Solaris Operating System

Mapping NT User Account Information to LDAP SolarisLDAP

Tue, 27 Sep 2011 09:18:06 GMT

The schema for two object classes ntUser and ntGroup that support Windows NT user accounts ships with the iPlanet Directory Server. Some of the LDAP attributes contained in these object classes correspond directly to Windows NT user account fields. These are shown in TABLE 12-1. TABLE 12-1 Windows NT to LDAP Mapping Directory Server Attribute NT User Account Field For each Windows NT user account as well as for Windows NT groups, an equivalent LDAP entry is created with these mapped fields....

Introducing Route Table Search Order Solaris Network Administration

Tue, 27 Sep 2011 09:13:24 GMT

The kernel routing algorithm searches route table entries in the following 1. The kernel routing algorithm checks the LAN for destination hosts. The kernel extracts the destination IP address from the IP datagram and computes the destination network number. The destination network number is then compared with the network numbers of all of the local interfaces interfaces that are physically attached to the system for a match. If the destination network number matches that of a local interface...

Attribute Value Elo SolarisCommands

Tue, 27 Sep 2011 08:45:05 GMT

The following messages may help in determining some of the most common problems associated with backing out a patch. prebackout patch exited with return code code. patchrm exiting. The prebackout script supplied with the patch exited with a return code other than 0. Generate a script trace of the prebackout script to determine why the prebackout script failed. Add the -x option to the first line of the prepatch script to fix the problem and run patchadd again. postbackout patch exited with...

Internet Layer IGMP SolarisTCPIP

Tue, 27 Sep 2011 08:43:50 GMT

The Internet Group Management Protocol IGMP version 2 is described fully in RFC 2236. Hosts belonging to mulitcast groups use IGMP to report their memberships to local multicast routers. Three IGMP messages are relevant to this introduction, namely Membership query - Used to determine which groups have members on a network Membership report - Used by a system to report that it is part of a multicast group Leave group - Used by a system when it leaves a multicast group ARP has been replaced by...

SNMPBased Monitoring SolarisFeatures

Tue, 27 Sep 2011 07:36:47 GMT

Early versions of the Solaris fault manager reported faults to the system log and console s . It provided a wealth of status information using fmadm 1M . But these reporting mechanisms leave much to be desired syslog messages must be parsed, and a busy central log host can easily lose important messages in the noise. Worse still, a privileged user must log into the affected system and run administrative commands to get information they need that is not contained in the message. SNMP is a...

1471 Memory Mapped IO SolarisKernel

Tue, 27 Sep 2011 07:32:46 GMT

A request to memory-map a file into an address space is handled by the file systenanode method vop_map and theseg_vn memory segment driver see Section 14.7.4 . A process requests that a file be mapped into its address space. Once the mapping is established, the address space represented by the file appears as regular memory and the file system can perform I O by simply accessing that memory. Memory mapping of files hides the real work of reading and writing the file because the seg_vn memory...

Setting a Local Ethernet Address Solaris Network Administration

Tue, 27 Sep 2011 07:22:05 GMT

In today's network environments, many systems have multiple interfaces, often on the same subnet or collision domain. Because an Ethernet address targets systems, each interface on the same network or subnet on a multi-interface system must have a unique Ethernet address. Sun network adapters have local Ethernet addresses encoded in their programmable read-only memories PROMs . To view the current host-based Ethernet address, perform the command at the ok prompt Sun Ultra 5 10 UPA PCI...

Installing a Solaris Package Using the CLI SolarisResources

Tue, 27 Sep 2011 07:04:55 GMT

The best way to learn about adding packages is to use an example. In this section, you'll download a package from http www.sunfreeware.com called gpw-6.94-sol10-sparc-local.gz, an application developed by Tom Van Vleck that generates random passwords. Let's look more closely at the package name to determine what software this package contains The .gz extension indicates that the package file has been compressed using gzip after it was created. Other possible extensions include .Z, which...

ifconfig a SolarisInterfaces

Tue, 27 Sep 2011 06:43:22 GMT

inet 127.0.0.1 netmask ff000000 hme0 mtu 1500 index 2 inet 192.168.30.41 netmask ffffff00 broadcast 192.168.30.255 ether 8 0 20 93 c9 af The MAC address is listed as 8 0 20 93 c9 af in this example. You can also retrieve the MAC address from a system that has not yet been booted by performing the banner command at the ok prompt.

Using the sysidcfg File InstallingSolaris

Tue, 27 Sep 2011 06:35:35 GMT

For the sysidcfg file method, a file for each system is created that contains a set of lines in the form of keyword value, such as timezone US CENTRAL. The file can be available over the network via NFS or on disk mounted in the local disk drive. The following is a list of information that can be defined in the sysidcfg file gt Name service NIS, NIS , DNS, or none along with the hostname and IP address of the server gt Network interface Specify DHCP or specify IP address and netmask instead....

CDE Process Manager SolarisOpenBoot

Tue, 27 Sep 2011 05:36:07 GMT

New in Solaris 8 is CDE Process Manager, sdtprocess, a graphical Common Desktop Environment CDE tool that provides a Process Manager window for monitoring and controlling system processes. The advantage of using Process Manager is that you can view and control processes without knowing all the complex options associated with the ps and kill commands. For example, you can display processes that contain specific character strings, and you can sort the process list alphabetically or numerically....

Attributevalue Jfh ClusterReference

Tue, 27 Sep 2011 04:52:17 GMT

Location of temporary files that are used by the clvxvm utility. Log file that is created by the scvxinstall utility. See Also Intro lCL , cldevice lCL , cldevicegroup lCL , clsetup lCL , cluster lCL , scinstall lM , scvxinstall lM , rbac 5 Sun Cluster Software Installation Guide for Solaris OS Notes The superuser can run any forms of this command. Any user can also run this command with the following options To run this command with other subcommands, users other than superuser require RBAC...

