tomatosoup <[email protected]> wrote
in <[email protected]>:
# Interesting - have to try that the next time!

Installing Solaris from optical media is soooo nineties :-)
I remember vividly the early nineties, when us geeks at the
computer center gathered around a pizza box connected to a
CD ROM with the first ever Solaris 2 CD. Those were the days.

Regards,

Jens
--
Jens Schweikhardt http://www.schweikhardt.net/
SIGSIG -- signature too long (core dumped)

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

John D Groenveld <[email protected]> wrote
in <n6p40s$5u03k$[email protected]>:
# In article <[email protected]>,
# Jens Schweikhardt <[email protected]> wrote:

After many ignored warnings about which machines I trust, I can open the #>Remote Console window with a tab that shows my FreeBSD box's IP address. #>But when I click "Redirection->Start Redirection" a popup says "No #>appropriate protocol (protocol is disabled or cipher suites are #>inappropriate) [OK]". The "Devices" entries stay disabled.
Is there something I can do to solve the protocol issue?

#
# Firewall between your FreeBSD workstation and T5120?
# More than a couple queer TCP ports required:
# <URL:https://docs.oracle.com/cd/E19860-01/E21549/z40001861019988.html>

I disabled the firewall on FreeBSD, made sure it allows all IP traffic
but no change.
# ipfw show
00100 43309 17175962 allow ip from any to any
65535 2 624 deny ip from any to any

I'm using firefox 43.0.3 on FreeBSD. Both machines are on the same
private subnet, configured via DHCP on a "fritzbox" WAN router.

Does a vanilla Solaris 11.3 install come with any firewalling by
default? Here's the T5120's process list. Anything interesting here? Any
config files I should check? /var/adm/messages only reports SP sessions
being opened and closed, which looks ok.

$ ps ax
PID TT S TIME COMMAND
0 ? T 0:10 sched
1 ? S 0:00 /usr/sbin/init
2 ? S 0:00 pageout
3 ? S 0:45 fsflush
5 ? S 0:05 zpool-rpool
6 ? S 0:00 kmem_task
7 ? S 0:00 intrd
8 ? S 0:10 vmtasks
9 ? S 0:00 postwaittq
13 ? S 0:30 /lib/svc/bin/svc.startd
15 ? S 1:34 /lib/svc/bin/svc.configd
42 ? S 0:00 /lib/inet/netcfgd
45 ? S 0:00 /usr/sbin/ibmgmtd
52 ? S 0:01 /usr/sbin/dlmgmtd
63 ? S 0:00 /lib/inet/ipmgmtd
70 ? S 0:00 /lib/crypto/kcfd
94 ? S 0:00 /lib/svc/bin/svc.periodicd
98 ? S 0:00 /lib/inet/in.mpathd
105 ? S 0:06 /usr/lib/pfexecd
148 ? S 0:00 /usr/lib/sysevent/syseventd
168 ? S 0:00 /usr/lib/ldoms/ldmad
173 ? S 0:00 /usr/lib/ldoms/drd
178 ? S 0:00 /usr/lib/rad/rad -sp
180 ? S 0:00 /usr/lib/rad/rad -sp
187 ? S 0:00 /usr/lib/zones/zonestatd
197 ? S 0:00 /usr/lib/dbus-daemon --system
200 ? S 0:00 /usr/lib/utmpd
206 ? S 0:00 /usr/lib/devfsadm/devfsadmd
309 ? S 0:02 /lib/inet/nwamd
328 ? S 0:00 /sbin/dhcpagent
382 ? S 0:03 /usr/lib/picl/picld
498 ? S 0:00 /usr/lib/efcode/sparcv9/efdaemon
511 ? S 0:00 /lib/svc/method/iscsid
558 ? S 0:00 /usr/lib/hotplugd
572 ? S 0:00 /usr/sbin/cron
573 ? S 0:32 /usr/sbin/nscd
574 ? S 0:00 /usr/sbin/cupsd -C /etc/cups/cupsd.conf
583 ? S 0:02 /usr/lib/hal/hald --daemon=yes
584 ? S 0:00 hald-runner
587 ? S 0:00 /usr/lib/hal/hald-addon-cpufreq
628 ? S 0:11 /opt/SUNWldm/bin/ldmd --recovery-mode auto --recovery-mode-boot-timeout 30
639 ? S 0:00 /usr/sbin/rpcbind
652 ? S 0:00 /usr/lib/inet/in.ndpd
655 ? S 0:00 /usr/lib/nfs/nfsmapid
658 ? S 0:00 /usr/lib/autofs/automountd
660 ? S 0:00 /usr/lib/autofs/automountd
661 ? S 0:00 /usr/lib/inet/inetd start
665 ? S 0:00 /usr/lib/rmvolmgr -s
682 ? S 0:00 /usr/lib/ssh/sshd
694 ? S 0:00 /usr/sbin/syslogd
711 ? S 0:00 /usr/lib/inet/sendmail -Ac -q15m
719 ? S 0:00 /usr/sbin/auditd
753 ? S 0:05 /usr/lib/fm/fmd/fmd
770 ? S 0:00 /usr/lib/inet/sendmail -bl -q15m
871 ? S 0:00 /usr/lib/devchassis/devchassisd
873 ? S 0:00 /usr/lib/fm/notify/asr-notify
874 ? S 0:00 /usr/lib/fm/notify/smtp-notify
2236 ? S 0:00 /usr/lib/ocm/ccr/bin/nmz
3176 ? S 0:00 /usr/lib/ssh/sshd
3177 ? S 0:00 /usr/lib/ssh/sshd
3296 ? S 0:00 /bin/ksh /lib/svc/method/epcmds retry 4800
3305 ? S 0:00 sleep 4800
728 console S 0:00 /usr/sbin/ttymon -g -d /dev/console -l console -m ldterm,ttcompat -h -p spa
3178 pts/1 S 0:05 -zsh
3319 pts/1 O 0:00 ps ax


