System Administration Guide: Basic Administration Sun Microsystems, Inc. 4150 Network Circle Santa Clara, CA 95054 U.S.A. Part No: 817–6958–10 September 2004 Copyright 2004 Sun Microsystems, Inc. 4150 Network Circle, Santa Clara, CA 95054 U.S.A. All rights reserved. This product or document is protected by copyright and distributed under licenses restricting its use, copying, distribution, and decompilation. No part of this product or document may be reproduced in any form by any means without prior written authorization of Sun and its licensors, if any. Third-party software, including font technology, is copyrighted and licensed from Sun suppliers. Parts of the product may be derived from Berkeley BSD systems, licensed from the University of California. UNIX is a registered trademark in the U.S. and other countries, exclusively licensed through X/Open Company, Ltd. Sun, Sun Microsystems, the Sun logo, docs.sun.com, AnswerBook, AnswerBook2, JumpStart, Sun Ray, Sun Blade, PatchPro, SunOS, Solstice, Solstice AdminSuite, Solstice DiskSuite, Solaris Solve, Java, JavaStation, OpenWindows, NFS, iPlanet, Netra and Solaris are trademarks or registered trademarks of Sun Microsystems, Inc. in the U.S. and other countries. All SPARC trademarks are used under license and are trademarks or registered trademarks of SPARC International, Inc. in the U.S. and other countries. Products bearing SPARC trademarks are based upon an architecture developed by Sun Microsystems, Inc. DLT is claimed as a trademark of Quantum Corporation in the United States and other countries. The OPEN LOOK and Sun™ Graphical User Interface was developed by Sun Microsystems, Inc. for its users and licensees. Sun acknowledges the pioneering efforts of Xerox in researching and developing the concept of visual or graphical user interfaces for the computer industry. Sun holds a non-exclusive license from Xerox to the Xerox Graphical User Interface, which license also covers Sun’s licensees who implement OPEN LOOK GUIs and otherwise comply with Sun’s written license agreements. U.S. Government Rights – Commercial software. Government users are subject to the Sun Microsystems, Inc. standard license agreement and applicable provisions of the FAR and its supplements. DOCUMENTATION IS PROVIDED “AS IS” AND ALL EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS AND WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT, ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD TO BE LEGALLY INVALID. Copyright 2004 Sun Microsystems, Inc. 4150 Network Circle, Santa Clara, CA 95054 U.S.A. Tous droits réservés. Ce produit ou document est protégé par un copyright et distribué avec des licences qui en restreignent l’utilisation, la copie, la distribution, et la décompilation. Aucune partie de ce produit ou document ne peut être reproduite sous aucune forme, par quelque moyen que ce soit, sans l’autorisation préalable et écrite de Sun et de ses bailleurs de licence, s’il y en a. Le logiciel détenu par des tiers, et qui comprend la technologie relative aux polices de caractères, est protégé par un copyright et licencié par des fournisseurs de Sun. Certaines parties de ce produit pourront être dérivées du système Berkeley BSD licenciés par l’Université de Californie. UNIX est une marque déposée aux Etats-Unis et dans d’autres pays et licenciée exclusivement par X/Open Company, Ltd. Sun, Sun Microsystems, le logo Sun, docs.sun.com, AnswerBook, AnswerBook2, JumpStart, Sun Ray, Sun Blade, PatchPro, SunOS, Solstice, Solstice AdminSuite, Solstice DiskSuite, Solaris Solve, Java, JavaStation, DeskSet, OpenWindows, NFS et Solaris sont des marques de fabrique ou des marques déposées de Sun Microsystems, Inc. aux Etats-Unis et dans d’autres pays. Toutes les marques SPARC sont utilisées sous licence et sont des marques de fabrique ou des marques déposées de SPARC International, Inc. aux Etats-Unis et dans d’autres pays. Les produits portant les marques SPARC sont basés sur une architecture développée par Sun Microsystems, Inc. Quantum Corporation riclame DLT comme sa marque de fabrique aux Etats-Unis et dans d’autres pays. L’interface d’utilisation graphique OPEN LOOK et Sun™ a été développée par Sun Microsystems, Inc. pour ses utilisateurs et licenciés. Sun reconnaît les efforts de pionniers de Xerox pour la recherche et le développement du concept des interfaces d’utilisation visuelle ou graphique pour l’industrie de l’informatique. Sun détient une licence non exclusive de Xerox sur l’interface d’utilisation graphique Xerox, cette licence couvrant également les licenciés de Sun qui mettent en place l’interface d’utilisation graphique OPEN LOOK et qui en outre se conforment aux licences écrites de Sun. CETTE PUBLICATION EST FOURNIE “EN L’ETAT” ET AUCUNE GARANTIE, EXPRESSE OU IMPLICITE, N’EST ACCORDEE, Y COMPRIS DES GARANTIES CONCERNANT LA VALEUR MARCHANDE, L’APTITUDE DE LA PUBLICATION A REPONDRE A UNE UTILISATION PARTICULIERE, OU LE FAIT QU’ELLE NE SOIT PAS CONTREFAISANTE DE PRODUIT DE TIERS. CE DENI DE GARANTIE NE S’APPLIQUERAIT PAS, DANS LA MESURE OU IL SERAIT TENU JURIDIQUEMENT NUL ET NON AVENU. 