[SUMMARY] Problems logging out in CDE (Sun Ray clients)

Original Problem:   (Solaris 8, Sun Ray 1.2)

   When our Sun Ray users try to log out of CDE they get no
   response, but will eventually be logged out in about 5
   minutes. If after the first attempt to log out they try
   to log out again they get the message:
   
     The request to service this action has failed for the following reason:
       TT_ERR_NO_MATCH No handler could be found for this message, and the
       disposition was not queue or start.

   Evidently this is a general Solaris problem, it just effected
   our Sun Ray users because of the security policy we had in place.
   
Answer:

   Gary forwarded me the Sundoc: apply patch (see below).
   
Thanks to:

Gary Losito
amit mahajan

>
> ...Taken from SUNDOC 25361
>
> Sun(sm) Alert Notification
> Sun Alert ID: 25361
> Synopsis: Logging out From CDE Might Lead to a Hung CDE Session on Systems
> With "Basic Security Module (BSM)" Enabled
> Category: Availability
> Product: Solaris
> BugIDs: 4353965
> Avoidance: Workaround, Patch
> State: Resolved
> Date Released: 22-Jan-2001, 18-May-2001
> Date Closed: 18-May-2001
> Date Modified: 22-Jan-2001, 26-Feb-2001, 18-May-2001
> 1. Impact
> When a CDE desktop user tries to exit from a CDE session, the CDE session
> might hang, making a proper logout from the system impossible.
>
> 2. Contributing Factors
> This problem can occur in the following releases:
>
> SPARC
>
> Solaris 2.5.1
> Solaris 2.6 without patch 105621-25
> Solaris 7 without patch 106541-15
> Solaris 8 without patch 108875-08
> Intel
>
> Solaris 2.5.1
> Solaris 2.6 without patch 105622-25
> Solaris 7 without patch 106542-15
> Solaris 8 without patch 108876-08
> Only Solaris systems that have the "Basic Security Module (BSM)" enabled
are
> at risk. The "BSM" is disabled by default and enabled using the
> "/etc/security/bsmconv" command. An "auditd" process running is an
> indication of an enabled "BSM".
>
> Systems with more then one CPU are more likely to experience the described
> issue.
>
> 3. Symptoms
> After clicking the "EXIT" button on the front control panel of a CDE
desktop
> and confirming the logout in the appearing dialog box, the logout does not
> proceed to the login screen as expected. Instead, the CDE desktop's front
> control panel and other windows remain open and still accept input. If in
> this situation the front control panel's "EXIT" button is clicked again,
an
> error message window with the following message comes up:
>
> 	The request to service this action has failed for the following reason:
> 	TT_ERR_NO_MATCH No handler could be found for this message, and the
> disposition
> 	was not queue or start.
> Solution Summary Top
>
> 4. Relief/Workaround
> Should the described issue occur, the following procedure will end the
hung
> CDE session and bring back the CDE login screen:
>
> Login to the affected system as root user (using "telnet" or "rlogin" for
> example)
> Issue the following command
>     # /usr/proc/bin/ptree `cat /var/dt/Xpid`
> to generate a tree listing of processes.
> In the resulting output, look for "grandchild" "dtlogin" processes, i.e.
> "dtlogin" processes listed in a line indented two levels (that is,
indented
> by 4 space characters). There should be a single grandchild "dtlogin"
> process that has no child processes listed, i.e. that has no immediately
> subsequent line indented three levels (that is, indented by 6 space
> characters).
> Example:
>     # /usr/proc/bin/ptree `cat /var/dt/Xpid`
>     2602  /usr/dt/bin/dtlogin -daemon
>       8251  /usr/dt/bin/dtlogin -daemon
>         8271  /usr/dt/bin/dtlogin -daemon
>       8483  /usr/dt/bin/dtlogin -daemon
>         8503  /usr/dt/bin/dtlogin -daemon
>           8504  /bin/ksh /usr/dt/bin/Xsession
>             8544  /usr/dt/bin/sdt_shell -c ...
> ...
> In the above example, only the line starting with the process ID "8271"
> shows a grandchild "dtlogin" process without a child process.
> Note the listed process ID of this childless grandchild "dtlogin" process
> and sent it a "kill" signal:
>     # kill <process ID of childless grandchild "dtlogin" process>
> Example:
>     # kill 8271
> The CDE login screen should now come up as expected.
>
> 5. Resolution
> This problem is addressed in the following releases:
>
> SPARC
>
> Solaris 2.6 with patch 105621-25 or later
> Solaris 7 with patch 106541-15 or later
> Solaris 8 with patch 108875-08 or later
> Intel
>
> Solaris 2.6 with patch 105622-25 or later
> Solaris 7 with patch 106542-15 or later
> Solaris 8 with patch 108876-08 or later
> Customers running Solaris 2.5.1 with the "Basic Security Module (BSM)"
> enabled should upgrade to Solaris 2.6 or later and install the appropriate
> patches to avoid the described issue.
>
> Change History:
> 26-Feb-2001:
>
> Patch 106541-15 is now available
> 23-Mar-2001
>
> Patch 108876-08 is now available
> 28-Mar-2001
>
> Patch 106542-15 is now available
> 15-May-2001
>
> Patch 108875-08 is now available
> State: Resolved




   << All opinions expressed are mine, not the University's >>

  =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
   David Foster    National Center for Microscopy and Imaging Research
    Programmer/Analyst     University of California, San Diego
    dfoster@ucsd.edu       Department of Neuroscience, Mail 0608
    (858) 534-7968         http://ncmir.ucsd.edu/
  =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

   "The reasonable man adapts himself to the world; the unreasonable one
   persists in trying to adapt the world to himself.  Therefore, all progress
   depends on the unreasonable."   -- George Bernard Shaw

_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers