System Administration Guide: Basic Administration

388 Pages·2005·1.74 MB·English

System Administration Guide:
Basic Administration
SunMicrosystems,Inc.
4150NetworkCircle
SantaClara,CA95054
U.S.A.
PartNo:817–1985–11
June2005
Copyright2005SunMicrosystems,Inc. 4150NetworkCircle,SantaClara,CA95054U.S.A. Allrightsreserved.
Thisproductordocumentisprotectedbycopyrightanddistributedunderlicensesrestrictingitsuse,copying,distribution,anddecompilation.No
partofthisproductordocumentmaybereproducedinanyformbyanymeanswithoutpriorwrittenauthorizationofSunanditslicensors,ifany.
Third-partysoftware,includingfonttechnology,iscopyrightedandlicensedfromSunsuppliers.
PartsoftheproductmaybederivedfromBerkeleyBSDsystems,licensedfromtheUniversityofCalifornia.UNIXisaregisteredtrademarkintheU.S.
andothercountries,exclusivelylicensedthroughX/OpenCompany,Ltd.
Sun,SunMicrosystems,theSunlogo,docs.sun.com,AnswerBook,AnswerBook2,JumpStart,SunRay,SunBlade,Solstice,SolsticeAdminSuite,
SolsticeDiskSuite,SolsticeEnterpriseAgents,SolarisSolve,Java,JavaStation,OpenWindows,Netra,ONC+,J2EE,SunFire,andSolarisare
trademarksorregisteredtrademarksofSunMicrosystems,Inc.intheU.S.andothercountries.AllSPARCtrademarksareusedunderlicenseandare
trademarksorregisteredtrademarksofSPARCInternational,Inc.intheU.S.andothercountries.ProductsbearingSPARCtrademarksarebasedupon
anarchitecturedevelopedbySunMicrosystems,Inc.DLTisclaimedasatrademarkofQuantumCorporationintheUnitedStatesandothercountries.
NetscapeandMozillaaretrademarksorregisteredtrademarksofNetscapeCommunicationsCorporationintheUnitedStatesandothercountries.
TheOPENLOOKandSun™GraphicalUserInterfacewasdevelopedbySunMicrosystems,Inc.foritsusersandlicensees.Sunacknowledgesthe
pioneeringeffortsofXeroxinresearchinganddevelopingtheconceptofvisualorgraphicaluserinterfacesforthecomputerindustry.Sunholdsa
non-exclusivelicensefromXeroxtotheXeroxGraphicalUserInterface,whichlicensealsocoversSun’slicenseeswhoimplementOPENLOOKGUIs
andotherwisecomplywithSun’swrittenlicenseagreements.
U.S.GovernmentRights–Commercialsoftware.GovernmentusersaresubjecttotheSunMicrosystems,Inc.standardlicenseagreementand
applicableprovisionsoftheFARanditssupplements.
DOCUMENTATIONISPROVIDED“ASIS”ANDALLEXPRESSORIMPLIEDCONDITIONS,REPRESENTATIONSANDWARRANTIES,
INCLUDINGANYIMPLIEDWARRANTYOFMERCHANTABILITY,FITNESSFORAPARTICULARPURPOSEORNON-INFRINGEMENT,ARE
DISCLAIMED,EXCEPTTOTHEEXTENTTHATSUCHDISCLAIMERSAREHELDTOBELEGALLYINVALID.
Copyright2005SunMicrosystems,Inc. 4150NetworkCircle,SantaClara,CA95054U.S.A. Tousdroitsréservés.
Ceproduitoudocumentestprotégéparuncopyrightetdistribuéavecdeslicencesquienrestreignentl’utilisation,lacopie,ladistribution,etla
décompilation.Aucunepartiedeceproduitoudocumentnepeutêtrereproduitesousaucuneforme,parquelquemoyenquecesoit,sans
l’autorisationpréalableetécritedeSunetdesesbailleursdelicence,s’ilyena.Lelogicieldétenupardestiers,etquicomprendlatechnologierelative
auxpolicesdecaractères,estprotégéparuncopyrightetlicenciépardesfournisseursdeSun.
DespartiesdeceproduitpourrontêtredérivéesdusystèmeBerkeleyBSDlicenciésparl’UniversitédeCalifornie.UNIXestunemarquedéposéeaux
Etats-Unisetdansd’autrespaysetlicenciéeexclusivementparX/OpenCompany,Ltd.
