Sun Microsystems System Administration Guide: Basic Administration

380 Pages·2004·2.13 MB·English

System Administration Guide:
Basic Administration
SunMicrosystems,Inc.
4150NetworkCircle
SantaClara,CA95054
U.S.A.
PartNo:817–1985–10
January2005
Copyright2005SunMicrosystems,Inc. 4150NetworkCircle,SantaClara,CA95054U.S.A. Allrightsreserved.
Thisproductordocumentisprotectedbycopyrightanddistributedunderlicensesrestrictingitsuse,copying,distribution,anddecompilation.No
partofthisproductordocumentmaybereproducedinanyformbyanymeanswithoutpriorwrittenauthorizationofSunanditslicensors,ifany.
Third-partysoftware,includingfonttechnology,iscopyrightedandlicensedfromSunsuppliers.
PartsoftheproductmaybederivedfromBerkeleyBSDsystems,licensedfromtheUniversityofCalifornia.UNIXisaregisteredtrademarkintheU.S.
andothercountries,exclusivelylicensedthroughX/OpenCompany,Ltd.
Sun,SunMicrosystems,theSunlogo,docs.sun.com,AnswerBook,AnswerBook2,JumpStart,SunRay,SunBlade,Solstice,SolsticeAdminSuite,
SolsticeDiskSuite,SolarisSolve,Java,JavaStation,OpenWindows,Netra,ONC+,J2EE,andSolarisaretrademarksorregisteredtrademarksofSun
Microsystems,Inc.intheU.S.andothercountries.AllSPARCtrademarksareusedunderlicenseandaretrademarksorregisteredtrademarksof
SPARCInternational,Inc.intheU.S.andothercountries.ProductsbearingSPARCtrademarksarebaseduponanarchitecturedevelopedbySun
Microsystems,Inc.DLTisclaimedasatrademarkofQuantumCorporationintheUnitedStatesandothercountries.NetscapeandMozillaare
trademarksorregisteredtrademarksofNetscapeCommunicationsCorporationintheUnitedStatesandothercountries.
TheOPENLOOKandSun™GraphicalUserInterfacewasdevelopedbySunMicrosystems,Inc.foritsusersandlicensees.Sunacknowledgesthe
pioneeringeffortsofXeroxinresearchinganddevelopingtheconceptofvisualorgraphicaluserinterfacesforthecomputerindustry.Sunholdsa
non-exclusivelicensefromXeroxtotheXeroxGraphicalUserInterface,whichlicensealsocoversSun’slicenseeswhoimplementOPENLOOKGUIs
andotherwisecomplywithSun’swrittenlicenseagreements.
U.S.GovernmentRights–Commercialsoftware.GovernmentusersaresubjecttotheSunMicrosystems,Inc.standardlicenseagreementand
applicableprovisionsoftheFARanditssupplements.
DOCUMENTATIONISPROVIDED“ASIS”ANDALLEXPRESSORIMPLIEDCONDITIONS,REPRESENTATIONSANDWARRANTIES,
INCLUDINGANYIMPLIEDWARRANTYOFMERCHANTABILITY,FITNESSFORAPARTICULARPURPOSEORNON-INFRINGEMENT,ARE
DISCLAIMED,EXCEPTTOTHEEXTENTTHATSUCHDISCLAIMERSAREHELDTOBELEGALLYINVALID.
Copyright2005SunMicrosystems,Inc. 4150NetworkCircle,SantaClara,CA95054U.S.A. Tousdroitsréservés.
Ceproduitoudocumentestprotégéparuncopyrightetdistribuéavecdeslicencesquienrestreignentl’utilisation,lacopie,ladistribution,etla
décompilation.Aucunepartiedeceproduitoudocumentnepeutêtrereproduitesousaucuneforme,parquelquemoyenquecesoit,sans
l’autorisationpréalableetécritedeSunetdesesbailleursdelicence,s’ilyena.Lelogicieldétenupardestiers,etquicomprendlatechnologierelative
auxpolicesdecaractères,estprotégéparuncopyrightetlicenciépardesfournisseursdeSun.
DespartiesdeceproduitpourrontêtredérivéesdusystèmeBerkeleyBSDlicenciésparl’UniversitédeCalifornie.UNIXestunemarquedéposéeaux
Etats-Unisetdansd’autrespaysetlicenciéeexclusivementparX/OpenCompany,Ltd.
