Revision as of 14:53, 12 August 2011

group limit

This is very important on the mail servers, as procmail su's to the user, and if the user is in more than 13 groups (16 - private group - 2 PAG groups), then the AFS PAG gets forgotten, and mail delivery fails.

/etc/system

set ngroups_max=32

You can try to set this via mdb with echo ngroups_max/W 20 | mdb -kw, but the machine crashed shortly thereafter when I did this.

getconf NGROUPS_MAX will show you what the current value is.

Multipathing with IPv6

Because this isn't entirely obvious.

In this case, we have two interfaces, bge0 and bge1.

Host has addresses 128.118.200.78 and 2610:8:7800:14::32/64.

/etc/hosts

::1 localhost
127.0.0.1 localhost
128.118.200.78 inara.bx.psu.edu inara

/etc/hostname.bge0

inara group production up

/etc/hostname.bge1

group production up

/etc/hostname6.bge0

group production -failover up
addif 2610:8:7800:14::32/64 up

/etc/hostname6.bge1

group production -failover up

Now for the trick to make this work if you're running autoconf on your network. If you don't do both of these, in.ndpd will configure an ADDRCONF interface after a failover/failback, resulting in two public IPv6 interfaces - the statically configured one and the autoconf'd one. No manner of ifconfig commands will remove that autoconf'd address.

/etc/inet/ndpd.conf

ifdefault StatelessAddrConf off

Then run:

$ svccfg -s routing/ndp:default setprop routing/stateless_addr_conf=false # makes in.ndpd run with -a
$ svcadm restart ndp