Apr 03, 2009 mohammed, if your solaris version is solaris 9, then the problem with xmanager closed immediately is a bug in solaris patch 11296062 solaris 9. The sudo utility is composed of the following three packages. Sunwsudor contains configuration files, which are installed in etc directory. You may find it more convenient to set up your system to start aix common desktop environment automatically when the system is turned on. In previous versions of solaris, these protocols can be disabled in the init. Using gdm instead of dtlogin on solaris 10 oracle solaris blog. What i need to do for a scheduled reboot i need the machine to perform autologin with a specific user id to t. Unless otherwise specified, our technical support organization will not provide technical support, phone support, or updates to you for the. Solaris 7 wthout patch 107181 solaris 8 without patch 10892021 solaris 9 without patch 11421008 this issue may occur on systems running dtlogin 1x. After a rebooted, i dont see any effect, i can see the ports are still listening. The dtlogin process handles a gui login process to cde the dtlogin process contains a double free vulnerability. When the session is terminated, dtlogin resets the x server and optionally. I assume need to completely disable cde and anything related with xwindows please put the command inline with the finding name common desktop environment dtlogin unspecified remote double free vulnerability cve20040368, bugtraqid9958.
How to enabledisable automount debugging in solaris 10 and. Find answers to disabling x server in solaris 10 from the expert community at experts exchange. Use this procedure to disable services that are not required on this system. You are saying this process goes to maintenance mode. Starting dtlogin if your solaris system boot to a shell prompt, you can start x dtlogin with following command. As the used machine is limited in resources, i need to disable the gui desktop to free unused resources. Dynamic tracing performance bottleneck buster breakthrough approach for tuning power tool for realtime analysis, diagnosis safe and comprehensive non invasive, little overhead, easy to use one view into both system and application level over 30,000 data monitoring points designed for live use on production systems no need to force failure, then do postmortem debug. The solaris security toolkit software is distributed in solaris os package format. Apply patches at least download and install suns recommended patch cluster also check patch report file for additional security patches patches must be maintained on an ongoing basis. All software downloads are free, and most come with a developer license that allows you to use full versions of the products at no charge while developing and prototyping your applications, or for strictly selfeducational purposes. For security purposes, administrators may wish to disable telnet incoming connections on a solaris 10 system. Here is the basic solaris interview questions which are commonly asked in solaris l1 or l2 level 1 or l2 interviews.
Support for the protocol itself and the sockets api fully deployable ipv6 wanboot. Depending on service requirements, disable xdmcp support in dtlogin. Enable disable ip forwarding in solaris 10 without reboot. Solaris 10 enable solaris 10 automount debug output. I have a server with unix solaris 10, with multipathing is configured, and i want to test it, however it is in different location, so i want to disable a single network interface, while sniffing the network traffic on the other one tyo make sure of the switch over, can please anyone guide how can i do so. The initial solaris port only supports 64bit x86 systems. December 2009 learn how and when to remove this template message. How to install and configure sudo in solaris 10 sparc and. Oct 07, 2010 whether old dtlogin child processes are still running, but with parent process id 1, indicating that the dtlogin master process has crashed. The ciphers listed by security team to disable are. Even sunoracle solaris 10 is pretty much relegated to legacy research systems these days. Solaris operating system version 10 1 u11 and later information in this document applies to any platform.
Anyone know how to disable the rexecrsh in solaris 10. Enabling xdmcp in solaris 10 gopi desaboyina solaris blogs. For security purposes, administrators may wish to disable telnet incoming connections on a solaris tm 10 or 11. Starting the login server solaris common desktop environment. How to enable xdmcp on unix starnet knowledge database pc. To determine if dtlogin 1x is running on a system, use the ps command as shown below. Enabling 2 gb large pages on solaris 10 oracle solaris blog. The best solaris download load on the web is undoubtably. Solaris 10 is secure by default and starts services on localhost instead of system name or all hosts. Stack overflow for teams is a private, secure spot for you and your coworkers to find and share information.