The Boot Command SolarisSolutions

Tue, 27 Sep 2011 04:23:53 GMT

The easiest way to boot a system from the powered-down state is, of course, to turn it on. When you turn a system on, the system locates the boot device using information stored in its NVRAM and starts loading various boot software, as described earlier. If you interrupt this process with a Stop-A or your auto-boot NVRAM parameter discussed later in this chapter is set to false, you can choose to boot from a different device or explore the OpenBoot environment. The full syntax of the boot...

pwconv SolarisResources

Tue, 27 Sep 2011 03:42:48 GMT

You can use the pwconv command to convert systems that do not have a shadow password file to use password shadowing. Most if not all modern systems would use password shadowing. However, if the etc shadow file does not exist, the encrypted password is stripped from etc passwd, and is replaced by x, indicating that the password for each user is shadowed. A shadow password file would then be created using the encrypted passwords extracted from the password file. However, a more common use of...

12231 The Translation Table Entry SolarisKernel

Tue, 27 Sep 2011 02:20:08 GMT

Each entry of the TLB consists of a Translation Table Entry TTE , which describes the mapping and provides details of its associated properties. The TTE may be thought of as corresponding to a page table entry, or PTE, in the sun4m architecture. A TTE is made up of two components, the tag and the translation data, each of length 64 bits. The TTE tag contains the encoded virtual address and context ID Figure 12.7 , and the TTE data contains the corresponding physical address together with...

Direct Maps InstallingSolaris

Tue, 27 Sep 2011 00:25:11 GMT

A direct map provides both mount point and NFS resources. Entries in a direct map consist of three fields gt Key The key is typically a full pathname that is to be used as a mount point. gt Mount options The mount options field contains zero or more comma-separated NFS-specific mount options, as described in Table 15.3. gt NFS resource The NFS resource files takes the form server file system, which identifies a file system shared by the system server. Because more than one NFS server might be...

131 Solaris Kernel Architecture SolarisKernel

Tue, 27 Sep 2011 00:02:18 GMT

The Solaris kernel is grouped into several key components and is implemented in a modular fashion System call interface. The system call interface allows user processes to access kernel facilities. The kernel then performs specific tasks on behalf of the calling process, such as reading or writing a file, or establishing a network connection. The system call layer consists of a common system call handler, which vectors execution into the appropriate kernel modules. Process execution and...

Chapter 1 Introduction to Observability Tools SolarisPerformance

Mon, 26 Sep 2011 21:34:53 GMT

Bryan Cantrill's foreword describes operating systems as proprietary black boxes, welded shut to even the merely curious. Bryan paints a realistic view of the not-too-distant past when only a small amount of the software stack was visible or observable. Complexity faced those attempting to understand why a system wasn't meeting its prescribed service-level and response-time goals. The problem was that the performance analyst had to work with only a small set of hardwired performance statistics,...

svcs l nfsserver Solaris System Administration

Mon, 26 Sep 2011 21:02:38 GMT

require_any error svc milestone network online require_all error svc network nfs nlockmgr online optional_all error svc network nfs mapid online require_all restart svc network rpc bind online optional_all none svc network rpc keyserv disabled optional_all none svc network rpc gss online require_all error svc system filesystem local online

Attributes Xvj SolarisCommands

Mon, 26 Sep 2011 20:41:42 GMT

EXAMPLE 3 Dry Run, Retaining SMA Settings To attempt a dry run and migrate the configuration such that any conflicts will be resolved by retaining existing SMA settings, enter masfcnv -l master -u master -y master 0 A problem occurred during migration. etc sma snmp snmpd.conf var sma_snmp snmpd.conf SMA configuration files etc opt SUNWmasf conf snmpd.conf var opt SUNWmasf snmpd.dat MASF configuration files tmp sma_migration.log masfcnv log file See attributes 5 for descriptions of the following...

792 TCP Statistics from Kstat SolarisPerformance

Mon, 26 Sep 2011 20:03:31 GMT

The kstat command can fetch all the TCP MIB statistics. You can print all statistics from the TCP module by specifying -m instead of -n -m, includes tcpstat, a collection of extra kstats that are not contained in the Solaris TCP MIB. And you can print individual statistics

Autoenabling a Service Group VERITAS Cluster Server

Mon, 26 Sep 2011 19:39:59 GMT

A service group is autodisabled until VCS probes all of the resources and checks that they are ready to bring online. Autoenable a service group in situations where the VCS engine is not running on one of the systems in the cluster, and you must override the disabled state of the service group to enable the group on another system in the cluster. To autoenable a service group from Cluster Explorer 1. On the Service Groups tab of the configuration tree, right-click the service group. or Click...

Fragment Size SolarisOpenBoot

Mon, 26 Sep 2011 19:28:38 GMT

As files are created or expanded, they are allocated disk space in either full logical blocks or portions of logical blocks called fragments. When disk space is needed to hold data for a file, full blocks are allocated first, and then one or more fragments of a block are allocated for the remainder. For small files, allocation begins with fragments. The ability to allocate fragments of blocks to files rather than whole blocks saves space by reducing the fragmentation of disk space that results...

Creating an NIS Group Solaris Directory Services

Mon, 26 Sep 2011 19:27:31 GMT

To create an NIS group, you must have create rights to the groups_dir directory of the group's domain. Use the -c option and a fully qualified group name When you create a group, an NIS groups table with the name you have given is created in groups_dir. You can use nisls to confirm that the new group table now exists in groups_dir, and niscat to list the groups members listed in the table. A newly created group contains no members. See Adding Members to an NIS Group on page 320 for information...

Deleting a Service Group VERITAS Cluster Server

Mon, 26 Sep 2011 19:03:29 GMT

Delete a service group from Cluster Explorer or Command Center. Note You cannot delete service groups with dependencies. To delete a linked service group, you must first delete the link. To delete a service group from Cluster Explorer 1. On the Service Groups tab of the configuration tree, right-click the service group. or Click a cluster in the configuration tree, click the Service Groups tab, and right-click the service group icon in the view panel. To delete a service group from Command...

Stateful Packet Filtering SolarisFeatures

Mon, 26 Sep 2011 18:30:50 GMT

Packet state filtering can be used for any TCP flow to short-cut later filtering. The shortcuts are kept in a table, with no alterations to the list of firewall rules. Subsequent packets, if a matching packet is found in the table, are not passed through the list making packet filtering much more efficient. For TCP flows, the filter follows the ack sequence numbers of packets and only allows packets through that fall inside the correct window. Keep state for all outgoing telnet connections and...

