[Arsperl-users] SOLUTION: API problem: hostname : RPC: Rpcbind failure - RPC:Authentication error)

SourceForge Headquarters 1320 Columbia Street Suite 310 San Diego, CA 92101 +1 (858) 422-6466

Thilo, thanks for your helpful answer.

Now I'll answer my own question...

Yes, I had configured the portmapper on solaris10 ("svcadm enable rpc/bind").
Yes, ARS was configured to use the portmapper.

The problem had two causes:

1. the portmapper ("rpcbind") is under the control of the "Service Management Facility" (SMF) on solaris10.  SMF seems (to me, at least) very bloated with lots of gratuitous stuff, including "properties".  One of the properties for rpc/bind is "config/local_only" which apparently controls whether the portmapper can be reached from other hosts. It was set to "true", so other hosts were out of luck.  I set it to "false" using:

  svccfg -s svc:/network/rpc/bind
  svc:/network/rpc/bind> setprop config/local_only = false
  svc:/network/rpc/bind> quit

  svcadm refresh svc:/network/rpc/bind

2. the 2nd cause was also related to a property, "config/enable_tcpwrappers", which was set to "true", meaning access to rpcbind was filtered by tcpwrappers, so I added a line to "/etc/hosts.allow" as follows:

  rpcbind:	ALL

And made sure /etc/hosts.allow was readable by rpcbind ("chmod 644 /etc/hosts.allow").

The I restarted ARS and the problem was gone.

Cheers,

Robert Urban

-----Ursprüngliche Nachricht-----
Von: ars...@ar... [mailto:ars...@ar...] Im Auftrag von Thilo Stapff
Gesendet: Dienstag, 15. Juli 2008 19:55
An: ARSperl User Discussion
Betreff: Re: [Arsperl-users] API problem: hostname : RPC: Rpcbind failure - RPC: Authentication error) (ARERR #90)

Do the AR Servers use the portmapper or are they configured to use a 
specific TCP port? You can check this in the admin tool under "Server 
Information -> Server Ports and Queues".

The number 390621 that you used in the ARTCPPORT variable looks more 
like an RPC port number, for which there's a separate ARRPC variable.
The ARTCPPORT variable should contain the TCP/IP port number (if the 
server does't use the portmapper), which is something completely different.

By the way, the ARTCPPORT/ARRPC variables aren't even needed since the 
port numbers can also be passed as parameters to the ars_Login function, 
e.g.

my $ctrl = ars_Login($server,$username,$passwd, "", "", 2090,390621);

Regards,
Thilo Stapff

Urban, Robert (Allianz ASIC München, externer Mitarbeiter) wrote:
> Hi Folks,
>  
> I have a problem that I don't think is related specifically to ARSPerl, 
> but I thought
> this might nevertheless be a good place to ask for help...
>  
> I have several Sparc machines (SPARC-Enterprise-T5220) running 
> Solaris10. They have ARS v6.3
> installed and are configured to be in a server-group with another 
> machine running Solaris8 with ARS v6.3.
> There is another server-group running on Solaris9 with ARS v6.3.
>  
> I have a simple ARSPerl script:
>  
> 
>     my $ARS = ars_Login($server, $username, $password);
>     if (!defined($ARS)) {
>             print "connection failed.\nars-error:\n$ars_errstr\n";
>             exit;
>     }
>     print "connect OK\n";
>      
>     ars_Logoff($ARS);
> 
> If I run this script on either one of the Solaris10 servers and point it 
> at the same machine ($server)
> where the script is running (localhost), it works. If I point it at one 
> of the Solaris9 machines, it works.
> If I point it at the the other Solaris10 machine, it fails with the 
> following error:
>  
> 
>     connection failed.
>     ars-error:
>     [ERROR] Message not in catalog; Message number = 90 (sol10host1 :
>     RPC: Rpcbind failure - RPC: Authentication error) (ARERR #90)
> 
> I also get the error if I run the script from the Solaris8 machine, and 
> point at either of the Solaris10 machines.
>  
> If I point the script at any other machine, for example the Solaris8 
> machine in the same server-group, it works.
>  
> If I set the environment variable ARTCPPORT to a port I know is 
> configured in ARS ("private"), as follows:
> 
>     export ARTCPPORT=390621
> 
> and run my script, it fails with a different error-message:
> 
>     connection failed
>     ars-error:
>     [ERROR] Message not in catalog; Message number = 90 (sol10host2 (0)
>     : RPC: Miscellaneous tli error - An event requires attentionError 0)
>     (ARERR #90)
> 
> To sum things up: the script is successful when run from and machine to 
> a non-solaris10 machine
>  
> the script fails when run from any machine to a Solaris10 machine.
>  
> I'm using ARSperl-1.91 and ARS API v6.3.
> 
> anyone have a clue what the problem is?
>  
> Rob Urban
> 
> 
> ------------------------------------------------------------------------
> 
> -------------------------------------------------------------------------
> This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
> Build the coolest Linux based applications with Moblin SDK & win great prizes
> Grand prize is a trip for two to an Open Source event anywhere in the world
> http://moblin-contest.org/redirect.php?banner_id=100&url=/
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> Arsperl-users mailing list
> Ars...@ar...
> https://lists.sourceforge.net/lists/listinfo/arsperl-users

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Arsperl-users mailing list
Ars...@ar...
https://lists.sourceforge.net/lists/listinfo/arsperl-users

[Arsperl-users] SOLUTION: API problem: hostname : RPC: Rpcbind failure - RPC:Authentication error)

[Arsperl-users] SOLUTION: API problem: hostname : RPC: Rpcbind failure - RPC:Authentication error) (ARERR #90)