Regards,

Jens
--
Jens Schweikhardt http://www.schweikhardt.net/
SIGSIG -- signature too long (core dumped)

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

In article <[email protected]>,
Jens Schweikhardt <[email protected]> wrote:

I'm using firefox 43.0.3 on FreeBSD. Both machines are on the same
private subnet, configured via DHCP on a "fritzbox" WAN router.

Does a vanilla Solaris 11.3 install come with any firewalling by
default? Here's the T5120's process list. Anything interesting here? Any >config files I should check? /var/adm/messages only reports SP sessions
being opened and closed, which looks ok.

# nmap -sT -p 22-8619 t5120-ilom

John
[email protected]

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

John D Groenveld <[email protected]> wrote
in <n6p9qd$5a040$[email protected]>:
# In article <[email protected]>,
# Jens Schweikhardt <[email protected]> wrote:

I'm using firefox 43.0.3 on FreeBSD. Both machines are on the same
private subnet, configured via DHCP on a "fritzbox" WAN router.

Does a vanilla Solaris 11.3 install come with any firewalling by
default? Here's the T5120's process list. Anything interesting here? Any #>config files I should check? /var/adm/messages only reports SP sessions #>being opened and closed, which looks ok.

#
# # nmap -sT -p 22-8619 t5120-ilom

# nmap -sT -p 22-8619 t5120-net-mgt

Starting Nmap 7.01 ( https://nmap.org ) at 2016-01-08 23:02 CET
Nmap scan report for t5120-net-mgt (192.168.178.20)
Host is up (0.0026s latency).
rDNS record for 192.168.178.20: T5120-NET-MGT.fritz.box
Not shown: 8591 closed ports
PORT STATE SERVICE
22/tcp open ssh
80/tcp open http
443/tcp open https
623/tcp open oob-ws-http
5556/tcp open unknown
6481/tcp open servicetags
7579/tcp open unknown
MAC Address: 00:14:4F:79:C1:19 (Oracle )

Nmap done: 1 IP address (1 host up) scanned in 5.07 seconds

Regards,

Jens
--
Jens Schweikhardt http://www.schweikhardt.net/
SIGSIG -- signature too long (core dumped)

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

On 2016-01-08, Jens Schweikhardt <[email protected]> wrote:

DoN. Nichols <[email protected]> wrote
in <[email protected]>:
...
# Are you *sure* that it doesn't have a DVD-ROM drive? (or did you
# mean that you don't have the DVD you need?)
#
# Take a look at eBay auction: 331748341439
#
# <http://www.ebay.com/itm/Sun-Sparc-Enterprise-T5120-8-Core-UltraSPARC-T2-1-2GHz-8GB-Server-/331748341439?hash=item4d3dbdf6bf:g:6S8AAOSwwPhWjYnL>
#
# and in particular, look at the enlarged image of the front. AT the
# right-hand side, just to the left of the two USB jacks, there may be an
# optional DVD drive. (It is very skinny, but does have a slot for the
# DVD.)

