Sun Certified System Administrator for the Solaris 10 OS Bootcamp

Transcription

1 Sun Certified System Administrator for the Solaris 10 OS Bootcamp Student Guide - Volume 3 SA-997 Rev A (SA-202-S10-C.2) D63735GC10 Edition 1.0 D64505

2 Copyright 2008, 2010, Oracle and/or its affiliates. All rights reserved. Disclaimer This document contains proprietary information, is provided under a license agreement containing restrictions on use and disclosure, and is protected by copyright and other intellectual property laws. You may copy and print this document solely for your own use in an Oracle training course. The document may not be modified or altered in any way. Except as expressly permitted in your license agreement or allowed by law, you may not use, share, download, upload, copy, print, display, perform, reproduce, publish, license, post, transmit, or distribute this document in whole or in part without the express authorization of Oracle. The information contained in this document is subject to change without notice. If you find any problems in the document, please report them in writing to: Oracle University, 500 Oracle Parkway, Redwood Shores, California USA. This document is not warranted to be error-free. Sun Microsystems, Inc. Disclaimer This training manual may include references to materials, offerings, or products that were previously offered by Sun Microsystems, Inc. Certain materials, offerings, services, or products may no longer be offered or provided.oracle and its affiliates cannot be held responsible for any such references should they appear in the text provided. Restricted Rights Notice If this documentation is delivered to the U.S. Government or anyone using the documentation on behalf of the U.S. Government, the following notice is applicable: U.S. GOVERNMENT RIGHTS The U.S. Government s rights to use, modify, reproduce, release, perform, display, or disclose these training materials are restricted by the terms of the applicable Oracle license agreement and/or the applicable U.S. Government contract. Trademark Notice Oracle and Java are registered trademarks of Oracle and/or its affiliates. Other names may be trademarks of their respective owners. AMD, Opteron, the AMD logo, and the AMD Opteron logo are trademarks or registered trademarks of Advanced Micro Devices. Intel and Intel Xeon are trademarks or registered trademarks of Intel Corporation. All SPARC trademarks are used under license and are trademarks or registered trademarks of SPARC International, Inc. UNIX is a registered trademark licensed through X/Open Company, Ltd.

3 This page intentionally left blank.

4 This page intentionally left blank.

5 Table of Contents About This Course...Preface-i Course Goals... Preface-i Course Map...Preface-ii Topics Not Covered...Preface-iii How Prepared Are You?...Preface-v Introductions...Preface-vi How to Use Course Materials...Preface-vii Conventions... Preface-viii Icons... Preface-viii Typographical Conventions... Preface-ix Describing Interface Configuration Objectives Controlling and Monitoring Network Interfaces Displaying the MAC Address Displaying the IP Address Marking an Ethernet Interface as Down Sending ICMP ECHO_REQUEST Packets Capturing and Inspecting Network Packets Configuring IPv4 Interfaces at Boot Time Introducing IPv4 Interface Files Changing the System Host Name Exercise: The Solaris OS Network Commands Preparation Task Exercise Summary Exercise Solutions: The Solaris OS Network Commands Preparation Task and Solutions Describing the Client-Server Model Objectives Introducing Client-Server Processes Introducing Client Processes

6 Introducing Server Processes The Service Management Facility SMF Service Service Identifiers Service States Milestones The svc.startd Daemon The Service Configuration Repository Starting Server Processes Introducing the Internet Service Daemon (inetd) The Impact of SMF on Network Services Introducing Network Ports Starting Services That Use a Well-Known Port Starting RPC Services Using the rpcinfo Commands Exercise: Observing the Solaris OS Network Preparation Tasks Exercise Summary Exercise Solutions: Observing the Solaris OS Network Preparation Tasks and Solutions Introducing Sun Connection Services Objectives Additional Resources Solaris 10 OS Patch Access Policy Introducing Sun Connection Administering Patches Sun Connection Modes Using the Update Manager Client Establishing a Sun Online Account Obtain a Sun Service Plan (Optional) Downloading and Installing the Update Manager Client Software Starting the Update Manager Client For the First Time Installing Updates With the Update Manager Client Setting Update Manager Client Preferences Update Manager s Proxy Registration Obtaining, Installing and Initially Configuring the Update Manager s Proxy Configuring Clients to Use the Update Manager s Proxy Patch Administration From the Command Line (CLI) Using the smpatch Command Phases for Applying Updates System Administration for the Solaris 10 Operating System, Part 2

7 Command Examples Configuring the Patch Management Environment Command Examples Using the Update Policy for Applying Updates Example of Using the Update Policy Working With Multiple Updates Authorization and Authentication Further Information Introducing the Sun Connection Hosted Web Application Using the Sun Connection Hosted Web Application Leveraging the Systems Affected Function Managing Swap Configuration Objectives Introducing Virtual Memory Physical RAM Swap Space The swapfs File System Paging Configuring Swap Space Displaying the Current Swap Configuration Adding Swap Space Removing Swap Space Exercise: Managing swap Utility Configuration Preparation Task Exercise Summary Exercise Solutions: Managing swap Utility Configuration Task and Solutions Managing Crash Dumps and Core Files Objectives Managing Crash Dump Behavior The Crash Dump Displaying the Current Dump Configuration Changing the Crash Dump Configuration Managing Core File Behavior Core Files Displaying the Current Core File Configuration Changing the Core File Configuration Exercise: Collecting the Crash Dump and Core Dump Preparation Tasks Exercise Summary Exercise Solutions: Collecting the Crash Dump and Core Dump Preparation

8 Tasks and Solutions Configuring NFS Introducing the Benefits of NFS Benefits of Centralized File Access Benefits of Common Software Access Introducing the Fundamentals of the NFS Distributed File System NFS Server NFS Client NFS Version 4 (NFSv4) Pseudo-File System Strong Security Compound Procedures Extended Attributes File Handles Delegation Configuring an NFSv4 Server Configuring an NFSv4 Client Managing an NFS Server The NFS Server Files The NFS Server Daemons Managing the NFS Server Daemons NFS Server Commands Configuring the NFS Server for Sharing Resources Managing the NFS Client NFS Client Files NFS Client Daemons Managing the NFS Client Daemons NFS Client Commands Configuring the NFS Client for Mounting Resources Enabling NFS Server Logging Fundamentals of NFS Server Logging Configuring NFS Log Paths Initiating NFS Logging Configuring the nfslogd Daemon Behavior Managing NFS With the Solaris Management Console Storage Folder Tools Adding a Shared Directory on the NFS Server Mounting a Shared Directory on the NFS Client Troubleshooting NFS Errors The rpcbind failure Error The server not responding Error The NFS client fails a reboot Error The service not responding Error The program not registered Error System Administration for the Solaris 10 Operating System, Part 2

9 The stale NFS file handle Error The unknown host Error The mount point Error The no such file Error Exercise: Configuring NFS Preparation Tasks Exercise Summary Exercise Solutions: Configuring NFS Preparation Tasks and Solutions Configuring AutoFS Objectives Introducing the Fundamentals of AutoFS AutoFS File System The automountd Daemon The automount Command Using Automount Maps Configuring the Master Map Identifying Mount Points for Special Maps Adding Direct Map Entries Adding Indirect Map Entries Updating the Automount Maps Stopping and Starting the Automount System Exercise: Using the Automount Facility Preparation Tasks Exercise Summary Exercise Solutions: Using the Automount Facility Preparation Tasks and Solutions Describing RAID and the Solaris Volume Manager Software Objectives Introducing RAID RAID RAID RAID Storage Configurations Introducing Solaris Volume Manager Software Concepts Logical Volume Soft Partitions Introducing the State Database Introducing Hot Spares and Hot Spare Pools

10 Configuring Solaris Volume Manager Software Objectives Solaris Volume Manager Concepts The State Database Replicas Creating the State Database Configuring RAID RAID-0 Striped Volumes Creating a RAID-0 Volume Configuring RAID Building a Mirror of the Root (/) File System The Scenario Creating the RAID-0 Volumes Creating the RAID-1 Volume Configuring an x86-based System for Mirrored Failover Unmirroring the root (/) File System Exercise: Mirroring the root (/) File System on SPARC-Based Systems Preparation Task Exercise Summary Exercise Solutions: Mirroring the root (/) File System on SPARC-Based Systems Preparation Task Exercise : Mirroring the root (/) File System on x86/x64-based Systems Preparation Task Exercise Summary Exercise Solutions: Mirroring the root (/) File System on x86/ x64-based Systems Preparation Task Configuring Role-Based Access Control (RBAC) Objectives Introducing RBAC Fundamentals Key RBAC Files Roles Assigning Rights Profiles To Users Assigning Rights Profiles To Roles Assigning Roles to Users Using Roles Authorizations Assigning Authorizations Assigning Authorizations to User Accounts System Administration for the Solaris 10 Operating System, Part 2

