Patch-ID# 110861-14 Keywords: security sun management center agent Synopsis: Sun Management Center 3.0: (RR) Patch for Solaris 2.5.1 Date: Sep/24/2003 Install Requirements: Additional instructions may be listed below See Special Install Instructions Solaris Release: 2.5.1 SunOS Release: 5.5.1 Unbundled Product: Sun Management Center Unbundled Release: 3.0 Xref: Topic: Sun Management Center 3.0: (RR) Patch for Solaris 2.5.1 Relevant Architectures: sparc BugId's fixed with this patch: 4252459 4273053 4367329 4382313 4393870 4394182 4396800 4397379 4397692 4398282 4398979 4398980 4398984 4399229 4402478 4405052 4407106 4409159 4410415 4410476 4414018 4414114 4414320 4417767 4417934 4418219 4418773 4420049 4421880 4422805 4424767 4425229 4426286 4426463 4427745 4431274 4435238 4445242 4450752 4454597 4455381 4456023 4456455 4456559 4467011 4468369 4469673 4469680 4470103 4470282 4473741 4475902 4480284 4480386 4481320 4483792 4484159 4485357 4485511 4485919 4487265 4488563 4489351 4490282 4490283 4490970 4491117 4494593 4498397 4498401 4498797 4499715 4502688 4506901 4506905 4509938 4512199 4512455 4513089 4523763 4529360 4532652 4554484 4554510 4558958 4587673 4620473 4632618 4633983 4634582 4636825 4639954 4640046 4645798 4679307 4713353 4716057 4732527 4733253 4736678 4736885 4751460 4755912 4759497 4761030 4779891 4786744 4795542 4802324 4805054 4812356 4842149 4848424 4860801 4907047 Changes incorporated in this version: 4907047 Patches accumulated and obsoleted by this patch: 112586-01 Patches which conflict with this patch: Patches required with this patch: Obsoleted by: Files included with this patch: /etc/init.d/init.es_agent /opt/$CLASSDIR/sbin/setup_sunmctotng /opt/SUNWsymon/addons/AdvancedMonitoring/lib/agent/.suneda_sec /opt/SUNWsymon/addons/AdvancedMonitoring/lib/agent/cdtest /opt/SUNWsymon/addons/AdvancedMonitoring/lib/agent/connect_check /opt/SUNWsymon/addons/AdvancedMonitoring/lib/agent/disktest /opt/SUNWsymon/addons/AdvancedMonitoring/lib/agent/dispatcher /opt/SUNWsymon/addons/AdvancedMonitoring/lib/agent/ecpptest /opt/SUNWsymon/addons/AdvancedMonitoring/lib/agent/ed_cmd /opt/SUNWsymon/addons/AdvancedMonitoring/lib/agent/eda_configd.ksh /opt/SUNWsymon/addons/AdvancedMonitoring/lib/agent/edagent /opt/SUNWsymon/addons/AdvancedMonitoring/lib/agent/edainfo.a /opt/SUNWsymon/addons/AdvancedMonitoring/lib/agent/edainfo.so /opt/SUNWsymon/addons/AdvancedMonitoring/lib/agent/enatest /opt/SUNWsymon/addons/AdvancedMonitoring/lib/agent/entdiag /opt/SUNWsymon/addons/AdvancedMonitoring/lib/agent/even_disk_test /opt/SUNWsymon/addons/AdvancedMonitoring/lib/agent/fputest /opt/SUNWsymon/addons/AdvancedMonitoring/lib/agent/fru_list /opt/SUNWsymon/addons/AdvancedMonitoring/lib/agent/func_check /opt/SUNWsymon/addons/AdvancedMonitoring/lib/agent/nettest /opt/SUNWsymon/addons/AdvancedMonitoring/lib/agent/nettest.conf /opt/SUNWsymon/addons/AdvancedMonitoring/lib/agent/odd_disk_test /opt/SUNWsymon/addons/AdvancedMonitoring/lib/agent/plntest /opt/SUNWsymon/addons/AdvancedMonitoring/lib/agent/pmemtest /opt/SUNWsymon/addons/AdvancedMonitoring/lib/agent/proc_test /opt/SUNWsymon/addons/AdvancedMonitoring/lib/agent/ptexec /opt/SUNWsymon/addons/AdvancedMonitoring/lib/agent/runtcl /opt/SUNWsymon/addons/AdvancedMonitoring/lib/agent/script_info /opt/SUNWsymon/addons/AdvancedMonitoring/lib/agent/scsi_disk_check /opt/SUNWsymon/addons/AdvancedMonitoring/lib/agent/sptest /opt/SUNWsymon/addons/AdvancedMonitoring/lib/agent/tapetest /opt/SUNWsymon/addons/AdvancedMonitoring/lib/server/hd-server.sh /opt/SUNWsymon/addons/AdvancedMonitoring/sbin/common.sh /opt/SUNWsymon/addons/AdvancedMonitoring/sbin/configd-check.sh /opt/SUNWsymon/addons/AdvancedMonitoring/sbin/hwds-setup.sh /opt/SUNWsymon/addons/AdvancedMonitoring/sbin/start-diag /opt/SUNWsymon/addons/AdvancedMonitoring/sbin/stop-diag /opt/SUNWsymon/addons/storage/sbin/t300cfg /opt/SUNWsymon/addons/wgs/sbin/es-setup.sh /opt/SUNWsymon/apps/classes/com/sun/entdiag/ui/msg/EDResource.properties /opt/SUNWsymon/apps/classes/esamon.jar /opt/SUNWsymon/apps/classes/esweb.jar /opt/SUNWsymon/apps/classes/hdcon.jar /opt/SUNWsymon/apps/classes/hdsrv.jar /opt/SUNWsymon/base/bin/sparc-sun-solaris2.5/gsi /opt/SUNWsymon/base/bin/sparc-sun-solaris2.5/logscand /opt/SUNWsymon/base/cfg/base-config.x /opt/SUNWsymon/base/cfg/base-init.toe /opt/SUNWsymon/base/cfg/base-mibman-d.prc /opt/SUNWsymon/base/cfg/base-mibman-d.x /opt/SUNWsymon/base/cfg/base-modules-d.dat /opt/SUNWsymon/base/cfg/base-topology-action-d.x /opt/SUNWsymon/base/cfg/base-topology-license.prc /opt/SUNWsymon/base/cfg/base-topology.x /opt/SUNWsymon/base/cfg/base-trap-info-d.x /opt/SUNWsymon/base/cfg/class-alarm.toe.data /opt/SUNWsymon/base/cfg/class-event.toe.data /opt/SUNWsymon/base/cfg/class-history.toe.data /opt/SUNWsymon/base/cfg/class-module.toe.data /opt/SUNWsymon/base/cfg/usm-user-d.prc /opt/SUNWsymon/base/lib/sparc-sun-solaris2.5/gsipfWG.so.1.0 /opt/SUNWsymon/base/lib/sparc-sun-solaris2.5/libcfgnewpiclWG.so /opt/SUNWsymon/base/lib/sparc-sun-solaris2.5/libcfgnewpiclWG.so.1.0 /opt/SUNWsymon/base/lib/sparc-sun-solaris2.5/libcfgpiclWG.so.1.0 /opt/SUNWsymon/base/lib/sparc-sun-solaris2.5/libcfgsun4u.so.1.0 /opt/SUNWsymon/base/lib/sparc-sun-solaris2.5/libcfgsun4uWG.so.1.0 /opt/SUNWsymon/base/lib/sparc-sun-solaris2.5/libclog.so.1.0 /opt/SUNWsymon/base/lib/sparc-sun-solaris2.5/libconfigdWG.so.1.0 /opt/SUNWsymon/base/lib/sparc-sun-solaris2.5/libgsi.so /opt/SUNWsymon/base/lib/sparc-sun-solaris2.5/libgsi.so.1.0 /opt/SUNWsymon/base/lib/sparc-sun-solaris2.5/libintclog.so.1.0 /opt/SUNWsymon/base/lib/sparc-sun-solaris2.5/libinterface.so.1.0 /opt/SUNWsymon/base/lib/sparc-sun-solaris2.5/libintinet.so.1.0 /opt/SUNWsymon/base/lib/sparc-sun-solaris2.5/libintunix.so.1.0 /opt/SUNWsymon/base/lib/sparc-sun-solaris2.5/libkr.so.1.0 /opt/SUNWsymon/base/lib/sparc-sun-solaris2.5/libprocess.so.1.0 /opt/SUNWsymon/base/lib/sparc-sun-solaris2.5/libsnmpv2.so.1.0 /opt/SUNWsymon/base/lib/sparc-sun-solaris2.5/libt300.so /opt/SUNWsymon/base/lib/sparc-sun-solaris2.5/libt300.so.1.0 /opt/SUNWsymon/base/lib/sparc-sun-solaris2.5/pkgconfigdWG.so.1.0 /opt/SUNWsymon/base/lib/sparc-sun-solaris2.5/pkgdata.so /opt/SUNWsymon/base/lib/sparc-sun-solaris2.5/pkgdata.so.1.0 /opt/SUNWsymon/base/lib/sparc-sun-solaris2.5/pkgprocess.so.1.0 /opt/SUNWsymon/base/lib/sparc-sun-solaris2.5/pkgsnmpv2.so.1.0 /opt/SUNWsymon/base/lib/sparc-sun-solaris2.5/pkgstatus.so.1.0 /opt/SUNWsymon/base/lib/sparc-sun-solaris2.5/pkgsymon.so /opt/SUNWsymon/base/lib/sparc-sun-solaris2.5/pkgsymon.so.1.0 /opt/SUNWsymon/base/lib/sparc-sun-solaris2.5/pkgt300.so /opt/SUNWsymon/base/lib/sparc-sun-solaris2.5/pkgt300.so.1.0 /opt/SUNWsymon/base/lib/sparc-sun-solaris2.5/pkgunix.so /opt/SUNWsymon/base/lib/sparc-sun-solaris2.5/pkgunix.so.1.0 /opt/SUNWsymon/base/sbin/base-setup.sh /opt/SUNWsymon/base/sbin/es-mcp-get /opt/SUNWsymon/bin/configdWG /opt/SUNWsymon/lib/platform/cfg/SUNW,Sun-Fire-880/cfg_picl.so.1 /opt/SUNWsymon/lib/platform/cfg/SUNW,Sun-Fire-880/lib880fmt.so /opt/SUNWsymon/lib/platform/cfg/SUNW,Sun-Fire-880/lib880fmt.so.1 /opt/SUNWsymon/lib/platform/cfg/SUNW,Sun-Fire-880/libsmcplugin.so.1 /opt/SUNWsymon/lib/platform/cfg/SUNW,Sun-Fire-880/piclreader.conf /opt/SUNWsymon/lib/platform/cfg/SUNW,Sun-Fire-880/piclreq.conf /opt/SUNWsymon/modules/cfg/Config-Reader-models-d.x /opt/SUNWsymon/modules/cfg/Config-Reader4u-d.rul /opt/SUNWsymon/modules/cfg/Config-Reader4u-ruleinit-d.x /opt/SUNWsymon/modules/cfg/Config-Reader4u-ruletext-d.x /opt/SUNWsymon/modules/cfg/Config-Reader4uwg-d.def /opt/SUNWsymon/modules/cfg/Config-Reader4uwg-d.flt /opt/SUNWsymon/modules/cfg/Config-Reader4uwg-d.rul /opt/SUNWsymon/modules/cfg/Config-Reader4uwg-d.x /opt/SUNWsymon/modules/cfg/Config-Reader4uwg-m.x /opt/SUNWsymon/modules/cfg/Config-Reader4uwg-models-d.x /opt/SUNWsymon/modules/cfg/Config-Reader4uwg-ruleinit-d.x /opt/SUNWsymon/modules/cfg/Config-Reader4uwg-ruletext-d.x /opt/SUNWsymon/modules/cfg/agent-stats-d.rul /opt/SUNWsymon/modules/cfg/agent-stats-d.x /opt/SUNWsymon/modules/cfg/agent-stats-models-d.x /opt/SUNWsymon/modules/cfg/agent-stats-ruleinit-d.x /opt/SUNWsymon/modules/cfg/agent-stats-ruletext-d.x /opt/SUNWsymon/modules/cfg/fscan-d.rul /opt/SUNWsymon/modules/cfg/fscan-d.x /opt/SUNWsymon/modules/cfg/fscan-models-d.x /opt/SUNWsymon/modules/cfg/fscan-ruleinit-d.x /opt/SUNWsymon/modules/cfg/mcp-d.prc /opt/SUNWsymon/modules/cfg/mcp-d.x /opt/SUNWsymon/modules/cfg/t300-d.prc /opt/SUNWsymon/modules/cfg/t300-d.rul /opt/SUNWsymon/modules/cfg/t300-d.x /opt/SUNWsymon/modules/cfg/t300-models-d.x /opt/SUNWsymon/modules/cfg/t300-ruleinit-d.x /opt/SUNWsymon/modules/cfg/t300-ruletext-d.x /opt/SUNWsymon/modules/cfg/t300-shell.tcl /opt/SUNWsymon/modules/cfg/topology-d.prc /opt/SUNWsymon/modules/cfg/topology-d.x /opt/SUNWsymon/modules/cfg/topology-license-d.x /opt/SUNWsymon/modules/cfg/topology-license-m.x /opt/SUNWsymon/modules/cfg/topology-license-models-d.x /opt/SUNWsymon/modules/cfg/topology-shadow-d.prc /opt/SUNWsymon/modules/sbin/mcp_propagate.sh /opt/SUNWsymon/modules/sbin/mcp_publish.sh /opt/SUNWsymon/modules/sbin/restart_picld.sh /opt/SUNWsymon/sbin/checkkey /opt/SUNWsymon/sbin/es-common.sh /opt/SUNWsymon/sbin/es-db-patch /opt/SUNWsymon/sbin/es-details /opt/SUNWsymon/sbin/es-inst /opt/SUNWsymon/sbin/es-load-default /opt/SUNWsymon/sbin/es-makeagent /opt/SUNWsymon/sbin/es-platform /opt/SUNWsymon/sbin/es-setup /opt/SUNWsymon/sbin/es-start /opt/SUNWsymon/sbin/es-stop /opt/SUNWsymon/sbin/es-tool /opt/SUNWsymon/sbin/es-uninst /opt/SUNWsymon/sbin/install-java.sh /opt/SUNWsymon/sbin/remove-qpatch.sh /opt/SUNWsymon/sbin/sm_setup_agent.sh /opt/SUNWsymon/sbin/sm_setup_metadata.sh /opt/SUNWsymon/sbin/sunmc-postinstall.sh /opt/SUNWsymon/util/bin/sparc-sun-solaris2.5/ccat /opt/SUNWsymon/util/bin/sparc-sun-solaris2.5/ccreate /opt/SUNWsymon/util/bin/sparc-sun-solaris2.5/cecho /opt/SUNWsymon/util/bin/sparc-sun-solaris2.5/ctail /opt/SUNWsymon/util/cfg/health-monitor-mib.mib /opt/SUNWsymon/util/cfg/kernel-reader-mib.mib /var/sadm/pkg/SUNWessta/install/preremove Problem Description: 4907047 client API is out of sync with the actual status of the agents (from 110861-13) 4842149 Unable to setup Advanced System Monitoring for SunMC on Enchilada Server (from 110861-12) 4848424 SUNMC processes have to be stopped before patch installation. 