Fujitsu M5000 manuale d’uso

Administration Guid e SPARC Enterprise M4000 / M5000 / M8000 / M9000 Servers Englis h[...]

[...]

SP ARC ® Enter pr ise M4000/M5000/M8000/M9000 Ser v ers Administration Guide Order No . U41680-J-Z816-3-76 P ar t No . 819-7897-12 Nov ember 2007, Revision A[...]

Please Recycle Copyright 2007 Sun Microsystems, Inc., 4150 Network Cir cle, Santa Clara, California 95054, U.S.A. All rights reserved. FUJITSU LIMITED provided technical input and r eview on portions of this material. Sun Microsystems, Inc. and Fujitsu Limited each own or control intellectual pr operty rights relating to products and technology des[...]

Copyright 2007 Sun Microsystems, Inc., 4150 Network Cir cle, Santa Clara, California 95054, Etats-Unis. T ous droits réservés. Entrée et revue tecnical fournies par FUJITSU LIMITED sur des parties de ce matériel. Sun Microsystems, Inc. et Fujitsu Limited détiennent et contrôlent toutes deux des dr oits de propriété intellectuelle r elatifs [...]

[...]

v Contents Preface xvii 1. Introduction to Server Software and Conf iguration 1 XSCF Firmware 1 Solaris OS Software 2 Software Services 3 Preparing for System Configuration 4 Information Needed 4 Initial Configuration T asks 5 Related Information 6 2. Access Control 7 About Access Control 7 Logging in to the System 8 XSCF User Accounts 8 XSCF Passw[...]

vi SPARC Enterprise Mx000 Servers Administration Guide • November 2007 ▼ T o Configur e an XSCF Passwor d Policy 14 ▼ T o Add an XSCF User Account 14 ▼ T o Create a Passwor d for an XSCF User 14 ▼ T o Assign Privileges to an XSCF User 15 ▼ T o Display the V ersion of Installed Firmwar e 15 Related Information 16 3. System Conf iguration[...]

Contents vii ▼ T o Set the Service Processor ’s DNS Name Server 33 ▼ T o Enable or Disable Use of an LDAP Server for Authentication and Privilege Lookup 33 ▼ T o Configur e the XSCF as an LDAP Client 34 ▼ T o Configur e the XSCF as an NTP Client 35 ▼ T o Configur e the XSCF as an NTP Server 35 ▼ T o Display the NTP Configuration 36 ?[...]

viii SPARC Enterprise Mx000 Servers Administration Guide • November 2007 Domain Component List and Logical System Boards 54 Overview of Steps for Domain Configuration 55 Domain Configuration Example 55 Domain Communication 57 DSCP Network 58 Accessing a Domain Console from the Service Pr ocessor 58 Logging in Directly to a Domain 58 DVD Drive or [...]

Contents ix XSCF Shell Procedures for Auditing 68 ▼ T o Enable or Disable W riting of Audit Records to the Audit T rail 68 ▼ T o Configur e an Auditing Policy 68 ▼ T o Display Whether Auditing is Enabled Or Disabled 69 ▼ T o Display Current Auditing Policy , Classes, or Events 69 Related Information 69 6. Log Archiving Facility 71 About Log[...]

x SPARC Enterprise Mx000 Servers Administration Guide • November 2007 License V iolations 82 XSCF Shell Procedures for Using COD 82 ▼ T o Install a COD License 83 ▼ T o Delete a COD License 83 ▼ T o Reserve Licenses for Allocation 84 ▼ T o Increase or Decr ease Headroom 85 ▼ T o Disable Headroom 86 ▼ T o Display COD Information 86 ▼[...]

xi Figur es FIGURE 2-1 Location of the Operator Panel MODE Switch on a Midrange Server 12 FIGURE 2-2 Operator Panel on a High-end Server 13 FIGURE 3-1 Relationship of the Service Processor and the DSCP Network to the Domains 18 FIGURE 4-1 A Physical System Board in Uni-XSB Mode on an M4000 Midrange Server 48 FIGURE 4-2 A Physical System Board in Un[...]

xii SPARC Enterprise Mx000 Servers Administration Guide • November 2007[...]

xiii T ables TABLE 1-1 Software Services 3 TABLE 2-1 User Privileges 10 TABLE 3-1 XSCF Network Interfaces 20 TABLE 3-2 LDAP LDIF File Attributes 22 TABLE 3-3 XSCF and Domain Time Synchronization 24 TABLE 4-1 Boards, Domains, and Domain ID Numbers 51 TABLE 4-2 Resource Assignment in Quad-XSB Mode on an M4000 Midrange Server 53 TABLE 4-3 Resource Ass[...]

xiv SPARC Enterprise Mx000 Servers Administration Guide • November 2007[...]

xv Code Examples CODE EXAMPLE 3-1 LDAP Schema 22 CODE EXAMPLE 3-2 Sample LDAP LDIF File Attributes 22 CODE EXAMPLE 3-3 Sample ntp.conf File for a Domain using XSCF as NTP Server 24[...]

xvi SPARC Enterprise Mx000 Servers Administration Guide • November 2007[...]

Preface xvii Pr eface The SP ARC Enterprise M4000/M5000/M8000/M9000 Servers Administration Guide describes the system configuration procedur es, which focuses on the initial settings of the SP ARC Enterprise M4000/M5000/M8000/M9000 servers. This document describes the settings of service processors which embedded in the SP ARC Enterprise M4000/M500[...]

xviii SPARC Enterprise Mx000 Servers Administration Guide • November 2007 ■ “Syntax of the Command Line Interface (CLI)” on page xxiv ■ “Software License” on page xxiv ■ “Fujitsu Siemens Computers W elcomes Y our Comments” on page xxv Audience This manual is intended for users, who administrate SP ARC Enterprise M4000/M5000/M800[...]

Preface xix ■ Chapter 7 This chapter covers capacity on demand (COD) and licenses. ■ Appendix A This appendix contains information on mapping device path names. Glossary and Index ■ Glossary The glossary explains the terms used in this manual ■ Index The index provides keywor ds and corresponding r eference page numbers so that the reader c[...]

xx SPARC Enterprise Mx000 Servers Administration Guide • November 2007 Note – " x " in the order number is the version number of the manual. 1. Manuals on the W eb The latest versions of all the SP ARC Enterprise Series manuals are av ailable at the following website. The latest manuals can be do wnloaded in a batch. http://manuals.fu[...]

Preface xxi The latest information about other documents and the supporting of the SP ARC Enterprise series are provided on the website. a. Message http://www.fujitsu.com/sparcenterprise/msg/ b . Downloading the f irmware program Y ou can download the latest f iles of f irmware at the following website. http://www.fujitsu.com/sparcenterprise/firmwa[...]

xxii SPARC Enterprise Mx000 Servers Administration Guide • November 2007 Models The model names used in this manual are as follows. Abbreviated Title Full Title Overvie w Guide SP ARC Enterprise M4000/M5000 Servers Overvie w Guide SP ARC Enterprise M8000/M9000 Servers Overvie w Guide Service Manual SP ARC Enterprise M4000/M5000 Servers Service Ma[...]

Preface xxiii T ext Conventions This manual uses the following fonts and symbols to express specif ic types of information. Pr ompt Notations The following prompt notations ar e used in this manual. Fonts/symbols Meaning Example AaBbCc123 What you type, when contrasted with on-screen computer output. This font repr esents the example of command inp[...]

xxiv SPARC Enterprise Mx000 Servers Administration Guide • November 2007 Syntax of the Command Line Interface (CLI) The command syntax is described below . Command syntax The command syntax is as follows: ■ A variable that requir es input of a value must be enclosed in <>. ■ An optional element must be enclosed in [ ]. ■ A group of op[...]

Preface xxv Fujitsu Siemens Computers W elcomes Y our Comments W e would appreciate your comments and suggestions to improve this document. Y ou can submit your comments by using “Reader's Comment Form” on page xxvi[...]

xxvi SPARC Enterprise Mx000 Servers Administration Guide • November 2007 Reader's Comment Form[...]

Preface xxvii FOLD AND T APE FOLD AND T APE BUSINESS REPLY MAIL FIRST -CLASS MAIL PERM IT NO 741 SUNNYV AL E CA NO POST AGE NECESSAR Y IF MAILED IN THE UNITED ST ATES POST AGE WILL BE P AID BY ADDRESSEE FUJITSU COMPUTER SYST EMS AT T E N T I O N ENGINEERING OPS M/S 249 1250 EAST ARQUES A VENUE P O BOX 3470 SUNNYV ALE CA 94088-3470[...]

xxviii SPARC Enterprise Mx000 Servers Administration Guide • November 2007[...]

1 CHAPTER 1 Intr oduction to Server Software and Conf iguration This chapter provides an overview of the SP ARC ® Enterprise M4000/M5000/M8000/M9000 server software and configuration. It has these sections: ■ XSCF Firmware ■ Solaris OS Software ■ Software Services ■ Preparing for System Conf iguration ■ Related Information Note – This [...]

2 SPARC Enterprise Mx000 Servers Administration Guide • November 2007 The XSCF firmwar e consists of system management applications and two user interfaces to configur e and control them: ■ XSCF W eb, a browser-based graphical user interface ■ XSCF Shell, a terminal-based command-line interface Y ou can access the XSCF firmware by logging in [...]

Chapter 1 Introduction to Ser ver Software and Configuration 3 Softwar e Services T ABLE 1- 1 contains an overview of XSCF firmware services and networks that are part of your server , and where they ar e documented. T ABLE 1-1 Software Services Service Description Access control Access control includes logging in to the system, user accounts, pass[...]

4 SPARC Enterprise Mx000 Servers Administration Guide • November 2007 Pr eparing for System Configuration This section lists the information needed for initial system configuration and the initial configuration tasks. Information Needed Before you conf igure the softwar e, have the following available: ■ Access to the Service Processor with the[...]

Chapter 1 Introduction to Ser ver Software and Configuration 5 ■ The number of domains in your system. By default, there is one domain and its domain number is 0 (zero). The number of domains could be different from the default if you specified another number of domains when you order ed your system. ■ Firmware version information if you are up[...]

6 SPARC Enterprise Mx000 Servers Administration Guide • November 2007 Related Information For additional information on this chapter ’s topics, see: Note – man pages available on the Service Processor ar e followed by (8), for example, version (8); they are also available in the SP ARC Enterprise M4000/M5000/M8000/M9000 Servers XSCF Reference[...]

7 CHAPTER 2 Access Contr ol Access control is a way of granting access to the system functions or components only to those users who have been authenticated by the system and who have appropriate privileges . Access contr ol depends on the proper conf iguration of the general security services provided by the server . This chapter contains these se[...]

8 SPARC Enterprise Mx000 Servers Administration Guide • November 2007 Logging in to the System There ar e two entities that can be logged in to on the system, a Service Processor and a Solaris domain. Y ou initially log in to the Service Processor using a serial connection from a terminal device. A terminal device can be an ASCII terminal, a work[...]

Chapter 2 Access Control 9 Note – Y ou cannot use the following user account names, as they are reserved for system use: root, bin, daemon, adm, operator , nobody , sshd, rpc, rpcuser , ldap, apache, ntp, admin, and default. XSCF supports multiple user accounts for log in to the Service Processor. The user accounts are assigned privileges; each p[...]

