- 论坛徽章:
- 0
|
为何无法图形方式登录一台远程的solaris主机?
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F25361
Logging out From CDE Might Lead to a Hung CDE Session on Systems With "Basic Security Module (BSM)" Enabled
25361
Sun(sm) Alert Notification
Sun Alert ID: 25361
Synopsis: Logging out From CDE Might Lead to a Hung CDE Session on Systems With "Basic Security Module (BSM)" Enabled
Category: Availability
Product: Solaris
BugIDs: 4353965
Avoidance: Workaround, Patch
State: Resolved
Date Released: 22-Jan-2001, 18-May-2001
Date Closed: 18-May-2001
Date Modified: 22-Jan-2001, 26-Feb-2001, 18-May-2001
1. Impact
When a CDE desktop user tries to exit from a CDE session, the CDE session might hang, making a proper logout from the system impossible.
2. Contributing Factors
This problem can occur in the following releases:
SPARC
Solaris 2.5.1
Solaris 2.6 without patch 105621-25
Solaris 7 without patch 106541-15
Solaris 8 without patch 108875-08
Intel
Solaris 2.5.1
Solaris 2.6 without patch 105622-25
Solaris 7 without patch 106542-15
Solaris 8 without patch 108876-08
Only Solaris systems that have the "Basic Security Module (BSM)" enabled are at risk. The "BSM" is disabled by default and enabled using the "/etc/security/bsmconv" command. An "auditd" process running is an indication of an enabled "BSM".
Systems with more then one CPU are more likely to experience the described issue.
3. Symptoms
After clicking the "EXIT" button on the front control panel of a CDE desktop and confirming the logout in the appearing dialog box, the logout does not proceed to the login screen as expected. Instead, the CDE desktop's front control panel and other windows remain open and still accept input. If in this situation the front control panel's "EXIT" button is clicked again, an error message window with the following message comes up:
The request to service this action has failed for the following reason:
TT_ERR_NO_MATCH No handler could be found for this message, and the disposition
was not queue or start.
Solution Summary Top
4. Relief/Workaround
Should the described issue occur, the following procedure will end the hung CDE session and bring back the CDE login screen:
Login to the affected system as root user (using "telnet" or "rlogin" for example)
Issue the following command
# /usr/proc/bin/ptree `cat /var/dt/Xpid`
to generate a tree listing of processes.
In the resulting output, look for "grandchild" "dtlogin" processes, i.e. "dtlogin" processes listed in a line indented two levels (that is, indented by 4 space characters). There should be a single grandchild "dtlogin" process that has no child processes listed, i.e. that has no immediately subsequent line indented three levels (that is, indented by 6 space characters).
Example:
# /usr/proc/bin/ptree `cat /var/dt/Xpid`
2602 /usr/dt/bin/dtlogin -daemon
8251 /usr/dt/bin/dtlogin -daemon
8271 /usr/dt/bin/dtlogin -daemon
8483 /usr/dt/bin/dtlogin -daemon
8503 /usr/dt/bin/dtlogin -daemon
8504 /bin/ksh /usr/dt/bin/Xsession
8544 /usr/dt/bin/sdt_shell -c ...
...
In the above example, only the line starting with the process ID "8271" shows a grandchild "dtlogin" process without a child process.
Note the listed process ID of this childless grandchild "dtlogin" process and sent it a "kill" signal:
# kill <process ID of childless grandchild "dtlogin" process>;
Example:
# kill 8271
The CDE login screen should now come up as expected.
5. Resolution
This problem is addressed in the following releases:
SPARC
Solaris 2.6 with patch 105621-25 or later
Solaris 7 with patch 106541-15 or later
Solaris 8 with patch 108875-08 or later
Intel
Solaris 2.6 with patch 105622-25 or later
Solaris 7 with patch 106542-15 or later
Solaris 8 with patch 108876-08 or later
Customers running Solaris 2.5.1 with the "Basic Security Module (BSM)" enabled should upgrade to Solaris 2.6 or later and install the appropriate patches to avoid the described issue.
Change History:
26-Feb-2001:
Patch 106541-15 is now available
23-Mar-2001
Patch 108876-08 is now available
28-Mar-2001
Patch 106542-15 is now available
15-May-2001
Patch 108875-08 is now available
State: Resolved |
|