11 Assigning Authorizations to Roles Assigning Authorizations to Rights Profiles RBAC Configuration File Summary The /etc/user_attr File The /etc/security/prof_attr File The /etc/security/exec_attr File The /etc/security/auth_attr File Managing RBAC Using the Solaris Management Console Fundamentals of Managing RBAC Exercise: Configuring RBAC Preparation Tasks Exercise Summary Exercise Solutions: Configuring RBAC Preparation Tasks and Solutions Configuring System Messaging Objectives Introducing the syslog Function The syslog Concept The /etc/syslog.conf File The syslogd Daemon and the m4 Macro Processor Configuring the /etc/syslog.conf File Message Routing Stopping and Starting the syslogd Daemon Configuring syslog Messaging Enabling TCP Tracing Monitoring a syslog File in Real Time Adding One-Line Entries to a System Log File Using the Solaris Management Console Log Viewer Opening the Solaris Management Console Log Viewer Viewing a syslog Message File Viewing a Management Tools Log File Browsing the Contents of a Management Tools Log File Displaying Management Tools Log Entry Details Backing Up Management Tools Log Files Exercise: Using the syslog Function and Auditing Utilities Preparation Tasks Exercise Summary Exercise Solutions: Using the syslog Function and Auditing Utilities Preparation Tasks and Solutions

12 Using Name Services Objectives Introducing the Name Service Concept Domain Name System (DNS) Network Information Service (NIS) Network Information Service Plus (NIS+) Lightweight Directory Access Protocol (LDAP) Name Service Features Summary Introducing the Name Service Switch File Database Sources Status Codes Actions Configuring the Name Service Cache Daemon (nscd) The nscd Daemon Configuring the nscd Daemon Stopping and Starting the nscd Daemon Retrieving Name Service Information The getent Command Using the getent Command Exercise: Reviewing Name Services Preparation Tasks Exercise Summary Task Solutions Configuring Name Service Clients Objectives Configuring a DNS Client Configuring the DNS Client During Installation Editing DNS Client Configuration Files Setting Up an LDAP Client Client Authentication Client Profile and Proxy Account Client Initialization Configuring the LDAP Client During Installation Initializing the Native LDAP Client Copying the /etc/nsswitch.ldap File to the /etc/nsswitch.conf File Listing LDAP Entries Unconfiguring an LDAP Client Exercise: Configuring a System to Use DNS and LDAP Preparation Task Exercise Summary Exercise Solutions: Configuring a System to Use DNS and LDAP System Administration for the Solaris 10 Operating System, Part 2

13 Preparation Task and Solutions Configuring the Network Information Service (NIS) Objectives Introducing NIS Fundamentals NIS Namespace Information NIS Domains NIS Processes Configuring the Name Service Switch Changing Lookup Requests to Go From Files to NIS Changing Lookup Requests to Go From NIS to Files Introducing NIS Security The securenets File The passwd.adjunct File Configuring the NIS Domain Generating NIS Maps Configuring the NIS Master Server Testing the NIS Service Configuring the NIS Client Configuring the NIS Slave Server Updating the NIS Map Updating the NIS Password Map Updating the NIS timezone Map Building Custom NIS Maps Using the make Command Editing the NIS Makefile File Troubleshooting NIS Troubleshooting NIS Server Failure Messages Troubleshooting NIS Client Failure Messages Exercise: Configuring NIS Preparation Tasks Exercise Summary Exercise Solutions: Configuring NIS Preparation Tasks and Solutions Introduction to Zones Objectives Introducing Solaris Zones Server Consolidation Solutions Resource Sharing Zone Features Zone Concepts Zone Types Zone Daemons