Sun,SunMicrosystems,lelogoSun,docs.sun.com,AnswerBook,AnswerBook2,JumpStart,SunRay,SunBlade,Solstice,SolsticeAdminSuite,Solstice
DiskSuite,SolsticeEnterpriseAgents,SolarisSolve,Java,JavaStation,OpenWindows,Netra,ONC+,J2EE,SunFire,etSolarissontdesmarquesde
fabriqueoudesmarquesdéposées,deSunMicrosystems,Inc.auxEtats-Unisetdansd’autrespays.TouteslesmarquesSPARCsontutiliséessous
licenceetsontdesmarquesdefabriqueoudesmarquesdéposéesdeSPARCInternational,Inc.auxEtats-Unisetdansd’autrespays.Lesproduits
portantlesmarquesSPARCsontbaséssurunearchitecturedéveloppéeparSunMicrosystems,Inc.QuantumCorporationriclameDLTcommesa
marquedefabriqueauxEtats-Unisetdansd’autrespays.NetscapeetMozillasontdesmarquesdeNetscapeCommunicationsCorporationaux
Etats-Unisetdansd’autrespays.
L’interfaced’utilisationgraphiqueOPENLOOKetSun™aétédéveloppéeparSunMicrosystems,Inc.poursesutilisateursetlicenciés.Sunreconnaît
leseffortsdepionniersdeXeroxpourlarechercheetledéveloppementduconceptdesinterfacesd’utilisationvisuelleougraphiquepourl’industrie
del’informatique.SundétientunelicencenonexclusivedeXeroxsurl’interfaced’utilisationgraphiqueXerox,cettelicencecouvrantégalementles
licenciésdeSunquimettentenplacel’interfaced’utilisationgraphiqueOPENLOOKetquienoutreseconformentauxlicencesécritesdeSun.
CETTEPUBLICATIONESTFOURNIE“ENL’ETAT”ETAUCUNEGARANTIE,EXPRESSEOUIMPLICITE,N’ESTACCORDEE,YCOMPRISDES
GARANTIESCONCERNANTLAVALEURMARCHANDE,L’APTITUDEDELAPUBLICATIONAREPONDREAUNEUTILISATION
PARTICULIERE,OULEFAITQU’ELLENESOITPASCONTREFAISANTEDEPRODUITDETIERS.CEDENIDEGARANTIENE
S’APPLIQUERAITPAS,DANSLAMESUREOUILSERAITTENUJURIDIQUEMENTNULETNONAVENU.
050415@11223
Contents
Preface 15
1 SolarisManagementTools(RoadMap) 21
What’sNewinSolarisManagementTools? 21
MatrixofSolarisManagementToolsandSupportedReleases 23
FeatureDescriptionsforSolaris10ManagementTools 24
FeatureDescriptionsforSolaris9ManagementTools 25
FeatureDescriptionsforSolaris8ManagementTools 26
AvailabilityofSolarisManagementCommands 27
Solaris10SystemManagementCommands 28
Solaris8SystemManagementCommands 29
ForMoreInformationAboutSolarisManagementTools 29
2 WorkingWiththeSolarisManagementConsole(Tasks) 31
SolarisManagementConsole(Overview) 31
WhatIstheSolarisManagementConsole? 31
SolarisManagementConsoleTools 32
WhyUsetheSolarisManagementConsole? 34
OrganizationoftheSolarisManagementConsole 34
ChangingtheSolarisManagementConsoleWindow 35
SolarisManagementConsoleDocumentation 36
HowMuchRole-BasedAccessControl? 36
BecomingSuperuser(root)orAssumingaRole 38
(cid:1)HowtoBecomeSuperuser(root)orAssumeaRole 39
UsingtheSolarisManagementToolsWithRBAC(TaskMap) 40
IfYouAretheFirsttoLogintotheConsole 41
3
CreatingthePrimaryAdministratorRole 42
(cid:1)HowtoCreatetheFirstRole(PrimaryAdministrator) 43
(cid:1)HowtoAssumethePrimaryAdministratorRole 44
StartingtheSolarisManagementConsole 44
(cid:1)HowtoStarttheConsoleasSuperuserorasaRole 44
UsingtheSolarisManagementToolsinaNameServiceEnvironment(Task
Map) 46
RBACSecurityFiles 46
PrerequisitesforUsingtheSolarisManagementConsoleinaNameService
Environment 48
ManagementScope 48
/etc/nsswitch.confFile 48
