book

Solaris™ Operating Environment System Administrator’s Guide, Fourth Edition

by Janice Winsor

May 2003

Beginner

528 pages

9h 51m

English

Pearson

Read now

Unlock full access

A Quick Tour of the ContentsImportant: Read This Before You BeginConventions Used in This BookCommandsVariablesMouse-Button TerminologyPlatform TerminologyStorage-Medium TerminologyIconsSolaris Management Console ToolsSPARC and IA InformationSolaris System Software EvolutionFreeware
Defining the System Administrator’s JobUnderstanding Superuser StatusBecoming Superuser (su)Exiting Superuser StatusLogging In as RootCommunicating with UsersDisplaying System-Specific Messages at Login (motd)Creating a Message of the DaySending a Message to an Individual UserTyping a Short Message to an Individual User (write)Sending a Message from a File to an Individual User (write)Sending a Message to All Users on a System or Network (wall, rwall)Sending a Message by E-MailStarting Up SystemsChoosing an Init StateThe /etc/inittab FileRun Control ScriptsThe /sbin/rc0 ScriptThe /sbin/rc1 ScriptThe /sbin/rc2 ScriptThe /sbin/rc3 ScriptThe /sbin/rc5 and /sbin/rc6 ScriptsThe /sbin/rcS ScriptFinding the Run Level for a SystemUsing OpenBoot PROM State, Run Level 0Using Single-User State, Run Level s and SUsing Administrative State, Run Level 1Using Multiuser State, Run Level 2Using Remote Resource-Sharing State, Run Level 3Using Alternative Multiuser State, Run Level 4Using Power-Down State, Run Level 5Using Reboot State, Run Level 6Changing Run LevelsUsing Platform-Specific Booting ProtocolsThe OpenBoot PROM and Interface (SPARC Platforms)Displaying the PROM Release for a SystemOpenBoot Configuration InformationCommands Used to View or Modify Configuration VariablesOpenBoot Firmware Security LevelsThe PC BIOS (IA Platforms)Boot SubsystemsBooting a SystemBooting in Multiuser StateBooting in Single-User StateBooting InteractivelyLooking at the Boot MessagesBooting After Adding New HardwareForcing a Crash Dump and Rebooting the SystemAdministering Crash DumpsBooting the System with the Kernel DebuggerBooting a System for Recovery Purposes (SPARC Platform)Booting a System for Recovery Purposes (IA Platform)Aborting a Booting ProcessShutting Down a SystemChoosing Which Shutdown Command to Useshutdowntelinit and inithaltrebootShutting Down a Multiuser SystemShutting Down a System: Alternative WaysShutting Down a System Without ConfirmationChanging the Shutdown Grace PeriodShutting Down and Rebooting a Multiuser SystemShutting Down a Single-User SystemShutting Down and Rebooting a Single-User SystemShutting Down a System in a HurryMonitoring ProcessesCommands for Monitoring ProcessesUsing the ps CommandWhat the ps Command ReportsUses for the ps ReportSignalling a ProcessKilling ProcessesUsing the /usr/proc/bin CommandsDisplaying and Controlling Information About ProcessesThe Priority Control Command (priocntl)Creating and Administering Resource Management PoolsDisplaying Basic Information About Process ClassesDisplaying the Global Priority of a ProcessDesignating a Process PriorityChanging the Class of a ProcessSetting Fair-Share ParametersSetting Fixed-Priority ParametersSetting the Priority of a Process (nice)Changing the Priority of a Running Process (renice)Finding or Signalling Processes (pgrep, pkill)Reviewing Essential Administration ToolsFrequently Used CommandsGetting Around in the File System (pwd, cd)Finding Where You Are in the File SystemChanging DirectoriesFinding Information About FilesDisplaying File Information (ls)Finding a File (find)Finding the Type of a File (file)Finding Information in Files (grep, egrep)Searching Files for Text StringsSearching Input for Lines with a Given PatternLooking at FilesViewing a File (more)Looking at the End of a File (tail)Looking at the Beginning of a File (head)Changing File Ownership or Permissions (chown, chmod, chgrp)Changing File OwnershipChanging File PermissionsChanging File Group Ownership (chgrp)Setting or Displaying the System EnvironmentCDE Environment VariablesTools in the Solaris Management ConsoleSMC Tools Available in SMC 2.1Starting SMC
Finding User InformationDetermining Who Is Logged In to a System (w, who, finger, rusers -l, whodo)Using the w CommandUsing the who CommandUsing the finger CommandUsing the rusers -l CommandUsing the whodo CommandFinding User UID and GID Settings (id)Creating and Editing Files (cat, touch, cp, mv, vi)Using the cat CommandUsing the touch CommandCopying (cp) or Renaming (mv) an Existing FileUsing Text EditorUsing viUsing Manual PagesDisplaying a Manual Page (man)Finding Manual Page Sections (man)Creating Preformatted Manual Pages (catman)Finding the Section Number for a Manual Page (whatis, man)Finding Disk InformationDisplaying Used Disk Space in a Human-Readable Format (df -h)Displaying Used Disk Space in Kilobytes and Percentage of Capacity (df -k)Determining Whether File Systems Are Local or NFS Mounted (df)Finding All Mounted File Systems of a Specific Type (df -F)