040607@9061 Contents Preface 13 1 Solaris Management Tools (Roadmap) 17 What’s New in Solaris Management Tools? 17 Matrix of Solaris Management Tools Support 18 Feature Descriptions for Solaris 9 Management Tools 19 Feature Descriptions for Solaris 8 Management Tools 21 Feature Descriptions for Previous Solaris Management Tools 22 Availability of Solaris Management Commands 23 Solaris 9 System Management Commands 23 Solaris 8 System Management Commands 24 Descriptions for Previous Solaris Management Commands 25 For More Information About Solaris Management Tools 25 2 Working With the Solaris Management Console (Tasks) 27 Solaris Management Console (Overview) 27 What Is the Solaris Management Console? 27 Solaris Management Console Tools 28 Why Use the Solaris Management Console? 30 Organization of the Solaris Management Console 31 Changing the Solaris Management Console Window 32 Solaris Management Console Documentation 32 How Much Role-Based Access Control? 32 Becoming Superuser (root) or Assuming a Role 34 M How to Become Superuser (root) or Assume a Role 34 3 Using the Solaris Management Tools With RBAC (Task Map) 36 If You Are the First to Log In to the Console 37 Creating the Primary Administrator Role 37 M How to Create the First Role (Primary Administrator) 39 M How to Assume the Primary Administrator Role 39 Starting the Solaris Management Console 40 M How to Start the Console as Superuser or as a Role 40 Using the Solaris Management Tools in a Name Service Environment (Task Map) 42 RBAC Security Files 42 Prerequisites for Using the Solaris Management Console in a Name Service Environment 44 Management Scope 44 The /etc/nsswitch.conf File 44 M How to Create a Toolbox for a Specific Environment 45 M How to Add a Tool to a Toolbox 46 M How to Start the Solaris Management Console in a Name Service Environment 47 Adding Tools to the Solaris Management Console 48 M How to Add a Legacy Tool to a Toolbox 48 M How to Install an Unbundled Tool 48 Troubleshooting the Solaris Management Console 49 M How to Troubleshoot the Solaris Management Console 49 3 Managing User Accounts and Groups (Overview) 51 What’s New in Managing Users and Groups? 51 Solaris Management Console Tools Suite 52 Solaris Directory Services 52 Managing Users and Resources With Projects 52 What Are User Accounts and Groups? 53 Guidelines for Managing User Accounts 54 Name Services 54 User (Login) Names 54 User ID Numbers 55 Passwords 57 Password Aging 58 Home Directories 59 User’s Work Environment 59 Guidelines for Managing Groups 60 4 System Administration Guide: Basic Administration • September 2004 Tools for Managing User Accounts and Groups 61 What You Can Do With Solaris User Management Tools 62 Managing Home Directories With the Solaris Management Console 65 Modify User Accounts 65 Delete User Accounts 66 Add Customized User Initialization Files 66 Administer Passwords 66 Disable User Accounts 66 Where User Account and Group Information Is Stored 67 Fields in the passwd File 67 Fields in the shadow File 69 Fields in the group File 70 Customizing a User’s Work Environment 72 Using Site Initialization Files 74 Avoid Local System References 74 Shell Features 75 Shell Environment 75 The PATH Variable 78 Locale Variables 79 Default File Permissions (umask)80 Examples of User and Site Initialization Files 81 Example—Site Initialization File 82 4 Managing User Accounts and Groups (Tasks) 85 Setting Up User Accounts (Task Map) 85 How to Gather User Information 86 M How to Customize User Initialization Files 87 M How to Add a Group with the Solaris Management Console’s Groups Tool 89 M How to Add a User With the Solaris Management Console’s Users Tool 90 Example—Adding a User With the Solaris Management Console’s Groups Tool 90 How to Add Groups and Users With CLI Tools 91 M How to Share a User’s Home Directory 91 M How to Mount a User’s Home Directory 93 Maintaining User Accounts (Task Map) 94 Solaris User Registration 95 Accessing Solaris Solve 95 Troubleshooting Solaris User Registration Problems 96 5 M How to Restart Solaris User Registration 97 M How To Disable User Registration 97 5 Managing Server and Client Support (Overview) 99 What’s New in Server and Client Management? 99 Diskless Client Support 99 Where to Find Server and Client Tasks 100 What Are Servers, Clients, and Appliances? 100 What Does Client Support Mean? 101 Overview of System Types 101 Servers