Multiple pconsole processes spawning indefinetly

UNIX AIX
1

Good night everyone, I've been trying to make AD authentication work with RBAC and I think I messed my test LPAR up.

I've manually modified the /etc/security/user.roles file, adding a role to one of my AD users (who is not defined locally) and then runned setkst. It worked fine, but now I found that there is an issue with pconsole (IBM Systems Director Console). It keeps spawning processes until it fills up the memory, the only solution I've found so far is to disable the pconsole services. A ps -ef looks like this, any ideas on what to do or where to look? I've already tried manually editing the /etc/security/user.roles file and running setkst again, but it doesn't fix the problem :confused:.

     UID      PID     PPID   C    STIME    TTY  TIME CMD
    root        1        0   0 15:25:27      -  0:00 /etc/init
    root  1966284        1   0 15:25:47      -  0:00 /usr/sbin/syncd 60
    root  2097370  4194460   0 15:25:59      -  0:00 /usr/sbin/syslogd -R
    root  2162832        1   0 15:26:03      -  0:00 [cimserve]
    root  2228402  4194460   0 15:25:55      -  0:00 /opt/freeware/cimom/pegasus/bin/cimssys platform_agent
    root  2293998  4194460   0 15:26:46      -  0:00 /usr/sbin/rsct/bin/rmcd -a IBM.LPCommands -r
    root  2359428        1   0 15:25:55      -  0:00 ./slp_srvreg -D
    root  2424966        1   0 15:25:59      -  0:00 /usr/sbin/secldapclntd
    root  2490448        1   0 15:25:36      -  0:00 /usr/ccs/bin/shlap64
    root  2621578        1   0 15:25:48      -  0:00 /usr/lib/errdemon
pconsole  2818228  4587562   0 15:39:30      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  2949254 51577914   0 15:39:34      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  3014836  3277016   0 15:39:28      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  3080256  7012436   0 15:26:57      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  3211264 36372598   0 15:28:24      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  3277016 50267152   0 15:39:28      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
    root  3342466  4194460   0 15:25:55      -  0:00 /usr/sbin/snmpd
pconsole  3408112 10289244   0 15:27:10      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  3604498 50201620   0 15:39:31      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
    root  3670164        1   0 15:25:56      -  0:00 /opt/freeware/cimom/pegasus/bin/CIM_diagd
    root  3735690  4194460   0 15:25:59      -  0:00 /usr/sbin/portmap
    root  4194460        1   0 15:25:54      -  0:00 /usr/sbin/srcmstr
    root  4260004        1   0 15:25:55      -  0:00 /opt/ibm/director/cimom/bin/tier1slp
    root  4325528  4194460   0 15:25:55      -  0:00 /opt/freeware/cimom/pegasus/bin/cimssys cimsys
    root  4391112        1   0 15:26:46      -  0:00 /usr/bin/topasrec  -L -s 300 -R 1 -r 6 -o /etc/perf/daily/
          -ypersistent=1 -O type=bin -ystart_time=15:26:46,Mar21,2013
         pconsole  4456454  5242888   0 15:39:29      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
    root  4522154  4194460   0 15:26:09      -  0:00 /usr/sbin/writesrv
pconsole  4587562  5570604   0 15:39:30      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  4653268  6488294   0 15:39:29      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
    root  4718754        1   0 15:26:09      -  0:00 /usr/sbin/cron
    root  4784142  4194460   0 15:26:46      -  0:00 /usr/sbin/sshd
    root  4849840  4194460   0 15:26:46      -  0:00 /usr/sbin/rtcd
    root  4915404        1   0 15:26:09      -  0:00 /usr/sbin/uprintfd
    root  4980900        1   0 15:26:09   vty0  0:00 -bash
    root  5046504        1   0 15:26:41      -  0:00 /usr/bin/cimlistener
    root  5112024        1   0 15:26:46      -  0:00 auditbin
    root  5177530        1   0 15:26:35      -  0:00 bin/nonstop_aix @/var/opt/tivoli/ep/runtime/nonstop/config/nonstop.properties
pconsole  5242888  6684906   0 15:39:29      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  5308440  6094918   0 15:39:31      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  5374188  7143428   0 15:39:29      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
    root  5439668  4194460   0 15:26:09      -  0:00 /usr/sbin/clcomd -d
    root  5505126  4194460   0 15:26:46      -  0:00 /bin/ksh /var/opt/tivoli/ep/runtime/nonstop/bin/cas_src.sh
pconsole  5570604  6029338   0 15:39:30      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  5636342  8323106   0 15:27:00      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  5701846 25100308   0 15:27:58      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
    root  5767408  5177530   0 15:26:37      -  0:05 /var/opt/tivoli/ep/_jvm/jre/bin/java -Xmx384m -Xminf0.01 -Xmaxf0.4 -Xbootclasspath/a:/var/opt/tivoli/ep/runtime/core/eclipse/plugins/com.ibm.rcp.base_6.2.1.20091117-       1800/rcpbootcp.jar:/var/opt/tivoli/ep/lib/com.ibm.logging.icl_1.1.1.jar:/var/opt/tivoli/ep/lib/jaas2zos.jar:/var/opt/tivoli/ep/lib/jaasmod ule.jar:/var/opt/tivoli/ep/lib/lwinative.jar:/var/opt/tivoli/ep/lib/lwinl.jar:/var/opt/tivoli/ep/lib/lwirolemap.jar:/var/opt/tivoli/ep/lib/lwisecurity.jar:/var/opt/tivoli/ep/lib/lwitools.jar:/var/opt/tivoli/ep/lib/passutils.jar:../../runtime/agent/lib/cas-bootcp.jar -Xverify:none -cp eclipse/launch.jar:eclipse/startup.jar:/var/opt/tivoli/ep/runtime/core/eclipse/plugins/com.ibm.rcp.base_6.2.1.20091117-1800/launcher.jar com.ibm.lwi.LaunchLWI
