Sunday, July 14, 2013

Black Sheep Networks Resources

Black Sheep Networks Resources  

UNIX ADMIN RESOURCES [all local copies]
When they disappear, you can still find them here

Some Old stuff Copied from Black Sheep Networks
http://www.blacksheepnetworks.com

BlackSheep Search

EXPLOITS
Black Sheep Networks  Exploit Archive


 
Go to HostedDB
SOLARIS
SUN Cluster 3.0 Administration PDF
SUN Solaris Network Security PDF
Linux to Solaris 10 Sysadmin guide PDF
SUN System Handbook
SUN System Handbook @ SUN
Solaris FAQ
Solaris Infrequently Asked and Obscure Questions
SUN's Raid Manager 6 FAQ
DiskSuite
Labs
Solaris 8 Security Checklist
SNMP on *NIX
Additional Solstice Disksuite topics
Booting 64bit Kernels on UltraSparc 1 systems
Checking and Setting SUNW / hme network card properties
Common Sun device driver names
Crash Dump Analysis
How to install Solaris on A1000 and boot up from it
How to read an enterprise server device path
Installing SUN Storedge PCI / fc-100 fiber channel host adapter
Instalating SUN storedge RAID manager 6.1.1
Mirroring disks with solstice disksuite
Modifying the CDROM nvalias on an Ultra10 IDE based
Problems with eri fast ethernet interface
Problems with ping -s in Solaris
Querying the default number of active TCP connections
Recovering from a boot disk failure with solstice disksuite
Restoring original package file permissions
Serial cables on SUN Ultra Enterprise servers
Setting up and Deleting disksuite RAID
Comparison of SBUS and PCI
SUN StorEdge Products
the ACT Kernel dump analysis tool
Top 10 things SUN support
Upgrading Solaris with Disksuite Volumes
NIS+ Faq
Telling Solaris to use a 24-bit TrueColor display
SUN Guru webpage
Armoring Solaris
Connecting to any ISP with Solaris 7 and 8
Selected SCSI Device not responding, but Disk OK
Securing NIS
Solaris Security FAQ
Solaris Start-Up and Shutdown
Backing up with UFSDUMP and fssnap
A tool for cold mirroring of Solaris System Disks
Guide to cloning a SUN Blade 1000 running Solaris 8 to a second drive
Burning a bootable CDROM for Solaris
Manual Mirroring on SUN
Solaris UNIX Commands and Scripts
Critical system disaster prevention
Backing Up and Restoring File Systems with fssnap
Using the dd command
SUN Volume Manager
Solaris Volume Manager - Soft Partitioning Explained
Hardening Solaris with Jass
Comparison of Solaris Hardening Scripts
Solaris pkg-get tool
Solaris UNIX tips!
Phil's Solaris Hints
System Administration related files
Sybase Database Administration
DiskSuite Step by Step
How to get a SUN Solaris system Ready for Production
Raid Manager 6.22 and A1000 Setup
How to Setup Mirrored Disks with SDS (Disk Suite) 4.2.1
Solstice DiskSuite (sds) Step by Step
Installing an A1000 on Solaris8
Setting scsi_options in /etc/system
Solaris Archive of Information and Troublshooting
SUN GIG Ethernet Install and Configure
Solaris Volume Manager Administration Guide
DIO Device I/O analysis tool for Solaris
DiskSuite 4.1 Documents
SMC 2.0 Frequently Asked Questions
Sony SDX-300C AIT Tape drive Solaris support
SUN Solaris information/Bootup sequence/jumpstart/openboot,etc..
Just the Facts Papers by SUN
Solaris 9 System Administrator Collection - HTML
T3 Array Quick Installation
SUN StorEdge T3 Disk FAQ
RAID configuration for Oracle Databases
How can I grow a UFS filesystem?
Solaris IP Multipathing made easy

Go to HostedDB

SOLARIS JUMPSTART
Solaris Jumpstart automated installation
Building a Jumpstart server
Jumpstart in detail
Handsoff Jumpstart using sysidcfg with no nameservice
Jumpstart Paper
Jumpstart Setup from SUN
Jumpstart sysidcfg
Build Jumpstart Boot CD
Create one or more install servers

HPUX
HP/UX FAQ
Building a Bastion Host Using HP-UX 11
Software Porting and Archive Centre for HP-UX
installing and using HP-UX SoftwareDepots
Securing HP-UX 11
HP-UX 11.0 Installation Checklist
Securing HP-UX Services
Securing an HP-Unix Production Server
TRU64
Secure your Digital UNIX (Tru64) Alpha
Setting up Digital UNIX securely
Digital UNIX FAQ
Nessus install on DUNIX
Security Software Downloads
Security: Tru64 UNIX Version 5.0
IRIX
SGI Irix FAQ
Adobe Photoshop 3.0.1 Crack for SGI IRIX
Setting up IRIX securely
IRIX Notes
Silicon Graphics Administration
Securing IRIX 6.5
IRIX Toolchest Custom Menu's
AIX
AIX Public Domain Software
AIX FAQ
AIX Error Logging Faciltiy
AIX Error notification
AIX IPSEC Filtering
AIX Tripwire
Deploying OpenSSH on AIX 4.3
Quick Reference:Solaris to AIX
AIX/HP-UX Interoperability Guide
Securing AIX Network Services
AIX Logical Volume Manager and Veritas Volume Manager
AIX TCPIP Howto
AIX 4.3 Bastion Host Guidelines
Problem Installing via SMIT from CDROM
LINUX
Secure Linux Containers cookbook with SELINUX and SMACK
Secure Linux Containers Security PDF
RedHat ETH Bonding
RedHat Custom Kernel
RedHat PXE Booting
RedHat RAID
RedHat Rockwell Modem
RedHat Linux Tasks
Sams RH Fedora4 Unleashed CHM
Linux Tips & Tricks
Building a software RAID system in Slackware Linux 8.0
How do I...
Clustering
VMware on Slackware Linux
Experiments with SMTP
Linux Notes
Linux PPC
Linux on XFS
RedHat Sendmail FAQ
Installing Apache, Perl, and MySQL
Configuring a Stateful Linux Firewall with IPTables / NetFilter
Portforwarding using Iptables NAT
Linux Stateful Firewall installation (RH 7.2)
Securing RedHat Linux 7.3
OPENBSD
How to Change Your Hostname In OpenBSD
OpenBSD frequently unanswered questions
FREEBSD
FreeBSD Handbook
IBM/Sequent Dynix
Pyramid OSx
VAX/VMS
VAX/VMS Resources
VMS Logging and Restriction
DEC VAX/VMS Operating System Security Review
Practical Exercise in Securing an OpenVMS System
VMS Change user password with no expiration
Example creating a home webpage on VMS
X11 on VMS
VMS -> UNIX Commands
VMS to UNIX Translation
A Primer on OpenVMS (VMS) Security
Moving from VAX VMS to SUNOS
Getting Started with VMS
VMS Beginner's FAQ
Information about the VMS operating system
Oracle FAQ: Oracle for VMS
WINDOWS 2000
Windows 2000 Security Hardening
Windows 2000 and UNIX DNS Integration
Windows 2000 Performance Tuning
Windows 2000 TCP Performance Tuning Tips
Tuning Guide for Windows NT/2000
MAC
Mac OS X notes
SCO
SCO OPenServer 5.05 Security
IBM OS2 WARP
OS/2 Boot Info
NeXT Station
NeXTSTEP Programming FAQ
The NEXTSTEP/OpenStep FAQ
Next m68k FAQ
JAVASTATION
how-to-install-the-citrix-java-client-on-javastation.html
Linux on the Sun JavaStation NC HOWTO
JavaStation Software Environment 1.0.1 for Developers Installation
Setting up a JavaStation
Javastation software PDF
Linux on the SUN Javastation
Running Linux and XFree86 on a Sun JavaStation
Javastation Files and Linux files to Download
AS400