10 SPARC Enterprise Mx000 Servers Administration Guide • November 2007 The system provides the pr edefined privileges shown in T ABLE 2-1 . These are the only privileges allowed in the server . Y ou cannot define additional privileges. T ABLE 2-1 User Privileges Privilege Capabilities none None. When the local privilege for a user is set to none [...]

Chapter 2 Access Control 11 The domainadm , domainmgr , and domainop privileges must include the domain number , numbers, or range of numbers to associate with a particular user account. A user can have multiple privileges, and a user can have privileges on multiple domains. User privileges are authenticated locally by default. Y ou can set up the [...]

12 SPARC Enterprise Mx000 Servers Administration Guide • November 2007 ▼ T o Log in Initially to the XSCF Console This procedur e can be used for initial login or for lost password access. 1. Log in to the XSCF console with the default login name from a terminal device connected to the Service Processor 1 . Y ou must have physical access to the[...]

Chapter 2 Access Control 13 FIGURE 2-1 Location of the Operator Panel MODE Switch on a Midrange Server FIGURE 2-2 Operator Panel on a High-end Server Y ou must toggle the MODE switch within one minute of the login prompt or the login process times out. 2. T oggle the MODE switch using one of two methods, as follows: ■ If the switch is in the Serv[...]

14 SPARC Enterprise Mx000 Servers Administration Guide • November 2007 ■ If the switch is in the Locked position, turn it to the Service position, leave it there for at least five seconds, and then turn it back to the Locked position. Press the Enter key . When the toggling is successful, you are logged in to the Service Pr ocessor shell as the[...]

Chapter 2 Access Control 15 ▼ T o Add an XSCF User Account When you add a new user account, the account has no password, and cannot be used for logging in until the password is set or Secure Shell public key authentication is enabled for the user . 1. Log in to the XSCF console with useradm privileges. 2. T ype the adduser command: where user is [...]

16 SPARC Enterprise Mx000 Servers Administration Guide • November 2007 2. T ype the setprivileges command: where user is the user name to assign privileges for , and privileges is one or more privileges, separated by a space, to assign to this user . The domainadm , domainmgr , and domainop privileges must include the domain number , numbers, or [...]

Chapter 2 Access Control 17 Related Information For additional information on this chapter ’s topics, see: Resource Inf ormation man pages password (8), version (8), adduser (8), deleteuser (8), enableuser (8), disableuser (8), showuser (8), setpasswordpolicy (8), setprivileges (8), showpasswordpolicy (8), setlookup (8), setldap (8), showldap (8)[...]

17 CHAPTER 3 System Conf iguration This chapter describes how to initially configure system services and internal networks that enable communication between the components of your server . This chapter contains these sections: ■ About System Services ■ XSCF Shell Procedur es for System Configuration ■ Related Information About System Services[...]

18 SPARC Enterprise Mx000 Servers Administration Guide • November 2007 DSCP Network Between a Service Pr ocessor and a Domain The Domain to Service Processor Communications Protocol (DSCP) service pr ovides a secure TCP/IP- and PPP-based communication link between the Service Processor and each domain. W ithout this link, the Service Processor ca[...]

Chapter 3 System Configuration 19 In a system with redundant Service Pr ocessors, the standby Service Processor does not communicate with the domains. In the event of a failover , the newly active Service Processor assumes the IP addr ess of the failed-over Service Processor. DSCP includes its own security measures that prohibit a compr omised doma[...]

20 SPARC Enterprise Mx000 Servers Administration Guide • November 2007 T ABLE 3-1 lists the XSCF network interfaces. On a high-end server , one Service Processor is conf igured as active and the other is configur ed as standby . The XSCF network between the two Service Processors allows them to exchange system management information and, in case [...]

Chapter 3 System Configuration 21 Once you have configur ed the XSCF network, it requires no day-to-day management. Domain Name Service The Domain Name Service (DNS) allows computers on a network to communicate with each other by using centrally maintained DNS names instead of locally stored IP addresses. If you conf igure the Service Pr ocessor to[...]

22 SPARC Enterprise Mx000 Servers Administration Guide • November 2007 ■ Optional: The IP address or hostname, and port, of up to two alternative LDAP directories ■ The distinguished name (DN) of the search base to use for lookup ■ Whether T ransport Layer Security (TLS) is to be used 3. V erify that the LDAP service is working. On the LDAP[...]

Chapter 3 System Configuration 23 Refer to the Solaris OS documentation collection for more information on LDAP servers. If the LDAP client is configur ed and enabled on the Service Processor , lookups are first performed locally , and then through the LDAP server . If you execute the setprivileges command for a user without specifying privileges, [...]

24 SPARC Enterprise Mx000 Servers Administration Guide • November 2007 T ABLE 3-3 shows how the time is synchronized. When domains are power ed on, they synchronize their clocks to the NTP server . If the domain and the Service Processor ar e using the same time source, one benef it is that events logged in the Solaris OS and on the Service Proce[...]

Chapter 3 System Configuration 25 If you are using an external NTP server for the domains, refer to the xntpd (1M) man page or to the Solaris OS documentation collection for information on creating the ntp.conf file for each domain. SNMP Service A Simple Network Management Protocol (SNMP) agent can be configur ed and enabled on the Service Processo[...]

26 SPARC Enterprise Mx000 Servers Administration Guide • November 2007 3. Configuring the SNMP agent 4. Enabling the SNMP agent 5. Setting up your SNMP manager application to communicate with the Service Processor SNMP agent based on the conf iguration you used for the agent, namely , user , port, and trap information. The SNMP agent is active on[...]

Chapter 3 System Configuration 27 The authentication mechanisms allowed by the mail server are pop , smtp-auth ,o r none (the default). The SMTP authentications supported are plain and login . SSH Service SSH service is disabled by default. T o enable it, use the setssh command. A host public key is requir ed for SSH service. Altitude Setting The a[...]