Sun,SunMicrosystems,lelogoSun,docs.sun.com,AnswerBook,AnswerBook2,JumpStart,SunRay,SunBlade,Solstice,SolsticeAdminSuite,Solstice
DiskSuite,SolarisSolve,Java,JavaStation,OpenWindows,Netra,ONC+,J2EE,etSolarissontdesmarquesdefabriqueoudesmarquesdéposées,de
SunMicrosystems,Inc.auxEtats-Unisetdansd’autrespays.TouteslesmarquesSPARCsontutiliséessouslicenceetsontdesmarquesdefabriqueou
desmarquesdéposéesdeSPARCInternational,Inc.auxEtats-Unisetdansd’autrespays.LesproduitsportantlesmarquesSPARCsontbaséssurune
architecturedéveloppéeparSunMicrosystems,Inc.QuantumCorporationriclameDLTcommesamarquedefabriqueauxEtats-Unisetdansd’autres
pays.NetscapeetMozillasontdesmarquesdeNetscapeCommunicationsCorporationauxEtats-Unisetdansd’autrespays.
L’interfaced’utilisationgraphiqueOPENLOOKetSun™aétédéveloppéeparSunMicrosystems,Inc.poursesutilisateursetlicenciés.Sunreconnaît
leseffortsdepionniersdeXeroxpourlarechercheetledéveloppementduconceptdesinterfacesd’utilisationvisuelleougraphiquepourl’industrie
del’informatique.SundétientunelicencenonexclusivedeXeroxsurl’interfaced’utilisationgraphiqueXerox,cettelicencecouvrantégalementles
licenciésdeSunquimettentenplacel’interfaced’utilisationgraphiqueOPENLOOKetquienoutreseconformentauxlicencesécritesdeSun.
CETTEPUBLICATIONESTFOURNIE“ENL’ETAT”ETAUCUNEGARANTIE,EXPRESSEOUIMPLICITE,N’ESTACCORDEE,YCOMPRISDES
GARANTIESCONCERNANTLAVALEURMARCHANDE,L’APTITUDEDELAPUBLICATIONAREPONDREAUNEUTILISATION
PARTICULIERE,OULEFAITQU’ELLENESOITPASCONTREFAISANTEDEPRODUITDETIERS.CEDENIDEGARANTIENE
S’APPLIQUERAITPAS,DANSLAMESUREOUILSERAITTENUJURIDIQUEMENTNULETNONAVENU.
041213@10536
Contents
Preface 15
1 SolarisManagementTools(RoadMap) 2211
What’sNewinSolarisManagementTools? 2211
MatrixofSolarisManagementToolsandSupportedReleases 2233
FeatureDescriptionsforSolaris1100ManagementTools 2244
FeatureDescriptionsforSolaris99ManagementTools 2255
FeatureDescriptionsforSolaris88ManagementTools 2266
AvailabilityofSolarisManagementCommands 2277
Solaris1100SystemManagementCommands 2288
Solaris88SystemManagementCommands 2299
ForMoreInformationAboutSolarisManagementTools 2299
2 WorkingWiththeSolarisManagementConsole(Tasks) 3311
SolarisManagementConsole(Overview) 3311
WhatIstheSolarisManagementConsole? 3311
SolarisManagementConsoleTools 3322
WhyUsetheSolarisManagementConsole? 3344
OrganizationoftheSolarisManagementConsole 3355
ChangingtheSolarisManagementConsoleWindow 3366
SolarisManagementConsoleDocumentation 3366
HowMuchRole-BasedAccessControl? 3366
BecomingSuperuser(root)orAssumingaRole 3388
(cid:1)HowtoBecomeSuperuser(root)orAssumeaRole 3399
UsingtheSolarisManagementToolsWithRBAC(TaskMap) 4400
IfYouAretheFirsttoLogintotheConsole 4411
3
CreatingthePrimaryAdministratorRole 42
(cid:1)HowtoCreatetheFirstRole(PrimaryAdministrator) 43
(cid:1)HowtoAssumethePrimaryAdministratorRole 4444
StartingtheSolarisManagementConsole 4444
(cid:1)HowtoStarttheConsoleasSuperuserorasaRole 4444
UsingtheSolarisManagementToolsinaNameServiceEnvironment(Task
Map) 4466
RBACSecurityFiles 4466
PrerequisitesforUsingtheSolarisManagementConsoleinaNameService
Environment 4488
ManagementScope 4488
/etc/nsswitch.confFile 4488
(cid:1)HowtoCreateaToolboxforaSpecificEnvironment 4499
(cid:1)HowtoAddaTooltoaToolbox 5500
(cid:1)HowtoStarttheSolarisManagementConsoleinaNameService
Environment 5511
