System Administration Guide: Basic Administration SunMicrosystems,Inc. 4150NetworkCircle SantaClara,CA95054 U.S.A. PartNo:817–2874 December2003 Copyright2003SunMicrosystems,Inc. 4150NetworkCircle,SantaClara,CA95054U.S.A. Allrightsreserved. Thisproductordocumentisprotectedbycopyrightanddistributedunderlicensesrestrictingitsuse,copying,distribution,anddecompilation.No partofthisproductordocumentmaybereproducedinanyformbyanymeanswithoutpriorwrittenauthorizationofSunanditslicensors,ifany. Third-partysoftware,includingfonttechnology,iscopyrightedandlicensedfromSunsuppliers. PartsoftheproductmaybederivedfromBerkeleyBSDsystems,licensedfromtheUniversityofCalifornia.UNIXisaregisteredtrademarkintheU.S. andothercountries,exclusivelylicensedthroughX/OpenCompany,Ltd. Sun,SunMicrosystems,theSunlogo,docs.sun.com,AnswerBook,AnswerBook2,AutoClient,JumpStart,SunRay,SunBlade,PatchPro,SunCobalt, SunOS,Solstice,SolsticeAdminSuite,SolsticeDiskSuite,SolarisSolve,Java,JavaStation,OpenWindows,NFS,iPlanet,NetraandSolarisare trademarks,registeredtrademarks,orservicemarksofSunMicrosystems,Inc.intheU.S.andothercountries.AllSPARCtrademarksareusedunder licenseandaretrademarksorregisteredtrademarksofSPARCInternational,Inc.intheU.S.andothercountries.ProductsbearingSPARCtrademarks arebaseduponanarchitecturedevelopedbySunMicrosystems,Inc.DLTisclaimedasatrademarkofQuantumCorporationintheUnitedStatesand othercountries. TheOPENLOOKandSun™GraphicalUserInterfacewasdevelopedbySunMicrosystems,Inc.foritsusersandlicensees.Sunacknowledgesthe pioneeringeffortsofXeroxinresearchinganddevelopingtheconceptofvisualorgraphicaluserinterfacesforthecomputerindustry.Sunholdsa non-exclusivelicensefromXeroxtotheXeroxGraphicalUserInterface,whichlicensealsocoversSun’slicenseeswhoimplementOPENLOOKGUIs andotherwisecomplywithSun’swrittenlicenseagreements. FederalAcquisitions:CommercialSoftware–GovernmentUsersSubjecttoStandardLicenseTermsandConditions. DOCUMENTATIONISPROVIDED“ASIS”ANDALLEXPRESSORIMPLIEDCONDITIONS,REPRESENTATIONSANDWARRANTIES, INCLUDINGANYIMPLIEDWARRANTYOFMERCHANTABILITY,FITNESSFORAPARTICULARPURPOSEORNON-INFRINGEMENT,ARE DISCLAIMED,EXCEPTTOTHEEXTENTTHATSUCHDISCLAIMERSAREHELDTOBELEGALLYINVALID. Copyright2003SunMicrosystems,Inc. 4150NetworkCircle,SantaClara,CA95054U.S.A. Tousdroitsréservés. Ceproduitoudocumentestprotégéparuncopyrightetdistribuéavecdeslicencesquienrestreignentl’utilisation,lacopie,ladistribution,etla décompilation.Aucunepartiedeceproduitoudocumentnepeutêtrereproduitesousaucuneforme,parquelquemoyenquecesoit,sans l’autorisationpréalableetécritedeSunetdesesbailleursdelicence,s’ilyena.Lelogicieldétenupardestiers,etquicomprendlatechnologierelative auxpolicesdecaractères,estprotégéparuncopyrightetlicenciépardesfournisseursdeSun. DespartiesdeceproduitpourrontêtredérivéesdusystèmeBerkeleyBSDlicenciésparl’UniversitédeCalifornie.UNIXestunemarquedéposéeaux