564 Block Buffer Cache SolarisPerformance

Mon, 26 Sep 2011 18:07:38 GMT

The buffer cache used in Solaris for caching of inodes and file metadata is now also dynamically sized. In old versions of UNIX, the buffer cache was fixed in size by the nbuf kernel parameter, which specified the number of 512-byte buffers. We now allow the buffer cache to grow by nbuf, as needed, until it reaches a ceiling specified by the bufhwm kernel parameter. By default, the buffer cache is allowed to grow until it uses 2 of physical memory. We can look at the upper limit for the buffer...

Preventing MultipathingSuppress Devices from VxVMs View Veritas Volume Manager

Mon, 26 Sep 2011 17:43:57 GMT

This section describes how to exclude a device that is under VxVM or Dynamic Multipathing control. To prevent multipathing or suppress devices, enter the command 1. Select menu item 17 Prevent Multipathing Suppress devices from VxVM's view from the vxdiskadm main menu. VxVM INFO V-5-2-1239 This operation might lead to some devices being suppressed from VxVM's view or prevent them from being multipathed by vxdmp. This operation can be reversed using the vxdiskadm command . Do you want to...

Examples Hyu SolarisCommands

Mon, 26 Sep 2011 17:39:47 GMT

Get and display the state of the specified device. -e dev_reset pathname Reset the specified device. EXAMPLE 1 Displaying the SENAs and Individual FC_AL Devices on a System The following example finds and displays all of the SENAs and individual FC_AL devices on a system EXAMPLE 2 Displaying a SENA or Sun Fire 880 Internal Storage Subsystem The following example displays a SENA or Sun Fire 880 internal storage subsystem example luxadm display dev es ses0 The following example displays two...

2101 Procfs Implementation SolarisKernel

Mon, 26 Sep 2011 17:39:23 GMT

Proofs is implemented as a dynamically loadable kernel module, kernel fs procfs, and is loaded automatically by the system at boot time, proc is mounted during system startup by virtue of the defaulfproc entry in the etc vfstab file. The mount phase causes the invocation of the procfs prinit initialize and prmount file-system-specific functions, which initialize thevfs structure for procfs and create and initialize a vnode for the top-level directory file, proc. The kernel memory space for the...

The zonecfg Resources Parameters Solaris System Administration

Mon, 26 Sep 2011 16:38:16 GMT

Resource types within the zonecfg utility include the following zone name - Defines the zone name and identifies the zone to the configuration utility. zonepath - Defines the zone path resource and is the path to the zone root. fs - Assigns resource parameters for file systems. Use of the special parameter allows the local zone to mount global system resources under separate directories. Table 15-2 shows parameters associated with the fs resource. Table 15-2 The fs Resource Parameters Table...

41cletype 1 ClusterReference

Mon, 26 Sep 2011 16:24:20 GMT

The type that you specified with the -t or -p option does not exist. Examples EXAMPLE l Adding a SCSI Quorum Device The following clquorum command configures a SCSI quorum device that is connected to all the cluster nodes. clquorum add dev did rdsk d4s2 When you use the add subcommand, the shared_disk type is the default. To add a shared_disk quorum device, you do not need to specify -t shared_disk. EXAMPLE 2 Adding a Network Appliance NAS Quorum Device The following clquorum command adds the...

Secure RPC Password Versus Login Password Problem Solaris Directory Services

Mon, 26 Sep 2011 15:14:08 GMT

When a principal's login password is different from his or her Secure RPC password, keylogin cannot decrypt it at login time because keylogin defaults to using the principal's login password, and the private key was encrypted using the principal's Secure RPC password. When this occurs, the principal can log in to the system, but for NIS purposes the principal is placed in the authorization class of nobody because the keyserver does not have a decrypted private key for that user. Since most NIS...

Audit Log SolarisLDAP

Mon, 26 Sep 2011 14:45:22 GMT

The audit log is useful for tracking changes to the directory database and the directory server configuration. If a problem arises with the directory at a particular time, checking the audit log is a good place to start to see if the problem coincided with the directory malfunction. - slapd shutting down - signaling - slapd shutting down - waiting for - slapd shutting down - waiting for - Waiting for 4 database threads to - All database threads now stopped The following is an example of an...

83 cputrack Command SolarisPerformance

Mon, 26 Sep 2011 14:40:35 GMT

While the cpustat command monitors activity for the entire system, the cputrack command allows the same counters to be measured for a single process. This can be useful for focusing on particular applications and determining whether only one process is the cause of performance issues. The event specification for cputrack is the same as cpustat, except that instead of an interval and a count, cputrack takes either a command or -p pid. cputrack -T secs -N count -Defhnv -o file -c events command...

ipfstat io Solaris Network Model

Mon, 26 Sep 2011 14:26:30 GMT

block in proto tcp from any to 192.168.2.0 24 port telnet Note - The ipfstat -io command does not display the rules in the same sequence as they are listed in the etc ipf ipf.conf file. The out rules are listed in order first, and then the in rules are listed. Configuring Logging in the Solaris IP Filter Firewall The Solaris IP Filter firewall includes the ability to log its actions. Logged information is sent to the dev ipl device. The dev ipl device can be monitored by running the ipmon...

Resource and Resource Group States and Settings Sun Cluster Concepts

Mon, 26 Sep 2011 13:24:15 GMT

A system administrator applies static settings to resources and resource groups. You can change these settings only by administrative action. The RGM moves resource groups between dynamic states. These settings and states are as follows Managed or unmanaged settings. These cluster-wide settings apply only to resource groups. The RGM manages resource groups. You can use the clresourcegroup command to request that the RGM manage or unmanage a resource group. These resource group settings do not...

Configuring the Sections of Makefile SolarisInterfaces

Mon, 26 Sep 2011 13:15:35 GMT

The first section of the Makefile file contains the following macro definitions The second section of the Makefile file contains the first target, all. all passwd group hosts ipnodes ethers networks rpc services protocols netgroup bootparams aliases publickey netid netmasks c2secure timezone auto.master auto.home auth.attr exec.attr prof.attr user.attr audit.user The all target has several dependencies, each of which represents one of the NIS maps to be built. This feature enables the entire...

The Substitution String for an Indirect Map Solaris Operating Environment

Mon, 26 Sep 2011 12:15:43 GMT

The following entry reduces the auto_home file to a single line. The use of substitution characters specifies that for every login ID, the client remotely mounts the export home loginID directory from the NFS server serverl onto the local mount point home loginID. This entry uses the wildcard character to match any key the substitution character amp at the end of the location specification is replaced with the matched key field. This works only when all home directories are on a single server...