28 SPARC Enterprise Mx000 Servers Administration Guide • November 2007 ■ T o Set the T imezone, Daylight Saving T ime, Date, and T ime Locally on the Service Processor ■ T o Create a USM User Known to the SNMP Agent ■ T o Display USM Information for the SNMP Agent ■ T o Create a V ACM Group ■ T o Create a V ACM V iew ■ T o Give a V AC[...]

Chapter 3 System Configuration 29 ■ Use the setdscp command with no options (interactive mode). Y ou are prompted to enter all the DSCP IP addr esses sequentially . A command output example of this interactive mode is: i. For each prompt, press the Enter key to accept the displayed value, or type a new value followed by the Enter key . ii. T o sa[...]

30 SPARC Enterprise Mx000 Servers Administration Guide • November 2007 2. T ype the showdscp command: Command output example for a DSCP network of 10.1.1.0 and a DSCP netmask of 255.255.255.0 is: ▼ T o Conf igure the XSCF Network Interfaces Settings to configur e the XSCF network must be applied to XSCF , and the Service Processor must be r ese[...]

Chapter 3 System Configuration 31 b. T o enable the specif ied network interface: where -c specif ies whether to enable or disable the specified network interface, and interface specifies the network interface to be enabled. For additional information on the setnetwork command, including specifying takeover IP addresses, r efer to the setnetwork (8[...]

32 SPARC Enterprise Mx000 Servers Administration Guide • November 2007 2. T ype the applynetwork command: The applynetwork command displays the information that has been set for the XSCF network, and asks you to apply the settings. 3. Execute the rebootxscf command to make the settings effective: 4. V erify the operation with the shownetwork comm[...]

Chapter 3 System Configuration 33 a. T o set the Service Processor host name: where xscfu can be xscf#0 (XSCF Unit 0) or xscf#1 (XSCF Unit 1 in a high- end server); hostname is the host name to be set for the specified Service Processor (XSCF Unit). b. T o set the Service Processor domain name: 3. T o verify the operation, type the showhostname com[...]

34 SPARC Enterprise Mx000 Servers Administration Guide • November 2007 2. T ype the setlookup command: The -a option sets the authentication lookup to either local or in LDAP; the -p option sets the privileges lookup to either local or in LDAP . When local is specified, lookup is only done locally; when ldap is specified, lookup is f irst done lo[...]

Chapter 3 System Configuration 35 ▼ T o Conf igure the XSCF as an NTP Client If you are using NTP , an ntp.conf f ile must be created on the domains. Refer to “T ime Synchronization and NTP Service” on page 23 for information. This section describes how to set the XSCF as an NTP client. 1. Log in to the XSCF console with platadm privileges. 2[...]

36 SPARC Enterprise Mx000 Servers Administration Guide • November 2007 4. T o verify the operation, type the showntp command. ▼ T o Display the NTP Conf iguration 1. Log in to the XSCF console. 2. T ype the showntp command: where the -a option displays all the NTP servers configur ed for use, the -l option displays time synchroiization informat[...]

Chapter 3 System Configuration 37 4. T ype the setdate command: where date is the date and time you want to set. For mor e information on the setdate command, refer to the setdate (8) man page or to the Reference Manual. 5. After specifying the date, you are prompted to reset the Service Processor, so that the date and time become effective. T ype [...]

38 SPARC Enterprise Mx000 Servers Administration Guide • November 2007 3. T o verify the operation, type the showsnmpusm command. ▼ T o Display USM Information for the SNMP Agent 1. Log in to the XSCF console with platadm or platop privileges. 2. T ype the showsnmpusm command: Command output example is: ▼ T o Cr eate a V ACM Group 1. Log in t[...]

Chapter 3 System Configuration 39 2. T ype the setsnmpvacm command: where OID_subtr ee is the MIB OID subtree for the view (values start at .1 for the entire MIB tr ee, and can be limited to certain portions of the tree by using the optional OID_Mask ), and viewname is the name of the view to create for the SNMP agent exported MIB information. V ie[...]

40 SPARC Enterprise Mx000 Servers Administration Guide • November 2007 2. T ype the showsnmpvacm command: Command output example is: ▼ T o Conf igure the SNMP Agent to Send V ersion 3 T raps to Hosts 1. Log in to the XSCF console with platadm privileges. 2. T ype the setsnmp command: where username is a user known to the SNMP agent, authenticat[...]

Chapter 3 System Configuration 41 encryption_password is the encryption password, trap_port is the listening port for the SNMP agent (the default is 161), and traphost is the host name where the SNMP manager application is running. If you do not specify the passwords, you ar e prompted to enter them. 3. T o verify the operation, type the showsnmp c[...]

42 SPARC Enterprise Mx000 Servers Administration Guide • November 2007 2. T ype the showsnmp command: Command output example is: ▼ T o Enable or Disable the Service Pr ocessor HTTPS Service 1. Log in to the XSCF console with platadm privileges. 2. Optionally , display the current status of the Service Processor HTTPS Service: 3. T ype the setht[...]

Chapter 3 System Configuration 43 ▼ T o Enable or Disable the Service Pr ocessor T elnet Service 1. Log in to the XSCF console with platadm privileges. 2. Optionally , display the current status of the Service Processor T elnet Service: 3. T ype the settelnet command: where function is either enable or disable . The T elnet service starts immedia[...]

44 SPARC Enterprise Mx000 Servers Administration Guide • November 2007 3. T ype the setssh command: where function is either enable or disable . Y ou must generate a host public key to use SSH. ▼ T o Generate a Host Public Key for SSH Service 1. Log in to the XSCF console with platadm privileges. 2. T ype the setssh command: For additional opti[...]

