IPSEC with different versions of S10

2009-12-15 Thread Wayne Nichols
I am doing manual IPSEC between S10 TX on a sparc machine (Generic_137111-01 sun4v sparc SUNW,T5140) and S10 x86 10/09. I have been unable to get these two to successfully create an IPSEC tunnel. Are there differences in the IPSEC for different versions of S10? To date, I have never had an

MLP setup questions

2008-12-29 Thread Wayne Nichols
On Dec 29, 2008, at 5:08 PM, Jarrett Lu wrote: > > Wayne Nichols wrote: >> Setup: >> >> Global zone, multiple labeled zones, each labeled zone configured >> more or less identically. Each labeled zone connects to a >> different network. Each labe

MLP setup questions

2008-12-29 Thread Wayne Nichols
Setup: Global zone, multiple labeled zones, each labeled zone configured more or less identically. Each labeled zone connects to a different network. Each labeled zone has a process that needs to be accessed by the global zone via a network socket. This process and socket must not be vi

JASS: change umask

2008-10-16 Thread Wayne Nichols
>> >> Setting the root umask to 027 will break Solaris. Some files and >> directories need to be world-writable. > > Yes, please don't set root's umask to 027, not 077. > >>> I am curious as to what will go wrong if root's umask is set to 027 or 077. I've been running some minimized S10 TX box

/opt as inehrit-pkg-dir in TX

2008-10-01 Thread Wayne Nichols
I am wondering what the implications are of /opt being an inherit-pkg- dir in the SUNWtsoldef.xml template for a zone under TX. Is this a requirement for TX? What are the ramifications if I were to remove that line from the template and have each zone own their own /opt in TX?

console login to labeled zone

2008-07-01 Thread Wayne Nichols
> > > From your description I am not sure you really want to do any auth > in the global zone though. Do you have any auth that must occur in > the global zone or would a successful login directly to the labeled > zone indicate sufficient auth to be using the console? There is no reason fo

console login to labeled zone

2008-07-01 Thread Wayne Nichols
Hello all, I received no responses to my first query so I am trying again. I have a minimized version of TX running on a special purpose machine. The minimization is a customer requirement. There is no window environment on the host. The customer now has a requirement to log into a labl

labeled zone console login

2008-06-18 Thread Wayne Nichols
I have a minimized TX host (I know many will ask why minimize, but it is...). I am wondering if there is a way to login directly to a labeled zone from the console. I know I could do a restricted profile shell that does a zlogin. Just wondering if there is another way or what it might t