconadm.register -e softwareUpdate
sconadm is running
and then no more output. Running a netstat -a shows no outward connections being made.
# 5
OK, I've fixed this. As suspected, it seemed to be failing due to JASS disabling services that are required.
svc:/network/rpc/bind:default (RPC bindings)
State: disabled since Thu Sep 28 13:56:17 2006
Reason: Disabled by an administrator.
See: http://sun.com/msg/SMF-8000-05
See: man -M /usr/share/man -s 1M rpcbind
Impact: 9 dependent services are not running:
svc:/network/rpc/metamed:default
svc:/network/rpc/meta:default
svc:/system/mdmonitor:default
svc:/milestone/multi-user:default
svc:/application/management/common-agent-container-1:default
svc:/milestone/multi-user-server:default
svc:/system/zones:default
svc:/network/rpc/metamh:default
svc:/network/rpc/mdcomm:default
Running svcadm enable bind
brough all of these online. Then
sconadm register -a -r sconadm.register -e softwareUpdate
sconadm is running
Authenticating user ...
finish registration!
Success! Unfortunately this means that I've now got RPC ports open on my previously locked down box.