Etats-Unisetdansd’autrespaysetlicenciéeexclusivementparX/OpenCompany,Ltd. Sun,SunMicrosystems,lelogoSun,docs.sun.com,AnswerBook,AnswerBook2,AutoClient,JumpStart,SunRay,SunBlade,PatchPro,SunCobalt, SunOS,Solstice,SolsticeAdminSuite,SolsticeDiskSuite,SolarisSolve,Java,JavaStation,DeskSet,OpenWindows,NFSetSolarissontdesmarquesde fabriqueoudesmarquesdéposées,oumarquesdeservice,deSunMicrosystems,Inc.auxEtats-Unisetdansd’autrespays.TouteslesmarquesSPARC sontutiliséessouslicenceetsontdesmarquesdefabriqueoudesmarquesdéposéesdeSPARCInternational,Inc.auxEtats-Unisetdansd’autres pays.LesproduitsportantlesmarquesSPARCsontbaséssurunearchitecturedéveloppéeparSunMicrosystems,Inc.QuantumCorporationriclame DLTcommesamarquedefabriqueauxEtats-Unisetdansd’autrespays. L’interfaced’utilisationgraphiqueOPENLOOKetSun™aétédéveloppéeparSunMicrosystems,Inc.poursesutilisateursetlicenciés.Sunreconnaît leseffortsdepionniersdeXeroxpourlarechercheetledéveloppementduconceptdesinterfacesd’utilisationvisuelleougraphiquepourl’industrie del’informatique.SundétientunelicencenonexclusivedeXeroxsurl’interfaced’utilisationgraphiqueXerox,cettelicencecouvrantégalementles licenciésdeSunquimettentenplacel’interfaced’utilisationgraphiqueOPENLOOKetquienoutreseconformentauxlicencesécritesdeSun. CETTEPUBLICATIONESTFOURNIE“ENL’ETAT”ETAUCUNEGARANTIE,EXPRESSEOUIMPLICITE,N’ESTACCORDEE,YCOMPRISDES GARANTIESCONCERNANTLAVALEURMARCHANDE,L’APTITUDEDELAPUBLICATIONAREPONDREAUNEUTILISATION PARTICULIERE,OULEFAITQU’ELLENESOITPASCONTREFAISANTEDEPRODUITDETIERS.CEDENIDEGARANTIENE S’APPLIQUERAITPAS,DANSLAMESUREOUILSERAITTENUJURIDIQUEMENTNULETNONAVENU. 030826@6671 Contents Preface 27 1 SolarisManagementTools(Roadmap) 31 What’sNewinSolarisManagementTools? 31 MatrixofSolarisManagementToolsSupport 32 FeatureDescriptionsforSolaris9ManagementTools 33 FeatureDescriptionsforSolaris8ManagementTools 34 FeatureDescriptionsforPreviousSolarisManagementTools 36 AvailabilitySolarisManagementCommands 36 Solaris9SystemManagementCommands 37 Solaris8SystemManagementCommands 38 DescriptionsforPreviousSolarisManagementCommands 38 ForMoreInformationAboutSolarisManagementTools 39 2 WorkingWiththeSolarisManagementConsole(Tasks) 41 SolarisManagementConsole(Overview) 41 WhatIstheSolarisManagementConsole? 41 SolarisManagementConsoleTools 42 WhyUsetheSolarisManagementConsole? 44 OrganizationoftheSolarisManagementConsole 45 ChangingtheSolarisManagementConsoleWindow 46 SolarisManagementConsoleDocumentation 46 HowMuchRole-BasedAccessControl? 46 BecomingSuperuser(root)orAssumingaRole 48 (cid:1)HowtoBecomeSuperuser(root)orAssumeaRole 48 3 UsingtheSolarisManagementToolsWithRBAC(TaskMap) 50 IfYouAretheFirsttoLogIntotheConsole 51 CreatingthePrimaryAdministratorRole 51 (cid:1)HowtoCreatetheFirstRole(PrimaryAdministrator) 53 (cid:1)HowtoAssumethePrimaryAdministratorRole 53 StartingtheSolarisManagementConsole 54 (cid:1)HowtoStarttheConsoleasSuperuserorasaRole 54 UsingtheSolarisManagementToolsinaNameServiceEnvironment(Task Map) 56 RBACSecurityFiles 56 