Step 9 Setting Password Read Permission for proxyagent SolarisLDAP

Mon, 26 Sep 2011 12:05:49 GMT

If pam_unix is used to authenticate Solaris users as recommended the cn proxyagent DN, with which the Solaris LDAP client binds to the server, must be granted read permission for user account passwords. To perform this operation through the Directory Console, follow these steps 1. Click the right mouse button on the top-level object, then choose Set Access Permissions from the pull-down menu and add the following data User Group- cn proxyagent, ou profile use Add User to List Rights-compare,...

Encapsulation and Deencapsulation Solaris Operating Environment

Mon, 26 Sep 2011 11:51:23 GMT

When systems communicate with each other, data can be thought of as flowing down the model from the application layer to the hardware layer, across the network connection, and then flowing up the model on the target system from the hardware layer to the application layer. A header is added to each segment received on the way down the model, and a header is removed from each segment on the way up the model, as shown in Figure 2-2. Each header contains specific address information so that the...

Encapsulation and Deencapsulation Solars File Systems

Mon, 26 Sep 2011 11:51:06 GMT

When you think of systems communicating via a network, you can imagine the data progressing through each layer down from the application layer to the hardware layer, across the network, and then flowing back up from the hardware layer to the application layer. A header is added to each segment that is received on the way down the layers encapsulation , and a header is removed from each segment on the way up through the layers de-encapsulation . Each header contains specific address information...

The NFSv4 Finish script Solaris System Administration

Mon, 26 Sep 2011 11:48:09 GMT

A sample script is delivered as part of the JumpStart sample files in the CD's s0 Solaris_l0 Misc jumpstart_sample directory. This finish script allows the user to specify the NFS4 domain, within the script, and have the sysidcfg finish.sh script call it. The provided script sets the NFSMAPID_DOMAIN setting in etc default nfs and create the etc .NFS4inst_state.domain state file. Upon first system boot, sysidnfs4 is executed by sysidconfig as explained above, but the existence of the state file...

Example 2 The maincf for a TwoNode Asymmetric NFS Cluster VERITAS Cluster Server

Mon, 26 Sep 2011 11:41:44 GMT

The following example is a basic two-node cluster exporting an NFS file system. The servers Serverl and Server2 storage One disk group managed using VERITAS Volume Manager, sharedl IP address 192.168.1.3 IP_nfs1 Server1 is primary location to start the NFS_group1 In an NFS configuration, the resource dependencies must be configured to bring up the IP address last. This prevents the client from accessing the server until everything is ready, and preventing unnecessary Stale File Handle errors on...

Device Groups Sun Cluster Concepts

Mon, 26 Sep 2011 10:28:57 GMT

In the Sun Cluster software, all multihost devices must be under control of the Sun Cluster software. You first create volume manager disk groups, either Solaris Volume Manager disk sets or VERITAS Volume Manager disk groups, on the multihost disks. Then, you register the volume manager disk groups as device groups. A device group is a type of global device. In addition, the Sun Cluster software automatically creates a raw device group for each disk and tape device in the cluster. However,...

DHCP Administration Commands pntadm Continued SolarisTCPIP

Mon, 26 Sep 2011 10:27:23 GMT

-M Modify the specified client entry with the hostname or the client IP address in the named dhcp_network table. For example pntadm -M 128.50.2.2 -m inetll -f PERMANENT MANUAL' 128.50.2.0 -D Delete the specified client entry in the named dhcp_network. For example -P Display the named dhcp_network table. For example -R Remove the named dhcp_network table. For example pntadm -R 128.50.2.0 -r nisplus -p Test.Nis.Plus. The dhtadm command is used to manage the DHCP service configuration table,...

The SOA record SolarisSolutions

Mon, 26 Sep 2011 10:05:51 GMT

SOA is the start of authority record. It contains the information that other name servers querying this one will require, and will determine how the data will be handled by those name servers. Each primary file pointed to in named.boot should have one and only one SOA record. The two fully qualified names listed after the SOA label are the primary name server for the domain, and where to send problems with the zone or domain via e-mail. HNOUE Because signs cannot be used in this field, the...

Preventing General DoS Attacks Malformed Packet Attacks and Flooding Solaris Security Attacks

Mon, 26 Sep 2011 09:43:43 GMT

For the exam, you should know the six techniques SUN recommends implementing to help prevent DoS attacks against the Solaris operating system. These are disabling executable stacks, disabling extraneous IP services ports, using egress filtering, using firewalls, monitoring networks, and implementing a patch update program. To prevent and defend against DoS attacks, including malformed packet attacks and flooding, Sun Microsystems recommends using egress filtering, TCP wrappers, firewalling,...

242 User Area SolarisKernel

Mon, 26 Sep 2011 08:26:42 GMT

The role of the user area traditionally referred to as the uarea , has changed somewhat in the Solaris environment when compared with traditional implementations of UNIX. The uarea was linked to the proc structure through a pointer and thus was a separate data structure. The uarea was swappable if the process was not executing and memory space was tight. Today, thearea is embedded in the process structure. The process kernel stack, which was traditionally maintained in the uarea, is now...

Examples Cez SolarisCommands

Mon, 26 Sep 2011 08:26:31 GMT

EXAMPLE 1 Protecting Outbound TCP Traffic With ESP and the AES Algorithm The following example specified that any TCP packet from spiderweb to arachnid should be encrypted with AES, and the SA could be a shared one. It does not verify whether or not the inbound traffic is encrypted. Protect the outbound TCP traffic between hosts spiderweb and arachnid with ESP and use AES algorithm. laddr spiderweb raddr arachnid ulp tcp dir out ipsec EXAMPLE 2 Verifying Whether or Not Inbound Traffic is...

Cluster Membership VERITAS Cluster Server

Mon, 26 Sep 2011 07:53:20 GMT

Cluster membership implies that the cluster must accurately determine which nodes are active in the cluster at any given time. In order to take corrective action on node failure, surviving nodes must agree on when a node has departed. This membership needs to be accurate and must be coordinated among active members. This becomes critical considering nodes can be added, rebooted, powered off, faulted, and so on. VCS uses its cluster membership capability to dynamically track the overall cluster...

