I have several servers that now have been updated from PatchSet # 147440-19 to PatchSet # 148888-03.
The servers range from:
(1) SunFire T2000
(3) Enterprise T5140
(2) Enterprise T5220
Solaris 10 08/11 u10 on 1 and u7 on the others.
After the patch is applied I can no longer use the SMC tool to manage users. The tool launches fine, and comes up, but once you try to select users (local) or users (NIS+) in a toolbox there is a Java exception thrown. I have also tried several other options within the SMC, and I get several different errors with the same basic error as this one.
Error box pop up:
RMI_ERR: error unmarshalling return; nested exception is:
java.lang.ClassNotFoundException:
com.sun.admin.usermgr.server.SecurityService_Agent
Next pop up:
The authenticated user does not have rights to use this tool.
See your system or security administrator.
There is a large error on the command line that I can not post as it is on an isolated network.
I will reproduce some of it:
# smc
com.sun.management.viper.VException: RMI_ERR: error unmarshalling return; nested exception is: java.lang.ClassNotFoundException: com.sun.management.viperimpl.services.authorization.AuthorizeService_Agenet
at com.sun.management.viperimpl.client.ViperClient.getServiceByName(ViperClient.java:886)
This previously worked with PatchSet 147440-19 installed, but now it doesn't.
I apologize if I have forgotten something important. Let me know if further info is needed. Extensive Google searching has not really turned up anything that useful. It seems like there is some sort of permission, or role change that is preventing this from working.
All, thank you for the views and replies. I have been slammed with 100 other things all week, so sorry for the delayed response.
Thanks, I am aware there are newer patches, but this does not guarantee that the next patch set will solve the issue. I will be testing a newer patch set on a test system, but we are not allowed to role out patches to Production systems with out going through all the security protocols of our environment. This problem was not seen in testing as there were rarely changes needed to user accounts. Most all "user" accounts on our systems are only Admins & Engineers.
Good point. As I said above, the SMC tool is used so rarely.
The current patch for 121308 is 20. I will see if I have access to 121308-23(or newer) under my support account.
Update - Out of curiosity, I just checked one of the other systems in the same Production group that is newer, and has Sol10 u10 loaded with the same patch set, and it has patch 121308-22. It exhibits the exact same symptoms as the system we use to manage the environment.
Hey Wraith, looks like you and I have similar problems, probably for the same reason. I am running into the same issue with SMC being borked after applying a patchset. Unfortunately, I am running Trusted Extensions and there is no other "simple" way to edit user's labels without SMC.
I am trying various things and will let you know if I find a fix.
---------- Post updated at 09:49 AM ---------- Previous update was at 08:37 AM ----------
Got mine fixed. I was Googling all around and found this page:
This gave me the idea that Java was my issue, not SMC. I looked at my last patch cluster and looked for any Java updates. I found patch 118668-53 (this is an x86 box so look for 118667 for SPARC). Once I backed this patch out, normality was restored.
The general rule on problems is that you try the latest patch level, so you are not fighting solved problems. Of course, it would be nice if all the patches checked their dependencies so JAVA and SMC stay compatible.
I think you could have stopped at "issue with SMC being borked".
In my experience, and apparently everyone else's, SMC stands for sucky management console. In Fact, Oracle has removed SMC from Solaris 11 and recommends that you go old school to do those functions.
WRT labels you can edit prof_attr and user_attr manually. You just have to be able to map the hex string to the Label you want to attribute to that user. Which should simple be a matter of finding another user with the same label and cut and paste.