AS400 FAQ



 
MySQL
MySQL Notes
ORACLE
ORACLE FAQ
Installing Oracle91 on Linux
Installing Oracle8i on Linux
Example company building software using database and tables
Configuring Oracle on Linux For Peak Performance
Challenges Involved in Multimaster Replication
Securing Oracle Network Traffic
Installing and Configuring Oracle on Linux
Installing and Configuring Oracle on Solaris
Oracle9i New Features for Oracle8i DBAs
How to increase the size of an Oracle Tablespace
SUN Solaris and Oracle
Oracle Internals
Oracle SQL tips and scripts
Oracle9i Installation on RedHat
Questions and answers about Oracle's implementation of SQL
An A-Z Index of Oracle SQL
Installing Oracle 8.1.6
SQL
SQL in simple english
Introduction to Structured Query Language
SQL Server Scripts
POSTGRES
How to use Postgres as an NSS module
OpenLDAP HOWTO with Postgres
Sendmail HOWTO with Postgres, SASL, and TLS
LDAP
LDAP Implementation HOWTO
LDAP setup and configuration guide
LDAP with Solaris 8
Securing Implementing LDAP
Security with LDAP
WEBSPHERE
IBM Websphere 4.0 Security
BEA WEBLOGIC
BEA WebLogic Admin Guide [PDF]
VERITAS
Unencapsulating a root disk
Veritas VM Commands
Veritas File System
Veritas File System
Veritas LVM Cheat Sheet
Veritas LVM
Veritas LVM Tasks
Create Simple Volume
Veritas Test Setup via Vmware
Veritas VM Remove
Veritas VM Notes
Veritas VM Notes for Linux
Veritas VM Simple rootdg
Veritas vxdmp
Veritas VM 4.0 Admin Guide PDF
Veritas Cheat Sheet
Veritas VM Cheat Sheet
Upgrading Solaris along with VxVM
Helpful Hints for managing storage products Using Veritas Volume Manager
Veritas Cheat Sheet
Volume Creation: The vxAssist Way
Volume Creation: The vxMake Way
VxVM 3.2 Admin Guide
VxVM 3.2 Install Guide
VxVM 3.2 Troublshooting Guide
VxVM 3.2 Hardware Guide
SEVM 2.6 Admin Guide
SEVM 2.6 CLI Users Guide
SEVM 2.6 GUI Users Guide
RAID Theory
Veritas Krash Kourse
Advanced Veritas Theory
Exploring Layered Volumes
LVM Intro
IBM LVM-to-VxVM Reference
Intro Veritas Suite for AIX
[Veritas-vx] 1+0 how to detach?
VERITAS CLUSTER SERVER
Veritas Cluster PDF
Veritas Cluster VCS Licensing
Veritas Licenses Probs
Setting up Veritas Cluster Server
Veritas Products Sample Data XLS
VCS for Oracle 10g datasheet
VCS Quickstart PDF
Veritas Cluster Cheat Sheet
Veritas Cluster Info
Veritas Cluster Tasks
Solstice DiskSuite Agent for Veritas Cluster Server
Veritas Cluster and Volume Manager Install Example
Veritas Cluster Overview
Veritas Cluster Debugging Tips
Delete group script
Veritas Cluster Server - VCS Install notes
VCS Setup for NFS script
VCS Setup for Oracle script
VCS Server Setup notes/tips
VCS Tuning script
Testing Veritas Cluster Failover
VERITAS NETBACKUP
NetBackup Cheat Sheet
Veritas NetBackup Client on a Jumpstart Client
Veritas NetBackup Info
Veritas NetBackup 5.0 Admin Guide Part 2 PDF
Veritas NetBackup 5.0 Admin Guide Part 1 PDF
Veritas NetBackup Cheat Sheet
SOFTWARE RELEASE MANAGEMENT
A Configuration Management Process Document
Building with ClearCase [UNIX]
Developing Software with ClearCase [UNIX]
CVS Policy and Procedures.. cheatsheet for doing version control and release management on a website with CVS
CLEARCASE
ClearCase FAQ
Using ClearCase
Clearcase SUN Sizing Guide
www.cleartool.com
ClearCase Triggers and Scripts via local FTP
ClearCase and SAMBA
CVS
CVS reference
Anonymous CVS access via ssh
Running a Secure CVS
RCS
Quick simples notes on RCS
EMC
SAN Architecture
EMC Client Install and Check
Host HBA Install and Setup
Navisphere CLI cheat sheet
SAN Switch Cheat Sheet
EMC Symmetrix CLI Cheat Sheet
SAN Zoning Architecture
SRDF Splitting
iSCSI
Howto setup Linux iSCSI target SAN with tgt
CISCO
Things to do in CISCO land when you are dead - phrack
CISCO FAQ
Cisco Router Configuration Commands
Enabling SNMP on Cisco IOS devices
Configuring Cisco access list to filter IP
Screening router access list example
Troubleshooting Ethernet Collisions
Cisco Router Performance Tuning
Cisco 7000 IOS Commands
BAYNETWORKS / NORTEL
Using BayStack 350 Switch
CHECKPOINT
Link to FW-1 FAQ at www.phoneboy.com
Understanding the FW-1 Stateful Inspection
FW-1 Troubleshooting Tips
Auditing your Firewall Setup
Building Your Firewall Rulebase
FireWall-1 Performance Tuning Guide
Intrusion Detection for FW-1
NETWORKING
Networking FAQ
IP Host Subnet quantities
Netmask Translation Table
Internetwork Routing Protocol Attack Suite Docs
WIRELESS NETWORKING
Wireless Networking
Cisco Aironet and Linux
Wireless Sniffers
Airo-LRP, Linux Aironet Wireless Firewall / Router
SECURITY
Security Policy FAQ
Security
Cyber Forensics FAQ
Intrusion Detection System [IDS] FAQ
Incident Handling FAQ
Incident Response Policy FAQ
Profiles
Capturing Session ID's
NT Security - Frequently Asked Questions version 0.41
Setting up NT securely
Security Software List
Security Product Catalog by Supplier index
Definitions and Value of Honeypots
The Encyclopedia of Computer Security
Howto Build a Firewall
Delivering Signals for Fun and Profit
Smashing The Stack For Fun And Profit
Internetwork Routing Protocol Attack Suite
Lance's Security Papers
Sample Penetration Test Report
Recognizing and Recovering from Rootkit Attacks