14 Zone File Systems Zone Networking Zone States Configuring Zones Identifying Zone Components Allocating File System Space Using the zonecfg Command The zonecfg Resources Parameters Zone Configuration Walk-Through Viewing the Zone Configuration Using the zoneadm Command Verifying a Configured Zone Installing a Configured Zone Booting a Zone Halting a Zone Rebooting a Zone Logging Into and Working With the Zone Moving a Zone Migrating a Zone Deleting a Zone Installing Packages in Zones Package Operations Possible in the Global Zone Package Operations Possible in a Non-Global Zone Upgrading Solaris 10 OS With Installed Non-Global Zones Solaris Install Media Support Upgrading the Solaris 10 OS Exercise: Configuring Zones Preparation Task 1 Creating and Installing a Non-Global Zone Task 2 Administering Users and Data Within Zones Task 3 Installing Software Packages in Zones Task 4 - Removing Zones Exercise Summary Exercise Solutions Preparation Task 1 Creating and Installing a Non-Global Zone Task 2 Administering Users and Data Within Zones Task 3 Installing Software Packages in Zones Task 4 - Removing Zones Introduction to the ZFS File System Objectives What Is ZFS? ZFS Pooled Storage Transactional Semantics Checksums and Self-Healing Data System Administration for the Solaris 10 Operating System, Part 2

15 Unparalleled Scalability ZFS Snapshots Simplified Administration ZFS Terminology ZFS Component Naming Requirements ZFS Hardware and Software Requirements and Recommendations 16-7 Creating a Basic ZFS File System Components of a ZFS Storage Pool Using Disks in a ZFS Storage Pool Using Files in a ZFS Storage Pool Virtual Devices in a Storage Pool Replication Features of a ZFS Storage Pool Mirrored Storage Pool Configuration RAID-Z Storage Pool Configuration Self-Healing Data in a Replicated Configuration Dynamic Striping in a Storage Pool Creating and Destroying ZFS Storage Pools Creating a ZFS Storage Pool Handling ZFS Storage Pool Creation Errors Destroying ZFS Storage Pools Querying ZFS Storage Pool Status Basic ZFS Storage Pool Information Listing Specific Storage Pool Statistics Health Status of ZFS Storage Pools Basic Storage Pool Health Status Detailed Health Status Creating and Destroying ZFS File Systems Creating a ZFS File System Destroying a ZFS File System Renaming a ZFS File System ZFS Properties Read-Only ZFS Properties Settable ZFS Properties Querying ZFS File System Information Listing Basic ZFS Information Creating Complex ZFS Queries Managing ZFS Properties Setting ZFS Properties Inheriting ZFS Properties Querying ZFS Properties Mounting ZFS File Systems Managing ZFS Mount Points Mounting ZFS File Systems Temporary Mount Properties Unmounting ZFS File Systems

16 ZFS Web-Based Management ZFS Snapshots Creating and Destroying ZFS Snapshots Displaying and Accessing ZFS Snapshots Rolling Back to a ZFS Snapshot ZFS Clones Creating a ZFS Clone Destroying a ZFS Clone Replacing a ZFS File System With a ZFS Clone Using ZFS on a Solaris System With Zones Installed Adding ZFS File Systems to a Non-Global Zone Delegating Datasets to a Non-Global Zone Using ZFS Storage Pools Within a Zone Property Management Within a Zone Understanding the zoned Property Exercise: Introduction to the ZFS File System Preparation Exercise Summary Task 1 - Creating and Destroying ZFS Storage Pools Task 2 - Creating Renaming and Destroying ZFS File Systems Task 3 - Working with ZFS Properties Task 4 - Mounting ZFS File Systems Task 5 - Working with ZFS Snapshots and Clones Task 6 - Working with ZFS Datasets in Non-Global Zones Task 7 Removing the Zone and ZFS Configuration Exercise Summary Exercise With Solutions: Introduction to the ZFS File System Preparation Exercise Summary Task 1 - Creating and Destroying ZFS Storage Pools Task 2 - Creating Renaming and Destroying ZFS File Systems Task 3 - Working With ZFS Properties Task 4 - Mounting ZFS File Systems Task 5 - Working With ZFS Snapshots and Clones Task 6 - Working With ZFS Datasets in Non-Global Zones Task 7 Removing the Zone and ZFS Configuration System Administration for the Solaris 10 Operating System, Part 2