Monitoring the Database from the Command Line SolarisLDAP

Mon, 26 Sep 2011 07:33:34 GMT

You can monitor your directory server's database activities from any LDAP client by specifying the following parameters blueprints ldapsearch -h blueprints.com -s base -b cn monitor,cn ldbm objectclass When you monitor your server's activities in this way, you see the following information database The type of database you are currently monitoring. read-only State of the database, that is, whether in read-only mode. A value of 0 means the server is not in read-only mode 1 means it is in...

Options Rlk SolarisCommands

Mon, 26 Sep 2011 07:03:29 GMT

auditreduce - merge and select audit records from audit trail files auditreduce options audit-trail-file auditreduce allows you to select or merge records from audit trail files. Audit files can be from one or more machines. The merge function merges together audit records from one or more input audit trail files into a single output file. The records in an audit trail file are assumed to be sorted in chronological order oldest first and this order is maintained by auditreduce in the output...

VEA Windows Client Package Installation Veritas Volume Manager

Mon, 26 Sep 2011 05:24:44 GMT

To install the Windows Client Package, follow this procedure 1. Install the base English package for the VEA client VRTSobgui.msi a. If the CD-ROM drive is drive D , navigate to D Windows b. Double click on VRTSobgui.msi c. Follow the instructions from the installer 2. Install the multi language pack for the VEA Client VRTSmuobg.msi a. If the CD-ROM is drive D , and, for example, you want to install the Japanese version, navigate to D ja windows. b. Double click on VRTSmuobg.msi c. Follow the...

intrstat SolarisKernel

Mon, 26 Sep 2011 05:12:53 GMT

device cpuO tim cpul tim cpu2 tim cpu3 tim ata 1 0 0.0 4 0.0 0 0.0 0 0.0 bge 01 1 0.0 0 0.0 0 0.0 0 0.0 mpt 0 0 0.0 12661 4.8 0 0.0 0 0.0 device cpuO tim cpul tim cpu2 tim cpu3 tim ata 1 0 0.0 0 0.0 0 0.0 0 0.0 bge 0 6 0.0 0 0.0 0 0.0 0 0.0 mpt 0 0 0.0 12630 4.7 0 0.0 0 0.0 means it is likely that CPU 1 has device interrupt bindings. Using The intrstat 1 data shows us that device mpt 0 mpt is the device nomenclature, 0 refers to instance 0 of the device is generating interrupts to CPU 1, which...

97 Interrupt Analysis intrstat SolarisPerformance

Mon, 26 Sep 2011 05:12:48 GMT

The intrstat command, new in Solaris 10, uses DTrace. It measures the number of interrupts and, more importantly, the CPU time consumed servicing interrupts, by driver instance. This information is priceless and was extremely difficult to measure on previous versions of Solaris. In the following example we ran intrstat on an UltraSPARC 5 with a 360 MHz CPU and a 100 Mbits sec interface while heavy network traffic was received. device I cpu0 tim ------------------ ---------------- device I cpu0...

BSD Versus SVR4 Printing Software Solaris System Security

Mon, 26 Sep 2011 04:41:31 GMT

The software that drives the UNIX printing process is an area in which the two UNIX versions, BSD and SVR4, are similar and yet very different. The two print systems are similar in that both are based on the concept of spooling. Both SVR4 and BSD print services support the concept of an interface program, which acts as a filter through which all output sent to the printer is passed. Here are some sample uses of an interface program Adding a banner page Most UNIX systems automatically add a...

pmadm Solaris Network Administration 2

Mon, 26 Sep 2011 03:13:08 GMT

The port monitors are managed by the pmadm command. Port services can be managed by using the following commands The sacadm command is used to manage port monitors. The following functions are available tip is a command that acts like a terminal. It can be used, for example, to access remote systems directly through a serial port, where one system acts as the console for the other. Next, we'll use the tip command to connect a Solaris 9 system to a modem. Before proceeding, however, we'll...

Operation of CIDR Solaris Network Administration

Mon, 26 Sep 2011 02:40:55 GMT

CIDR uses classless addresses in that it uses netmasks that are referred to as network prefixes to create varying network sizes. The network prefix is expressed in the following notation X.X.X.X 18, which is equivalent to the netmask of 255.255.192.0. The first 18 bits identify the network, and the remaining 14 bits identify the host. Figure 7-10 shows an example of a CIDR prefix. This use of netmasks means addresses can be supernetted as well as subnetted. Supernetting is the combining of two...

Default coreadm Command Without Options Solaris Operating Environment

Mon, 26 Sep 2011 02:03:40 GMT

Using the coreadm with no options displays the typical default settings from the etc coreadm.conf file. global core dumps disabled per-process core dumps enabled global setid core dumps disabled per-process setid core dumps disabled global core dump logging disabled The first line of output identifies the name to use for core files placed in a global directory. When generated, a global core file is created with mode 600 and is owned by the superuser. Non-privileged users cannot examine such...

TradeOffs When Using Mirrors SolarisInterfaces

Mon, 26 Sep 2011 01:59:50 GMT

A RAID-1 mirror volume maintains identical copies of the data in RAID-0 volumes. Mirroring requires more disks. You need at least twice as much disk space as the amount of data to be mirrored. After configuring a mirror, you can use it as if it were a physical slice. With multiple copies of data available, data access time is reduced if the mirror read and write policies are properly configured. You then use read and write policies to distribute the access to the submirrors evenly across the...

Chapter 12 Hardware Address Translation SolarisKernel

Mon, 26 Sep 2011 01:28:36 GMT

The hardware address translation HAT layer controls the hardware that manages mapping of virtual memory to physical memory. The HAT layer interfaces implement the creation and destruction of mappings between virtual and physical memory and probe and control the MMU. The HAT layer also implements all the low-level trap handlers to manage page faults and memory exceptions. Figure 12.1 shows the logical demarcation between elements of the HAT layer. Figure 12.1. Role of the HAT Layer in...

V option 1 ClusterReference

Mon, 26 Sep 2011 00:01:12 GMT

To run this command with other subcommands, users other than superuser require RBAC authorizations. See the following table. Name clnode- manage Sun Cluster nodes usr cluster bin clnode subcommand - usr cluster bin clnode subcommand options -v node usr cluster bin clnode add -n sponsornode -i - clconfigfile -c clustername -G globaldevfs usr cluster bin clnode clear -F node usr cluster bin clnode evacuate -T seconds node usr cluster bin clnode export -o - clconfigfile node -Z zoneclustername...