 
C / C++
Phils guide to object-oriented ANSI C
Phil's Object-Oriented Programming table of contents
C Lesson Book
Learn C by example in just 5 hours - Tutorial
JAVA
Freeware Java webpage
Java Tutorial [UNIX]
Thinking in Java [Book in RTF]
TCL
Tcl/Tk Resources
PHP
Uploading a file with PHP
PERL
PERL Resources
HTML
Server Side Includes Tutorial
NCSA HTTPd Tutorial: Server Side Includes (SSI)
Enabling CGI Scripts
CGI Form Input
CGI Environment Variables
PHF Buster
SHELL
How to write a shell script
The C Shell
Shells and Shell Scripts
Book III: Programming the shell
KSH FAQ
Shell Programming
C Shell Programming
SED/AWK
awk FAQ
Useful sed 1-liners
sed FAQ
another sed FAQ
Phils AWK programming guide
AWK programming 1
AWK programming 2
AWK programming 3
AWK programming 4
AWK programming 5
GENERAL UNIX
UNIX Rosetta Stone for all OS's
How I compile things
UNIX course notes
Unix (primarily Solaris) 3rd Party solutions for Applications
Computers and Computing
Authenticating through a Domain with Samba
Playstation PSX copy patch PSX CD's using Linux
alt.2600/#hack FAQ
Security, UNIX, documents, and links
Lots of Information / Brain Dump
UNIX notes
Multi-OS booting various OS's
The Unix Pestilence - Link
APACHE
Enable WAP on Apache webserver
Building Web Apps in Apache
apache 2.0 | tomcat 4 | RH 7.2 HOWTO
Converting Netscape Server to Apache Server
SSH
SSH authentication with ssh-agent
DNS
Bind9 Dynamic DNS HowTo
Installing and maintaining Dynamic DNS Loadsharing with Failover
KERBEROS
Kerberos FAQ
MAIL
Converting qmail to Exim based ldap
Sendmail: Primary and Secondary mail exchangers
Virtual Hosting with Sendmail
Allowing controlled SMTP relaying in Sendmail 8.9
VI
vi FAQ part 1
vi FAQ part 2
Mastering the VI editor
vi Editor Commands
BACKUPS
How to backup data on UNIX
Using tar and ssh to backup files
Example Amanda backup setup
Notes and Tips on backups
How to restore a backup (on sun and hp)
How to make tape backups
Backup Script
Solaris Backup Script
UFSDUMP - UFSRESTORE copy filesystem
Dump(1M) Performance over Networks
Backups Under SGI
Remote Linux Dump with DD to tape
Native Linux (and Unix) Backup Tools
Using dd as a conduit between systems
UPS
NUT: Network UPS Tools: APC's smart protocol
MISC
Remote Traceroute Tool
Managing a Distributed
Free News Servers
Public News Servers
MTU/MSS Hints Software Library Using LUDE
Unix Boulevard ... UNIX communitry
USNO Master Clock
VNC
Active versus Passive FTP
Misc. FAQ
How to interpret Seagate Disc Drive model numbers
Seagate drives
Setting up GSSAPI authentication of SASL
Annex console server and stop-a/break
Annex terminal server configure
FTP Virtual FTP Server FAQ
Non-profit organization serving the online community by providing old versions of various programs
Wikipedia - Free online encyclopedia
WEB MARKETING
Cost effective website advertising
Press Release Tips
Press Release tips to maximize trade show exposure


Freshmeat.net News

Testing Veritas Cluster

Testing Veritas Cluster


Testing Veritas Cluster

Actual commands are in black.

0. Check Veritas Licenses - for FileSystem, Volume Manager AND Cluster

vxlicense -p

If any licenses are not valid or expired -- get them FIXED before continuing! All licenses should say "No expiration". If ANY license has an actual expiration date, the test failed. Permenant licenses do NOT have an expiration date. Non-essential licenses may be moved -- however, a senior admin should do this.