Chapter 3 System Configuration 45 Related Information For additional information on this chapter ’s topics, see: Resource Inf ormation man pages showdscp (8), setdscp (8), shownetwork (8), setnetwork (8), applynetwork (8), showhostname (8), sethostname (8), setroute (8) , showroute (8), setdate (8), showdate (8), showntp (8), setntp (8), xntpd (1[...]

46 SPARC Enterprise Mx000 Servers Administration Guide • November 2007[...]

47 CHAPTER 4 Domain Conf iguration This chapter describes how to set up and manage domains with XSCF firmware. On your server , by default from the factory , there is one domain with the Solaris OS installed, and its Domain Identification Number (DID) is 0 (zero). This chapter contains these sections: ■ About Domains ■ XSCF Shell Procedur es fo[...]

48 SPARC Enterprise Mx000 Servers Administration Guide • November 2007 Domains and System Boar ds A domain is an independent system resour ce that runs its own copy of the Solaris OS. Domains divide a system’s total resour ces into separate units that are not affected by each other ’s operations. Domains can be used for dif ferent types of pr[...]

Chapter 4 Domain Configuration 49 FIGURE 4-1 A Physical System Boar d in Uni-XSB Mode on an M4000 Midrange Server FIGURE 4-2 A Physical System Boar d in Uni-XSB Mode on a High-End Server ■ Quad-XSB ■ A PSB logically divided and configured into four XSBs ■ Each of the four XSBs contains one-quarter of the total board r esources: 1 CPU, 8 DIMMs[...]

50 SPARC Enterprise Mx000 Servers Administration Guide • November 2007 FIGURE 4-3 shows a PSB in Quad-XSB mode on a midrange server , and FIGURE 4-4 shows a PSB in Quad-XSB mode on a high-end server . The logical dividing between Uni-XSB and Quad-XSB is done using the setupfru command.[...]

Chapter 4 Domain Configuration 51 FIGURE 4-3 A Physical System Boar d in Quad-XSB Mode on a Midrange Server FIGURE 4-4 A Physical System Boar d in Quad-XSB Mode on a High-End Server A domain consists of one or more XSBs. Each domain runs its own copy of the Solaris OS. A domain must have, at a minimum, 1 CPU, 8 DIMMs, and I/O. In FIGURE 4-3 , one d[...]

52 SPARC Enterprise Mx000 Servers Administration Guide • November 2007 The number of domains allowed depends on which midrange or high-end server model you have. The default is one domain and the maximum number of domains is 24. Each domain is identified with a domain ID number , with the default domain as #0. T ABLE 4-1 shows the maximum number [...]

Chapter 4 Domain Configuration 53 FIGURE 4-5 Example of XSBs and Solaris Domains on a High-End Server The Solaris OS is installed on a per-domain basis. In the configuration shown in FIGURE 4-5 , there would be thr ee Solaris images, one for each domain. In high-end servers, the internal disks are available only for the first (top) I/O device and t[...]

54 SPARC Enterprise Mx000 Servers Administration Guide • November 2007 Domain Resour ce Assignment The assignment of CPU modules (CPUM), memory , and I/O to domains in Quad- XSB mode is shown in T ABLE 4-2 , T ABLE 4-3 and T ABLE 4-4 . T ABLE 4-2 Resource Assignment in Quad-XSB Mode on an M4000 Midrange Server XSB CPU Memory Board I/O 00-0 CPUM#0[...]

Chapter 4 Domain Configuration 55 In T ABLE 4-4 , the XSB board number xx is in the range of 00-15; the IOU board number xx is the IOU board number corresponding to the XSB board number. For example, XSB 00-0 has IOU#00-PCI#0. Domain Component List and Logical System Boar ds The domain component list (DCL) identifies the potential resour ces for a [...]

56 SPARC Enterprise Mx000 Servers Administration Guide • November 2007 Note – If you create a new domain, you have to install the Solaris OS on the domain. Refer to the Solaris OS documentation collection for instructions. Domain configuration typically includes these steps: 1. Log in to the XSCF console with appropriate privileges. 2. Specify [...]

Chapter 4 Domain Configuration 57 XSCF> addboard -c assign -d 0 00-0 00-2 XSB#00-0 will be assigned to DomainID 0. Continue?[y|n] : y XSB#00-2 will be assigned to DomainID 0. Continue?[y|n] : y XSCF> showdcl -v -d 0 DID LSB XSB Status No-Mem No-IO Float Cfg-policy 00 Powered Off FRU 00 00-0 False False False 01 00-2 False False False 02 - 03 [...]

58 SPARC Enterprise Mx000 Servers Administration Guide • November 2007 Domain Communication Domain communication includes: ■ Domain and Service Processor internal communication over the DSCP network ■ Accessing a domain console from the Service Processor ■ Logging in to a domain using an Ethernet connection 04 - 05 - 06 - 07 - 08 - 09 - 10 [...]

Chapter 4 Domain Configuration 59 DSCP Network The DSCP network establishes a link, using IP addresses, between the Service Processor and each domain. This link enables communication between the Service Processor and domains, and the secur e transfer of information. Each domain must have its own IP address, and the Service Pr ocessor must have its [...]

60 SPARC Enterprise Mx000 Servers Administration Guide • November 2007 Backup and Restor e Operations For domain backup and restor e operations, refer to your backup software documentation for instructions. The Solaris OS documentation collection also contains information on backup and restore operations. Dynamic Reconf iguration Dynamic reconf i[...]

Chapter 4 Domain Configuration 61 3. V erify the operation with the showfru command. ▼ T o Set Up a Domain Component List 1. Log in to the XSCF console with platadm privileges. 2. T ype the setdcl command: where domain_id is the domain you are setting the DCL for; lsb is the LSB number; and xsb is the XSB number . 3. V erify the operation with th[...]