Putting the Pieces Together VERITAS Cluster Server

Sun, 25 Sep 2011 23:47:44 GMT

How do all these pieces combine to form a cluster Understanding that question makes understanding the rest of VCS fairly simple. Take a common example, a two-node cluster exporting an NFS file system to clients. The cluster itself consists of two nodes connected to shared storage, which enables both servers to access the data required for the file system export. In this example, a single service group, NFS_Group, fails over between ServerA and ServerB. The service group, configured as a...

Tunable Kernel Parameters SolarisFeatures

Sun, 25 Sep 2011 21:43:47 GMT

The following list describes tunable kernel parameters related to NFS version 4. You can define these parameters in the etc system file, which is read during the boot process. You can identify each parameter by the name of the kernel module that it is in and a parameter name that identifies it. Each entry includes a description and suggestions when you might change the setting. Solaris is a multi-threaded, scalable UNIX OS that runs on SPARC and x86 processors. It is self-adjusting to system...

NameResolution Process Solaris Network Administration

Sun, 25 Sep 2011 18:38:32 GMT

DNS name resolution is the process of translating a domain name to an IP address or translating an IP address to a domain name. Name resolution begins with client-side resolver code. Resolver code is built into the operating system libraries and is available to programs that use system interface calls. Does not cache any information Queries the DNS servers that are specified in the etc resolv.conf file Is activated by a reference to DNS in the etc nsswitch.conf file hosts entry A DNS client...

Configuring the SunScreen Firewall Solaris Network Administration 2

Sun, 25 Sep 2011 17:25:07 GMT

The best system for users who are new to Solaris is Sun's own SunScreen firewall It comes in both a free and a commercial edition, with the latter more than adequate for protecting small networks. It is available for both Solaris Intel and Solaris SPARC. The current release version is 3.1, which supports Gigabit Ethernet, SNMP management, and direct editing of security policy tables. However, it does not currently support IPv6. The firewall may be administered locally or remotely by using a...

Monitoring Swap Resources Solaris 10 Administration

Sun, 25 Sep 2011 11:56:44 GMT

If you run into a swap shortfall due to heavy demand on memory, you get error messages on your system's console. The error might look something like this lt application gt is out of memory malloc error O messages.1 SJul 18 15 12 47 ultra genunix ID 470503 kern.warning WARNING Sorry, no swap space to grow stack for pid 100295 myprog This error means that an application is trying to get more memory and there is no swap space available to back it. You could fill up a TMPFS due to the lack of...

Restricting FTP SolarisOpenBoot

Sun, 25 Sep 2011 10:44:56 GMT

Solaris 8's File Transfer Protocol FTP is a common tool for transferring files across the network. Although most sites leave FTP enabled, you need to limit who can use it. Solaris 8 contains a file named etc ftpusers, which is used to restrict access via FTP. The etc ftpusers file contains a list of login names that are prohibited from running an FTP login on the system. Following is an example of the default etc ftpusers file Names in this file must match login names in your etc passwd file....

321 Thread Summary prstat l SolarisPerformance

Sun, 25 Sep 2011 08:49:35 GMT

The -l option causes prstat to show one thread per line instead of one process per line. The output is similar to the previous example, but the last column is now represented by process name and thread number process lwpid. The name of the process name of executed file and the lwp ID of the lwp being reported.

eject cdrom Solaris System Administration

Sun, 25 Sep 2011 07:30:29 GMT

6. If you use CD-ROM media, insert the Solaris 10 OS Software 2 CD-ROM in the CD-ROM drive, and allow the vold daemon to automatically mount it. a. Change the directory to the location of the add_to_install_server script. b. Run the add_to_install_server script to copy the remainder of the installation image to the local disk this process can take about 20 minutes . c. When add_to_install_server finishes, change the directory to root , and eject the CD-ROM. 7. Repeat step 6 for the remaining...

Coordinator Disks VERITAS Cluster Server

Sun, 25 Sep 2011 06:44:54 GMT

VCS uses special-purpose disks, called coordinator disks, for I O fencing during cluster membership change. These are three standard disks or LUNs, which together act as a global lock device during a cluster reconfiguration. VCS uses this lock mechanism to determine which nodes remain in a cluster and which node gets to fence off data drives from other nodes. Node 0 Node 1 Node 2 Node 3 Node 0 Node 1 Node 2 Node 3 Coordinator disks cannot be used for any other purpose in the VCS configuration....

222 Threads in Kernel and Interrupt Context SolarisComponents

Sun, 25 Sep 2011 06:40:43 GMT

In addition to providing kernel services through system calls, the kernel must also perform system-related functions, such as responding to device I O interrupts, performing some routine memory management, or initiating scheduler functions to switch execution from one kernel thread to another. Interrupt Handlers Interrupts are directed to specific processors, and on reception, a processor stops executing the current thread, context-switches the thread out, and begins executing an interrupt...

52 Modular Implementation SolarisComponents

Sun, 25 Sep 2011 00:19:01 GMT

Early SunOS versions SunOS 3 and earlier were based on the old BSD-style memory system, which was not modularlized, and thus it was difficult to move the memory system to different platforms. The virtual memory system was completely redesigned at that time, with the new memory system targeted at SunOS 4.0. The new SunOS 4.0 virtual memory system was built with the following goals in mind Use of a new object-oriented memory management framework Support for shared and private memory copy-on-write...

sys13 dig 19216822 twoedu x 19216824 1 Solaris Network Model

Sat, 24 Sep 2011 23:29:52 GMT

lt lt gt gt DiG 9.2.4 lt lt gt gt 192.168.2.2 two.edu -x 192.168.2.4 global options printcmd Got answer - gt gt HEADER lt lt - opcode QUERY, status NOERROR, id 1914 flags qr aa rd ra QUERY 1, ANSWER 0, AUTHORITY 1, ADDITIONAL 0 QUESTION SECTION two.edu. IN A AUTHORITY SECTION two.edu. 86400 IN SOA sys22.two.edu. root.sys22.two.edu. 2005010101 3600 1800 6048000 86400 Query time 4 msec SERVER 192.168.2.2 53 192.168.2.2 WHEN Wed Jan 12 08 19 05 2005 MSG SIZE rcvd 72 Got answer - gt gt HEADER lt...