AddingToolstotheSolarisManagementConsole 5522
(cid:1)HowtoAddaLegacyTooltoaToolbox 5522
(cid:1)HowtoInstallanUnbundledTool 5522
TroubleshootingtheSolarisManagementConsole 5533
(cid:1)HowtoTroubleshoottheSolarisManagementConsole 5533
3 WorkingWiththeSunJavaWebConsole(Tasks) 5555
JavaWebConsole(Overview) 5555
WhatIstheJavaWebConsole? 5566
AdministeringtheJavaWebConsole(TaskMap) 5577
GettingStartedWiththeJavaWebConsole 5577
(cid:1)HowtoStartApplicationsFromtheJavaWebConsole’sLaunchPage 5588
ConfiguringtheJavaWebConsole 5599
UsingtheConsoleDebugTraceLog 6611
(cid:1)HowtoChangetheJavaWebConsoleProperties 6611
InstallingtheJavaWebConsoleSoftware 6622
(cid:1)HowtoInstalltheJavaWebConsoleSoftware 6633
(cid:1)HowtoRemovetheJavaWebConsoleSoftware 6644
TroubleshootingtheJavaWebConsoleSoftware 6655
(cid:1)HowtoRegisteranApplicationWiththeJavaWebConsole 6655
(cid:1)HowtoUnregisteranApplicationFromtheJavaWebConsole 6666
JavaWebConsoleReferenceInformation 6666
4 SystemAdministrationGuide:BasicAdministration(cid:127)January2005
JavaWebConsoleSecurityConsiderations 67
SpecifyingAuthorizationsWiththeauthTypesTag 6688
4 ManagingUserAccountsandGroups(Overview) 7711
What’sNeworChangedinManagingUsersandGroups? 7711
WhatAreUserAccountsandGroups? 7722
UserAccountComponents 7722
GuidelinesforUsingUserNames,UserIDs,andGroupIDs 7799
WhereUserAccountandGroupInformationIsStored 8800
FieldsinthepasswdFile 8800
FieldsintheshadowFile 8822
FieldsinthegroupFile 8833
ToolsforManagingUserAccountsandGroups 8866
TasksforSolarisUserandGroupManagementTools 8866
CustomizingaUser’sWorkEnvironment 9900
UsingSiteInitializationFiles 9911
AvoidingLocalSystemReferences 9922
ShellFeatures 9922
ShellEnvironment 9933
ThePATHVariable 9966
LocaleVariables 9977
DefaultFilePermissions(umask) 9988
ExamplesofUserandSiteInitializationFiles 9999
Example—SiteInitializationFile 111000000
5 ManagingUserAccountsandGroups(Tasks) 111100001111
SettingUpUserAccounts(TaskMap) 111100001111
HowtoGatherUserInformation 111100002222
(cid:1)HowtoCustomizeUserInitializationFiles 111100003333
(cid:1)HowtoAddaGroupWiththeSolarisManagementConsole’sGroups
Tool 111100005555
(cid:1)HowtoAddaUserWiththeSolarisManagementConsole’sUsersTool 111100006666
HowtoAddGroupsandUsersWithCommand-LineTools 111100007777
SettingUpHomeDirectoriesWiththeSolarisManagementConsole 111100008888
(cid:1)HowtoShareaUser’sHomeDirectory 111100008888
(cid:1)HowtoMountaUser’sHomeDirectory 111111110000
MaintainingUserAccounts(TaskMap) 111111111111
ModifyingUserAccounts 111111112222
5
(cid:1)HowtoModifyaGroup 113
(cid:1)HowtoDeleteaGroup 111133
AdministeringPasswords 111144
(cid:1)HowtoDisableaUserAccount 111155
(cid:1)HowtoChangeaUser’sPassword 111166
(cid:1)HowtoSetPasswordAgingonaUserAccount 111166
(cid:1)HowtoDeleteaUserAccount 111177
6 ManagingClient-ServerSupport(Overview) 111199
WheretoFindClient-ServerTasks 111199
WhatAreServers,Clients,andAppliances? 112200
WhatDoesClientSupportMean? 112211
OverviewofSystemTypes 112211
Servers 112222
Stand-AloneSystems 112222
DisklessClients 112233
Appliances 112233
GuidelinesforChoosingSystemTypes 112233
DisklessClientManagementOverview 112244
OSServerandDisklessClientSupportInformation 112244
DisklessClientManagementFeatures 112255
DiskSpaceRequirementsforOSServers 112288
7 ManagingDisklessClients(Tasks) 112299