1. Hand check SystemList & AutoStartList

On either machine:

    grep SystemList /etc/VRTSvcs/conf/config/main.cf
    You should get:
    SystemList = { system1, system2 }

    grep AutoStartList /etc/VRTSvcs/conf/config/main.cf
    You should get:
    AutoStartList = { system1, system2 }

Each list should contain both machines. If not, many of the next tests will fail.

    If your lists do NOT contain both systems, you will probably need to modify them with commands that follow.
      more /etc/VRTSvcs/conf/config/main.cf (See if it is reasonable. It is likely that the systems aren't fully set up)
      haconf -makerw (this lets you write the conf file)
      hagrp -modify oragrp SystemList system1 0 system2 1
      hagrp -modify oragrp AutoStartList system1 system2
      haconf -dump -makero (this makes conf file read only again)

2. Verify Cluster is Running

First verify that veritas is up & running:

    hastatus -summary
      If this command could NOT be found, add the following to root's path in /.profile:
        vi /.profile
        add /opt/VRTSvcs/bin to your PATH variable
      If /.profile does not already exist, use this one:
        PATH=/usr/bin:/usr/sbin:/usr/ucb:/usr/local/bin:/opt/VRTSvcs/bin:/sbin:$PATH
        export PATH
      .   /.profile
    Re-verify command now runs if you changed /.profile:
    hastatus -summary

Here is the expected result (your SYSTEMs/GROUPs may vary):

One system should be OFFLINE and one system should be ONLINE ie:
# hastatus -summary

  -- SYSTEM STATE
  -- System               State                Frozen              

  A  e4500a               RUNNING              0                    
  A  e4500b               RUNNING              0                    

  -- GROUP STATE
  -- Group           System               Probed     AutoDisabled    State          

  B  oragrp          e4500a               Y          N               ONLINE         
  B  oragrp          e4500b               Y          N               OFFLINE      

If your systems do not show the above status, try these debugging steps:

  • If NO systems are up, run hastart on both systems and run hastatus -summary again.

  • If only one system is shown, start other system with hastart. Note: one system should ALWAYS be OFFLINE for the way we configure systems here. (If we ran oracle parallel server, this could change -- but currently we run standard oracle server)

  • If both systems are up but are OFFLINE and hastart did NOT correct the problem and oracle filesystems are not running on either system, the cluster needs to be reset. (This happens under strange network situations with GE Access.) [You ran hastart and that wasn't enough to get full cluster to work.]

      Verify that the systems have the following EXACT status (though your machine names will vary for other customers):

      gedb002# hastatus -summary
      
      -- SYSTEM STATE
      -- System               State                Frozen              
      
      A  gedb001              RUNNING              0                    
      A  gedb002              RUNNING              0                    
      
      -- GROUP STATE
      -- Group           System               Probed     AutoDisabled    State        
        
      
      B  oragrp          gedb001              Y          N               OFFLINE      
        
      B  oragrp          gedb002              Y          N               OFFLINE      
        
      gedb002#  hares -display | grep  ONLINE
      nic-qfe3  State           gedb001   ONLINE
      nic-qfe3  State           gedb002   ONLINE
      
      gedb002# vxdg list
      NAME         STATE           ID
      rootdg       enabled  957265489.1025.gedb002
      
      gedb001# vxdg list
      NAME         STATE           ID
      rootdg       enabled  957266358.1025.gedb001
      
      

      Recovery Commands:

        hastop -all
        on one machine hastart
        wait a few minutes
        on other machine hastart
        hastatus -summary (make sure one is OFFLINE && one is ONLINE)

    If none of these steps resolved the situation, contact Lorraine or Luke (possibly Russ Button or Jen Redman if they made it to Veritas Cluster class) or a Veritas Consultant.

3. Verify Services Can Switch Between Systems

Once, hastatus -summary works, note the GROUP name used. Usually, it will be "oragrp", but the installer can use any name, so please determine it's name.

First check if group can switch back and forth. On the system that is running (system1), switch veritas to other system (system2):

    hagrp -switch groupname -to system2 [ie: hagrp -switch oragrp -to e4500b]
Watch failover with hastatus -summary. Once it is failed over, switch it back:
    hagrp -switch groupname -to system1

4. Verify OTHER System Can Go Up & Down Smoothly For Maintanence

On system that is OFFLINE (should be system 2 at this point), reboot the computer.

    ssh system2
    /usr/sbin/shutdown -i6 -g0 -y
Make sure that the when the system comes up & is running after the reboot. That is, when the reboot is finished, the second system should say it is offline using hastatus.
    hastatus -summary
Once this is done, hagrp -switch groupname -to system2 and repeat reboot for the other system
    hagrp -switch groupname -to system2
    ssh system1
    /usr/sbin/shutdown -i6 -g0 -y
Verify that system1 is in cluster once rebooted
    hastatus -summary

5. Test Actual Failover For System 2 (and pray db is okay)

To do this, we will kill off the listener process, which should force a failover. This test SHOULD be okay for the db (that is why we choose LISTENER) but there is a very small chance things will go wrong .. hence the "pray" part :).