Figure 177 Turnstiles SolarisKernel

Sat, 24 Sep 2011 21:51:32 GMT

turnstile_t tc_first first turnstile on hash chain disp_lock_t tcjock lock for this hash chain turnstile_chain_t turnstile_chain_t turnstile_table 2 TURNSTILE_HASH_SIZE Each entry in the chain has its own lock,tcjock, so chains can be traversed concurrently. The turnstile itself has a different lock each chain has an active list ts_next and a free list ts_free . There are also a count of threads waiting on the sync object gaiters , a pointer to the synchronization object ts_sobj , a thread...

1117Putting It All Together SolarisPerformance

Sat, 24 Sep 2011 21:17:50 GMT

When your program is linked, the compiler command line must include the argument -lkstat. cc -o print_some_kstats -lkstat print_some_kstats.c The following is a short example program. First, it uses kstat_iookup and kstat_read to find the system's CPU speed. Then it goes into an infinite loop to print a small amount of information about all kstats of type kstat_type_io. Note that at the top of the loop, it calls kstat_chain_update to check that you have current data. If the kstat chain has...

Automounter Configuration Files SolarisSolutions

Sat, 24 Sep 2011 18:49:09 GMT

Automounter uses one or more files usually two or three to control which file systems are mounted and when. The etc auto_master file details the other files and maps that are used. The other two maps that you'll generally find in use are etc auto_home and etc auto_direct. The existence and configuration of these files depends on how automounter is used at a particular site. In this particular etc auto_master file, the net entry tells automounter i.e., automountd to manage the mounting of file...

The Automounter SolarisSolutions

Sat, 24 Sep 2011 18:48:18 GMT

Automounter is a standard Solaris feature that streamlines the management of shared file systems and reduces network traffic. Automounter also helps avoid file system problems in environments with many servers and many more clients by timing out on file system mounts instead of freezing one system's resources when a server from which it has mounted a file system becomes unavailable. In addition to the material presented here, we suggest that you refer to anything written by Hal Stern see...

Options Who SolarisCommands

Sat, 24 Sep 2011 17:09:11 GMT

usr sbin lumake -l error_log -o outfile -s source_BE -n BE_name -X usr sbin lumake -l error_log -t time -o outfile -s source_BE -n BE_name -m email_address -X The lumake command is part of a suite of commands that make up the Live Upgrade feature of the Solaris operating environment. See live_upgrade 5 for a description of the Live Upgrade feature. The lumake command populates that is, copies files to the file systems of a specified boot environment BE by copying files from the corresponding...

Step By Step Xnf SolarisOpenBoot

Sat, 24 Sep 2011 16:49:37 GMT

11.2 Recovering the Root or usr File System 1. Replace and partition the disk if it has failed. 2. Re-create the file system by issuing the newfs command as follows newfs in which lt disk-partition-name gt is the name of the raw disk partition containing the corrupted file system. 3. Check the new file system using fsck as follows fsck 4. Mount the new file system on a temporary mount point mount dev dsk lt disk-partition-name gt mnt 5. Change to the mnt directory cd mnt 6. Write-protect the...

Sctp Bindx Rem Addr Solaris Networking Functions

Sat, 24 Sep 2011 13:19:24 GMT

Indicates that addresses from addrs should be added to the SCTP socket. Indicates that addresses from addrs should be removed from the SCTP socket. These two flags are mutually exclusive. If flags is formed by a bitwise OR of both SCTP_BINDX_ADD_ADDR and SCTP_BINDX_REM_ADDR, the sctp_bindx function will fail. Prior to calling sctp_bindx on an SCTP endpoint, the endpoint should be bound using bind 3SOCKET . On a listening socket, a special INADDR_ANY value for IP or an unspecified address of all...

Self Test Pbd ManagingSolaris

Sat, 24 Sep 2011 11:56:23 GMT

The following questions will help you measure your understanding of the material presented in this chapter. Read all the choices carefully because there might be more than one correct answer. Choose all correct answers for each question. 1. What is the minimum number of disks required for a RAID 5 system c 2. Consider an e-commerce application with mission-critical data. While configuring the wlumes n you do not need to be concerned about performance, but you cannot afford to lose data. How ....

Autofs Administration Task Map Solaris Resource Management

Sat, 24 Sep 2011 07:31:29 GMT

The following table provides a description and a pointer to many of the tasks that are related to autofs. TABLE 15-5 Autofs Administration Task Map TABLE 15-5 Autofs Administration Task Map Start the automount service without having to reboot the system How to Start the Automounter on page 161 Stop the automount service without disabling other network services How to Stop the Automounter on page 161 Access file systems by using the automount service Mounting With the Automounter on page 157...

Configure the Stratum Solaris Network Model

Sat, 24 Sep 2011 00:02:17 GMT

You can configure the stratum of an NTP server manually by editing the fudge entry in the etc inet ntp.conf file. This is useful when you do not have access to an external NTP server and you have to synchronize with another system manually. When a local clock is configured to act as an accurate source of time, NTP detects this. Systems that use their own clock as a time source advertise themselves as a stratum-4 server by default. However, the fudge keyword can be used to alter this behavior....

6103 Kstats SolarisKernel

Fri, 23 Sep 2011 22:27:59 GMT

The kstat framework is used extensively for applications monitoring the system's performance including mpstat 1 M , vmstat 1 M , iostat 1 M , and kstat 1 M . Unlike traditional Solaris systems, the values reported in a particular kstat may not be relevant or accurate in non-global zones. When executing in a zone and if the pools facility is active, mpstat 1 M will only provide information for those processors which are a member of the processor set of the pool to which the zone is bound. The...

Info Cwq ApplicationProgramming

Fri, 23 Sep 2011 21:20:31 GMT

The UltraSPARC T1 processor has eight cores. Each core can execute four threads hence, up to 32 threads can be active at the same time. Example 12.4 shows the results of running this script on an UltraSPARC T1-based system, compressing between one and 32 copies. Because the gzip workload is largely CPU-bound, there is some increase in elapsed time as the number of copies increases it takes less than 2.5 times as long to run 32 copies as it did to run a single copy. The throughput of the system,...

