System Administration Guide: Basic Administration Sun Microsystems, Inc. 4150 Network Circle Santa Clara, CA 95054 U.S.A. Part No: 817–1985–11 June 2005 Copyright 2005 Sun Microsystems, Inc. 4150 Network Circle, Santa Clara, CA 95054 U.S.A. All rights reserved. This product or document is protected by copyright and distributed under licenses restricting its use, copying, distribution, and decompilation. No part of this product or document may be reproduced in any form by any means without prior written authorization of Sun and its licensors, if any. Third-party software, including font technology, is copyrighted and licensed from Sun suppliers. Parts of the product may be derived from Berkeley BSD systems, licensed from the University of California. UNIX is a registered trademark in the U.S. and other countries, exclusively licensed through X/Open Company, Ltd. Sun, Sun Microsystems, the Sun logo, docs.sun.com, AnswerBook, AnswerBook2, JumpStart, Sun Ray, Sun Blade, Solstice, Solstice AdminSuite, Solstice DiskSuite, Solstice Enterprise Agents, Solaris Solve, Java, JavaStation, OpenWindows, Netra, ONC+, J2EE, Sun Fire, and Solaris are trademarks or registered trademarks of Sun Microsystems, Inc. in the U.S. and other countries. All SPARC trademarks are used under license and are trademarks or registered trademarks of SPARC International, Inc. in the U.S. and other countries. Products bearing SPARC trademarks are based upon an architecture developed by Sun Microsystems, Inc. DLT is claimed as a trademark of Quantum Corporation in the United States and other countries. Netscape and Mozilla are trademarks or registered trademarks of Netscape Communications Corporation in the United States and other countries. The OPEN LOOK and Sun™ Graphical User Interface was developed by Sun Microsystems, Inc. for its users and licensees. Sun acknowledges the pioneering efforts of Xerox in researching and developing the concept of visual or graphical user interfaces for the computer industry. Sun holds a non-exclusive license from Xerox to the Xerox Graphical User Interface, which license also covers Sun’s licensees who implement OPEN LOOK GUIs and otherwise comply with Sun’s written license agreements. U.S. Government Rights – Commercial software. Government users are subject to the Sun Microsystems, Inc. standard license agreement and applicable provisions of the FAR and its supplements. DOCUMENTATION IS PROVIDED “AS IS” AND ALL EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS AND WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT, ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD TO BE LEGALLY INVALID. Copyright 2005 Sun Microsystems, Inc. 4150 Network Circle, Santa Clara, CA 95054 U.S.A. Tous droits réservés. Ce produit ou document est protégé par un copyright et distribué avec des licences qui en restreignent l’utilisation, la copie, la distribution, et la décompilation. Aucune partie de ce produit ou document ne peut être reproduite sous aucune forme, par quelque moyen que ce soit, sans l’autorisation préalable et écrite de Sun et de ses bailleurs de licence, s’il y en a. Le logiciel détenu par des tiers, et qui comprend la technologie relative aux polices de caractères, est protégé par un copyright et licencié par des fournisseurs de Sun. Des parties de ce produit pourront être dérivées du système Berkeley BSD licenciés par l’Université de Californie. UNIX est une marque déposée aux Etats-Unis et dans d’autres pays et licenciée exclusivement par X/Open Company, Ltd. Sun, Sun Microsystems, le logo Sun, docs.sun.com, AnswerBook, AnswerBook2, JumpStart, Sun Ray, Sun Blade, Solstice, Solstice AdminSuite, Solstice DiskSuite, Solstice Enterprise Agents, Solaris Solve, Java, JavaStation, OpenWindows, Netra, ONC+, J2EE, Sun Fire, et Solaris sont des marques de fabrique ou des marques déposées, de Sun Microsystems, Inc. aux Etats-Unis et dans d’autres pays. Toutes les marques SPARC sont utilisées sous licence et sont des marques de fabrique ou des marques déposées de SPARC International, Inc. aux Etats-Unis et dans d’autres pays. Les produits portant les marques SPARC sont basés sur une architecture développée par Sun Microsystems, Inc. Quantum Corporation riclame DLT comme sa marque de fabrique aux Etats-Unis et dans d’autres pays. Netscape et Mozilla sont des marques de Netscape Communications Corporation aux Etats-Unis et dans d’autres pays. L’interface d’utilisation graphique OPEN LOOK et Sun™ a été développée par Sun Microsystems, Inc. pour ses utilisateurs et licenciés. Sun reconnaît les efforts de pionniers de Xerox pour la recherche et le développement du concept des interfaces d’utilisation visuelle ou graphique pour l’industrie de l’informatique. Sun détient une licence non exclusive de Xerox sur l’interface d’utilisation graphique Xerox, cette licence couvrant également les licenciés de Sun qui mettent en place l’interface d’utilisation graphique OPEN LOOK et qui en outre se conforment aux licences écrites de Sun. CETTE PUBLICATION EST FOURNIE “EN L’ETAT” ET AUCUNE GARANTIE, EXPRESSE OU IMPLICITE, N’EST ACCORDEE, Y COMPRIS DES GARANTIES CONCERNANT LA VALEUR MARCHANDE, L’APTITUDE DE LA PUBLICATION A REPONDRE A UNE UTILISATION PARTICULIERE, OU LE FAIT QU’ELLE NE SOIT PAS CONTREFAISANTE DE PRODUIT DE TIERS. CE DENI DE GARANTIE NE S’APPLIQUERAIT PAS, DANS LA MESURE OU IL SERAIT TENU JURIDIQUEMENT NUL ET NON AVENU. 050415@11223 Contents Preface 15 1 Solaris Management Tools (Road Map) 21 What’s New in Solaris Management Tools? 21 Matrix of Solaris Management Tools and Supported Releases 23 Feature Descriptions for Solaris 10 Management Tools 24 Feature Descriptions for Solaris 9 Management Tools 25 Feature Descriptions for Solaris 8 Management Tools 26 Availability of Solaris Management Commands 27 Solaris 10 System Management Commands 28 Solaris 8 System Management Commands 29 For More Information About Solaris Management Tools 29 2 Working With the Solaris Management Console (Tasks) 31 Solaris Management Console (Overview) 31 What Is the Solaris Management Console? 31 Solaris Management Console Tools 32 Why Use the Solaris Management Console? 34 Organization of the Solaris Management Console 34 Changing the Solaris Management Console Window 35 Solaris Management Console Documentation 36 How Much Role-Based Access Control? 36 Becoming Superuser (root) or Assuming a Role 38 M How to Become Superuser (root) or Assume a Role 39 Using the Solaris Management Tools With RBAC (Task Map) 40 If You Are the First to Log in to the Console 41 3 Creating the Primary Administrator Role 42 M How to Create the First Role (Primary Administrator) 43 M How to Assume the Primary Administrator Role 44 Starting the Solaris Management Console 44 M How to Start the Console as Superuser or as a Role 44 Using the Solaris Management Tools in a Name Service Environment (Task Map) 46 RBAC Security Files 46 Prerequisites for Using the Solaris Management Console in a Name Service Environment 48 Management Scope 48 /etc/nsswitch.conf File 48 M How to Create a Toolbox for a Specific Environment 49 M How to Add a Tool to a Toolbox 50 M How to Start the Solaris Management Console in a Name Service Environment 51 Adding Tools to the Solaris Management Console 52 M How to Add a Legacy Tool to a Toolbox 52 M How to Install an Unbundled Tool 52 Troubleshooting the Solaris Management Console 53 M How to Troubleshoot the Solaris Management Console 53 3 Working With the Sun Java Web Console (Tasks) 55 Java Web Console (Overview) 55 What Is the Java Web Console? 56 Administering the Java Web Console (Task Map) 57 Getting Started With the Java Web Console 57 M How to Start Applications From the Java Web Console’s Launch Page 58 Configuring the Java Web Console 59 Java Web Console User Identity 61 Using the Console Debug Trace Log 61 M How to Change the Java Web Console Properties 62 Installing the Java Web Console Software 63 M How to Install the Java Web Console Software 63 M How to Remove the Java Web Console Software 64 Troubleshooting the Java Web Console Software 66 M How to Register an Application With the Java Web Console 66 M How to Unregister an Application From the Java Web Console 67 4 System Administration Guide: Basic Administration • June 2005 Java Web Console Reference Information 68 Java Web Console Security Considerations 68 Specifying Authorizations With the authTypes Tag 69 4 Managing User Accounts and Groups (Overview) 71 What’s New or Changed in Managing Users and Groups? 71 What Are User Accounts and Groups? 72 User Account Components 72 Guidelines for Using User Names, User IDs, and Group IDs 79 Where User Account and Group Information Is Stored 80 Fields in the passwd File 81 Default passwd File 81 Fields in the shadow File 83 Fields in the group File 83 Tools for Managing User Accounts and Groups 86 Tasks for Solaris User and Group Management Tools 86 Managing Users and Resources With Projects 89 Customizing a User’s Work Environment 90 Using Site Initialization Files 91 Avoiding Local System References 92 Shell Features 92 Shell Environment 93 The PATH Variable 96 Locale Variables 97 Default File Permissions (umask)98 Examples of User and Site Initialization Files 99 5 Managing User Accounts and Groups (Tasks) 101 Setting Up User Accounts (Task Map) 101 How to Gather User Information 102 M How to Customize User Initialization Files 103 M How to Add a Group With the Solaris Management Console’s Groups Tool 105 M How to Add a User With the Solaris Management Console’s Users