On system that is online (should be system2), kill off ORACLE LISTENER Process

    ps -ef | grep LISTENER
Output should be like:
  root  1415   600  0 20:43:58 pts/0    0:00 grep LISTENER
  oracle   831     1  0 20:27:06 ?        0:00 /apps/oracle/product/8.1.5/bin/tnslsnr LISTENER -inherit
    kill -9 process-id (the first # in list - in this case 831)
Failover will take a few minutes

You will note that system 2 is faulted -- and system 1 is now online

You need to CLEAR the fault before trying to fail back over.

    hares -display | grep FAULT
    for the resource that is failed (in this case, LISTENER)
    Clear the fault
    hares -clear resource-name -sys faulted-system [ie: hares -clear LISTENER -sys e4500b]

6. Test Actual Failover For System 1 (and pray db is okay)

Now we do same thing for the other system first verify that the other system is NOT faulted

    hastatus -summary
Now do the same thing on this system... To do this, we will kill off the listener process, which should force a failover.

On system that is online (should be system2), kill off ORACLE LISTENER Process

    ps -ef | grep LISTENER
Output should be like:
  oracle   987     1  0 20:49:19 ?        0:00 /apps/oracle/product/8.1.5/bin/tnslsnr LISTENER -inherit
  root  1330   631  0 20:58:29 pts/0    0:00 grep LISTENER
    kill -9 process-id (the first # in list - in this case 987)
Failover will take a few minutes

You will note that system 1 is faulted -- and system 1 is now online

You need to CLEAR the fault before trying to fail back over.

    hares -display | grep FAULT for the resource that is failed (in this case, LISTENER)
    Clear the fault

    hares -clear resource-name -sys faulted-system [ie: hares -clear LISTENER -sys e4500a]

Run:

    hastatus -summary
to make sure everything is okay.

Veritas Product Overview
Veritas FileSystem Overview
Veritas Volume Manager Overview
Veritas Cluster Overview * Veritas Cluster Install
Veritas Cluster Debugging * Veritas Cluster Testing

Unix Tutorials ~ Unix System Security ~ Unix Help
Free URL Submit ~ UnixTools.com ~ Free Web Resources
Unix Software ~ Unix Hardware ~ Web Related Books


Pages are copied from UnixTools.com

A good explanation of MULTINICA and MULTINICB in VCS

MULTINICA & MULTINICB IN VCS
The MultiNICA represents a set of network interfaces and provides failover capabilities between them.You can use one base IP address for all NICs, or you can specify a different IP address for use with each NIC. The MultiNICA agent configures one interface at a time. If it does not detect activity on the configured interface, it configures a new interface and migrates IP aliases to it.
Here is the example MulticnicA that i have configured. Here i'm going to use base IP for both the NIC.Here Linux641 is server1 and linux642 is server 2.

This is sample MutilnicA attribute. 192.168.0.101 is the base IP os linux 641 server and IP moves between eth0 and eth3 when there is failure.
Below is the sample main.cf output for multinica.

Below is the IPmulticnic that is confgiugred. This will point to MultinicA(nica) resource.
Here the ip 192.168.0.1 floats between eth0 and eth3 along with base IP.

MULTINICB (Link-based IPMP setup with VCS)
With Solaris 10 came a nice feature – Link-based IP Multipathing (IPMP). It determines NIC availability solely on the NIC driver reporting the physical link status – UP or DOWN. Previous versions used “probe-based” IPMP, where connectivity is tested by pinging something on the network from each interface. While probe-based is actually a more thorough test (tests network layer 3 as well as 2), it is much more cumbersome to configure, and you need an extra IP address for each interface for “test” addresses. IMO Link-based IPMP is sufficient for most applications.
For some reason, configuring link-based IPMP in VCS is somewhat tricky, and the documentation doesn’t seem to help much. It seems all the default values for VCS are for probe-based IPMP only.

To achieve link-based IPMP, here’s how I’ve configured my MultiNICB resource:
These are the values you must change from the defaults:
UseMpathd: 1
Tells VCS to use mpathd for network link status
MpathCommand: /usr/lib/inet/in.mpathd -a
The default, /usr/sbin/in.mpathd is just incorrect – it doesn’t live there.
ConfigCheck: 0
If you leave this at 1, it will overwrite your /etc/hostname.xxx files with probe-based IPMP configuration
Device: (your IPMP interfaces here)
The “interface alias” for each device is not needed, leave them blank.
IgnoreStatus: 0
You want VCS to NOT ignore link status, since this is how link-based IPMP works.
GroupName:
Do not use your IPMP group name here, it’s not needed. VCS is not monitoring the group, mpathd is.