678 TCP Connection Teardown SolarisKernel

Fri, 23 Sep 2011 20:49:09 GMT

The ioctl TCP_IOC_ABORT_CONN can abort existing TCP connections and unconnected TCP endpoints without waiting for a timeout. It is used by the Sun Cluster and Netra High Availability HA Suite products to allow quick failover of IP addresses from one node to another. Thetcp_ic_abort_conn_t structure has been extended to include a zone ID, allowing all connections associated with a given zone to be terminated this is used internally as part of zone shutdown. You can preserve the previous behavior...

Using a Flash Archive With Interactive Install SolarisInterfaces

Fri, 23 Sep 2011 20:18:10 GMT

You can perform interactive installation of the Solaris OE by using the suninstall program. The Solaris suninstall program only installs the Solaris OE software. After you install the Solaris OE software, you must use other installation programs to install additional software. 1. Insert Solaris 9 OE Installation 1 of 2 CD-ROM. 2. Boot the Flash clone system from the Boot PROM prompt as follows ok boot cdrom - nowin After the pre-installation phase completes, a series of character-based curses...

Existing System Mirroring Procedure A Mirroring Sun Enterprise Cluster

Fri, 23 Sep 2011 19:23:48 GMT

1. To mirror the encapsulated disk, choose a disk c0t2d0 for instance and execute the following commands etc vx bin vxdisksetup -i c0t2d0 usr sbin vxdg adddisk mirrorroot c0t2d0 At this point, you should see the new disk in the rootdg disk group. 2. Mirror the encapsulated root disk on mirrorroot using the following command etc vx bin vxmirror disk01 mirrorroot vxmirror prints out a series of commands corresponding to the mirroring of the volumes in the encapsulated root disk. 3. After vxmirror...

Troubleshooting with nslookup SolarisSolutions

Fri, 23 Sep 2011 18:47:42 GMT

Next, type nslookup at a command prompt. If nslookup connects to your name server as shown in the following example , you have at least verified that named is up and running. If nslookup cannot connect, make sure that in.named is running, and, as should be routine, check for messages pertaining to named in your var adm Within the nslookup program, try a few simple queries such as the name of the name server and localhost. Both of these should resolve without a problem. If you are connected to a...

Global Cluster VERITAS Cluster Server

Fri, 23 Sep 2011 18:14:11 GMT

A global cluster links clusters at separate locations and enables wide-area failover and disaster recovery. Local clustering provides local failover for each site or building. Campus and replicated cluster configurations offer protection against disasters affecting limited geographic regions. Large scale disasters such as major floods, hurricanes, and earthquakes can cause outages for an entire city or region. In such situations, data availability can be ensured by migrating applications to...

netstat s SolarisSolutions

Fri, 23 Sep 2011 17:43:29 GMT

The netstat -s command provides a summary of TCP IP counters. Though, as with so many performance commands, the amount of data that this command provides is quite overwhelming and you would have to be quite a TCP IP ace to understand what all the parameters represent , there are some simple commands that you can use to highlight certain aspect of your server's network performance. One way to extract some data for a quick analysis is to run the netstat -s command and pipe the output to a grep...

Operands Lsb SolarisCommands

Fri, 23 Sep 2011 17:39:09 GMT

getdgrp - lists device groups which contain devices that match criteria usr sbin getdgrp -ael criteria dgroup getdgrp generates a list of device groups that contain devices matching the given criteria. The criteria is given in the form of expressions. The following options are supported -a Specifies that a device must match all criteria to be included in the list generated by this command. The option has no effect if no criteria are defined. -e Specifies that the list of device groups on the...

Tasks Sgu SolarisInterfaces

Fri, 23 Sep 2011 17:34:08 GMT

To determine the amount of disk space used by a swapfs file system, complete the following steps What is the total number of bytes actually allocated and currently in use What is the number of bytes allocated and not currently in use, but reserved by processes for possible future use What is the total amount of swap space, both allocated and reserved What is the total swap space currently available for future reservation and allocation List the physical swap area configured on your system. How...

violation Event Trigger VERITAS Cluster Server

Fri, 23 Sep 2011 16:31:16 GMT

Usage - violation system service_group The variable system represents the name of the system. The variable service_group represents the name of the service group that was fully or partially online. Description This trigger is invoked only on the system that caused the concurrency violation. Specifically, it takes the service group offline on the system where the trigger was invoked. Note that this trigger applies to failover groups only. The default trigger takes the service group offline on...

Options Fjk SolarisCommands

Fri, 23 Sep 2011 15:35:03 GMT

dnssec-keygen - DNSSEC key generation tool dnssec-keygen -a algorithm -b keysize -n nametype -eh -c class -g generator -p protocol -r randomdev -s strength -t type -v level name The dnssec-keygen utility generates keys for DNSSEC Secure DNS , as defined in RFC 2535. It can also generate keys for use with TSIG Transaction Signatures , as The following options are supported -a algorithm Select the cryptographic algorithm. The value of algorithm must be one of RSAMD5 or RSA, DSA, DH Diffie Hellman...

The fdfs File System Solaris Operating Environment

Fri, 23 Sep 2011 15:12:27 GMT

The fdfs file system is a pseudo file system that maintains a repository of file descriptors for open files. Running programs access files by using these file descriptors. The following example from the etc vfstab file shows the mounting of the fdfs file system on the dev fd mount point at system boot time device device mount FS fsck mount mount to mount to fsck point type pass at boot options fd - dev fd fd - no - Table 5-1 describes each file descriptor. Table 5-1 File Descriptor Usage Table...

Sctpstatus Solaris Networking Functions

Fri, 23 Sep 2011 13:10:14 GMT

Returns the current status information about the association. The following structure is used to access the parameters struct sctp_status sctp_assoc_t int32_t uint32_t uint16_t uint16_t uint16_t uint16_t uint16_t Association ID specifed by the caller Current state of the association which might be one of the following SCTP_CLOSED SCTP_BOUND SCTP_LISTEN SCTP_COOKIE_WAIT SCTP_COOKIE_ECHOED SCTP_ESTABLISHED SCTP_SHUTDOWN_PENDING SCTP_SHUTDOWN_SENT SCTP_SHUTDOWN_RECEIVED SCTP_SHUTDOWN_ACK_SENT...