(cid:1)HowtoCreateaToolboxforaSpecificEnvironment 49
(cid:1)HowtoAddaTooltoaToolbox 50
(cid:1)HowtoStarttheSolarisManagementConsoleinaNameService
Environment 51
AddingToolstotheSolarisManagementConsole 52
(cid:1)HowtoAddaLegacyTooltoaToolbox 52
(cid:1)HowtoInstallanUnbundledTool 52
TroubleshootingtheSolarisManagementConsole 53
(cid:1)HowtoTroubleshoottheSolarisManagementConsole 53
3 WorkingWiththeSunJavaWebConsole(Tasks) 55
JavaWebConsole(Overview) 55
WhatIstheJavaWebConsole? 56
AdministeringtheJavaWebConsole(TaskMap) 57
GettingStartedWiththeJavaWebConsole 57
(cid:1)HowtoStartApplicationsFromtheJavaWebConsole’sLaunchPage 58
ConfiguringtheJavaWebConsole 59
JavaWebConsoleUserIdentity 61
UsingtheConsoleDebugTraceLog 61
(cid:1)HowtoChangetheJavaWebConsoleProperties 62
InstallingtheJavaWebConsoleSoftware 63
(cid:1)HowtoInstalltheJavaWebConsoleSoftware 63
(cid:1)HowtoRemovetheJavaWebConsoleSoftware 64
TroubleshootingtheJavaWebConsoleSoftware 66
(cid:1)HowtoRegisteranApplicationWiththeJavaWebConsole 66
(cid:1)HowtoUnregisteranApplicationFromtheJavaWebConsole 67
4 SystemAdministrationGuide:BasicAdministration(cid:127)June2005
JavaWebConsoleReferenceInformation 68
JavaWebConsoleSecurityConsiderations 68
SpecifyingAuthorizationsWiththeauthTypesTag 69
4 ManagingUserAccountsandGroups(Overview) 71
What’sNeworChangedinManagingUsersandGroups? 71
WhatAreUserAccountsandGroups? 72
UserAccountComponents 72
GuidelinesforUsingUserNames,UserIDs,andGroupIDs 79
WhereUserAccountandGroupInformationIsStored 80
FieldsinthepasswdFile 81
DefaultpasswdFile 81
FieldsintheshadowFile 83
FieldsinthegroupFile 83
ToolsforManagingUserAccountsandGroups 86
TasksforSolarisUserandGroupManagementTools 86
ManagingUsersandResourcesWithProjects 89
CustomizingaUser’sWorkEnvironment 90
UsingSiteInitializationFiles 91
AvoidingLocalSystemReferences 92
ShellFeatures 92
ShellEnvironment 93
ThePATHVariable 96
LocaleVariables 97
DefaultFilePermissions(umask) 98
ExamplesofUserandSiteInitializationFiles 99
5 ManagingUserAccountsandGroups(Tasks) 101
SettingUpUserAccounts(TaskMap) 101
HowtoGatherUserInformation 102
(cid:1)HowtoCustomizeUserInitializationFiles 103
(cid:1)HowtoAddaGroupWiththeSolarisManagementConsole’sGroups
Tool 105
(cid:1)HowtoAddaUserWiththeSolarisManagementConsole’sUsersTool 106
HowtoAddGroupsandUsersWithCommand-LineTools 107
SettingUpHomeDirectoriesWiththeSolarisManagementConsole 108
(cid:1)HowtoShareaUser’sHomeDirectory 108
(cid:1)HowtoMountaUser’sHomeDirectory 110
5
MaintainingUserAccounts(TaskMap) 111
ModifyingUserAccounts 112
(cid:1)HowtoModifyaGroup 113
(cid:1)HowtoDeleteaGroup 113
AdministeringPasswords 114
UsingPasswordAging 114
(cid:1)HowtoDisableaUserAccount 115
(cid:1)HowtoChangeaUser’sPassword 116
(cid:1)HowtoSetPasswordAgingonaUserAccount 116
(cid:1)HowtoDeleteaUserAccount 117
6 ManagingClient-ServerSupport(Overview) 119
WheretoFindClient-ServerTasks 119
WhatAreServers,Clients,andAppliances? 120
WhatDoesClientSupportMean? 121
OverviewofSystemTypes 121
DescriptionofaServer 122
Stand-AloneSystems 122
DisklessClients 123
DescriptionofanAppliance 123
GuidelinesforChoosingSystemTypes 123