4860801 "topologyRoot resolveHostName failed" message on platform.log file using adapter (from 110861-11) 4779891 perftool-shell.tcl Process loops 4786744 SUNWesweb installs world writable directories 4795542 logscanner module creates world writable files (from 110861-10) 4713353 all SunMC components have to be stopped before patch install 4736885 Agent on Netra dumps core due to fix from 4512455 4805054 sunmc platform agent process doesn't come up when you reboot 4812356 Agent will not start if base-config.x is not replaced after 3.0 to 3.5 migration (from 110861-09) 4802324 SunMC 3.0 should support esp addons (from 110861-08) 4716057 agent core dumps if a processor is going offline/online frequently 4736678 MCP module creates root owned world-writable directory /tmp/sunmclog/ 4252459 Object's value should be able to reset. 4751460 SunMC Agent seg fault in statusSortCommand 4732527 HWDS agent creates root owned world-writable directories and files. 4554484 the enatest failed under HD1.1_RR: ses0(SENA2/front)FATAL 4755912 /opt/SUNWsymon/jclass/ and sub directories are group writable 4759497 SunMC3.0 modifies owner/permissions on /var/opt/oracle/oratab 4761030 SunMC - Many source files have incorrect sccs keywords (from 110861-07) 4487265 Fscan should have configurable ability to alarm on every instance of a message 4512455 SunMC reporting negative value for Spins on Mutexes 4733253 setup_sunmctotng creates creates world-writable directories and files (from 110861-06) 4679307 Topology agent dies with 'Excessive virtual memory use' 4480386 file scan module can't be loaded successfully through loadModule function 4426463 topology agent is dying due to excessive virtual memory usage. 4425229 Default SunMC 3.0 agent polling of 10 mins is too infrequent. 4558958 es-makeagent is looking in the wrong place 4636825 Config reader does not pick up memory error on 4500 4488563 Inconsistent output on Enterprise Server 3500-6500 between OBP3.2.29 and older (from 110861-05) 4435238 Option 8 in es-servercontrol.sh does not work. 4456559 Connection Lost Event Listeners fail to receive Connection Lost Events. 4554510 group name doesn't work well 4620473 any ordinary user can make the server host malfunction after setup. 4634582 When 'logscand' process is killed, a process consumes very high CPU 4490283 backup/restore does not handle file size > 2 Gig 4418773 Agent is very busy in collecting data for multiple T3 4587673 Inaccurate Domain Status Summary/Topology issue 4523763 Telnet option in tools menu gets replaced by Reports Manager 4639954 multi-instance PV/LV can't access .properties file 4632618 some modules/tables are in indeterminate state (black splat) 4490970 Taiwan island doesn't appear on the china.gif image 4532652 Agent process instructs server to use the wrong interface. 4633983 Grouping service becomes unavailable, throws exception 4645798 memory mapped files consume a lot of memory that will bloat the agent with PRM. (from 112586-01) 4640046 agent is not able to handle some wrong snmp pdu (from 110861-04) 4529360 SunMC should support JDK's >= 1.2.2_06 4513089 Cannot create MCP parcel 4512199 startup.profile file contains pathes to a Sun internal host /net/symax/... 