Flash InstallationDesigning the Master System InstallationCreating a Flash ArchiveChoosing a Flash Archive Installation MethodInstalling a Flash Archive with the Solaris WebStart ProgramInstalling a Flash Archive with the suninstall ProgramSolaris Live UpgradeSolaris Live Upgrade CommandsCreating a Boot EnvironmentUpgrading a Boot EnvironmentActivating a Boot Environment
Tasks Common to All ShellsSetting a Default ShellChanging Shells from a Command Line (csh, ksh, sh, bash, tcsh)Quitting from a Shell (exit)Setting Aliases, Paths, and Environment VariablesSetting the Path for Bourne and Korn ShellsSetting the Path for the C ShellDisplaying Environment Variable Settings (env)Clearing a Shell Window (clear)Setting the Shell Backspace Key (stty erase)Typing Several Commands on the Same Command Line (;)Redirecting Output (<>)Combining Commands (|)The Bourne ShellReviewing the Bourne Shell Initialization FileDefining Bourne Shell Environment VariablesUsing Functions to Simulate Aliases for the Bourne ShellThe C ShellReviewing C Shell Initialization FilesDefining C Shell Environment VariablesCreating Aliases for the C ShellSetting the History Size for the C ShellUsing history for the C ShellIncorporating a New Command for the C Shell (rehash)Editing C Shell History CommandsThe Korn ShellReviewing Korn Shell Initialization FilesUsing Korn Shell OptionsCreating Korn Shell AliasesEditing Commands with the Korn Shell In-line EditorSetting the Size of the Korn Shell’s HistoryDisplaying Korn Shell History CommandsUsing Korn Shell History CommandsEditing Korn Shell History CommandsThe Bourne-Again ShellReviewing Bourne-Again Shell Initialization FilesThe TC ShellReviewing TC Shell Initialization FilesThe Z ShellReviewing Z Shell Initialization Files
Tools for Adding and Administering User AccountsAdding User AccountsEditing the /etc/passwd FileUser ID NumberLarge User IDs and Group IDsCreating a Home DirectoryNFS-Mounting the Home DirectoryDefining the User’s EnvironmentDefining Initialization FilesCreating Site Initialization FilesExample of a Site Initialization FileAvoiding Local System References in Site Initialization FilesSetting Up User Initialization FilesSetting Up a User’s Mail AccountSetting Up a User’s PrinterCreating a PasswordDisabling User AccountsSetting Up and Administering GroupsSetting Up Fields in the Group DatabaseSetting Up a Group Name FieldSetting Up a Group ID FieldSetting Up a User (Member) List FieldIdentifying Default UNIX User GroupsCreating New GroupsModifying GroupsDeleting User AccountsUsing Solaris User RegistrationAccessing Solaris Solve/BigAdminError ConditionsRestarting Solaris User RegistrationDisabling User Registration
Using SMC to Grant Access Rights to UsersUsing SMC to Administer Role AccountsThe RBAC DatabasesCommands for Managing Role-Based Access Control
What’s New in File Systems in the Solaris 9 ReleaseWhat’s New in File Systems in the Solaris 8 ReleaseTypes of File SystemsDisk-Based File SystemsNetwork-Based File SystemsVirtual File SystemsThe Cache File System (CacheFS)The Temporary File System (TMPFS)The Loopback File System (LOFS)The Process File System (PROCFS)The /etc/mnttab File System (MNTFS)Additional Virtual File SystemsThe Default Solaris File SystemThe Virtual File System Table (/etc/vfstab)NFS Client FailoverCreation of an Entry in the File System TableFile System Administrative CommandsSyntax of Generic CommandsManual Pages for Generic and Specific CommandsHow File System Commands Determine File System TypeTypes of File SystemsMaking File Systems AvailableUnderstanding Mounting and UnmountingUsing Mount and Unmount File System CommandsUFS LoggingFinding the Mounted File SystemsMounting All File Systems in the /etc/vfstab FileMounting All File Systems of a Specific TypeMounting a Single File System (mount)Remounting a UFS File System Without Large Files (mount)Unmounting All Remote File Systems (umountall -F nfs)Unmounting Individual File Systems (umount)Automounting DirectoriesSharing Files from a ServerChecking the Data Consistency of a File System (fsck)Finding Out Whether a File System Needs CheckingChecking File Systems InteractivelyBacking Up and Restoring File SystemsSpecifying Tape CharacteristicsSpecifying a Backup LevelBacking Up a File System with Cartridge Tapes (ufsdump)Performing Incremental BackupsRestoring a Backed-Up File System (ufsrestore)Determining Which Tapes to UseRestoring a Full BackupRestoring Files InteractivelyRestoring a Single File from a Backup Tape (ufsrestore)Creating a Snapshot of a UFS File SystemSyntax and Options of the fssnap CommandCreating a UFS SnapshotDeleting a UFS SnapshotBacking Up a UFS SnapshotRestoring Data from a UFS Snapshot BackupCache File SystemsUnderstanding CacheFSCreating a CacheSpecifying a File System to Be Mounted in the CacheCreating a Mount PointSpecifying a File System (mount)Specifying a File System (/etc/vfstab File)Specifying a File System (Automounter Map)Maintaining Caches