DisklessClientManagementOverview 124
OSServerandDisklessClientSupportInformation 125
DisklessClientManagementFeatures 125
DiskSpaceRequirementsforOSServers 128
7 ManagingDisklessClients(Tasks) 129
ManagingDisklessClients(TaskMap) 129
PreparingforManagingDisklessClients 130
(cid:1)HowtoPrepareforAddingDisklessClients 131
(cid:1)HowtoAddOSServicesforDisklessClientSupport 133
(cid:1)HowtoAddaDisklessClient 135
(cid:1)HowtoBootaDisklessClient 137
(cid:1)HowtoRemoveDisklessClientSupport 137
(cid:1)HowtoRemoveOSServicesforDisklessClients 138
PatchingDisklessClientOSServices 139
DisplayingOSPatchesforDisklessClients 139
6 SystemAdministrationGuide:BasicAdministration(cid:127)June2005
(cid:1)HowtoAddanOSPatchforaDisklessClient 140
TroubleshootingDisklessClientProblems 142
8 ShuttingDownandBootingaSystem(Overview) 145
What’sNewinShuttingDownandBootingaSystem 145
WheretoFindShutDownandBootTasks 146
ShutDownandBootTerminology 146
GuidelinesforShuttingDownaSystem 147
GuidelinesforBootingaSystem 147
BootingaSystemFromtheNetwork 148
x86:SystemsBootingFromPXE,CD,orDVDNowBootAutomatically 149
x86:PXENetworkBoot 149
x86:Supportfor64-BitComputing 150
x86:ManuallyBootingaSystemThatIsCapableof64-BitComputing 151
x86:Settingtheboot-fileParameterWiththeeepromCommand 151
x86:BootingaSystemWiththeKernelDebugger(kmdb) 152
WhentoShutDownaSystem 153
WhentoBootaSystem 154
9 ManagingServices(Overview) 157
IntroductiontoSMF 157
ChangesinBehaviorWhenUsingSMF 159
SMFConcepts 159
SMFService 159
ServiceIdentifiers 160
ServiceStates 161
SMFManifests 161
SMFProfiles 162
ServiceConfigurationRepository 162
SMFRepositoryBackups 162
SMFSnapshots 163
SMFAdministrativeandProgrammingInterfaces 163
SMFCommand-LineAdministrativeUtilities 163
ServiceManagementConfigurationLibraryInterfaces 164
SMFComponents 164
SMFMasterRestarterDaemon 164
SMFDelegatedRestarters 165
7
SMFandBooting 165
SMFCompatibility 166
RunLevels 166
DeterminingaSystem’sRunLevel 167
/etc/inittabFile 168
WhatHappensWhentheSystemIsBroughttoRunLevel3 169
RunControlScripts 170
RunControlScriptSummaries 171
10 ShuttingDownaSystem(Tasks) 175
ShuttingDowntheSystem(TaskMap) 175
ShuttingDowntheSystem 176
SystemShutdownCommands 176
UserNotificationofSystemDownTime 177
(cid:1)HowtoDetermineWhoIsLoggedintoaSystem 178
(cid:1)HowtoShutDownaServer 178
(cid:1)HowtoShutDownaStand-AloneSystem 181
TurningOffPowertoAllDevices 183
(cid:1)HowtoTurnOffPowertoAllDevices 183
11 SPARC:BootingaSystem(Tasks) 185
SPARC:BootingaSystem(TaskMap) 186
SPARC:UsingtheBootPROM 187
(cid:1)SPARC:HowtoFindthePROMRevisionNumberforaSystem 188
(cid:1)SPARC:HowtoIdentifyDevicesonaSystem 188
(cid:1)SPARC:HowtoChangetheDefaultBootDevice 190
SPARC:HowtoResettheSystem 191
SPARC:BootingaSPARCBasedSystem 192
(cid:1)SPARC:HowtoBootaSystemtoRunLevel3(MultiuserLevel) 192
(cid:1)SPARC:HowtoBootaSystemtoRunLevelS(Single-UserLevel) 193
(cid:1)SPARC:HowtoBootaSystemInteractively 194
(cid:1)SPARC:HowtoBootaSystemFromtheNetwork 195
(cid:1)SPARC:HowtoStoptheSystemforRecoveryPurposes 197
(cid:1)SPARC:HowtoBootaSystemforRecoveryPurposes 197
SPARC:ForcingaCrashDumpandRebootingtheSystem 199