62 SPARC Enterprise Mx000 Servers Administration Guide • November 2007 2. T ype the poweron command: where domain_id is the domain you want to power on. Only a user with platadm or fieldeng privileges can use the -a option to turn on power to all domains. 3. V erify the domain is powered on by opening a console to it, with the console command. Re[...]

Chapter 4 Domain Configuration 63 ▼ T o Attach a DVD or T ape Drive While the Solaris OS Is Running (M8000/M9000 Servers) 1. If the V olume Management Daemon ( vold ) is running, stop the daemon: 2. Log in to the XSCF console with platadm privileges. 3. T ype the cfgdevice command: a. T o check the status of current drives: b. T o attach a drive:[...]

64 SPARC Enterprise Mx000 Servers Administration Guide • November 2007 2. Detach the drive by typing the cfgadm command: where Ap_Id is the attachment point of the contr oller . For example, if the drive is connected to controller c0 , you would type: 3. Log in to the XSCF console with platadm privileges. 4. T ype the cfgdevice command: a. T o ch[...]

Chapter 4 Domain Configuration 65 Related Information For additional information on this chapter ’s topics, see: Resource Inf ormation man pages setupfru (8), showfru (8), setdcl (8), showdcl (8), addboard (8), moveboard (8), deleteboard (8), showboards (8), xntpd (1M), showdevices (8), showconsolepath (8), console (8), sendbreak (8), poweron (8)[...]

65 CHAPTER 5 Audit Conf iguration Y our server can have multiple domains. Those domains must be as secure as if they were running on physically separate servers. T o help ensure that level of security , XSCF firmwar e provides the audit measur es described in this chapter . This chapter contains these sections: ■ About Auditing ■ XSCF Shell Pro[...]

66 SPARC Enterprise Mx000 Servers Administration Guide • November 2007 Audit Recor ds Audit recor ds are stor ed in audit files on a 4-megabyte f ile system on the Service Processor. Y ou cannot change the size reserved for the audit f iles, but you can transfer the files manually to r emote storage at any time. Y ou can also configure auditing f[...]

Chapter 5 Audit Configuration 67 ■ Changes to the time The minimum data recor ded for each event includes: ■ Date and time of the event ■ T ype of event ■ Who caused the event ■ Outcome of the event (success or failure) Audit Classes Audit classes are categories for grouping and sorting audit events. The server provides a pr edefined set [...]

68 SPARC Enterprise Mx000 Servers Administration Guide • November 2007 Audit File T ools Y ou can manage audit files from the Service Pr ocessor , using a tool for viewing audit files. Refer to the viewaudit (8) man page for details on this tool. XSCF Shell Pr ocedures for Auditing This section describes these tasks: ■ T o Enable or Disable W r[...]

Chapter 5 Audit Configuration 69 3. V erify the operation with the showaudit all command: ▼ T o Display Whether Auditing is Enabled Or Disabled 1. Log in to the XSCF console with auditadm privileges. 2. T ype the showaudit command: ▼ T o Display Curr ent Auditing Policy , Classes, or Events 1. Log in to the XSCF console with auditadm privileges[...]

70 SPARC Enterprise Mx000 Servers Administration Guide • November 2007[...]

71 CHAPTER 6 Log Ar chiving Facility Y ou can set up the Service Processor to automatically archive its log data on a remote host. This chapter contains these sections: ■ About Log Archiving ■ Solaris OS Procedur es for Log Archiving ■ XSCF Shell Procedur es for Log Archiving ■ Related Information About Log Ar chiving The persistent storage[...]

72 SPARC Enterprise Mx000 Servers Administration Guide • November 2007 All connections established through log ar chiving are encrypted. The log ar chiving feature pr ovides the ability to use an RSA public key to authenticate the archive host. Y ou manage this public key on the Service Processor. By default, log archiving is disabled. T o use lo[...]

Chapter 6 Log Archiving Facility 73 FIGURE 6-1 Log Ar chiving As shown in FIGURE 6-1 , (1) Before enabling log ar chiving, create an ar chive directory on the archive host. There should be a separate archive dir ectory for each system that uses the archive host. The directory permissions should be set so that only authorized users can access its co[...]

74 SPARC Enterprise Mx000 Servers Administration Guide • November 2007 Ar chive Host Requir ements As the Service Processor keeps track of ar chive space on the archive host, you should not store other f iles in these archive dir ectories. It is possible to set up the Service Processor so that it uses one of the domains in the same system as an a[...]

Chapter 6 Log Archiving Facility 75 XSCF Shell Pr ocedures for Log Ar chiving This section describes these tasks: ■ T o Enable Log Archiving ■ T o Disable Log Archiving ■ T o Display Log Archiving Configuration and Status ■ T o Display Log Archiving Error Details ▼ T o Enable Log Ar chiving 1. Log in to the XSCF console with platadm privi[...]

76 SPARC Enterprise Mx000 Servers Administration Guide • November 2007 ▼ T o Display Log Ar chiving Configuration and Status 1. Log in to the XSCF console with platadm , platop ,o r fieldeng privileges. 2. T ype the showarchiving command: ▼ T o Display Log Ar chiving Error Details 1. Log in to the XSCF console with platadm , platop ,o r field[...]

77 CHAPTER 7 Capacity on Demand This chapter describes how to manage system resources with the Capacity on Demand (COD) feature of your server . Note – The COD feature is available only on high-end servers and those midrange servers designated as COD models. If you have a midrange server that is not a COD model, the information in this section do[...]

78 SPARC Enterprise Mx000 Servers Administration Guide • November 2007 These sections provide details: ■ COD Boards ■ COD License Purchase ■ License Installation ■ License Allocation ■ Headroom Management ■ License V iolations COD Boar ds A COD board is a system boar d that has been configur ed at the factory for COD capability . COD [...]