pconsole  5898240  7995406   0 15:26:58      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  5963852  9306148   0 15:27:01      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  6029338  7077896   0 15:39:30      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  6094918  3604498   0 15:39:31      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  6160442  8847444   0 15:27:03      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  6226158 11272288   0 15:27:07      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  6357130  6553854   0 15:39:27      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  6422702  2949254   0 15:39:35      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  6488294  5374188   0 15:39:29      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  6553854 50594844   0 15:39:27      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  6619352  2818228   0 15:39:30      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  6684906  4653268   0 15:39:29      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  6750222  6619352   0 15:39:30      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  6815776  6357130   0 15:39:28      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  6881324 44500092   0 15:39:32      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
    root  6946818  4194460   0 15:26:55      -  0:00 /usr/sbin/rsct/bin/IBM.DRMd
pconsole  7012436  8060964   0 15:26:57      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  7077896  4456454   0 15:39:30      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  7143428 50136096   0 15:39:28      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  7209046  7864446   0 15:27:00      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  7274508  6750222   0 15:39:31      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  7340038  8978496   0 15:27:02      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  7405570        1   0 15:26:56      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
    root  7471344  4194460   0 15:26:56      -  0:00 /usr/sbin/rsct/bin/IBM.ServiceRMd
pconsole  7536648  7405570   0 15:26:56      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  7602270  7733394   0 15:27:13      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  7667746  9044022   0 15:27:03      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  7733394 10682474   0 15:27:13      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  7798804  5898240   0 15:26:58      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  7864446  8585284   0 15:26:59      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  7929932  8650794   0 15:27:01      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  7995406  8388626   0 15:26:58      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  8060964  8192016   0 15:26:57      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  8126504  8519700   0 15:26:59      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  8192016  7536648   0 15:26:56      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  8257564  8126504   0 15:26:59      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  8323106  7209046   0 15:27:00      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  8388626  3080256   0 15:26:57      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  8454320 11075736   0 15:27:15      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  8519700  7798804   0 15:26:58      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  8585284  8257564   0 15:26:59      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  8650794  5636342   0 15:27:00      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  8716340  7340038   0 15:27:02      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  8781926  9699470   0 15:27:17      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  8847444  8716340   0 15:27:03      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  8912956  9175086   0 15:27:02      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  8978496  8912956   0 15:27:02      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  9044022  6160442   0 15:27:03      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  9109622 10813538   0 15:27:08      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  9175086  5963852   0 15:27:01      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  9240632  9568320   0 15:27:04      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  9306148  7929932   0 15:27:01      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  9371710 10616924   0 15:27:06      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  9437268  9240632   0 15:27:05      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  9502816 11665528   0 15:27:09      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh
pconsole  9568320  9764914   0 15:27:04      -  0:00 /bin/ksh /pconsole/lwi/bin/lwistart_src.sh

---------- Post updated 03-22-13 at 08:42 AM ---------- Previous update was 03-21-13 at 10:29 PM ----------

I've deleted my custom authorizations and roles, and now it works fine :smiley:

1 Like
2

Thanks for posting the solution.

3

Curiosity killed the cat - so I am asking what did you change, what did you set back.

If you want to use RBAC and pconsole you might be able to setup some RBAC for a user.

In any case, you need to let pconsole (if you were planning on using that) create the role for a user (normally pcon_username) for roles needed while using pconsole (or pcons_username - I forget).

The SYSTEM parameter in /etc/security/user should make sure that LDAP is used for login, so username/password is stored in LDAP - while having an additional definition of the USER (will need to run mkuser -R files id=NNN pgid=GGG) to create the user in the local registery.

lsuser username will tell you how AIX sees the user after login.
lsuser -R files username (AIX view local files only)
lsuser -R LDAP username (AIX view using LDAP information only - I think. If it is giving information that is not in AD then it is still going to the files are to fill in blanks (in particular the default: stanzas in /etc/security/*).

4

I've just removed all my custom authorizations (rmsecattr, rmauth) and then updated the kernel tables (setkst).