Skip to main content

Posts

Setting privileges to an user Solaris 10

Root, root, root, everybody always wants root.  Developers, application administrators, users, they all seem to find a reason to "need" root access.  Since normally these needs are for access to particular files or to perform very specific tasks, only a subset of root's access is actually needed.  File access should be trivial enough, just configure the appropriate permissions or FACLs.  For executable processes, traditionally 'sudo' or 'op' would come to mind.  In Solaris, however, we could instead use RBAC and privileges, which are natively available. Our host details for this are:           HOST:           snorkle         PROMPT:         user@snorkle [0]         OS:             Solaris 10 10/09         USER:           johnc         ROLE:           netrole For a sample setup, we have user 'johnc' from group 'neteng' who is tasked with managing the network interfaces and routes on a system.  He will need access to 'ifconfig&
Recent posts

Solaris 10 Configure ftp path / instead of full path

1: Create a user which you want to use for the ftp , Name of the user can be anything except "ftp"  #useradd -d /export/home/mdn -m -s /bin/bash mdn #passwd mdn Enter the new password twice . 2: Run the "ftpconfig -d" command , on the home directory of newly created user.  # ftpconfig –d /export/home/mdn this updates the existing directory with the info needed to make the account restricted. After this you can see some extra directories in /export/home/mdn e.g bin, dev, lib e.t.c  3: Add the user to the /etc/ftpd/ftpaccess file. There is an existing commented entry  # guestuser username that can be uncommented and edited  guestuser mdn 4: This entry should a already exist in   in /etc/ftpd/ftpaccess  class guestusers guest * 5: Run the command  # in.ftpd -a  to allow the use of ftpaccess file  6. Restart ftp service # svcadm restart network/ftp now when user "mdn" ftps to this server ftp 172.27.129.213 Connected to  172.27.129.213 .  220 solarisla

ORA-09925:Unable to create audit trail file

Once u got this check filesystem to have enough disk space with running  df -h  In my case I had over 27% free but still got the same error, then look at Inodes: bash-3.2# df -o i /opt Filesystem             iused   ifree  %iused  Mounted on /dev/dsk/c1t0d0s5    4280640       0   100%   /opt Catcha! Ok now we must find that busty folder with a lot of files  # for i in /opt/*; do echo $i; find $i |wc -l; done This command will list directories and number of files in them. Once you see a directory with unusually high number of files (or command just hangs over calculation for a long time), repeat the command for that directory to see where exactly the small files are. repeat it until you will have bash-3.2# for i in /opt/oracle/app/oracle/product/grid/rdbms/*; do echo $i; find $i |wc -l; done /opt/oracle/app/oracle/product/grid/rdbms/admin     1683 /opt/oracle/app/oracle/product/grid/rdbms/audit  4229135 /opt/oracle/app/oracle/product/grid/rdbms/demo        2 /o

Oracle installation Windows 2008 R2 (6.1)

If you are trying to install  Oracle 10g over windows server 2008 R2 (6.1) but it gives error that OS is not supported. The workaround is here: simpliest way is to use --IgnoreSysPrereqs key to avoud system check. more complex - locate file oraparam.ini under install directory of your db dstributive and modify string Windows=5.0,5.1,5.2,6.0, 6.1

Error: invoking targer ' ' or makefile Solaris 11 Oracle 11g

If you head up with such problem there is simple workaround 1. Install prerequisites for DB #pkg update system/library/security/crypto #pkg update system/zones/brand/brand-solaris-kz #pkg install pkg:/developer/assembler #pkg install pkg://solaris/developer/build/make 2. Make symbolic link for library libucrypto.so.1 #ln -s /lib/64/libucrypto.so.1 /usr/lib/64/libucrypto.so.1 3. unset LD_LIBRARY_PATH BEFORE installing DB #unset LD_LIBRARY_PATH

Difference between Linux and Solaris commands

ps ps -ef on Linux will give the full command line, but with Solaris you don’t get it all. This is particularly critical when looking at java processes. Fortunately Solaris retains the BSD style binaries in /usr/ucb, so execute: /usr/ucb/ps wwaux|grep java instead bash /bin/sh on Solaris is a POSIX complaint bourne shell. If you have written bash-centric scripts, replace #!/bin/sh with #!/bin/bash NFS Starting of NFS daemon Instead of # service nfsserver start one does: # svcadm enable network/nfs/server Exports Instead of the file /etc/exports, under Solaris the file /etc/dfs/dfstab needs to be edited. Sharing with zfs Nowadays, you would probably use zfs sharenfs eg: # zfs set sharenfs=on zpool/sharedfolder # zfs sharenfs=rw=server.fqdn.ch,rw=otherserver.fqdn.ch zpool/sharedfolder An attempt at a matrix Linux command Solaris similar command Comments top prstat You can compile top on Solaris, but you can’t rely on it’s accuracy free vmstat ca

Veritas Netbackup Ports

      The following are the important Netbackup ports and its corresponding daemons mandatory for controlling the same from work area. 13720 – bprd 13721 – bpdbm 13722 – bpjava-msvc 13723 – bpjobd 13724 – vnetd 13782 – bpcd 13783 – vopied 1556 — Java port

Netbackup command cheat sheet

Master Server 1) Check the license details /usr/openv/netbackup/bin/admincmd/get_license_key 2) Stop and Start the netabackup services i) /etc/init.d/netbackup stop (start)       —>  graceful stop and start ii) /usr/openv/netbackup/bin/bp.kill_all    —> Stop backup including GUI sessions, ungraceful iii) /usr/openv/netbackup/bin/bp.start_all —> Start the backup                    iv) /usr/openv/netbackup/bin/initbprd      —> starts the master server v) /usr/openv/netbackup/bin/vmd           —> starts the media server vi) /usr/openv/netbackup/bin/jnbSA        —> Starts the GUI sessions 3) Scan the tape devices #sgscan (in  Solaris)                                                                                                         #/usr/openv/volmgr/bin/scan (in AIX) 4) Display all the netbackup process #bpps –x 5) Check the backup status In GUI —>  Activity monitor In CLI —>  #bpdbjobs -report 6) Lists the server errors #bperror #b

How To Set Up a Private Git Server on a VPS

Introduction This tutorial will show you how to set up a fully fledged Git server using SSH keys for authentication. It will not have a web interface, this will just cover getting Git installed and your access to it set up. We’ll use the host «git.droplet.com» in place of the domain you will use for your VPS. This can be a great option if you want to keep your code private while you work. While open-souce tends to be the status quo, there are some times when you don’t want to have your code freely available. An example would be if you are developing a mobile app, especially a paid one. Keep in mind this code can be read by anyone if they know the URL address to use for a clone, but that is only if they know it. There is one major concern for many and that is a web interface to your repositories. GitHub accomplishes this amazingly well. There are applications that you can install such as  Gitosis , GitList , and  Goblet . We don’t go over those in this tutorial, but if you rel