Chapter 7 Capacity on Demand 79 COD License Pur chase The purchase of a COD R TU license entitles you to receive a license key , which enables the appropriate number of COD processors. A license key can grant access to multiple R TUs. A COD license is assigned to a specific server , one license per processor (CPU). All the licenses assigned to a se[...]

80 SPARC Enterprise Mx000 Servers Administration Guide • November 2007 One way to preserve copies of your licenses and license keys is to save the output of the showcodlicense -v command. Y ou can cut-and-paste the this output to restore any lost license keys. For example: T o restore lost licenses, enter a command similar to the following for ea[...]

Chapter 7 Capacity on Demand 81 Y ou can reserve COD licenses for specific domains by using the setcod command. After power on, reserved licenses ar e first allocated to their domains, and then remaining licenses are allocated on a f irst-come, first-served basis to the remaining resour ces. When a domain is powered of f, the reverse happens: f irs[...]

82 SPARC Enterprise Mx000 Servers Administration Guide • November 2007 License V iolations A license violation occurs if more resour ces are in use than are currently licensed on the server . These events can cause a license violation: ■ The license database is lost or corrupted while the system is running. This state is detected on the subsequ[...]

Chapter 7 Capacity on Demand 83 ▼ T o Install a COD License This procedur e installs a COD license and, if headroom is enabled, decreases headroom to compensate for each new license. This automatic reduction in headroom is designed to avoid accidental abuse of headroom. Y ou can increase headroom again manually after installing the COD license. S[...]

84 SPARC Enterprise Mx000 Servers Administration Guide • November 2007 where license-signature is the complete COD license key . 4. V erify that the license key was removed from the license database by typing the showcodlicense -r command. The COD R TU license key that you deleted should not be listed in the showcodlicense output. See “T o Disp[...]

Chapter 7 Capacity on Demand 85 b. Enter the number of licenses reserved for each domain. The currently r eserved number appear in parentheses. Do not exceed the number of available licenses. T o leave a reservation unchanged, press Return. 3. V erify the allocation with the showcod command. ▼ T o Incr ease or Decrease Headr oom 1. Log in to the [...]

86 SPARC Enterprise Mx000 Servers Administration Guide • November 2007 3. V erify the headroom quantity is correct by typing the showcod command. For example, if you entered 4 as the headroom number , the output would be similar to: ▼ T o Disable Headr oom 1. Log in to the XSCF console with platadm privileges. 2. T ype the setcod command and a [...]

Chapter 7 Capacity on Demand 87 2. T ype the showcod command. The output displays the server ’s Chassis HostID, number of licenses ( PROC RTUs installed ), headroom quantity , and number of licenses reserved for each domain. For example: T o display COD information only for a specific domain, use the showcod -d domain_id command, where domain_id [...]

88 SPARC Enterprise Mx000 Servers Administration Guide • November 2007 2. T ype the showcodlicense command. The output displays the resource description, license version number , expiration date, number of licenses, and license status. For example: T o display license information in raw key format, use the -r option. For example: T o display lice[...]

Chapter 7 Capacity on Demand 89 ▼ T o Display Usage Statistics for COD Resour ces 1. Log in to the XSCF console with platadm or platop privileges, or domainadm , domainop ,o r domainmgr privileges for a specif ic domain. 2. T ype the showcodusage command. The output displays a summary of license usage by resource type and for each domain. For exa[...]

90 SPARC Enterprise Mx000 Servers Administration Guide • November 2007 Related Information For additional information on this chapter ’s topics, see: Resource Inf ormation man pages setcod (8), showboards (8), showcodusage (8), showcodlicense (8), showcod (8), addcodlicense (8), deletecodlicense (8) COD User ’ s Guide Ordering COD licenses; a[...]

91 APPENDIX A Mapping Device Path Names This appendix describes how to map device path names to physical system devices. It contains these sections: ■ Device Mapping and Logical System Board Numbers ■ CPU Mapping ■ I/O Device Mapping Device Mapping and Logical System Boar d Numbers The physical address r epresents a physical characteristic th[...]

92 SPARC Enterprise Mx000 Servers Administration Guide • November 2007 An LSB has four processors as a maximum (when a Uni-XSB is assigned to the LSB); therefor e, an LSB needs 16 processor IDs. Note that 32 IDs ar e assigned for future expansion. T ABLE A-1 shows the relationship between LSB numbers and starting pr ocessor ( proc ) numbers, in h[...]

Appendix A Mapping Device P ath Names 93 CPU Numbering Examples This section contains examples of CPU numbering, using the output of the showboards command on the Service Processor , and the output of the prtdiag command on a domain. XSCF> showboards -a XSB DID(LSB) Assignment Pwr Conn Conf Test Fault ---- -------- ----------- ---- ---- ---- ---[...]

94 SPARC Enterprise Mx000 Servers Administration Guide • November 2007 I/O Device Mapping I/O device paths are dictated by which LSB the I/O unit is assigned to. The M4000 and M5000 servers have only one I/O controller on the I/O unit (IOU). For an XSB in Uni-XSB mode, all I/O is on XSB# xx -0. For an XSB in Quad-XSB mode, internal resour ces, th[...]

Appendix A Mapping Device P ath Names 95 I/O Device Mapping on the M4000 and M5000 Servers T ABLE A-3 shows the device mapping on a midrange server . In the device path, x is LSB-dependent, and is assigned a value as shown in T ABLE A-2 . Internal Devices on the M4000 and M5000 Servers The internal M4000/M5000 devices, which are located at the XSB [...]

96 SPARC Enterprise Mx000 Servers Administration Guide • November 2007 I/O Device Mapping on the M8000 and M9000 Servers T ABLE A-6 shows the device mapping on a high-end server . In the PCIe device path, x is LSB-dependent, and is assigned a value as shown in T ABLE A-2 . xx is the XSB number and is in the range from 00-15. HD1 System /pci@ x 0,[...]

Appendix A Mapping Device P ath Names 97 Internal Devices on the M8000 and M9000 Servers The IOUA is a PCIe Host Bus Adapter that provides access to internal devices when installed at specific locations. The IOUA contains two 1Gb Ethernet ports on the card (“on-board”). When the IOUA is installed at specific locations, it also provides access t[...]

98 SPARC Enterprise Mx000 Servers Administration Guide • November 2007 Sample cfgadm Output and IOU Device Matrix This section contains: ■ Sample output for the command cfgadm -s "select=class(pci)" on an unpopulated server . As you connect devices, the cfgadm output will change to ref lect the device type and connection status on you[...]

Appendix A Mapping Device P ath Names 99 SP ARC Enterprise M4000 and M5000 Servers SP ARC Enterprise M4000 Server sample output: SP ARC Enterprise M5000 Server sample output: # cfgadm -s "select=class(pci)" Ap_Id Type Receptacle Occupant Condition iou#0-pci#0 unknown empty unconfigured unknown iou#0-pci#1 unknown empty unconfigured unknow[...]

100 SPARC Enterprise Mx000 Servers Administration Guide • November 2007 SP ARC Enterprise M8000 and M9000 Servers SP ARC Enterprise M8000 Server sample output: # cfgadm -s "select=class(pci)" Ap_Id Type Receptacle Occupant Condition iou#1-pci#0 unknown empty unconfigured unknown iou#1-pci#1 unknown empty unconfigured unknown iou#1-pci#4[...]

Appendix A Mapping Device P ath Names 101 SP ARC Enterprise M9000 Server sample output: # cfgadm -s "select=class(pci)" Ap_Id Type Receptacle Occupant Condition iou#0-pci#0 unknown empty unconfigured unknown iou#0-pci#1 unknown empty unconfigured unknown iou#0-pci#2 unknown empty unconfigured unknown iou#0-pci#3 unknown empty unconfigured[...]

102 SPARC Enterprise Mx000 Servers Administration Guide • November 2007[...]

103 Glossary audit The collection of data about the use of system resour ces. Auditing provides a recor d of security-related system events. audit class A grouping of audit events. Audit classes pr ovide a way to select a group of events to audit. audit event A security-related system action that is audited. Events ar e grouped into classes. audit [...]

104 SP ARC Enterpr ise Mx000 Ser vers Administration Guide • Nov ember 2007 domain A set of one or more system boar ds that acts as a separate system capable of booting the operating system and running an operating system independently of any other domains. Domains that share a system ar e characteristically independent of each other . Each domai[...]

Glossary 105 f ield-replaceable unit (FRU) A part that can be replaced by f ield engineers when servicing the server . FRU See field-r eplaceable unit (FRU). hostid Unique system identifier . I/O unit (IOU) The I/O unit, which is common to midrange and high-end servers, monitors I/O events and supports PCIe. Further , the midrange server supports P[...]

106 SP ARC Enterpr ise Mx000 Ser vers Administration Guide • Nov ember 2007 XSB See eXtended system board (XSB). XSCF See eXtended System Control Facility (XSCF).[...]

107 Index A addboard command, 55 , 60 addcodlicense command, 82 , 83 adduser command, 14 altitude, 27 applynetwork command, 20 , 32 auditing, 65 to 69 B back up, domain, 59 C Capacity on Demand, see COD certificate, 26 , 34, 4 2 cfgadm command, 4, 5 8, 62 , 63, 9 8 cfgdevice command, 58 , 62, 6 3 Chassis HostID, 79 clock, 23 COD, 77 to 90 boards, [...]

108 SP ARC Enterpr ise Mx000 Ser vers Administration Guide • November 2007 showarchiving , 74, 76 showaudit ,6 9 showboards , 60, 61, 89, 93 showcod , 85, 86, 87 showcodlicense , 83, 84, 88 showcodusage ,8 9 showdate ,3 7 showdcl ,6 0 showdscp , 19, 25, 29, 30 showfru ,6 0 showhttps ,4 2 showldap ,3 4 showlookup ,3 4 shownetwork , 31, 32 showntp [...]

Index 109 CPU, 91 I/O device, 91 memory, 26 , 48, 5 3 MIB, 25 , 26, 3 9 mirror ed memory mode, 26 MODE switch, 12 N netmask, 4, 1 9 NTP, 3, 2 3 to 25 , 35 to ??, 3 5 to 36 , 55 ntp.conf file, 24 P password LDAP, 23 , 34 lost, 9, 1 2 policy, 9, 1 4 XSCF, 9, 1 4 password command, 15 PCIe slot, 48 , 94 poweron command, 55 , 61 private key, 26 , 42 pr[...]

110 SP ARC Enterpr ise Mx000 Ser vers Administration Guide • November 2007 showlookup command, 34 shownetwork command, 31 , 32 showntp command, 35 , 36 showpasswordpolicy command, 14 showsmtp command, 27 , 43 showsnmp command, 41 , 42 showsnmpusm command, 38 showsnmpvacm command, 38 , 39, 4 0 showssh command, 43 showtelnet command, 43 showtimezon[...]

[...]

H e rausg e g e b e n vo n / Publish e d by Fuji t su S i e m ens Compu t e r s G m b H * U 41 6 8 0 -J - Z8 1 6 - 3- 7 6 * U 41 6 80 - J - Z81 6 - 3 -7 6 B e s t e ll - N r . / O r d e r N o . : U 4 1680 - J - Z81 6 -3 - 7 6[...]