ManagingDisklessClients(TaskMap) 112299
PreparingforManagingDisklessClients 113300
(cid:1)HowtoPrepareforAddingDisklessClients 113311
(cid:1)HowtoAddOSServicesforDisklessClientSupport 113333
(cid:1)HowtoAddaDisklessClient 113355
(cid:1)HowtoBootaDisklessClient 113366
(cid:1)HowtoRemoveDisklessClientSupport 113377
(cid:1)HowtoRemoveOSServicesforDisklessClients 113377
PatchingDisklessClientOSServices 113388
DisplayingOSPatchesforDisklessClients 113399
(cid:1)HowtoAddanOSPatchforaDisklessClient 113399
TroubleshootingDisklessClientProblems 114411
6 SystemAdministrationGuide:BasicAdministration(cid:127)January2005
8 ShuttingDownandBootingaSystem(Overview) 145
What’sNewinShuttingDownandBootingaSystem 145
BootingandtheServiceManagementFacility 114455
x86:Supportfor64-BitComputing 114466
x86:SystemsBootingFromPXE,CD,orDVDNowBootAutomatically 114488
WheretoFindShutDownandBootTasks 114499
ShutDownandBootTerminology 114499
GuidelinesforShuttingDownaSystem 115500
GuidelinesforBootingaSystem 115500
BootingaSystemFromtheNetwork 115511
x86:PXENetworkBoot 115522
WhentoShutDownaSystem 115533
WhentoBootaSystem 115544
9 ManagingServices(Overview) 115555
IntroductiontoSMF 115555
ChangesinBehaviorWhenUsingSMF 115577
SMFConcepts 115577
SMFService 115577
ServiceIdentifiers 115588
ServiceStates 115599
SMFManifests 115599
SMFProfiles 116600
ServiceConfigurationRepository 116600
SMFSnapshots 116600
SMFAdministrativeandProgrammingInterfaces 116611
SMFCommand-LineAdministrativeUtilities 116611
ServiceManagementConfigurationLibraryInterfaces 116622
SMFComponents 116622
SMFMasterRestarterDaemon 116622
SMFDelegatedRestarters 116622
SMFandBooting 116633
SMFCompatibility 116633
RunLevels 116644
DeterminingaSystem’sRunLevel 116655
/etc/inittabFile 116655
WhatHappensWhentheSystemIsBroughttoRunLevel33 116666
RunControlScripts 116677
7
RunControlScriptSummaries 168
10 ShuttingDownaSystem(Tasks) 171
ShuttingDowntheSystem(TaskMap) 117711
ShuttingDowntheSystem 117722
SystemShutdownCommands 117722
UserNotificationofSystemDownTime 117733
(cid:1)HowtoDetermineWhoIsLoggedintoaSystem 117744
(cid:1)HowtoShutDownaServer 117744
(cid:1)HowtoShutDownaStand-AloneSystem 117777
TurningOffPowertoAllDevices 117799
(cid:1)HowtoTurnOffPowertoAllDevices 117799
11 SPARC:BootingaSystem(Tasks) 118811
SPARC:BootingaSystem(TaskMap) 118822
SPARC:UsingtheBootPROM 118833
(cid:1)SPARC:HowtoFindthePROMRevisionNumberforaSystem 118844
(cid:1)SPARC:HowtoIdentifyDevicesonaSystem 118844
(cid:1)SPARC:HowtoChangetheDefaultBootDevice 118866
SPARC:HowtoResettheSystem 118877
SPARC:BootingaSystem 118888
(cid:1)SPARC:HowtoBootaSystemtoRunLevel33(MultiuserLevel) 118888
(cid:1)SPARC:HowtoBootaSystemtoRunLevelS(Single-UserLevel) 118899
(cid:1)SPARC:HowtoBootaSystemInteractively 119900
(cid:1)SPARC:HowtoBootaSystemFromtheNetwork 119911
(cid:1)SPARC:HowtoStoptheSystemforRecoveryPurposes 119933
(cid:1)SPARC:HowtoBootaSystemforRecoveryPurposes 119933
SPARC:ForcingaCrashDumpandRebootingtheSystem 119955
(cid:1)SPARC:HowtoForceaCrashDumpandRebootoftheSystem 119966
(cid:1)SPARC:HowtoBoottheSystemWiththeKernelDebugger(kmdb) 119977
12 x86:BootingaSystem(Tasks) 119999
x86:BootingaSystem(TaskMap) 119999
x86:BootingaSystem 220011
(cid:1)x86:HowtoBootaSystemtoRunLevel33(MultiuserLevel) 220022
(cid:1)x86:HowtoBootaSystemtoRunLevelS(Single-UserLevel) 220044
(cid:1)x86:HowtoBootaSystemInteractively 220066
8 SystemAdministrationGuide:BasicAdministration(cid:127)January2005
x86:BootingFromtheNetwork 208
(cid:1)x86:HowtoBootaSystemFromtheNetwork 208
x86:UsingtheDeviceConfigurationAssistant 220099
(cid:1)x86:HowtoEntertheDeviceConfigurationAssistant 221100
(cid:1)x86:HowtoStopaSystemforRecoveryPurposes 221100
(cid:1)x86:HowtoBootaSystemforRecoveryPurposes 221111
(cid:1)x86:HowtoBootaSystemWiththeKernelDebugger(kmdb) 221133
x86:ForcingaCrashDumpandRebootingtheSystem 221155
(cid:1)x86:HowtoForceaCrashDumpandRebootoftheSystem 221155
64-bitx86:TroubleshootingaFailed64-BitBoot 221177
13 TheBootProcess(Reference) 221199
SPARC:TheBootPROM 221199
SPARC:TheBootProcess 222200
x86:ThePCBIOS 222200
x86:BootSubsystems 222211
x86:BootingtheSolarisRelease 222222
x86:ScreensDisplayedDuringtheDeviceIdentificationPhase 222233
x86:MenusDisplayedDuringtheBootPhase 222255
x86:TheBootProcess 222266
x86:BootFiles 222277
14 ManagingServices(Tasks) 222299
ManagingSMFServices(TaskMap) 222299
MonitoringSMFServices 223300
(cid:1)HowtoListtheStatusofaService 223300
(cid:1)HowtoShowWhichServicesAreDependentonaServiceInstance 223322
(cid:1)HowtoShowWhichServicesaServiceIsDependentOn 223322
ManagingSMFServices 223333
UsingRBACRightsProfilesWithSMF 223333
(cid:1)HowtoDisableaServiceInstance 223333
(cid:1)HowtoEnableaServiceInstance 223344
(cid:1)HowtoRestartaService 223355
(cid:1)HowtoRestoreaServiceThatIsintheMaintenanceState 223355
(cid:1)HowtoReverttoAnotherSMFSnapshot 223366
(cid:1)HowtoUseaDifferentSMFProfile 223377
ConfiguringSMFServices 223377
9
(cid:1)HowtoModifyaService 237
(cid:1)HowtoChangeanEnvironmentVariableforaService 223388
(cid:1)HowtoChangeaPropertyforaninetdControlledService 223399
(cid:1)HowtoModifyaCommand-LineArgumentforaninetdControlled
Service 224400
(cid:1)HowtoConvertinetd.confEntries 224411
UsingRunControlScripts(TaskMap) 224422
UsingRunControlScripts 224422
(cid:1)HowtoUseaRunControlScripttoStoporStartaLegacyService 224422
(cid:1)HowtoAddaRunControlScript 224433
(cid:1)HowtoDisableaRunControlScript 224444
TroubleshootingtheServiceManagementFacility 224455
(cid:1)HowtoRepairaCorruptRepository 224455
(cid:1)HowtoStartServicesInteractivelyDuringBoot 224466
(cid:1)DebuggingaServiceThatIsNotStarting 224477
15 ManagingSoftware(Overview) 224499
What’sNewinSoftwareManagement? 225500
PackageandPatchToolEnhancements 225500
SunPatchManagerEnhancements 225500
WheretoFindSoftwareManagementTasks 225511
OverviewofSoftwarePackages 225511
SignedPackagesandPatches 225522
ToolsforManagingSoftwarePackages 225566
AddingorRemovingaSoftwarePackage(pkgadd) 225577
KeyPointsforAddingSoftwarePackages(pkgadd) 225588
GuidelinesforRemovingPackages(pkgrm) 225588
AvoidingUserInteractionWhenAddingPackages(pkgadd) 225599
UsinganAdministrationFile 225599
UsingaResponseFile(pkgadd) 226600
16 ManagingSoftwareWithSolarisSystemAdministrationTools(Tasks) 226611
SolarisProductRegistryandSolarisGUIInstallationToolsforManaging
Software 226611
AddingSoftwareWiththeSolarisInstallationGUI 226622
(cid:1)HowtoInstallSoftwareWiththeSolarisInstallationGUIProgram 226622
ManagingSoftwareWiththeSolarisProductRegistryGUI(TaskMap) 226644
10 SystemAdministrationGuide:BasicAdministration(cid:127)January2005