What’s New in Device Management in the Solaris 9 ReleaseRCM ScriptingDynamic Reconfiguration Error MessagesNew Device Allocation CommandsAutomatically Configuring DevicesImproved Device Configuration (defvsadm)Display of Device Configuration InformationAllocating DevicesEnabling BSMDisabling BSMListing Device InformationAllocating a DeviceDeallocating a DeviceUsing SCSI and PCI Hot-PluggingSpecifying Device NamesUsing TapesTape Device–Naming ConventionsSpecifying the Drive Number by the Default DensitySpecifying Different Densities for a Tape DriveSpecifying the No-Rewind OptionUnderstanding Device Abbreviations for Different Tape Controllers and MediaUsing SCSI 1/4-Inch Cartridge and 1/2-Inch Front-Loaded Reel DrivesSpecifying Helical Scan DrivesUsing DLT and AIT Tape DrivesUseful Commands for Streaming TapesRewinding a Magnetic TapeShowing the Status of a Magnetic Tape DriveThe tar CommandCopying Files to a Tape (tar)Listing the Files on a Tape (tar)Appending Files to a Tape (tar)Retrieving Files and Directories from a Tape (tar)The cpio CommandCopying All Files in a Directory to a Tape (cpio)Listing the Files on a Tape (cpio)Retrieving All Files from a Tape (cpio)Retrieving a Subset of Files from a Tape (cpio)The pax CommandCopying All Files in a Directory to a Tape (pax)Retrieving All Files on a Tape (pax)Accessing Removable Media DevicesRemovable Media ManagerStarting Removable Media ManagerSupported Media DevicesUsing DVD-ROM DevicesHardware and Software RequirementsUDF Compatibility IssuesConnecting a DVD-ROM DeviceAccessing Files on a DVD-ROM DeviceDisplaying UDF File System ParametersCreating a UDF File SystemDetermining Whether a File System Is a UDF File SystemChecking a UDF File SystemMounting a UDF File SystemUnmounting a UDF File SystemLabeling a Device with a UDF File System and Volume NameUsing Jaz or Zip DrivesCreating an Alternative fdisk PartitionWriting CD DiscsCreating Data CDsCreating Audio CDsVolume ManagementVolume Management FilesVolume Management Mount PointsLimitation on UFS Formats with Volume Management for CDsCD-ROMs and Volume ManagementMounting a Local CD-ROMSharing Local Media Drives with NFSHow to Access an NFS-Shared CD-ROM File SystemHow to Unmount an NFS-Shared CD-ROM File SystemHow to Find Out If an NFS-Mounted CD-ROM File System Is Still in UseDiskettes and Volume ManagementLimitation on UFS Formats with Volume Management for DiskettesCommand-Line Diskette Formatting (rmformat)Command-Line Diskette Formatting (fdformat)Determining If a Diskette Is Still in UseEjecting a DisketteAccessing the CDE Front PanelCDE File Manager AccessUsing Removable Media Manager to Format DiskettesUsing the tar and cpio Commands with DiskettesVolume Management TroubleshootingVolume Management and workmanDisabling Volume ManagementUsing Diskettes Without Volume ManagementDiskette Device NamesDiskettes for UFS File SystemsFormatting a UFS Diskette (rmformat)Formatting a UFS Diskette (fdformat)Removing a Diskette from the DriveCopying UFS Files to a Single Formatted DisketteListing the Files on a Diskette (tar)Appending Files to a Formatted Diskette (tar)Retrieving Files from a Diskette (tar)Retrieving bar Files from Diskettes (cpio)Multiple Diskettes for Archiving Files (cpio)Making a UFS File System on a Diskette (newfs /dev/rdiskette)Diskettes for PCFS (DOS) File SystemsFormatting a Diskette with a PCFS (DOS) File SystemMounting a PCFS