Hi,Siwei This afternoon I read http://wikis.sun.com/display/OpenSolarisInfo/How+to+Download+and+Install+COMSTAR. It said "OpenSolaris 2009.06
$ pfexec pkg install storage-server SUNWiscsit Reboot the machine (COMSTAR installation requires reboot)". So I knew it's different from the issue of the ipfilter service. Thanks for your information. -Hejun > <div id="jive-html-wrapper-div"> > Hejun,<br><br>This could be another separate issue, > see:<br><br><a > href="http://defect.opensolaris.org/bz/show_bug.cgi?id > =12694">http://defect.opensolaris.org/bz/show_bug.cgi? > id=12694</a><br><br>The relevant fix has been > integrated into osol_129.. Since this issue is one > shot which would not show up again across system > reboot, you do not need to get your system upgraded > to 129.<br> > <br>Cheers,<br>-Siwei<br><br><div > class="gmail_quote">On Wed, Jan 20, 2010 at 1:11 PM, > Hejun Xu <span dir="ltr"><<a > href="mailto:[email protected]">[email protected]</a>& > gt;</span> wrote:<br><blockquote class="gmail_quote" > style="border-left: 1px solid rgb(204, 204, 204); > margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> > <div class="im">Siwei,<br> > <br> > I met the another issue like the ipfilter which > can't be enabled at once.<br> > When I tried to enable stmf (COMSTAR) service,<br> > it ran into the "maintenance status",<br> > there is one warning "svc-stmf: unable to load > config" in the log.<br> > But when I rebooted my system, the service of STMF is > ok again.<br> > <br> > It's very like the issue which I met the issuse > for the ipfilter service.<br> > So I think maybe the cause is for Xen on > OpenSolaris,<br> > because my OpenSolaris is running as the Xen > dom0.<br> > <br> > -Hejun<br> > <br> > <br> > </div><div><div></div><div class="h5">> Siwei,<br> > ><br> > > When I rebooted my system, this issue for > ipfilter<br> > > can't be represented.<br> > > But before I tried the ipfilter, I spent many > time on<br> > > installation of Xen and<br> > > Linux domU.<br> > > Maybe the Xen affect the ipfilter service.<br> > > I think your suggestion is the cause for this > issue.<br> > > I will test it when I install new > OpenSolaris<br> > > system.<br> > ><br> > > Thanks<br> > ><br> > > -Hejun<br> > ><br> > > > <div > id="jive-html-wrapper-div"><br> > > > Hejun,<br><br>You may run into > <a<br> > > ><br> > > href="<a > href="http://bugs.opensolaris.org/bugdatabase/view_bug > " > target="_blank">http://bugs.opensolaris.org/bugdatabas > e/view_bug</a><br> > ><br> > > > .do?bug_id=6893162"> > 6893162</a>, I think you<br> > > could<br> > > > try out by enlarging the sleep duration in > script<br> > > > > /lib/svc/share/ipf_include.sh:<br><br> > > > > <br>service_check_state()<br>{<br> > <br> > > > #<br> # Make sure > we&#39;re done with<br> > > ongoing<br> > > > state transition<br> > #<br> while [<br> > > > &quot;`svcprop -p restarter/next_state > $1`&quot;<br> > > !=<br> > > > &quot;$SMF_NONE&quot; ]; > do<br><br> > > > sleep > 1<br> <br> > > > done<br><br> [ > &quot;`svcprop -p<br> > > > restarter/state $1`&quot; = > &quot;$2&quot; ]<br> > > > &amp;&amp; return 0 || return<br> > > > > 1<br>}<br><br><br>-Siwei<br > ><br><div<br> > > > class="gmail_quote">On Tue, > Jan 19, 2010 at 10:02<br> > > AM,<br> > > > Hejun Xu <span > dir="ltr">&lt;<a<br> > > ><br> > > href="mailto:<a > href="mailto:[email protected]">[email protected]</a>& > quot;><a > href="mailto:[email protected]">[email protected]</a>& > lt;/a>&<br> > ><br> > > > gt;</span> wrote:<br><br> > > > <blockquote > class="gmail_quote" style="margin: > 0pt<br> > > > 0pt 0pt 0.8ex; border-left: 1px solid > rgb(204,<br> > > 204,<br> > > > 204); padding-left: 1ex;">I find > the pfil is<br> > > removed<br> > > > from OpenSolaris 0906.