Solaris 11.4 NTP /var/inet/ntp.drift.TEMP:Permission denied

Solaris 11.4 ntpd[860]: [ID 702911 daemon.error] frequency file /var/inet/ntp.drift.TEMP: Permission denied

APPLIES TO :  Solaris Operating System - Version 11.4 to 11.4 [Release 11.0]

SYMPTOMS : After upgrade to Solaris 11.4 customers may see error messages similar to below:
ntpd[860]: [ID 702911 daemon.error] frequency file /var/inet/ntp.drift.TEMP: Permission denied
It will depend on the drift file entry in /etc/inet/ntp.conf

CHANGES :  The ntpd daemon in Solaris releases previous to Solaris 11.4 ran as user root - in Solaris 11.4 the ntpd daemon runs as user daemon

CAUSE :  The cause of the issue is having the drift file location in the /etc/inet/ntp.conf file pointing to a directory path that user daemon cannot write to

SOLUTION :  Use the default driftfile location (/var/ntp/ntp.drift) as it is owned by user daemon to ntpd can then successfully write the drift file

                        JUDI-DEV-01# ls -rlt /var/ntp/ntp.drift
                        -rw-r--r--   1 root root         7 May  4 14:26 /var/ntp/ntp.drift
                        JUDI-DEV-01#
                        JUDI-DEV-01# chown daemon:daemon /var/ntp/ntp.drift
                        JUDI-DEV-01#
                        JUDI-DEV-01# ls -rlt /var/ntp/ntp.drift
                        -rw-r--r--   1 daemon   daemon         7 May  4 14:26 /var/ntp/ntp.drift
                        JUDI-DEV-01#


 To make this change active, the ntp service must be stopped and started (Note this will step the time when ntp starts)

                        JUDI-DEV-01# svcadm restart ntp
                        JUDI-DEV-01#



~Judi~
  

Oracle Auto Service Request - ASR

Oracle Auto Service Request - ASR

APPLIES TO :  Oracle SPARC Hardware

ISSUE : Install and configure Oracle ASR Manager,Register ASR Manager to My Oracle Support, Add ASR assets to ASR Manager.

GOAL :  Install and configure Oracle ASR Manager,Register ASR Manager to My Oracle Support, Add ASR assets to ASR Manager.

SOLUTION :  Install and configure Oracle ASR Manager,Register ASR Manager to My Oracle Support, Add ASR assets to ASR Manager.



What is Oracle ASR :  
Oracle Auto Service Request—included with Oracle Premier Support—is the fastest route to restoring system availability if a hardware fault occurs. Take advantage of a secure, expedited diagnostic process with automatic service request generation, priority service request handling, and automatic parts dispatch—at no extra cost.

• Enhanced support provided by Oracle at no additional cost—Oracle Auto Service Request is secure and customer-installable, and the software and documentation are available online.

• Expedite the diagnostic process with automatic service request generation—When a hardware fault is detected, Oracle Auto Service Request opens a service request with Oracle automatically and transports electronic fault telemetry to help expedite the diagnostic process.

• Identify and resolve problems faster with priority service request handling—Rapid service request processing further improves speed to resolution with proven diagnostic capabilities that automatically analyze telemetry data for known issues and deliver immediate corrective actions—up to 25 percent faster resolution than specific hardware faults on non-connected systems.

• Get replacement parts without delay with automated parts dispatch—Parts are dispatched upon diagnosis of issues within a service request, and, in many cases, Oracle engineers are working to resolve the issue before you are even aware the problem exists.

• Keep information and systems secure with outbound telemetry data—Oracle Auto Service Request requires only an outbound, secure internet connection to Oracle (based on SSL and https). Oracle’s hardware products send fault telemetry locally to the Oracle Auto Service Request client and do not require Internet access. The software does not use any incoming internet connections, nor does it include any remote access mechanisms. The electronic diagnostic data sent to Oracle includes only what is needed to solve the problem.

1.      Download the latest ASR Manager Software from My Oracle Support.
                Download - Oracle Auto Service Request (ASR) (Doc ID 1185493.1)
               
2.      Copy the file to the server one which going to act as ASR Manager
                scp p28597773_1831_SOLARIS64.zip root@JUDI-DEV-01:/root/

3.      Extract the file.
                JUDI-DEV-10# unzip p28597773_1831_SOLARIS64.zip
                Archive:  p28597773_1831_SOLARIS64.zip
                  inflating: license_agreement.html
                  inflating: readme.html
                  inflating: asrmanager-18.3.1-20180830101831.pkg
                JUDI-DEV-10#

4.      Install the package.
                JUDI-DEV-10# pkgadd -d asrmanager-18.3.1-20180830101831.pkg

                The following packages are available:
                  1  asrmanager     ASR Manager
                    (all) 18.3.1

                Select package(s) you wish to process (or 'all' to process
                all packages). (default: all) [?,??,q]: all

                Processing package instance <asrmanager> from </tmp/asrmanager-18.3.1-20180830101831.pkg>

                ASR Manager(all) 18.3.1

                Copyright [2008,2015], Oracle and/or its affiliates. All rights reserved.

                License and Terms of Use for this software are described at https://support.oracle.com/ (see Legal Notices and Terms of Use)."

                Using </> as the package base directory.
                ## Processing package information.
                ## Processing system information.
                ## Verifying package dependencies.
                ## Verifying disk space requirements.
                ## Checking for conflicts with packages already installed.

                The following files are already installed on the system and are being
                used by another package:
                * /opt <attribute change only>
                * /var <attribute change only>
                * /var/opt <attribute change only>

                * - conflict with a file which does not belong to any package.

                Do you want to install these conflicting files [y,n,?,q] y
                ## Checking for setuid/setgid programs.

                This package contains scripts which will be executed with super-user
                permission during the process of installing this package.

                Do you want to continue with the installation of <asrmanager> [y,n,?] y

                Installing ASR Manager as <asrmanager>

                ## Executing preinstall script.
                ## Installing part 1 of 1.
                /opt/asrmanager/asrassetbundle/ASRAssetBundle.18.3.1-20180830101831.tar.gz
                /opt/asrmanager/bin/VSHELLrev
                /opt/asrmanager/bin/asr
                /opt/asrmanager/bin/asr_bundles
                /opt/asrmanager/bin/asra
                /opt/asrmanager/bin/asrautoupdate
                /opt/asrmanager/bin/asrm
                /opt/asrmanager/bin/asrm_health_check
                /opt/asrmanager/bin/include/asr.bundles
                /opt/asrmanager/bin/include/asr.http
                /opt/asrmanager/bin/include/asr.javaversion
                /opt/asrmanager/bin/include/asr.linux
                /opt/asrmanager/bin/include/asr.notificationtrap
                /opt/asrmanager/bin/include/asr.snmpv3
                /opt/asrmanager/bin/include/asr.solaris
                /opt/asrmanager/bin/include/initd.asr
                /opt/asrmanager/bin/include/initd.asra
                /opt/asrmanager/bin/include/oasm.check
                /opt/asrmanager/bin/sftransport
                /opt/asrmanager/bin/vshell
                /opt/asrmanager/bin/vshell_linux
                /opt/asrmanager/bin/vshell_sparc
                /opt/asrmanager/bin/vshell_x86
                /opt/asrmanager/configuration/asrautoupdate-smf.xml
                /opt/asrmanager/configuration/asrmanager-account
                /opt/asrmanager/configuration/asrmanager-smf.xml
                /opt/asrmanager/configuration/log4j-config.xml
                /opt/asrmanager/felix-framework/DEPENDENCIES
                /opt/asrmanager/felix-framework/LICENSE
                /opt/asrmanager/felix-framework/LICENSE.kxml2
                /opt/asrmanager/felix-framework/NOTICE
                /opt/asrmanager/felix-framework/bin/felix.jar
                /opt/asrmanager/felix-framework/conf/config.properties
                /opt/asrmanager/legal/readme.txt
                /opt/asrmanager/lib/asrstart/com.oracle.asr.asrstart.jar
                /opt/asrmanager/lib/com.oracle.asr.activation.jar
                /opt/asrmanager/lib/com.oracle.asr.autoupdate.jar
                /opt/asrmanager/lib/com.oracle.asr.container.jar
                /opt/asrmanager/lib/com.oracle.asr.db.jar
                /opt/asrmanager/lib/com.oracle.asr.diagnostics.jar
                /opt/asrmanager/lib/com.oracle.asr.http.receiver.jar
                /opt/asrmanager/lib/com.oracle.asr.privauto.jar
                /opt/asrmanager/lib/com.oracle.asr.servicetags.jar
                /opt/asrmanager/lib/com.oracle.asr.sftransport.jar
                /opt/asrmanager/lib/com.oracle.asr.snmp.receiver.jar
                /opt/asrmanager/lib/com.oracle.asr.storage.jar
                /opt/asrmanager/lib/com.oracle.asr.timertask.jar
                /opt/asrmanager/lib/com.oracle.asr.transport.cfmt.jar
                /opt/asrmanager/lib/com.oracle.asr.transport.jar
                /opt/asrmanager/lib/commons-net-1.4.1.jar
                /opt/asrmanager/lib/jetty-all-9.2.24.v20180105.jar
                /opt/asrmanager/lib/secstart/com.oracle.asr.secauto.jar
                /opt/asrmanager/lib/servlet-api-3.1.jar
                /opt/asrmanager/pkg/rpm/asrmanager.spec
                /opt/asrmanager/pkg/solaris/copyright
                /opt/asrmanager/pkg/solaris/depend
                /opt/asrmanager/pkg/solaris/noask
                /opt/asrmanager/pkg/solaris/postinstall
                /opt/asrmanager/pkg/solaris/postremove
                /opt/asrmanager/pkg/solaris/preinstall
                /opt/asrmanager/pkg/solaris/preremove
                /opt/asrmanager/pkg/solaris/uninstall_asr_silent.sh
                /opt/asrmanager/sftransport/listener.xml
                /opt/asrmanager/sftransport/logging.properties
                /opt/asrmanager/sftransport/logviewer/readme.txt
                /opt/asrmanager/sftransport/logviewer/sftransport_log.cgi
                /opt/asrmanager/sftransport/logviewer/sftransport_log.xsl
                /opt/asrmanager/sftransport/sftransport.dtd
                /opt/asrmanager/sftransport/sftransport.xml
                /opt/asrmanager/sftransport/sftransport.xsl
                /opt/asrmanager/util/check_asr_status.sh
                /opt/asrmanager/util/diag/asrDiagUtil.sh
                /opt/asrmanager/util/diag/com.oracle.asr.util.diag.jar
                /opt/asrmanager/util/diag/diag-config.properties
                /opt/asrmanager/util/sft_acs_check.sh
                /var/opt/asrmanager/asrupdate.ks
                /var/opt/asrmanager/configuration/mib/SUN-ASR-NOTIFICATION-MIB.mib
                [ verifying class <none> ]
                ## Executing postinstall script.
                *******************************************************
                To allow a non-root user to manage ASR Manager service:
                Run the command 'usermod -A solaris.smf.manage.asrmanager <userName>'
                *******************************************************
                Importing ASR Manager smf descriptor /var/svc/manifest/application/management/asrmanager.xml
                svccfg: Restarting svc:/system/manifest-import
                 The manifest being imported is from a standard location and should be imported with the  command :                 svcadm restart svc:/system/manifest-import
                Successfully added ASR Manager (asrm) service. (svccfg)
                Importing ASR Autoupdate smf descriptor                 /var/svc/manifest/application/management/asrautoupdate.xml
                svccfg: Restarting svc:/system/manifest-import
                 The manifest being imported is from a standard location and should be imported with the  command :                 svcadm restart svc:/system/manifest-import
                Successfully added ASR Autoupdate (asra) service.
                Starting ASR Manager service
                ASR Manager service start is in progress ......................................ASR Manager (pid 2179) is RUNNING.
                Installing ASR Manager bundles...
                Successfully installed ASR Manager bundles.

                The ASR Manager application is installed in '/opt/asrmanager'. Log files are located in '/var/opt/asrmanager'.
                ASR Administration command is now available at /opt/asrmanager/bin/asr.

                Starting ASR Autoupdate service
                Checking ASR Manager status ..
                Installation of <asrmanager> was successful.

                JUDI-DEV-10#

5.      Register the ASR Manager with Oracle.
                JUDI-DEV-10# /opt/asrmanager/bin/asr register
                
                1) transport.oracle.com
                Select destination transport server or enter full URL for alternate server [1]:

                If a proxy server is required for HTTPS communication to the internet,
                enter the information below.  If no proxy is needed, enter -

                Proxy server name []: [?] 192.168.100.1              (Blue Coat Proxy Address)

                Proxy port number []: [?] 8080

                Proxy authentication; if authentication is not required, enter -

                Proxy user []: [?] -

                Is this SOCKS proxy [y,n] n

                Please wait. Restarting ASR Manager with new settings.

                An Oracle Single Sign On (OSSO) account is required for data submission.
                If you do not have an account or have forgotten your username or
                password, visit http://support.oracle.com

                Username []: unixteam@judi.com
                Password:
                Password again (to verify):

                Contacting transport servers. Please wait...

                Checking connection to https://transport.oracle.com/v1/
                Connection is ok.  Trying to register client.
                Successfully registered with Oracle ASR Infrastructure.

                Registration complete.
                Successfully submitted ASR Registration Request.

                Stopped Oracle ASR TimerTask Scheduler
                Started Oracle ASR TimerTask Scheduler

                JUDI-DEV-10#


6.      Configure ASR Asset's - Login to iLOM of  SPARC T5-2, T7-2 and T8-2
                -> cd /SP/clients/asr
                /SP/clients/asr

7.      Set the ASR Manager IP as End Point in ASR Assets.
                -> set /SP/clients/asr endpoint=http://192.168.10.1:16161/asr
                Set 'endpoint' to 'http://192.168.10.1:16161/asr'
                -> 

8.      Set the MOS credentials to communicate with ASR Manager
               -> set /SP/clients/asr username=unixteam@judi.com password=S3cR3t$
                Set 'username' to 'unixteam@judi.com'
                Changing password for ASR user...
                Enter new password again: *********
                New password was successfully set for user /SP/clients/asr
                ->

9.      Enable the ASR service in iLOM
                -> set /SP/clients/asr state=enabled
                Set 'state' to 'enabled'
                ->

10.      Verify the registration status
                -> show /SP/clients/asr status
                 /SP/clients/asr
                    Properties:
                        status = Registered Tue Jan 01 12:08:31 2019
                ->

11.      Send a Heart Beat to MOS.
                -> set /SP/clients/asr send-event=heartbeat
                Set 'send-event' to 'heartbeat'
                ->

12.      Login MOS and Approve the registration.

13.      Send a Test message to MOS and get confirmed through a mail.
                -> set /SP/clients/asr send-event=test
                Set 'send-event' to 'test'
                ->
                 We will receive a mail Confirmation from MOS

14.      Verify the status of the ASR Assets in ASR Manager

JUDI-DEV-10# /opt/asrmanager/bin/asr list_asset
IP_ADDRESS HOST_NAME                       SERIAL_NUMBER PARENT_SERIAL ASR PROTOCOL SOURCE   LAST_HEARTBEAT          PRODUCT_NAME
---------- ---------                       ------------- ------------- --- -------- ------   --------------          ------------

1820XV45HG JUDI-DEV-10 1820XV45HG                   Y   HTTP     ILOM_XML 2019-01-01 12:08:31.204 SPARC T8-2

Please use My Oracle Support 'http://support.oracle.com' to view the activation status.


JUDI-DEV-01#




Connectivity Requirements : 

Source IP	Destination IP	Protocol	Network Service	Ports	Comments
JUDI-DEV-10 (192.168.10.1 - ASR Manager)	transport.oracle.com (141.146.1.169 - MOS)	https	TCP	443	- Connectivity between ASR Manager to My Oracle Support.  - Send telementary data of T8-2 hardware to Oracle Support to create automatic service request on hardware failure
JUDI-DEV-10 (192.168.10.1 - ASR Manager)	JUDI-DEV-01 (192.168.1.1) (ILOM IP of ASR Asset or Client)	http	TCP	6481	Service Tags listener for Asset activation from T8-2 hardware to ASR Manager
JUDI-DEV-01 (192.168.1.1) (ILOM IP of ASR Asset or Client)	JUDI-DEV-10 (192.168.10.1 - ASR Manager)	snmp	udp	162	For sending telemetry messages of T8-2 hardware to theASR Manager.
JUDI-DEV-01 (192.168.1.1) (ILOM IP of ASR Asset or Client)	JUDI-DEV-10 (192.168.10.1 - ASR Manager)	http	tcp	16161	For sending Solaris 11 ASR telemetry to the ASR Manager.

15.      To disable a ASR service in ASR asset
                -> set /SP/clients/asr state=disabled
                Set 'state' to 'disabled'
                ->