DisketteUnmounting a PCFS DisketteAdministering DisksDisk-Naming ConventionsUsing Disks with Bus ControllersUsing Disks with Direct ControllersSetting Up Disk SlicesSPARC Disk SlicesIA Disk SlicesDetermining Which Slices to UseDisks and SMCDisk Use Check (du)Disk Information Check (prtvtoc)Bad-Disk RepairTry Archiving the FilesTry Copying Data from the DiskTry Repairing Any Bad BlocksTry Reformatting the DiskReplacing the Bad DiskAdding Defect List, Format, Partition, and Label Disk (format)Remaking the File Systems (newfs)Mounting the File System on a Temporary Mount Point (mount)Restoring Files to the File System (ufsrestore)Unmounting the File System from Its Temporary Mount Point (umount)Checking the File System for Inconsistencies (fsck)Performing a Level 0 Backup of the Restored File System (ufsdump)Mounting the File System at Its Permanent Mount Point (mount)Understanding the Service Access FacilitySMC Tools for SAFPort Monitors and Service AccessSAF Control of Port Monitors and ServicesSetting Up Printer Port MonitorsSetting Up a Bidirectional ModemUsing a Modem
Displaying System-Specific InformationDetermining the Host ID Number (sysdef -h, hostid)Determining the Hardware Type (uname -m)Determining the Processor Type (uname -p)Determining the OS Release (uname -r)Displaying System Configuration Information (prtconf)Determining How Long a System Has Been Up (uptime)Determining the System Date and Time (date)Setting the System Date and Time (date)Changing the System Time Zone (/etc/TIMEZONE)Configuring Additional Swap Space (mkfile, swap)Creating a Local Mail Alias (/etc/mail/aliases)
Configuring Systems for a NetworkConfiguring a Host for Local Files ModeChecking on Remote System StatusDetermining How Long a Remote System Has Been Up (rup)Determining Whether a Remote System Is Up (ping, rup, rpcinfo -p)Logging In to a Remote System (rlogin)Authentication for Remote Logins (rlogin)Remote System AuthenticationThe /etc/hosts.equiv FileThe .rhosts FileNetwork AuthenticationWhat Happens After You Log In RemotelyLogging Out from a Remote SystemTransferring Files Between Systems (rcp, ftp)Using the rcp CommandUsing the File Transfer Program (ftp)Administering NIS+ DatabasesUsing NIS+ TablesNIS+ SecurityUsing SMC Computers and Networks ToolIntroducing the IPv6 Internet ProtocolExpanded Routing and Addressing CapabilitiesSimplified Header FormatImproved Support for OptionsQuality-of-Service CapabilitiesAuthentication and Privacy CapabilitiesShowing Network Status (netstat)Displaying Status of Active TCP and UDP PortsDisplaying the Status of Network InterfacesDisplaying Kernel Routing TablesDisplaying Network Interface Parameters (ifconfig)Displaying Information About All Interfaces on a SystemDisplaying Information About Specific InterfacesDisplaying Packet ContentsChecking All Packets from Your SystemCapturing snoop Results to a FileSecure Shell CommandsBenefits of SSHSSH ConfigurationConfiguring Secure Shell ClientsConfiguring Secure Shell ServersX11 ForwardingPublic Key Authentication with the Secure ShellChanging the Passphrase of a Private KeyUsing the Public Key in Each KeypairPrivate Keys and PassphrasesThe ssh-agentssh-addThe Secure Shell CommandssshscpsftpCommon Administrative Uses for the Secure ShellTransferring Files Between Systems SecurelySecure Root Login Without Allowing PasswordsSecure Shell on Pre-Solaris 9 ReleasesFor More Information
