Archivo por meses: agosto 2008

Using SMF Property to Allow Remote Access

The following sequence of commands allows remote access to WBEM-based applications, including the Solaris Management Console. # svccfg -s svc:/application/management/wbem setprop options/tcp_listen = true # svcadm refresh svc:/application/management/wbem

###Group Management###

groupadd / groupmod / newgrp / groups The file that stores group information is: /etc/group bash-3.00# cat /etc/group root::0: other::1:root bin::2:root,daemon sys::3:root,bin,adm adm::4:root,daemon uucp::5:root mail::6:root tty::7:root,adm lp::8:root,adm nuucp::9:root staff::10: daemon::12:root sysadmin::14: smmsp::25: gdm::50: webservd::80: postgres::90: nobody::60001: noaccess::60002: nogroup::65534: mysql::100: sasl::101: columns: group_name : optional_password : GID : list_ofmembers (comma-delimeted) Groups are basically use to restric… Read More: ###Group Management### »

SMF INET Admin

###### Service Management with ‘inetadm’ ######### -bash-3.00# which inetadm /usr/sbin/inetadm inetadm controls INETD services Note: INETD is a super-server which proxies connections to servers ( such as telnet ) client -> INETD -> telnet Note: INETD services are traditionally defined in /etc/inetd.conf Telnet is enabled by default -bash-3.00# inetadm |grep online | wc -l 19… Read More: SMF INET Admin »

SMF Service ADMIN

-bash-3.00# which svcadm /usr/sbin/svcadm -bash-3.00# svcadm Usage: svcadm [-v] [cmd [args … ]] svcadm enable [-rst] … – enable and online service(s) svcadm disable [-st] … – disable and offline service(s) svcadm restart … – restart specified service(s) svcadm refresh … – re-read service configuration svcadm mark [-It] … – set maintenance state svcadm clear… Read More: SMF Service ADMIN »

«Best Practices» for an Internet Webserver

__________________________________________________________ The following a set of «Best Practices» for an Internet Webserver, based on my own experience and advisory J-042 from the U.S. Department of Energy Computer Incident Advisory Capability (CIAC) __________________________________________________________ PROBLEM: Public web servers continue to be attractive targets for hackers seeking to embarrass organizations or promote a political agenda. Good security practices… Read More: «Best Practices» for an Internet Webserver »

Primary SMF Utilities

3 Primary SMF Utilities: 1. svcs – lists services and provides additional info 2. svcadm – permits interation with services, including state transitions. 3. svccfg – permits interaction with service configuration database bash-3.00# svcs -a |less STATE STIME FMRI legacy_run 14:43:50 lrc:/etc/rc2_d/S10lu legacy_run 14:43:50 lrc:/etc/rc2_d/S20sysetup legacy_run 14:43:50 lrc:/etc/rc2_d/S40llc2 legacy_run 14:43:50 lrc:/etc/rc2_d/S42ncakmod legacy_run 14:43:51 lrc:/etc/rc2_d/S47pppd legacy_run… Read More: Primary SMF Utilities »

SMF Service Management Facility

Service Management Facilty (SMF) Service Names Solaris uses a URI string called an FMRI (Fault Managed Resource Identifier) to identify system objects for which advanced fault and resource management capabilities are provided. Services managed by SMF are assigned FMRI strings prefixed with the scheme name «svc», as shown in the following examples for the Solaris… Read More: SMF Service Management Facility »

At Last Locate for solaris

-bash-3.00# pkg-get -i findutils Installing findutils – A set of utilities for searching a filesystem as <CSWfindutils> ## Installing part 1 of 1. /opt/csw/bin/gfind /opt/csw/bin/glocate /opt/csw/bin/gupdatedb /opt/csw/bin/gxargs /opt/csw/libexec/gbigram /opt/csw/libexec/gcode /opt/csw/libexec/gfrcode /opt/csw/share/info/find.info /opt/csw/share/locale/be/LC_MESSAGES/findutils.mo /opt/csw/share/locale/bg/LC_MESSAGES/findutils.mo /opt/csw/share/locale/ca/LC_MESSAGES/findutils.mo /opt/csw/share/locale/da/LC_MESSAGES/findutils.mo /opt/csw/share/locale/de/LC_MESSAGES/findutils.mo /opt/csw/share/locale/el/LC_MESSAGES/findutils.mo /opt/csw/share/locale/eo/LC_MESSAGES/findutils.mo /opt/csw/share/locale/es/LC_MESSAGES/findutils.mo /opt/csw/share/locale/et/LC_MESSAGES/findutils.mo /opt/csw/share/locale/fi/LC_MESSAGES/findutils.mo /opt/csw/share/locale/fr/LC_MESSAGES/findutils.mo /opt/csw/share/locale/ga/LC_MESSAGES/findutils.mo /opt/csw/share/locale/gl/LC_MESSAGES/findutils.mo /opt/csw/share/locale/hr/LC_MESSAGES/findutils.mo /opt/csw/share/locale/hu/LC_MESSAGES/findutils.mo /opt/csw/share/locale/id/LC_MESSAGES/findutils.mo /opt/csw/share/locale/it/LC_MESSAGES/findutils.mo /opt/csw/share/locale/ja/LC_MESSAGES/findutils.mo /opt/csw/share/locale/ko/LC_MESSAGES/findutils.mo /opt/csw/share/locale/lg/LC_MESSAGES/findutils.mo /opt/csw/share/locale/ms/LC_MESSAGES/findutils.mo /opt/csw/share/locale/nl/LC_MESSAGES/findutils.mo /opt/csw/share/locale/pl/LC_MESSAGES/findutils.mo /opt/csw/share/locale/pt/LC_MESSAGES/findutils.mo… Read More: At Last Locate for solaris »