E10K Starfire and Y2K
nomadtheringless
single domain in a multi E10K cluster. How does one put forward the date
without messing up the SSP synchronization software. Stoping NTP and
using date is just to easy and Sun system engineers say that it will
blow production domains out of the water does anybody have any
experience of this. Ps the Sun system Engineers really are unsure
Nick
> Ok here it is ; the insane asylum has requested that we test Y2K on a
> single domain in a multi E10K cluster. How does one put forward the date
> without messing up the SSP synchronization software.
you don't. for many many reasons, isolate the test machine COMPLETELY
take it completely off the local net.
> Stoping NTP and
> using date is just to easy and Sun system engineers say that it will
> blow production domains out of the water does anybody have any
> experience of this. Ps the Sun system Engineers really are unsure
I've wouldn't try it in a production env, can you take a few machines
and isolate them, the wind the date forward on this group. Don't
forget to reinstall the OS after you wind the date back and before
connecting them back to the 'proper time' network
Nick
-----We Solve your Computer Problems---
Founder of the Prolifics User Group
C. Newport
: Ok here it is ; the insane asylum has requested that we test Y2K on a
: single domain in a multi E10K cluster. How does one put forward the date
: using date is just to easy and Sun system engineers say that it will
: blow production domains out of the water does anybody have any
: experience of this. Ps the Sun system Engineers really are unsure
PLEASE do not do this.
The Sun enginners are correct.
Tell the bloody idiots to buy an E450 for testing purposes, or even hire
a test machine in for the duration.
The E10000 is a beeeeooooteeful enterprise server which should never need
more that 1 hour per year downtime. Playing damnfool tricks like this
will almost certainly stuff the date on every domain in the cluster and
the resultant mess could take several days to sort out.
If the ONLY possible way of doing your tests is on an E10000 ( unlikely )
then the way to do it is to take one complete system out of the cluster
and use it as a test system ( possibly with multiple test domains. ).
You will probably need to buy this ( now standalone ) E10000 some disk
drives and a few other bits & bobs like a small network to keep it
totally isolated from the production environment.
Anyone who can afford several E10K machines clearly has a lot of
valuable data and is dependant on 7/24/365 service. I would suggest that
any instructions to compromise such a system should be *only* accepted
if IN WRITING and countersigned at board level by executives
who have been fully appraised of the risks.
IOW, make sure that somebody else's ass is on the line and that yours
is very well covered.
Philip Coleman
the SSP was only for dynamic reconfiguration purposes. DR gets a bit sulky
if there's a big time difference apparently.
nomadtheringless wrote in message <375FF9B9...@cadvision.com>...
C. Newport
: I must admit I was under the impression that the ntp between the domain and
Just for the public record - a very nice man from Sun has clarified
the position by email. There IS a way of doing this using some scripts
written by Sun for another E10K client with the same needs.
Casper H.S. Dik - Network Security Engineer
nomadtheringless <val...@cadvision.com> writes:
>Ok here it is ; the insane asylum has requested that we test Y2K on a
>single domain in a multi E10K cluster. How does one put forward the date
>without messing up the SSP synchronization software. Stoping NTP and
>using date is just to easy and Sun system engineers say that it will
>blow production domains out of the water does anybody have any
>experience of this. Ps the Sun system Engineers really are unsure
I think there's a wite paper titled "independent time domains"
It's not simple, especially since the starfire synchronize their
watches using NTP.
Also, Y2K testing must be done in isolation (disconnect the domain
from the net) and you must reinstall after you're done.
Casper
--
Expressed in this posting are my opinions. They are in no way related
to opinions held by my employer, Sun Microsystems.
Statements on Sun products included here are not gospel and may
be fiction rather than truth.
Silvio Seifert
Dik - Network Security Engineer) wrote:
>[[ PLEASE DON'T SEND ME EMAIL COPIES OF POSTINGS ]]
>
>nomadtheringless <val...@cadvision.com> writes:
>
[snip]
First at all, I want to say that I have a deep respect for you. Your
gave me already a lot of help solving my problems working with Solaris
or Sun Microsystems hardware.
>
>I think there's a wite paper titled "independent time domains"
>
I got this White paper from the Sun hotline in response of a Service
Order opened for a similar problem.
Reading this paper I understand, that the E10K platform is VERY USEFUL
in Y2K application test.
Here in short our configuration and what I wanted to know from from
Sun hotline.
Assume we have a E10K platform called E10K, one SSP called SSP and 3
domains on the E10K called DEVELOPMENT, TEST and PRODUCTION. The SSP
and all domains are running Solaris 2.5.1 + Y2K patches.
Now we want to do on domain TEST some Y2K application tests. We don't
want to test the E10K platform or Solaris, but only our own-written
application for Y2K issues. For this we want to stop the XNTP on the
SSP, to set the date on domain TEST to the certain y2000+ dates, but
leave the actual date on domains DEVELOPMENT and PRODUCTION.
Question to Sun Microsystems - is this a SUPPORTED issue on the E10K
or not?
Until now - NO concrete answer to my question, only some MAYBE, NOT
SURE, CAN'T SAY and so on ...
If Sun Microsystems, as the maker of the products E10K, Solaris 2.5.1,
can't say it, who else could do this?
>It's not simple, especially since the starfire synchronize their
>watches using NTP.
>
According to this White paper one has only to stop the XNTP on the
SSP, after this you can set the date on the domains forward to some
y2000+ value. Furthermore, according to this paper Sun people
themselve did some test with Solaris 2.5.1 + Y2K patches with SSP set
to actual time and 1 domain set to a y2000+ date.
>Also, Y2K testing must be done in isolation (disconnect the domain
>from the net) and you must reinstall after you're done.
>
What means "disconnect the domain from the net" ? To test our client
-server application we have to be able to establish connections from
our PC client to the TEST domain.
Concerning "reinstalling the domain" after Y2K tests, I completely
agree with you. This is the most save way to get a clean domain again.
>Casper
>--
>Expressed in this posting are my opinions. They are in no way related
>to opinions held by my employer, Sun Microsystems.
>Statements on Sun products included here are not gospel and may
>be fiction rather than truth.
Silvio Seifert
Foehrer Strasse 34
65199 Wiesbaden
Germany
Casper H.S. Dik - Network Security Engineer
silvio....@gmx.net (Silvio Seifert) writes:
>Question to Sun Microsystems - is this a SUPPORTED issue on the E10K
>or not?
This is what the independent time domain paper is all about.
>According to this White paper one has only to stop the XNTP on the
>SSP, after this you can set the date on the domains forward to some
>y2000+ value. Furthermore, according to this paper Sun people
>themselve did some test with Solaris 2.5.1 + Y2K patches with SSP set
>to actual time and 1 domain set to a y2000+ date.
And that apparently works.
>What means "disconnect the domain from the net" ? To test our client
>-server application we have to be able to establish connections from
>our PC client to the TEST domain.
As long as thos esystems do not communicate with others you should be OK.
(With NFS and such this may be hard; try not to use any data from
other domains)
cafe 2005
Perhaps Sun Holland have some problems with a customer wanting to do
this, perhaps the very engineers reponding negatively might be the
ones who have to do the Job; then again I suppose the client could get
more responsive support from Sun UK or Sun Canada or Sun USA. This
is just a guess but I bet I'm right.
Is Indpendent time domains supported - yes or no
If yes then sun can install the domains -they support.especialy for a
platinum supported contract ! So dont they trust themselves to do the
Job.
Or is sun just full of it !
On 22 Jun 1999 12:06:45 GMT, Caspe...@Holland.Sun.Com (Casper H.S.
Dik - Network Security Engineer) wrote:
Chris Tilbury
>Is Indpendent time domains supported - yes or no
Perhaps you need to realise that sometimes, the answers are a little more
complicated than "yes" or "no".
>Or is sun just full of it !
Not so much as some, I'd say.
Chris
--
Chris Tilbury, UNIX Systems Administrator, IT Services, University of Warwick
PHONE: 024 7652 3365 / FAX: 024 7652 3267 / MAIL: Chris....@warwick.ac.uk
Dr John Stockton
12:53:47 in news:uk.tech.y2k, Eshay Cotton <eco...@ttechnology.com>
wrote:
>I found a fix that works! Here is a file, this is shareware or freeware if
>you will, this disk has a serial number to unlock the fix, W-WA336 is it.
>Best program for y2k that I've seen run, here it is..
>
>
>[ A UUEncoded file (y2ktimebomb.exe) was included here. ]
>
All : if using SMTP, add "eco...@ttechnology.com" to your mailer's
envelope rejection rules (Turnpike : Offline File Configure Email
Routing Envelope Rejection); if using POP3, inspect before download.
Add also to your news kill-rule set.
Mail appropriately, FWIW:
> X-Complaints-To: news...@supernews.com
Perhaps our American friends would explain to their Reps & Sens just
what this sort of thing does for the image of the USA abroad.
The fellow must be sorely lacking in ear separation material if he
thinks this approach is likely to be profitable.
I have no idea what the program actually does; one wonders whether a
megabyte of code is needed to automate a simple Int21 call, and whether
the program can safely be assumed not to be a trojan, a virus-carrier,
or whatever.
--
John Stockton, Surrey, UK. j...@merlyn.demon.co.uk Turnpike v4.00 MIME.
Web <URL:ftp://garbo.uwasa.fi/pc/link/tsfaqn.zip> -- Timo Salmi's Usenet Q&A.
Web <URL:http://www.merlyn.demon.co.uk/news-use.htm> - about usage of News.
No Encoding. Quote before replies. Snip well. Write clearly. Don't Mail News.
Steve Wright
<j...@merlyn.demon.co.uk> writes
>All : if using SMTP, add "eco...@ttechnology.com" to your mailer's
>envelope rejection rules (Turnpike : Offline File Configure Email
>Routing Envelope Rejection); if using POP3, inspect before download.
>
>Add also to your news kill-rule set.
>
>Mail appropriately, FWIW:
>> X-Complaints-To: news...@supernews.com
advice :-(
--
Steve Wright
The BOFH
You mean 2.5Mb of MALEVOLENT spam.
DO NOT RUN IT !!!!!