Unable to load ControlMinder kernel module in Solaris branded zone.

book

Article ID: 39813

calendar_today

Updated On:

Products

CA Virtual Privilege Manager CA Privileged Identity Management Endpoint (PIM) CA Privileged Access Manager (PAM)

Issue/Introduction

Symptom:

 

PIM 12.8 is installed in Solaris Global zone. Kernel module is loaded with SEOS_load in global zone.  Try to load kernel module in branded zone with seload command. Command failed with following error.

CA ControlMinder system call is not loaded.

Error: Timeout waiting for CA ControlMinder daemon.

CA ControlMinder system call is not loaded [branded zone hostname]

 

Environment:

 

PIM: 12.8, 12.8SP1

OS: Solaris 10, Solaris 11

 

Cause:

 

Solaris pkadd does not support propagation of applications installed in the Solaris global zone in to branded zones. CA ControlMinder must use ioctl instead of syscall to communicate with the kernel module.

 

Resolution:

 

1. Stop ControlMinder in global zone and guest zones.

2.Unload kernel module in global zone with SEOS_load –u command.

3.In global and guest zones, change SEOS_use_ioctl = 1 in seos.ini file 

4.Load kernel module in global zone with SEOS_load command.

5.Reboot each quest zones where ControlMinder is installed.

 

 

 

 

 

Environment

Release: ACP1M005900-12.8-Privileged Identity Manager
Component: