Windows XP console woe

Folks,

I am trying to connect using a windows XP console to SMC and not meeting with

very much success.If I run the console direct from the SMC server it works fine,when

however I use the XP based console I get a box saying Communication may not be

established with the server-the server version may be incompatable.

Now,I have checked the various firewalls we have and all should be ok-I can

see packets being exchanged between server and client on the various ports so

it does not look like an obvious firewall issue.I have also limited the range of ports used

as suggested in some previous postings.

I really need to get this console working and am fast running out of ideas!

Has anybody else been in this situation and found a fix?

I would like to try to get more detail in the various logs-does anybody know if this is possible?

My next step is to look at the firewall logs to see if there is any problem,but it

would be great if the XP console could produce some form of log,but so far I have

found nothing..

Ian

[1118 byte] By [izumia] at [2007-11-26 23:44:37]
# 1

Hi Ian,

> Now,I have checked the various firewalls we have and all should be

> ok-I can see packets being exchanged between server and client on the

> various ports so it does not look like an obvious firewall issue.I have also

> limited the range of ports used as suggested in some previous postings.

What changes have you made to which files? And have you also had a firewall admin open some ports for you already? Which onse?

The SunMC Server normally listens on port 2099, and after login it can choose to accept new incoming connections from Consoles on ports between 2000-6000 (/var/opt/SUNWsymon/cfg/javaserver.properties on your Server).

Once the Console has connected to the Server it can receive connections back to itself on ports 45000-48000 (<drive>:\path\to\sunmc\Console\javaconsole.properties on Windows).

Think of it this way. The Console initially connects to port 2099 on the SunMC Server, but once they start trying to authenticate you the Server says: "You can talk to me in the future on port (random between 2000 to 6000) and the Console says: "You can talk to me on the future on port (random between 45000-48000).

You can edit the respective .properties files to narrow the range of ports, but you're still going to have to talk to your firewall admin and tell him the ranges you chose so he can open things up for you.

Alternatively, have you looked at using the SunMC web interface (port 8443)? It can't do everything the Java Console can... but it may be enough for light use... and requires far fewer ports.

Regards,

Mike.Kirk@HalcyonInc.com

http://www.HalcyonInc.com

Mike-Kirka at 2007-7-11 15:16:11 > top of Java-index,Administration Tools,Sun Management Center...
# 2

Hi Mike,

Many thanks for the reply.

I have tried a few things and have more or less proved that the

firewall is nor causing the problem-I have already tried what

you set out in your reply in that I altered the javaconsole.properties

and the javaconsole( files on the server and PC,opened

the relevant ports on the firewall and it still failed..

So,it leaves me a couple of options:-

a) it's a PC problem-(maybe the virus checker is blocking the console in

some fashion?)

b) There is some problem either on the server or console-I really

need to log as much detail as possible.Any hints/tips on how to do

this would be very useful.

3) Maybe some windows XP update has caused this-this seems unlikely as both my own and by bosses cannot connect.

The web interface works ok,but my boss really wants the proper

Java console.

Cheers,

Ian

.

izumia at 2007-7-11 15:16:11 > top of Java-index,Administration Tools,Sun Management Center...
# 3
Just looking in a previous mail and say"or run the Solaris Java Console over a ssh X tunnel (port 22) and an X system on their Windows desktop like Cygwin or Exceed."How is this done? We use ssh and maybe this would provide a solution?Best wishes,Ian
izumia at 2007-7-11 15:16:11 > top of Java-index,Administration Tools,Sun Management Center...
# 4

Hi Izumi,

What version of Java is on your SunMC Server? What version is on your Windows system? If your Windows version is much older you can install a second newer version from java.sun.com and edit es-console.bat to tell SunMC to use it. (i.e. maybe just make sure the versions match, as one less thing to debug/test for now).

When you try to login from the Windows Console, do you enter the hostname or IP of your SunMC Server? If it's the hostname, are you sure it resolves? Can your Windows system ping the SunMC Server using its IP? Can your Server ping Windows by IP? Maybe the corporate firewall is OK, but you still have XP's personal firewall turned on, or another personal firewall like ZoneAlarm?

Almost any ssh client can "tunnel" X commands... so if you can ssh from your Windows system to the SunMC Server you're 90% there. All you need on the Windows side is an X server (Exceed is a commercial version, but cygwin.com will let you download a free version (run their setup.exe, and when it gives you the options of what packages to install on a long list, scroll to the bottom and make sure the X11 option says "Install" instead of "Default")).

Xming may work as well (I haven't tried)... but it would be quicker to download and test than cygwin:

http://gears.aset.psu.edu/hpc/guides/xming/

Do you have a support contract for SunMC? If so, you can also call Sun and they'll help you debug the Console issues.

Regards,

Mike.Kirk@HalcyonInc.com

http://www.HalcyonInc.com

Aroneka at 2007-7-11 15:16:11 > top of Java-index,Administration Tools,Sun Management Center...
# 5

Many thanks for the reply,

> Hi Izumi,

>

> What version of Java is on your SunMC Server?

1.4.2_08 on the server,java version

What

> version is on your Windows system? 1.4.2_03 on the PC.

If your Windows

> version is much older you can install a second newer

> version from java.sun.com and edit es-console.bat to

> tell SunMC to use it. (i.e. maybe just make sure the

> versions match, as one less thing to debug/test for

> now).

>

> When you try to login from the Windows Console, do

> you enter the hostname or IP of your SunMC Server? If

> it's the hostname, are you sure it resolves?

I have used both hostname and IP address-I have noticed that if

the console can't resolve the host name it produced a different error

to the one I have been seeing ("the secified server host is invalid "is produced if the host name can't be resolved) rather than "Communication could not be established" which is what I am

currently seeing.

Can your

> Windows system ping the SunMC Server using its IP?

> Can your Server ping Windows by IP?

My pc can ping the server however the server cannot ping the PC-the use of ping is very restricted for security..

Maybe the

> corporate firewall is OK, but you still have XP's

> personal firewall turned on, or another personal

> firewall like ZoneAlarm?

>

I use zonealarm.I have tried it with zonealarm off and

still get the same error message.

On the surface it looks as if the console and the server can

communicate ,as I see a far amount of network traffic

when the connection is established-also the firewall logs show

packets being passed..

> Almost any ssh client can "tunnel" X commands... so

> if you can ssh from your Windows system to the SunMC

> Server you're 90% there. All you need on the Windows

> side is an X server (Exceed is a commercial version,

> but cygwin.com will let you download a free version

> (run their setup.exe, and when it gives you the

> options of what packages to install on a long list,

> scroll to the bottom and make sure the X11 option

> says "Install" instead of "Default")).

>

> Xming may work as well (I haven't tried)... but it

> would be quicker to download and test than cygwin:

>

>http://gears.aset.psu.edu/hpc/guides/xming/

> o you have a support contract for SunMC? If so, you

> can also call Sun and they'll help you debug the

> Console issues.

>

No SMC support-At the moment we are evaluating the software so no support (yet)..

Thanks once again for the mail(s),

best wishes,

Ian

> Regards,

>

> Mike.Kirk@HalcyonInc.com

> http://www.HalcyonInc.com

izumia at 2007-7-11 15:16:12 > top of Java-index,Administration Tools,Sun Management Center...