Unable to load ControlMinder kernel module in Solaris branded zone.

Products

• CA Virtual Privilege Manager
• CA Privileged Identity Management Endpoint (PIM)
• CA Privileged Access Manager (PAM)

Issue/Introduction

PIM 12.8 is installed in Solaris Global zone. Kernel module is loaded with SEOS_load in global zone.  Try to load kernel module in branded zone with seload command. Command failed with following error.

CA ControlMinder system call is not loaded.

Error: Timeout waiting for CA ControlMinder daemon.

CA ControlMinder system call is not loaded [branded zone hostname]

Environment

PIM: 12.8, 12.8SP1

OS: Solaris 10, Solaris 11

Cause

Solaris pkadd does not support propagation of applications installed in the Solaris global zone in to branded zones. CA ControlMinder must use ioctl instead of syscall to communicate with the kernel module.

Resolution

1. Stop ControlMinder in global zone and guest zones.

2.Unload kernel module in global zone with SEOS_load –u command.

3.In global and guest zones, change SEOS_use_ioctl = 1 in seos.ini file 

4.Load kernel module in global zone with SEOS_load command.

5.Reboot each quest zones where ControlMinder is installed.