With respect to my work in filesystem caching strategies, this new solaris release introduces three excellent new features. Does login using gnome or openwindows software if applicable work. Once youve decided exactly which pieces of the operating system you wish to. May 10, 20 solaris 10 interview questions may 10, 20 by lingeswaran r 8 comments here is the basic solaris interview questions which are commonly asked in solaris l1 or l2 level 1 or l2 interviews. To disable user login on a solaris 10 server oracle. Not sure about your question but to disable dtlogin run. Hi guys, first of all i would like to thank you for reading my post. Automounter also has built in debugging, which can be used to examine exactly what the automounter is doing. If you dont have a solaris setup to work,just install solaris as guest operating system on vmware workstations and get a hands on experience. Now i want to customize the look an funcionality of the dtlogin. Download the latest source package from sourceforge motif2. Xdmcp general instructions file editing note also that firewall ports must be opened. How to enable xdmcp on unix starnet knowledge database. According to this blog post solaris 10 password history, solaris 10 implemented a new parameter history in etcdefaultpasswd.
Bulk data throughput better zerocopy support ftp server faster by 30% sctp. Solaris 10 remote x11,xserver or cde login problem azizs blog. First download the solaris security software, and then install it on the server on which you are using the solaris. The post below is a short howto on how to disable or enable telnet on solaris 10. The dtlogin process contains a vulnerability that can be exploited to execute code with root privileges or create a denial of service dos condition. The advantage is the change dynamic and realtime and the change persist across reboot unlike the ndd command. Disabling x server in solaris 10 solutions experts exchange. Solaris 8 without patch 10891921 solaris 9 without patch 11280709 x86 platform. How to enable or disable telnet in solaris 10 the geek diary.
Learn more how to stop syslog messages to write console on solaris. First download the solaris security software, and then install it on the server on which you are using the solaris security toolkit software. How to enabledisable automount debugging in solaris 10. Performing the above procedure will disable the following.
Security vulnerability in the xsun1 and xprt1 commands. Even though the rexecrsh has been disabled and not running see below, one can still issue rsh command to get to the server. I already configure vnc that works perfectly using the following procedure. Solaris 10 1009 zfs cache improvements larry wake in an interview by chhandomay mandal provides a good overview of the new features of solaris 10 1009 a. You can do this through the webbased system manager fast path, wsm system, through the system management interface tool smit, or from a command line. Vnc server and vnc viewer are included as separate installable packages. I need to block all the unwanted ports, for this i have edited the etcservices. It also disables daemon mode, which redirects the information into the bitbucket. Security vulnerability involving the common desktop. How to disable unneeded services oracle solaris 11.
To disable the login server from starting automatically when the system is booted. We know dtlogin is the system process by default its automatically run whenever the server is up. The following procedure uses sparc platform as an example but the steps remain the same for x86 platform as well. Login as a root user before using dtconfig command. For most open source software you will ever need this site has. This is still the default display manager for solaris 10 even though cde is no longer the default desktop.
Features removed from the solaris 10 operating system asian short dtlogin names. Features removed from the solaris 10 operating system. I have installed solaris 10 on t2000 sunfire server but i was not able to get the solaris 10 desktop using cygwin on windows xp. Would like to know the configuration file or command to disable those ciphers from server. Login into the system using ssh or rsh and check current telnet service status. I have done a new installation of the 10 on a sparc and it went well. Your article enabling xdmcp on solaris 10 has fixed our issue. Restart dtlogin if dtlogin is not responding then you can restart it using ssh. It is best to kill automount and restart it with the debug flags, so that you can see everything from the start. After installation i am unable to enter in to gui mode.
For more information on security sun alerts, see sun 1009886. How to enable xdmcp on unix on most unixlinux distributions xdmcp is disabled by default. Note since the usrdt directory structure differs between solaris releases and client workstations sparc directory structure differs for the intel directory structure, the client workstation must mount the appropriate nfs server usrdt image. For that we need to use following method to fix it. To switch to using gdm instead of dtlogin you can do the following. Can anybody give me a hint where to find a good manual for dtlogin or which files i.
If you wish to disable dtlogin, use dtconfig command. Solaris administrators quick reference cheat sheet. On solaris 10, when the dtlogin smf patch is not installed, dtlogin which is turned on looks like this. Im using dtlogin with my sunray 2 and sunray server software 4. Solaris starting and stopping dtlogin cde nixcraft.
My problem is i still need to enable sftp for only few user and disable all other user. Most unix operating systems use the common desktop environment cde to manage the window environment. Jul 26, 20 these commands will work with the services administration in solaris 10 and solaris 11. Keep in mind dtlogin and gdm are providing the same kind of service, and be conflicting on your system if enabled at the same time. If no graphical login access is required for local console users, sun ray devices, or remote xdmcp sessions, dtlogin 1x may be disabled completely by running the following command as root. Permanently disable dtlogin if you wish to disable dtlogin, use dtconfig command. If your solaris system boot to a shell prompt, you can start xdtlogin with following. Thank you very much for posting this article which will help many systems administrators. Sun solaris 10 vulnerable solutions experts exchange. How to disable openssl ciphers on solaris 10 for security reasons. Power management and interactive process priority control on solaris sparc. The following asian short locale names are no longer listed in the dtlogin language list in the solaris software. For more information, see using your assigned administrative rights in securing users and processes in oracle solaris 11. Due to that if you try to connect to server over xdmcp using exceed on demand or something you wont get connection.
Sunwsudos contains source code of sudo installing sudo packages. These commands will work with the services administration in solaris 10 and solaris 11. This is an optional package not available with solaris 10 installation. Posted by hongpingqiu unix administrator on jan 20 at 7.
Our server is running solaris 10 305 kernel 11883336. I am trying to shutdown some rpc services on my solaris servers. As i am very familiar with redhat linux, it is simply edit etcinittab and change the inital runlevel to 3 to disable the desktopgui. This sun alert notification may contain information provided by third parties. How to disable openssl ciphers in solaris 10 and 11. Solaris 10 remote x11,xserver or cde login problem aziz. Starting and stopping the aix common desktop environment. Standard edition, standard edition one, and enterprise edition. For a listing of which ports need to be opened, please see what ports need to be opened for xdmcp. Solaris 10 dt login service not getting started automatically. When i do a svcs i can see the cdelogin service, but x11server does not show up as a service, even if i do a svcs a. Below procedure can be used to enable or disable automount debugging. Oct 26, 20 automounter also has built in debugging, which can be used to examine exactly what the automounter is doing. How can i disable the nic in solaris 10 solutions experts.
But if youre still using solaris 9 and below, what century are you in. Oct 16, 20 enable direct root logins for solaris 10 october 16, 20 after fresh install of solaris os, you will not be able to login directly as root with putty as its disabled. If you wish to print under solaris 9 or 10, perform the. If enhanced support facility comes with sparc enterprise ervers, install it. Sunwsudou contains sudo binaries and documentation. If you are using dtlogin other display managers may be affected, vnc viewer users cannot connect when the computer is at the login screen. This sun alert notification is being provided to you on an as is basis. Mohammed, if your solaris version is solaris 9, then the problem with xmanager closed immediately is a bug in solaris patch 11296062 solaris 9. Install the latest kernel patch or ensure that 14744004 or later was installed. If the dtlogin1x program is killed, users will be unable to login on any sun ray devices. I have a solaris 10 box i recently put the latest recommended patch set on. During a solaris 10 graphical installation the sbd network profile is. If you do not have administrative privileges, or want to specify nondefault installation locations, download the generic installer instead, and run the script provided.
677 496 191 1305 930 1129 629 1270 1234 1444 361 1414 444 524 589 99 437 76 259 779 1447 271 349 604 1166 192 920 393 836 1097 1426 791 454 32 284 533