Thanks DoN for taking the time to reply.

I'm 99% sure. The space for the "DVD" has one solid gray metal bezel
with only a hole for the two USB ports. No eject button, no activity
LED, let alone a slot for the DVD like on that picture. Since I got the
T5120 from a refurbisher I assume it was removed. So it's certainly
not a slot-in drive. But any caddy/tray drive I've seen in my life
at least had an eject button or activity LED... Should I look for
a screwdriver?

O.K. So yours has the blanking panel, not the drive.

Some places will buy without the drive, to keep people from
booting from a dvd and bypassing security.

So -- no clue as to whether yours wants the SATA or ATA version of
the DVD drive.

Anyway, see my other post, I got it going booting from USB, yay!

Great!

With all those CPUs it is a very good machine for a server, but
not for really highly compute intensive tasks. STill fun to play with,
and I'm using my T5220 as a server, so benefiting from what it was
designed to be.

Enjoy,
DoN.

--
Remove oil spill source from e-mail
Email: <[email protected]> | (KV4PH) Voice (all times): (703) 938-4564
(too) near Washington D.C. | http://www.d-and-d.com/dnichols/DoN.html
--- Black Holes are where God is dividing by zero ---

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

In article <[email protected]>,
Jens Schweikhardt <[email protected]> wrote:

# nmap -sT -p 22-8619 t5120-net-mgt

Starting Nmap 7.01 ( https://nmap.org ) at 2016-01-08 23:02 CET
Nmap scan report for t5120-net-mgt (192.168.178.20)
Host is up (0.0026s latency).
rDNS record for 192.168.178.20: T5120-NET-MGT.fritz.box
Not shown: 8591 closed ports
PORT STATE SERVICE
22/tcp open ssh
80/tcp open http
443/tcp open https
623/tcp open oob-ws-http
5556/tcp open unknown

Looks like KVMS is disabled. <URL:https://docs.oracle.com/cd/E24707_01/html/E24528/z40000191582461.html>

$ ssh root@t5120-net-mgt

cd /SP/services/kvms
set servicestate=enabled

A subsequent nmap should show the remote console TCP ports.
If not, reboot the ILOM with a "reset /SP".

John
[email protected]

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

John D Groenveld <[email protected]> wrote
in <n6pdn7$66040$[email protected]>:
# In article <[email protected]>,
# Jens Schweikhardt <[email protected]> wrote:

# nmap -sT -p 22-8619 t5120-net-mgt

Starting Nmap 7.01 ( https://nmap.org ) at 2016-01-08 23:02 CET
Nmap scan report for t5120-net-mgt (192.168.178.20)
Host is up (0.0026s latency).
rDNS record for 192.168.178.20: T5120-NET-MGT.fritz.box
Not shown: 8591 closed ports
PORT STATE SERVICE
22/tcp open ssh
80/tcp open http
443/tcp open https
623/tcp open oob-ws-http
5556/tcp open unknown

#
# Looks like KVMS is disabled.
# <URL:https://docs.oracle.com/cd/E24707_01/html/E24528/z40000191582461.html>
#
# $ ssh root@t5120-net-mgt
# -> cd /SP/services/kvms
# -> set servicestate=enabled
#
# A subsequent nmap should show the remote console TCP ports.
# If not, reboot the ILOM with a "reset /SP".

After that (with or without reset /SP) the nmap result now is

$ nmap -sT -p 22-8619 t5120-net-mgt

Starting Nmap 7.01 ( https://nmap.org ) at 2016-01-09 10:57 CET
Nmap scan report for t5120-net-mgt (192.168.178.20)
Host is up (0.0028s latency).
rDNS record for 192.168.178.20: T5120-NET-MGT.fritz.box
Not shown: 8591 closed ports
PORT STATE SERVICE
22/tcp open ssh
80/tcp open http
443/tcp open https
623/tcp open oob-ws-http
5556/tcp open unknown
6481/tcp open servicetags <--- New
7579/tcp open unknown <--- New

Nmap done: 1 IP address (1 host up) scanned in 4.79 seconds


Redo web login, start Remote Console, still the "no appropriate
protocol" error. Are the "cipher suites" related to port 5555 "Oracle
ILOM Remote Console: Encryption"? Should all 8 of the
ILOM Remote Console ports be open?

Maybe a recursive show command in /SP/services provides a clue.

show -level all

/SP/services
Targets:
http
https
ipmi
kvms
servicetag
snmp
ssh
sso

Properties:


/SP/services/http
Targets:

Properties:
port = 80
secureredirect = enabled
servicestate = disabled


/SP/services/https
Targets:
ssl

Properties:
port = 443
servicestate = enabled
sslv2 = disabled
sslv3 = enabled
tlsv1 = enabled
weak_ciphers = disabled


/SP/services/https/ssl
Targets:
custom_cert
custom_key
default_cert

Properties:
cert_status = Using Default (No custom certificate or private key loaded)


/SP/services/https/ssl/custom_cert
Targets:

Properties:
clear_action = (Cannot show property)
issuer = (none)
load_uri = (Cannot show property)
subject = (none)
valid_from = (none)
valid_until = (none)


/SP/services/https/ssl/custom_key
Targets:

Properties:
clear_action = (Cannot show property)
key_present = false
load_uri = (Cannot show property)


/SP/services/https/ssl/default_cert
Targets:

Properties:
issuer = /C=US/ST=California/L=Redwood Shores/O=Oracle America, Inc./CN=Oracle Integrated Lights Out Manager
subject = /C=US/ST=California/L=Redwood Shores/O=Oracle America, Inc./CN=Oracle Integrated Lights Out Manager
valid_from = Jul 1 19:53:05 2010 GMT
valid_until = Jun 26 19:53:05 2030 GMT


/SP/services/ipmi
Targets:

Properties:
servicestate = enabled


/SP/services/kvms
Targets:

Properties:
servicestate = enabled


/SP/services/servicetag
Targets:

Properties:
passphrase = none
servicetag_urn = urn:uuid:c7288201-e2ff-11db-8c3c-080020a9ed93
state = enabled


/SP/services/snmp
Targets:
communities
mibs
users

Properties:
engineid = (none)
port = 161
servicestate = enabled
sets = disabled
v1 = disabled
v2c = disabled
v3 = enabled


/SP/services/snmp/communities
Targets:
private
public

Properties:


/SP/services/snmp/communities/private
Targets:

Properties:
permission = rw


/SP/services/snmp/communities/public
Targets:

Properties:
permission = ro


/SP/services/snmp/mibs
Targets:

Properties:
dump_uri = (Cannot show property)


/SP/services/snmp/users
Targets:

Properties:

Commands:
cd
create
delete
show

/SP/services/ssh
Targets:
keys

Properties:
generate_new_key_action = (Cannot show property)
generate_new_key_type = none
restart_sshd_action = (Cannot show property)
state = enabled


/SP/services/ssh/keys
Targets:
dsa
rsa

Properties:


/SP/services/ssh/keys/dsa
Targets:

Properties:
fingerprint = e1:60:1d:78:ff:74:cc:20:7e:6e:db:01:f0:2c:71:12
length = 1024
privatekey = (Cannot show property)
publickey = elided--JS


/SP/services/ssh/keys/rsa
Targets:

Properties:
fingerprint = 4e:d4:46:40:49:4a:38:ec:f3:5d:50:b3:01:d9:37:e1
length = 1024
privatekey = (Cannot show property)
publickey = elided--JS


/SP/services/sso
Targets:

Properties:
state = enabled



Regards,

Jens
--
Jens Schweikhardt http://www.schweikhardt.net/
SIGSIG -- signature too long (core dumped)

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

On Tuesday, January 5, 2016 at 8:26:45 PM UTC+3, Jens Schweikhardt wrote:

nvramrc: data not available.
error-reset-recovery=boot

--
Jens Schweikhardt http://www.schweikhardt.net/
SIGSIG -- signature too long (core dumped)

Hello, Jens,

I've got a bunch of T5120s and ran into the same issue. Tried a number of firmwares from 3.0.4 up to the latest I could find - v3.0.12.4.ze r101136.
None of them could work it out.
So let me ask a question: have you got any news on this topic?