4473741 port for look up service should be configurable 4490282 SUNWesora package needs to be patched to enable partitioning feature 4467011 the status of new users is not propagated to all agents 4470282 Shipped ACL file has a serious security hole 4475902 Local probe service dose not work 4491117 HostdetailsBean fails if targetHost is not a machine name 4483792 Need SunMC to both display and alarm on the failure of a T3 tray. 4417767 configd does not show the simm size and status on a E3500 machine 4499715 when a module uses separate shell,sometime es-stop does not stop the agent 4470103 MCP does not work for modules loaded with 'default' option 4498797 History logging will log internal expression "?2e" into file for some properties 4489351 Grouping services does not allow new tasks to be added 4485357 Substring name of other agents delete all agents 4485511 IPV6 module is shutting down SunMC agent 4468369 using grouping to create a filter can't work well 4506905 Filter Manager does not list next release of Solaris for selection 4502688 Remove the popup that comes when using non-licensed features of product 4498401 Do not provide default seed during setup of SunMC 4494593 SunMC agent does not have a switch to turn off SNMPv1 messages in and out 4498397 Oracle package must not be uninstalled if there is a dependency existing 4506901 SunMC3.0 should install on next release of Solaris. 4509938 cfgserver does not propagate agent-usmusertbl-d.dat correctly 4414114 Error message seen while trying to get alarm info 4485919 SunMC 3.0 /etc/system changes stomp on GNOME /etc/system changes (from 110861-03) 4424767 A5x00 components need to report status change immediately. 4456455 SunMC agent core dumps during start-up on Sun Fire 15000 domain. 4469680 search for minPort/maxPort in domain-config.x before base-config.x 4469673 change suid of ptexec. 4456023 physical mapping does not show memory test for Serengeti 4480284 agent defunct processes 4481320 more than one edagent was running on a system 4484159 some tests can't not be executed (from 110861-02) 4422805 pkgdata port ot C causes the agent lose the function call of clearError 4427745 symon agent "esd" dumps core 4421880 Probe viewer crashes Agent 4431274 Topology license module should not use timestamps and remove invalid licenses. 4450752 SunMC 3.0 does not support licensing for Addons 4455381 Licensing data is incorrect for 3 modules. 4414018 Exception error during installation and set-up of SunFire Addon. 4445242 HWDS Agent is not finding the firewall ports if SunMC 4426286 Error message in hd-server.sh when starting HD agent 4454597 SunMC3.0 is installing Qpatches as part of install script (from 110861-01) 4397692 Migration fails if kernel tuning files need to be changed. 4397379 es-uninst should remove java if installed in alternate location 4399229 Probe doesn't support a firewall between agent and server. 4405052 published mib's need to be updated for inconsistencies with modules 4382313 hwdiag.info is not available 4398282 "Hardware Diagnostic Suite Server not found." is displayed in English. 