Here’s how it looks in main.cf:
MultiNICB csgmultinic (
UseMpathd = 1
MpathdCommand = “/usr/lib/inet/in.mpathd -a”
ConfigCheck = 0
Device = { ce0 = “”, ce4 = “” }
IgnoreLinkStatus = 0
)


Wednesday, July 3, 2013

Solaris ILOM / ALOM Cheat Sheet

Solaris ILOM / ALOM Cheat Sheet
ILOM ALOM CMT Command Comparison

ALOM:          ILOM:
setdate        set /SP/clock datetime=value
               value format: MMDDhhmmYYYY
 
setdefaults    set /SP reset_to_defaults=all
               -> reset /SP This resets the SP
 
setkeyswitch   set /SYS keyswitch_state=value
                value= normal, diag, stby, locked
 
setsc          set target property=value
setupsc        No equivalent in ILOM
setlocator     set /SYS/LOCATE value= Fast_Blink or off
setfru -c data set /SYS customer_frudata=data 
showplatform   show /HOST
showplatform   show /SYS ( to view Serial Number )
showfru        No equivalent in ILOM
showusers -g # show /SP/users
showhost       show /HOST
showkeyswitch  show /SYS keyswitch_state
 
showsc param   show target property
VIEW DIAG LEVEL show /HOST/diag
 
setsc diag_level set /HOST/diag trigger=All-resets
                 none, normal, User-reset, Power-on-reset, 
                 Error-reset
 
showdate       show /SP/clock datetime
 
showlogs       show /SP/logs/event/list
showlogs       show /SP/faultmgmt
               set /SP/logs/event clear=true
 
showenvironment show -o table -level all /SYS
shownetwork    show /SP/network
showlocator    show /SYS/LOCATE
password       set /SP/users/ password
restartssh     set /SP/services/ssh restart_sshd_action=true
usershow       show /SP/users
useradd user   create /SP/users/
 
Create "admin" create /SP/users/admin
               set /SP/users/admin role=Administrator
               set /SP/users/admin cli_mode=alom
 
userdel user   delete /SP/users/
userdel -y     delete -script /SP/users/
userpassword   set /SP/users/ password
userperm user  set /SP/users/ role=permissions
consolehistory SEE RENE FOR MORE INFO ;)
console -f     start -force /SP/console
break -c       set /HOST send_break_action=break
break -D       set /HOST send_break_action=dumpcore
 
bootmode       set /HOST/bootmode property=value
                state=value "reset_nvram or normal"
                script="setenv auto-boot? false"
 
flashupdate -s load -source tftp://ipaddr/pathname
reset -c       reset /SYS
reset -y -c    reset -script /SYS
powercycle     stop /SYS
powercycle -y  stop -script /SYS
powercycle -f  stop -force /SYS
               start -force /SYS
poweroff       stop /SYS
poweroff -y    stop -script /SYS
poweroff -f    stop -force /SYS
poweron        start /SYS
clearfault uuid set /SYS/component clear_fault_action=true
removefru -y   set /SYS/PS0 prepare_to_remove_action=true
enablecomponent set /SYS/component component_state=enabled
disablecomp    set /SYS/component component_state=disabled
clearasrdb     No equivalent in ILOM
resetsc        reset /SP
resetsc -y     reset -script /SP
userclimode    set /SP/users/ cli_mode=default or alom
logout         exit
 
DISPLAYING DIMM INFORMATION:
 
-> show /SYS/MB/CMP0/BR0/CH0/D#
 
    Targets:
        SEEPROM
        SERVICE
        PRSNT
        T_AMB
 
    Properties:
        type = DIMM
        component_state = Enabled
        fru_name = 4096MB DDR2 SDRAM FB-DIMM 333 (PC2 2600)
        fru_description = FBDIMM 4096 Mbyte
        fru_manufacturer = Samsung
        fru_version = FFFFFF
        fru_part_number = 501-7954-01 Rev 05
        fru_serial_number = 00CE01074627037EA3
        fault_state = OK
        clear_fault_action = (none)
 
Setting up Network Managment Port ILOM:
 
-> set pendingipaddress=
-> set pendingipdiscovery=static
-> set pendingipnetmask=255.255.255.0
-> set pendingipgateway=
-> set commitpending=true
 
