View source for BXadmin:Solaris notes

= group limit =
This is very important on the mail servers, as procmail su's to the user, and if the user is in more than 13 groups (16 - private group - 2 PAG groups), then the AFS PAG gets forgotten, and mail delivery fails.

'''/etc/system'''
<pre>set ngroups_max=32</pre>

You can try to set this via mdb with ''echo ngroups_max/W 20 | mdb -kw'', but the machine crashed shortly thereafter when I did this.

''getconf NGROUPS_MAX'' will show you what the current value is.

= Multipathing with IPv6 =
Because this isn't entirely obvious.

In this case, we have two interfaces, bge0 and bge1.

Host has addresses 128.118.200.78 and 2610:8:7800:14::32/64.

'''/etc/hosts'''
<pre>::1 localhost
127.0.0.1 localhost
128.118.200.78 inara.bx.psu.edu inara</pre>

'''/etc/hostname.bge0'''
<pre>inara group production up</pre>

'''/etc/hostname.bge1'''
<pre>group production up</pre>

'''/etc/hostname6.bge0'''
<pre>group production -failover up
addif 2610:8:7800:14::32/64 up</pre>

'''/etc/hostname6.bge1'''
<pre>group production -failover up</pre>

Now for the trick to make this work if you're running autoconf on your network. If you don't do both of these, in.ndpd will configure an ADDRCONF interface after a failover/failback, resulting in two public IPv6 interfaces - the statically configured one and the autoconf'd one. No manner of ifconfig commands will remove that autoconf'd address.

'''/etc/inet/ndpd.conf'''
<pre>ifdefault StatelessAddrConf off</pre>

Then run:
<pre>$ svccfg -s routing/ndp:default setprop routing/stateless_addr_conf=false # makes in.ndpd run with -a
$ svcadm restart ndp</pre>

= Building Packages =
For sparc, build on early.  For intel you can use bigsky.

Building openafs as an example

# update /afs/bx.psu.edu/admin/pkgbuild/SPECS/openafs-1.6.spec
# use {{code|/opt/bx/bin/pkgbuild -ba --pkgformat ds <specfile>}} to build the new package
# assuming you get a .pkg file, gzip it and move it to /afs/.bx.psu.edu/service/ftp/pub/software/solaris/<arch>/5.10
# use /opt/csw/bin/bldcat to update the catalog file
# release
# DO NOT simply upgrade all packages on river/jayne/simon.  For an explanation of why, see https://wiki.bx.psu.edu/BXadmin%3ATodo

Since the package manager doesn't automatically update, you probably have to use pkgutil to upgrade BXopenafs by hand.

To test, simply copy the .pkg to whatever host you're going to test on and:

 pkgrm BXopenafs
 pkgadd -d <pkgfile> BXopenafs