PrerequisitesforUsingtheSolarisManagementConsoleinaNameService Environment 58 ManagementScope 58 The/etc/nsswitch.confFile 58 (cid:1)HowtoCreateaToolboxforaSpecificEnvironment 59 (cid:1)HowtoAddaTooltoaToolbox 60 (cid:1)HowtoStarttheSolarisManagementConsoleinaNameService Environment 61 AddingToolstotheSolarisManagementConsole 62 (cid:1)HowtoAddaLegacyTooltoaToolbox 62 (cid:1)HowtoInstallanUnbundledTool 62 TroubleshootingtheSolarisManagementConsole 63 (cid:1)HowtoTroubleshoottheSolarisManagementConsole 63 3 ManagingUsersandGroupsTopics 65 4 ManagingUserAccountsandGroups(Overview) 67 What’sNewinManagingUsersandGroups? 67 SolarisManagementConsoleToolsSuite 68 SolarisDirectoryServices 68 ManagingUsersandResourcesWithProjects 68 WhatAreUserAccountsandGroups? 69 GuidelinesforManagingUserAccounts 70 NameServices 70 User(Login)Names 70 UserIDNumbers 71 Passwords 73 PasswordAging 74 4 SystemAdministrationGuide:BasicAdministration(cid:127)December2003 HomeDirectories 75 User’sWorkEnvironment 75 GuidelinesforManagingGroups 76 ToolsforManagingUserAccountsandGroups 77 WhatYouCanDoWithSolarisUserManagementTools 78 ManagingHomeDirectoriesWiththeSolarisManagementConsole 81 ModifyUserAccounts 81 DeleteUserAccounts 82 AddCustomizedUserInitializationFiles 82 AdministerPasswords 82 DisableUserAccounts 83 WhereUserAccountandGroupInformationIsStored 83 FieldsinthepasswdFile 83 FieldsintheshadowFile 85 FieldsinthegroupFile 86 CustomizingaUser’sWorkEnvironment 88 UsingSiteInitializationFiles 90 AvoidLocalSystemReferences 90 ShellFeatures 91 ShellEnvironment 91 ThePATHVariable 94 LocaleVariables 95 DefaultFilePermissions(umask) 96 ExamplesofUserandSiteInitializationFiles 97 Example—SiteInitializationFile 98 5 ManagingUserAccountsandGroups(Tasks) 101 SettingUpUserAccounts(TaskMap) 101 HowtoGatherUserInformation 102 (cid:1)HowtoCustomizeUserInitializationFiles 103 (cid:1)HowtoAddaGroupwiththeSolarisManagementConsole’sGroups Tool 105 (cid:1)HowtoAddaUserWiththeSolarisManagementConsole’sUsersTool 106 Example—AddingaUserWiththeSolarisManagementConsole’sGroups Tool 106 HowtoAddGroupsandUsersWithCLITools 107 (cid:1)HowtoShareaUser’sHomeDirectory 107 (cid:1)HowtoMountaUser’sHomeDirectory 109 Contents 5 MaintainingUserAccounts(TaskMap) 110 SolarisUserRegistration 111 AccessingSolarisSolve 111 TroubleshootingSolarisUserRegistrationProblems 112 (cid:1)HowtoRestartSolarisUserRegistration 113 (cid:1)HowToDisableUserRegistration 113 6 ManagingServerandClientSupportTopics 115 7 ManagingServerandClientSupport(Overview) 117 What’sNewinServerandClientManagement? 117 DisklessClientSupport 117 WheretoFindServerandClientTasks 118 WhatAreServers,Clients,andAppliances? 118 WhatDoesClientSupportMean? 