(cid:1)SPARC:HowtoForceaCrashDumpandRebootoftheSystem 200
(cid:1)SPARC:HowtoBoottheSystemWiththeKernelDebugger(kmdb) 201
8 SystemAdministrationGuide:BasicAdministration(cid:127)June2005
12 x86:BootingaSystem(Tasks) 203
x86:BootingaSystem(TaskMap) 203
x86:Bootinganx86BasedSystem 205
(cid:1)x86:HowtoBootaSystemtoRunLevel3(MultiuserLevel) 206
(cid:1)x86:HowtoBootaSystemtoRunLevelS(Single-UserLevel) 208
(cid:1)x86:HowtoBootaSystemInteractively 210
x86:BootingFromtheNetwork 212
(cid:1)x86:HowtoBootaSystemFromtheNetwork 212
x86:UsingtheDeviceConfigurationAssistant 214
(cid:1)x86:HowtoEntertheDeviceConfigurationAssistant 214
(cid:1)x86:HowtoStopaSystemforRecoveryPurposes 214
(cid:1)x86:HowtoBootaSystemforRecoveryPurposes 215
(cid:1)x86:HowtoBootaSystemWiththeKernelDebugger(kmdb) 217
x86:ForcingaCrashDumpandRebootoftheSystem 219
(cid:1)x86:HowtoForceaCrashDumpandRebootoftheSystem 219
64-bitx86:TroubleshootingaFailed64-BitBoot 221
13 TheBootProcess(Reference) 223
SPARC:TheBootPROM 223
SPARC:TheBootProcess 224
x86:TheSystemBIOS 224
x86:BootSubsystems 225
x86:BootingtheSolarisRelease 226
x86:ScreensDisplayedDuringtheDeviceIdentificationPhase 227
x86:MenusDisplayedDuringtheBootPhase 229
x86:BootProcess 230
x86:BootFiles 231
14 ManagingServices(Tasks) 233
ManagingSMFServices(TaskMap) 233
MonitoringSMFServices 234
(cid:1)HowtoListtheStatusofaService 234
(cid:1)HowtoShowWhichServicesAreDependentonaServiceInstance 236
(cid:1)HowtoShowWhichServicesaServiceIsDependentOn 236
ManagingSMFServices 237
UsingRBACRightsProfilesWithSMF 237
(cid:1)HowtoDisableaServiceInstance 237
9
(cid:1)HowtoEnableaServiceInstance 238
(cid:1)HowtoRestartaService 239
(cid:1)HowtoRestoreaServiceThatIsintheMaintenanceState 239
(cid:1)HowtoReverttoAnotherSMFSnapshot 240
(cid:1)HowtoUseaDifferentSMFProfile 241
ConfiguringSMFServices 241
(cid:1)HowtoModifyaService 241
(cid:1)HowtoChangeanEnvironmentVariableforaService 242
(cid:1)HowtoChangeaPropertyforaninetdControlledService 243
(cid:1)HowtoModifyaCommand-LineArgumentforaninetdControlled
Service 244
(cid:1)HowtoConvertinetd.confEntries 245
UsingRunControlScripts(TaskMap) 246
UsingRunControlScripts 246
(cid:1)HowtoUseaRunControlScripttoStoporStartaLegacyService 246
(cid:1)HowtoAddaRunControlScript 247
(cid:1)HowtoDisableaRunControlScript 248
TroubleshootingtheServiceManagementFacility 249
(cid:1)DebuggingaServiceThatIsNotStarting 249
(cid:1)HowtoRepairaCorruptRepository 250
(cid:1)HowtoStartServicesInteractivelyDuringBoot 252
15 ManagingSoftware(Overview) 255
What’sNewinSoftwareManagement? 256
SunUpdateManagerLauncher 256
PackageandPatchToolEnhancements 257
SunPatchManagerEnhancements 257
WheretoFindSoftwareManagementTasks 258
OverviewofSoftwarePackages 259
SignedPackagesandPatches 259
ToolsforManagingSoftwarePackages 263
AddingorRemovingaSoftwarePackage(pkgadd) 265
KeyPointsforAddingSoftwarePackages(pkgadd) 265
GuidelinesforRemovingPackages(pkgrm) 266
AvoidingUserInteractionWhenAddingPackages(pkgadd) 266
UsinganAdministrationFile 266
UsingaResponseFile(pkgadd) 268
10 SystemAdministrationGuide:BasicAdministration(cid:127)June2005