<br><br> > > > &quot;pfil&quot; is one ipfilter > module in Solaris<br> > > > 10.<br><br> > > > <br><br> > > > Another friend sugguest me maybe the cause > is my<br> > > slow<br> > > > CPU make the ipfilter service > timeout.<br><br> > > > <br><br> > > > But I installed OpenSolaris 0906 on HP > DL145G2<br> > > > server, there is one AMD Opteron 2GHz CPU > and 2GB<br> > > > physical Memory.<br><br> > > > <br><br> > > > And there is no GUI assistant to help me > config<br> > > the<br> > > > ipfilter on OpenSolaris.<br><br> > > > <br><br> > > > -Hejun<br><br> > > > <br><br> > > > <br><br> > > > &gt;<br><br> > > > &gt;<br><br> > > > &gt; try if following steps work for > you.<br><br> > > > &gt; <br><br> > > > &gt; 0,#svcs -a|egrep > &quot;pfil|ipf&quot;<br><br> > > > &gt; ???? > svc:/network/pfil:default<br><br> > > > &gt; ???? <br> > > svc:/network/ipfilter:default<br><br> > > > &gt;<br><br> > > > &gt; 1,#ifconfig -a<br><br> > > > &gt;<br><br> > > > &gt; bge0:...<br><br> > > > &gt;<br><br> > > > &gt; 2,#vi > /etc/ipf/pfil.ap<br><br> > > > &gt; (uncomment bge #)<br><br> > > > &gt; #...<br><br> > > > &gt; bge -1 0 > pfil<br><br> > > > &gt; #...<br><br> > > > &gt;<br><br> > > > &gt; 3,#vi > /etc/ipf/ipf.conf<br><br> > > > &gt; block oracle in bge<br><br> > > > &gt; pass sun in bge<br><br> > > > &gt;<br><br> > > > &gt; 4,#svcadm enable<br> > > svc:/network/pfil:default<br><br> > > > &gt; #svcadm enable<br> > > > svc:/network/ipfilter:default<br><br> > > > &gt;<br><br> > > > &gt; 5,#svcs pfil<br><br> > > > &gt; #svcs ipfilter<br><br> > > > &gt;<br><br> > > > &gt; 6,#ipfstat -ionh<br><br> > > > &gt;<br><br> > > > &gt;<br><br> > > > &gt; reference:<br><br> > > > &gt; <a<br> > > ><br> > > href="<a > href="http://docs.sun.com/app/docs/doc/816-4554/gdwvu" > target="_blank">http://docs.sun.com/app/docs/doc/816-4 > 554/gdwvu</a>?<br> > ><br> > > > a=view"<br> > > ><br> > > target="_blank"><a > href="http://docs.sun.com/app/docs/doc/816-4" > target="_blank">http://docs.sun.com/app/docs/doc/816-4 > </a><br> > ><br> > > > 554/gdwvu?a=view</a><br><br> > > > &gt; <a<br> > > ><br> > > href="<a > href="http://blogs.sun.com/tonyn/entry/firewall_config > " > target="_blank">http://blogs.sun.com/tonyn/entry/firew > all_config</a><br> > ><br> > > > uratio"<br> > > ><br> > > target="_blank"><a > href="http://blogs.sun.com/tonyn/entry/firew" > target="_blank">http://blogs.sun.com/tonyn/entry/firew > </a><br> > ><br> > > > all_configuratio</a><br><br> > > > &gt; > n_in_opensolaris_2009<br><br> > > > &gt;<br><br> > > > &gt;<br><br> > > > &gt;<br><br> > > > &gt; &gt; Date: Thu, 14 Jan 2010 > 23:05:23<br> > > -0800<br><br> > > > &gt; &gt; From: <a<br> > > ><br> > > href="mailto:<a > href="mailto:[email protected]">[email protected]</a>& > quot;><a > href="mailto:[email protected]">[email protected]</a>& > lt;/a><<br> > ><br> > > > br><br> > > > &gt; &gt; To: <a<br> > > ><br> > > href="mailto:<a > href="mailto:[email protected]">ug-bjo...@open > solaris.org</a>">ug-bjo...@open<br> > ><br> > > > <a href="http://solaris.org" > target="_blank">solaris.org</a></a><br><br > > > > > &gt; &gt; Subject: [ug-bjosug] To > make the<br> > > ipfilter<br> > > > available<br><br> > > > &gt; must reboot the > system?