119 OverviewofSystemTypes 120 Servers 120 StandaloneSystems 121 DisklessClients 121 AutoClientSystems 122 Appliances 122 GuidelinesforChoosingSystemTypes 122 DisklessClientManagementOverview 123 OSServerandDisklessClientSupportInformation 124 DisklessClientManagementFeatures 124 DiskSpaceRequirementsforOSServers 127 8 ManagingDisklessClients(Tasks) 129 ManagingDisklessClients(TaskMap) 129 ManagingDisklessClients 130 (cid:1)HowtoPrepareforAddingDisklessClients 132 (cid:1)HowtoAddOSServicesForDisklessClientSupport 133 (cid:1)HowtoAddaDisklessClient 135 (cid:1)HowtoBootaDisklessClient 136 (cid:1)HowtoDeleteDisklessClientSupport 137 (cid:1)HowtoDeleteOSServicesforDisklessClients 137 PatchingDisklessClientOSServices 138 6 SystemAdministrationGuide:BasicAdministration(cid:127)December2003 DisplayingOSPatchesforDisklessClients 138 (cid:1)HowtoAddanOSPatchforaDisklessClient 139 TroubleshootingDisklessClientProblems 141 9 ShuttingDownandBootingaSystemTopics 145 10 ShuttingDownandBootingaSystem(Overview) 147 What’sNewinShuttingDownandBootingaSystem? 147 PXENetworkBoot 148 WheretoFindShuttingDownandBootingTasks 148 ShuttingDownandBootingTerminology 149 GuidelinesforShuttingDownaSystem 149 GuidelinesforBootingaSystem 150 BootingaSystemFromtheNetwork 150 WhentoShutDownaSystem 151 WhentoBootaSystem 152 11 RunLevelsandBootFiles(Tasks) 155 RunLevels 155 HowtoDetermineaSystem’sRunLevel 156 The/etc/inittabFile 157 Example—DefaultinittabFile 158 WhatHappensWhentheSystemIsBroughttoRunLevel3 159 RunControlScripts 160 RunControlScriptSummaries 161 UsingaRunControlScripttoStoporStartServices 165 (cid:1)HowtoUseaRunControlScripttoStoporStartaService 165 AddingaRunControlScript 166 (cid:1)HowtoAddaRunControlScript 166 DisablingaRunControlScript 167 (cid:1)HowtoDisableaRunControlScript 167 x86:BootFiles 167 12 ShuttingDownaSystem(Tasks) 169 ShuttingDowntheSystem 169 SystemShutdownCommands 170 Contents 7 UserNotificationofSystemDownTime 171 (cid:1)HowtoDetermineWhoIsLoggedintoaSystem 171 (cid:1)HowtoShutDownaServer 171 (cid:1)HowtoShutDownaStandaloneSystem 175 TurningOffPowertoAllDevices 176 (cid:1)HowtoTurnOffPowertoAllDevices 177 13 SPARC:BootingaSystem(Tasks) 179 SPARC:BootingaSystem(TaskMap) 179 SPARC:UsingtheBootPROM 181 SPARC:HowtoFindthePROMRevisionforaSystem 181 (cid:1)SPARC:HowtoIdentifyDevicesonaSystem 181 (cid:1)SPARC:HowtoChangetheDefaultBootDevice 183 SPARC:HowtoResettheSystem 185 SPARC:BootingaSystem 185 (cid:1)SPARC:HowtoBootaSystemtoRunLevel3(MultiuserLevel) 186 (cid:1)SPARC:HowtoBootaSystemtoRunLevelS(Single-UserLevel) 187 (cid:1)SPARC:HowtoBootaSystemInteractively 188 (cid:1)SPARC:HowtoBootaSystemFromtheNetwork 189 (cid:1)SPARC:HowtoStoptheSystemforRecoveryPurposes 190 (cid:1)SPARC:HowtoBootaSystemforRecoveryPurposes 191 (cid:1)SPARC:HowtoBoottheSystemWiththeKernelDebugger(kadb) 193 SPARC:ForcingaCrashDumpandRebootingtheSystem 194 (cid:1)SPARC:HowtoForceaCrashDumpandReboottheSystem 194 14 x86:BootingaSystem(Tasks) 197 x86:BootingaSystem(TaskMap) 197 x86:BootingtheSolarisDeviceConfigurationAssistant 198 (cid:1)x86:HowtoBoottheSolarisDeviceConfigurationAssistant 199 x86:BootingaSystem 199 (cid:1)x86:HowtoBootaSystemtoRunLevel3(MultiuserLevel) 199 (cid:1)x86:HowtoBootaSystemtoRunLevelS(Single-UserLevel) 200 (cid:1)x86:HowtoBootaSystemInteractively 201 (cid:1)x86:HowtoBootaSystemFromtheNetwork 203 (cid:1)x86:HowtoStopaSystemforRecoveryPurposes 204 (cid:1)x86:HowtoBootaSystemforRecoveryPurposes 204 (cid:1)x86:HowtoBootaSystemWiththeKernelDebugger(kadb) 209 8 SystemAdministrationGuide:BasicAdministration(cid:127)December2003 x86:ForcingaCrashDumpandRebootingtheSystem 210 (cid:1)x86:HowtoForceaCrashDumpandReboottheSystem 210 15 TheBootProcess(Reference) 213 SPARC:TheBootPROM 213 SPARC:TheBootProcess 214 x86:ThePCBIOS 214 x86:BootSubsystems 215 x86:BootingtheSolarisRelease 216 x86:ScreensDisplayedDuringtheDeviceIdentificationPhase 217 x86:MenusDisplayedDuringtheBootPhase 218 x86:TheBootProcess 220 16 ManagingRemovableMediaTopics 223 17 ManagingRemovableMedia(Overview) 225 What’sNewinManagingRemovableMedia? 225 WheretoFindManagingRemovableMediaTasks 226 RemovableMediaFeaturesandBenefits 226 ComparisonofAutomaticandManualMounting 227 WhatYouCanDoWithVolumeManagement 228 18 AccessingRemovableMedia(Tasks) 229 AccessingRemovableMedia(TaskMap) 229 AccessingRemovableMedia(Overview) 230 UsingRemovableMediaNames 230 GuidelinesforAccessingRemovableMediaData 232 (cid:1)HowtoAddaNewRemovableMediaDrive 232 StoppingandStartingVolumeManagement(vold) 233 (cid:1)HowtoAccessInformationonRemovableMedia 233 (cid:1)HowtoCopyInformationFromRemovableMedia 234 (cid:1)HowtoPlayaMusicalCDorDVD 235 (cid:1)HowtoFindOutIfRemovableMediaIsStillinUse 236 (cid:1)HowtoEjectRemovableMedia 237 AccessingRemovableMediaonaRemoteSystem(TaskMap) 238 (cid:1)HowtoMakeLocalMediaAvailabletoOtherSystems 238 Contents 9 (cid:1)HowtoAccessRemovableMediaonRemoteSystems 241 19 FormattingRemovableMedia(Tasks) 245 FormattingRemovableMedia(TaskMap) 245 FormattingRemovableMediaOverview 246 FormattingRemovableMediaGuidelines 246 RemovableMediaHardwareConsiderations 247 (cid:1)HowtoLoadaRemovableMedia 248 (cid:1)HowtoFormatRemovableMedia(rmformat) 250 (cid:1)HowtoFormatRemovableMediaforAddingaFileSystem 250 (cid:1)HowtoCheckaFileSystemonRemovableMedia 252 (cid:1)HowtoRepairBadBlocksonRemovableMedia 253 ApplyingReadorWriteandPasswordProtectiontoRemovableMedia 253 (cid:1)HowtoEnableorDisableWriteProtectiononRemovableMedia 253 (cid:1)HowtoEnableorDisableReadorWriteProtectionandaPasswordonIomega Media 254 20 WritingCDs(Tasks) 257 WorkingwithAudioandDataCDs 257 CDMediaCommonlyUsedTerms 258 WritingDataandAudioCDs 259 RestrictingUserAccesstoRemovableMediawithRBAC 260 (cid:1)HowtoRestrictUserAccesstoRemovableMediawithRBAC 260 HowtoIdentifyaCDWriter 260 (cid:1)HowtoChecktheCDMedia 261 CreatingaDataCD 262 (cid:1)HowtoCreateanISO9660FileSystemforaDataCD 262 (cid:1)HowtoCreateaMulti-SessionDataCD 263 CreatinganAudioCD 264 (cid:1)HowtoCreateanAudioCD 265 (cid:1)HowtoExtractanAudioTrackonaCD 266 (cid:1)HowtoCopyaCD 267 (cid:1)HowtoEraseCD-RWMedia 267 10 SystemAdministrationGuide:BasicAdministration(cid:127)December2003