4396800 warning message when installing advanced monitoring on starcat - no config reade 4393870 HD Suite console has bad formatting so that some buttons are hidden. 4407106 Config reader aborts on U10 with high density SIMMs 4409159 WGS static config reader fails on older platforms running S8U1 or U2 4273053 In Symon discrepancy b/t physical view and manual as to memory slot location. 4410476 3.0 installation installs two configd on desktop or WGS machine 4414320 SunMC does not clear the old irrational alarm. 4410415 packbyfamily table has objects that are not present in server context. 4398979 MCP: restarts the agent 4398980 Module .dat file is removed when module is unloaded 4398984 MCP does not support module instance names 4367329 MCP does not work for multiple instance modules. 4394182 .sql and .log files in /tmp do not get cleaned up 4402478 variable name is displayed instead of its value 4417934 SunWessta fails to uninstall 4418219 patch fails to install from CD on Solaris 2.5.1 4420049 Incorrect question asked when migrating SunMC3.0 data to 3.0 Patch Installation Instructions: -------------------------------- Refer to the Install.info file within the patch for instructions on using the generic 'installpatch' and 'backoutpatch' scripts provided with each patch. Any other special or non-generic installation instructions should be described below. Special Install Instructions: ----------------------------- This patch needs to be applied to all machines in the Sun Management Center environment, that is the agents, server and consoles. For the following instructions $BASEDIR is the directory where the Sun Management Center has been installed. By default this directory is /opt Sun Management Center Agent Layer: Perform these steps on systems where Sun Management Center Agent Layer is installed. 1. If the Monitoring and Management of A5x00 and T3 devices module is installed and Storage A5x00 module is loaded, please unload it. 2. Stop the Sun Management Center agent using $BASEDIR/SUNWsymon/sbin/es-stop -a 3. Install this patch as per Patch Installation Instructions 4. Run the command $BASEDIR/SUNWsymon/sbin/remove-qpatch.sh, by default: /opt/SUNWsymon/sbin/remove-qpatch.sh 5. If you want to use the Storage A5x00 module, you must install the storage patch for SUNWluxop and/or SUNWluxox for the corresponding operating system, before proceeding to the next step. This may be retrieved from http://www.sun.com Sun Management Center Server Layer: Perform this step only on the systems where Sun Management Center Server layer is installed. 1. Stop the Sun Management Center Server using $BASEDIR/SUNWsymon/sbin/es-stop -S 2. Install this patch as per Patch Installation Instructions 3. Run setup of Sun Management Center using $BASEDIR/SUNWsymon/sbin/es-setup Start the Sun Management Center Agent: 1. $BASEDIR/SUNWsymon/sbin/es-start -a 2. Load the Storage A5x00 module (if desired). Notes for Bug: 4759497 ---------------------- Because of bug 4759497, SunMC3.0 setup would have modified owner and permissions of oracle's /var/opt/oracle/oratab file to root and 666 respectively. It is advisable that this file be examined for any exploit and manually reset the ownership to oracle user (usually oracle) and group (usually dba) and permissions set to 644. Notes for Bug: 4733253 ---------------------- If directory /var/opt/SUNWsymon/SunMC-TNG, its permissions will be set to 755. if file /var/opt/SUNWsymon/SunMC-TNG/SunMCToTngAdaptorMain.log its permissions will be set to 644. Notes for Bug: 4558958 ---------------------- This fix corrects the es-makeagent script which is broken during the PU4 release of SunMC due to changes in the directory structure for some SunMC add-ons. Please note: - SunMC PU4 CD is up-to-date till patch05. - SunMC PU4 CD also supports SunMC installation on Solaris 9. - Patches can not be separated out layer-wise. The image created using es-makeagent will not bundle any SunMC patches with it. Also, this is no more an effective solution considering the fact that the patch available with the PU4 CD is not a latest patch. Considering the above, these are the constraints for this fix : 1. The fix will work only with SunMC PU4 image. i.e. SunMC PU4 image is the only valid source image to create agent-only image using es-makeagent script. 2. Users need to update their system for the latest SunMC patches after installing ( and before setup ) an agent from image created by es-makeagent script. This is more important for Solaris 9 installations as unpatched SunMC configuration scripts are not Solaris 9 enabled. Instructions for turning off SNMPv1 and/or SNMPv2c -------------------------------------------------- Sun Management Center agent's by default are SNMPv1, SNMPv2c and SNMPv2usec enabled. Both SNMPv1 and SNMPv2c use the community based security model in which the community string is sent in clear text along with the SNMP PDU ( Protocol Data Unit ). Sun Management Center's server layer and the agents use SNMPv2usec for communicating. The implementation is compliant to RFC 1910. The agents respond to SNMPv1 and SNMPv2c query thereby providing read only access to the Management information. It will be possible to turn-off the SNMP responses for SNMP1v1 and SNMPv2c requests by configuring the domain-config.x file which resides on the agent hosts /var/opt/SUNWsymon/cfg directory. To turn off SNMPv1 communication the user can go and edit the domain-config.x to contain the following entry .. agent = { agentServer = "agentHostName" snmpPort = "161" SNMPv1 = off } .. .. Similarly to turn off SNMPv2c communication the user can specify the entry as shown: .. agent = { agentServer = "agentHostName" snmpPort = "161" SNMPv2c = off } .. - By default SNMPv1 & SNMPv2c will not be turned off. - SNMPv2usec communication CAN NOT be turned off. Additional Information ---------------------- 1. Bug: 4467011 the status of new users is not propagated to all agents Fix: 1. The security keys will not be generated when setup is re-run, if the previous setup was done correctly and all security key files are found at /var/opt/SUNWsymon/cfg directory. 2. A new option -F was added, which will allow user to force the re-seed. The fix affects only when es-setup is re-run. No change if you are doing setup for the first time. 2. Bug: 4473741 port for lookup service is not configurable Fix: If default port for lookup service is busy, setup will ask user the other optional port. 3. Bug: 4498401 Do not provide default seed during setup of SunMC Fix: Setup will not allow user to select default seed anymore. User has to enter a seed. README -- Last modified date: Wednesday, September 24, 2003