<br><br> > > > <div class="im">&gt; > &gt;<br><br> > > > &gt; &gt; Dear all,<br><br> > > > &gt; &gt;<br><br> > > > &gt; &gt; I tried to enable the > firewall on my<br> > > > OpenSolaris<br><br> > > > &gt; 0906.<br><br> > > > &gt; &gt; I followed the guide to > do the belew<br> > > > step:<br><br> > > > &gt; &gt;<br><br> > > > &gt; &gt; $ svcadm enable > network/ipfilter<br><br> > > > &gt; &gt; $ svccfg -s > network/ipfilter:default<br> > > > setprop<br><br> > > > &gt; firewall_config_default/policy = > astring:<br> > > > allow<br><br> > > > &gt; &gt; $ svcadm refresh > network/ipfilter<br><br> > > > &gt; &gt;<br><br> > > > &gt; &gt; but the ipfilter is > always in<br> > > maintenance<br> > > > stage.<br><br> > > > &gt; &gt;<br><br> > > > &gt; &gt; I had to reboot my > system,then the<br> > > ipfilter<br> > > > is<br><br> > > > &gt; online.<br><br> > > > &gt; &gt;<br><br> > > > &gt; &gt; I don&#39;t know > whether there is a<br> > > > bug.<br><br> > > > &gt; &gt;<br><br> > > > &gt; &gt; -Hejun<br><br> > > > &gt; &gt; --<br><br> > > > &gt; &gt; This message posted from > <a<br> > > > href="<a href="http://opensolaris.org" > target="_blank">http://opensolaris.org</a>"<br> > > > target="_blank"><a > href="http://opensolaris.org" > target="_blank">opensolaris.org</a></a><br> > ;<br> > > > &gt;<br><br> > > > </div>&gt;<br> > > ><br> > > > ______________________________________________________ > <br> > ><br> > > > <br><br> > > > &gt; __________<br><br> > > > &gt; Hotmail: Powerful Free email with > security<br> > > > by<br><br> > > > &gt; Microsoft.<br><br> > > > &gt; <a<br> > > ><br> > > href="<a > href="http://clk.atdmt.com/GBL/go/196390710/direct/01/ > " > target="_blank">http://clk.atdmt.com/GBL/go/196390710/ > direct/01/</a><br> > ><br> > > > "<br> > > ><br> > > target="_blank"><a > href="http://clk.atdmt.com/GBL/go/196390710/" > target="_blank">http://clk.atdmt.com/GBL/go/196390710/ > </a><br> > ><br> > > > direct/01/</a><br><br> > > > <div><div></div><div > class="h5">--<br><br> > > > This message posted from <a<br> > > > href="<a href="http://opensolaris.org" > target="_blank">http://opensolaris.org</a>"<br> > > > target="_blank"><a > href="http://opensolaris.org" > target="_blank">opensolaris.org</a></a><br> > ;<br> > > ><br> > > > _______________________________________________<br& > gt;<br> > > > networking-discuss mailing > list<br><br> > > > <a<br> > > ><br> > > href="mailto:<a > href="mailto:[email protected]">netwo > [email protected]</a>">netwo<br> > ><br> > > ><br> > > <a > href="mailto:[email protected]">rking-disc > [email protected]</a></a></div></div& > gt;</blockqu<br> > ><br> > > > ote></div><br><br> > > ><br> > > ><br> > > > </div>__________________________________________ > _____<br> > > > networking-discuss mailing list<br> > > > <a > href="mailto:[email protected]">netwo > [email protected]</a><br> > --<br> > This message posted from <a > href="http://opensolaris.org" > target="_blank">opensolaris.org</a><br> > _______________________________________________<br> > networking-discuss mailing list<br> > <a > href="mailto:[email protected]">netwo > [email protected]</a></div></div></blockqu > ote></div><br> > > </div>_______________________________________________ > networking-discuss mailing list > [email protected] -- This message posted from opensolaris.org _______________________________________________ networking-discuss mailing list [email protected]