Setting up Network Managment Port ALOM:
 
sc> setsc if_network true
sc> setsc if_connection "telnet or ssh"
sc> setsc netsc_dhcp false
sc> setsc netsc_ipaddr 
sc> setsc netsc_ipnetmask 
sc> setsc netsc_ipgateway 
sc> setsc netsc_commit
 
 
ALOM CMT Variable Comparison
 
ALOM:          ILOM:
diag_level      /HOST/diag level
diag_mode       /HOST/diag mode
diag_trigger    /HOST/diag trigger
diag_verbosity  /HOST/diag verbosity
if_connection   /SP/services/ssh state
if_emailalerts  /SP/clients/smtp state
if_network      /SP/network state
if_snmp         /SP/services/snmp
mgt_mailalert   /SP/alertmgmt/rules
mgt_mailhost    /SP/clients/smtp address
mgt_snmptraps   /SP/sevices/snmp v1|v2c|v3
mgt_traphost    /SP/alertmgmt/rules
                /SP/services/snmp port
netsc_dhcp      /SP/network pendingipdiscovery
netsc_commit    /SP/network commitpending=true
netsc_enetaddr  /SP/network macaddress
netsc_ipaddr    /SP/network pendingipaddress
netsc_ipgateway /SP/network pendingipgateway
netsc_ipnetmask /SP/network pendingipnetmask
sc_backupuserdata /SP BACKUP_USER_DATA
sc_customerinfo /SP system_identifier
sc_escapechars  /SP/console escapechars
sc_powerondelay /SP/policy HOST_POWER_ON_DELAY
 
sc_powerstatememory /SP/policy HOST_LAST_POWER_STATE
                   States= enabled or disabled
 
ser_baudrate    /SP/serial/external pendingspeed
ser_data        No equivalent in ILOM
ser_parity      /SP/serial/external pendingparity
ser_stopbits    /SP/serial/external pendingstopbits
sys_autorestart /SP autorestart
sys_autorunonerror /SP autorunonerror
sys_eventlevel  No equivalent in ILOM
sys_enetaddr    /HOST macaddress
 
Procedure to set the Serial Number after PDB replacement:
 
sc> setsc sc_servicemode true
Warning: misuse of this mode may invalidate your warranty.
sc> setcsn -c chassis_serial_number
Are you sure you want to permanently set the Chassis Serial 
Number to chassis_serial_number[y/n]? y
Chassis serial number recorded.
sc> showplatform
SUNW,Sun-Fire-T5120
Chassis Serial Number: chassis-serial-number
Domain Status
------ ------
S0 Running
sc>setsc sc_servicemode false 
 
HOW TO RESET ILOM PASSWORD:
InfoDoc #: 209731
 
Power down the host system (using the front panel powerbutton)
or if an SP admin account exists, you can alternatiely use that
accounts ALOM Command Line Interface poweroff command.
 
Unplug the system's power cord(s) Remove the system's top cover.
 
 Insert a Jumper (you provide the jumper) on Pins 1 & 2 of 
PJ6801. This Jumper is located at the T5120/T5220 Motherboard
 
 Insert a Jumper (you provide the jumper) on Pins 1 & 2 of 
J10401. This Jumper is located on the SP of the T5140/T5240
 
- near the edge of the Motherboard at rear of the system -
  center of the rear edge of the Motherboard.
 
Plug in the system's power cord(s).
 
Press the front panel Power button to power on the system.
  You must power on the system to complete the reset.
 
This is because the state of the PJ6801 jumper cannot be
determined without the host CPU running.
 
The SP root password will be reset to the default  changeme.
 
Log in as root into the SP, using any available method - ssh
or a Web Browser to the SP's network management port or via
tip-hardware or a terminal server to the SP's serial management
port.
 
Password to use  is   changeme.
 
That is simply to see if the changeme password works.
 
Power down the system using the front panel
 
Unplug the system's power cord(s)
 
Remove the PJ6801 jumper. You must remove the PJ6801 jumper
after resetting the password, or the password will be reset
every time the SP is reset (e.g. at power up).
 
Replace the system's top cover.
 
Plug in the system's power cord(s).
 
If the system administrator would like the SP's root account
password changed to something other than  changeme  Then you
can change the root password using the usualSP's root account's
Command Line User Interface command. Whether or not the SP's 
root account password is to be changed to something different 
than changeme after the top cover has been reinstalled and the 
system's power cord(s) plugged-in, if the system administrator 
would like the Host powered-up, that can be done using the 
front panel power button or via a login to the SP's root or 
admin accounts and the appropriate START or power on, 
respectively, may be used.