What’s New in Printing in the Solaris 9 ReleaseChanges to the LP Scheduler (lpsched)USB Printer SupportPrinter Information Management with LDAPWhat’s New in Printing in the Solaris 8 ReleaseSolaris Print ManagerPrint-Naming Enhancement to the Nameservice Switch FileMethods for Enabling or Disabling Global Banner Page PrintingSolaris Print Package RedesignRedesign of Print PackagesPrint Protocol AdapterSunSoft Print ClientEnhanced Network Printer SupportPrint Administration Tools in the Solaris EnvironmentChoosing a Method to Manage PrintersIntroducing the LP Print ServiceAdministering Files and Scheduling Print RequestsScheduling Network Print RequestsFiltering Print FilesStarting the Printer Interface ProgramTracking the Status of Print JobsTracking FormsTracking Print WheelsReceiving Printing Problem AlertsUnderstanding the Structure of the LP Print ServiceUser CommandsLP Configuration FilesPrinter DefinitionsDaemons and LP Internal FilesLP Administrative CommandsLog FilesPrint Queue LogsHistory LogsSpooling DirectoriesUsing the SunSoft Print ClientPrinter Configuration ResourcesPrint-Naming EnhancementPrint Request SubmissionSummary of the SunSoft Print Client ProcessSetting Up Printing ServicesIntroducing Solaris Print ManagerStarting Solaris Print ManagerAdding Access to a Printer with the Print ManagerAdding a New Attached Printer with Print ManagerAdding a New Network Printer with Print ManagerConverting Printer Configuration in NIS+ (xfn) to NIS+ FormatSetting Up a Print Server (Solaris Operating Environment)Controlling the Printing of Banner PagesMaking Banner Pages OptionalTurning Off Banner PagesSetting Up a PostScript Print Client with LP CommandsUsing Printing CommandsPrinting to the Default PrinterPrinting to a Printer by NameRequesting Notification When a File Has Been PrintedPrinting Multiple CopiesDetermining Printer StatusThe Status of Your Print RequestsAvailability of PrintersDisplay of All Status InformationDisplay of Status for PrintersDisplay of Printer CharacteristicsSummary Table of lpstat OptionsCancelling a Print RequestCancelling a Print Request by ID NumberCancelling by Printer Name a File That Is Currently Printing
Recognizing Problems with Search PathsDisplaying the Current Search PathSetting the Path for Bourne and Korn ShellsSourcing Bourne and Korn Shell Dot FilesSetting the Path for the C ShellSourcing C Shell Dot FilesVerifying the Search PathExecuting a CommandRecognizing Problems with Permissions and OwnershipChanging File OwnershipChanging File PermissionsChanging File Group Ownership

Content preview from Solaris™ Operating Environment System Administrator’s Guide, Fourth Edition

Chapter 6. Administering Rights and Roles

Starting with the Solaris 8 Operating Environment, role-based access control (RBAC) provides a flexible way to package certain superuser privileges for assignment to user accounts. You no longer need to give users all superuser privileges to enable them to perform a set of tasks that require superuser privileges.

With traditional security models, superuser has full superuser privileges and other users do not have enough power to fix their own problems. With role-based access control (RBAC), you now have an alternative to the traditional all-or-nothing security model.

With RBAC, you can divide superuser capabilities into several packages and assign them separately to individuals sharing administrative responsibilities. ...