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

[email protected] (John D Groenveld) writes:

In article <[email protected]>,
Jens Schweikhardt <[email protected]> wrote:

I'm using firefox 43.0.3 on FreeBSD. Both machines are on the same
private subnet, configured via DHCP on a "fritzbox" WAN router.

Does a vanilla Solaris 11.3 install come with any firewalling by
default? Here's the T5120's process list. Anything interesting here? Any >>config files I should check? /var/adm/messages only reports SP sessions >>being opened and closed, which looks ok.

# nmap -sT -p 22-8619 t5120-ilom

Is it possible that the ILOM is out-of-date and that the
system trying to connect it has a very up-to-date OpenSSL
library installed and it is refusing to connect?

Casper

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

On Tuesday, March 22, 2016 at 1:52:47 PM UTC+3, Casper H.S. Dik wrote:

[email protected] (John D Groenveld) writes:

In article <[email protected]>,
Jens Schweikhardt <[email protected]> wrote:

I'm using firefox 43.0.3 on FreeBSD. Both machines are on the same >>private subnet, configured via DHCP on a "fritzbox" WAN router.

Does a vanilla Solaris 11.3 install come with any firewalling by
default? Here's the T5120's process list. Anything interesting here? Any >>config files I should check? /var/adm/messages only reports SP sessions >>being opened and closed, which looks ok.

# nmap -sT -p 22-8619 t5120-ilom

Is it possible that the ILOM is out-of-date and that the
system trying to connect it has a very up-to-date OpenSSL
library installed and it is refusing to connect?

Casper

Not likely. I tried using CentOS 5 with jre 1.5 and firefox 1.5. No success. And then I found the next document ( https://docs.oracle.com/cd/E19839-01/E21875-01/cggghdaa.html ).

ILOM Features Not Supported

Among the ILOM features supported on other platforms, ILOM does not support the following features on Sun SPARC Enterprise T5120 and T5220 servers:

The KVMS features of ILOM Remote Console. However, ILOM Remote Console does provide remote serial console on Sun SPARC Enterprise T5120 and T5220 servers.


So I assume we have to forget about the Storage Redirection on T5120.

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

[email protected] wrote
in <[email protected]>:
# On Tuesday, January 5, 2016 at 8:26:45 PM UTC+3, Jens Schweikhardt wrote:

nvramrc: data not available.
error-reset-recovery=boot

#
# Hello, Jens,
#
# I've got a bunch of T5120s and ran into the same issue. Tried a number of firmwares from 3.0.4 up to the latest I could find - v3.0.12.4.ze r101136.
# None of them could work it out.
# So let me ask a question: have you got any news on this topic?

Sadly not. I've been hunting for a recent firmware, but it seems they
are only available when you have a costly support contract.

Regards,

Jens
--
Jens Schweikhardt http://www.schweikhardt.net/
SIGSIG -- signature too long (core dumped)

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

Jens Schweikhardt <[email protected]> writes:

[email protected] wrote
in <[email protected]>:
# On Tuesday, January 5, 2016 at 8:26:45 PM UTC+3, Jens Schweikhardt wrote: >#> nvramrc: data not available.

error-reset-recovery=boot

#
# Hello, Jens,
#
# I've got a bunch of T5120s and ran into the same issue. Tried a number of firmwares from 3.0.4 up to the latest I could find - v3.0.12.4.ze r101136.
# None of them could work it out.
# So let me ask a question: have you got any news on this topic?

Sadly not. I've been hunting for a recent firmware, but it seems they
are only available when you have a costly support contract.

I think v3.0.12.4.ze is the most recent version of the firmware.

Casper

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

[email protected] writes:

Not likely. I tried using CentOS 5 with jre 1.5 and firefox 1.5. No success. >And then I found the next document ( https://docs.oracle.com/cd/E19839-01/E21875-01/cggghdaa.html ).

ILOM Features Not Supported

Among the ILOM features supported on other platforms, ILOM does not support the following features on Sun SPARC Enterprise T5120 and T5220 servers:

The KVMS features of ILOM Remote Console. However, ILOM Remote Console does provide remote serial console on Sun SPARC Enterprise T5120 and T5220 servers.

So I assume we have to forget about the Storage Redirection on T5120.

That is ossible. So the other way to solve is that do a remote boot.

(boot net:dhcp ....)

but that would require you to install a install server of sorts.


Casper

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)