HP Visualize b1000 hp enterprise file system: planning and configuring hp DCE/
HP Visualize b1000 - Workstation Manual
View all HP Visualize b1000 manuals
Add to My Manuals
Save this manual to your list of manuals |
HP Visualize b1000 manual content summary:
- HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 1
HP Enterprise File System Planning and Configuring HP DCE/9000 Enhanced DFS Version 3.0 HP Part No. B6863-IE002-E0302 Edition 1 © Hewlett-Packard Company, 2002. All rights reserved. - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 2
and replacement parts can be obtained from your local Sales and Service Office. Restricted Rights Legend. Use, duplication or disclosure Software Restricted Rights clause at FAR 52.227-19 for other agencies. HEWLETT-PACKARD COMPANY 3000 Hanover Street Palo Alto, California 94304 U.S.A. Use of this - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 3
©copyright 1990, 1991, 1992 Cornell University ©copyright 1989-1991 The University of Maryland ©copyright 1988 Carnegie Mellon University Trademark Notices UNIX is a registered trademark in the United States and other countries, licensed exclusively through X/Open Company Limited. X Window System is - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 4
Legal Notices 4 - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 5
System Tuning Variables 15 Administration Tools for Enhanced DFS 3.0 16 HP Enterprise File System Admin Web 17 Compatibility Information and Installation 3.0 Interoperability 18 NIS and Integrated Login Interoperability 18 What Manuals are Available for This Version 19 2 Installing and Configuring - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 6
Contents Before Installing and Configuring Enhanced DFS 3.0 27 To Install and Configure Enhanced DFS 28 Enhanced DFS 3.0 Filesets 29 Migrating root.dfs from UFS to Episode 31 Replicating root.dfs Using "Cheap Replication" 34 Handling of setuid Programs and Device Files in DFS 36 setuid Script 36 - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 7
Contents Configuring a DFS Client 57 dfs_config Environment Variables 60 A TCL Functions DCE TCL Functions 64 Configuration Functions 64 Unconfiguration Function 75 Cleanup Functions 76 Miscellaneous Functions 84 DCE TCL Examples 112 Configuring a DCE Client 112 Configuring a Single-machine DCE - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 8
Contents B The DFS/NFS Secure Gateway Overview of the DFS/NFS Gateway 140 Configuring Gateway Server Machines 143 Configuring a Gateway Server Without Enabling Remote Authentication 144 Configuring a Gateway Server and Enabling Remote Authentication 145 Configuring the BOS Server Process 146 - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 9
this document This document describes features of HP DCE/9000 Enhanced DFS Version 3.0 specific to Hewlett-Packard. For features of standard DFS, see the OSF documentation. This book is organized as follows: • Chapter 1 describes the benefits and features of HP DCE/9000 Enhanced DFS and provides - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 10
10 - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 11
DCE/9000 Enhanced DFS HP DCE/9000 Enhanced DFS Version 3.0 is a distributed file system functionally equivalent to Version 1.2.2 of The Open Group (formerly Open Software Foundation) DCE Distributed File Service (DFS). Enhanced DFS is one component of the HP Enterprise File System product family. 11 - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 12
stored on any of the computers that are part of this global view. Enhanced DFS requires the HP-UX 11.0 operating system and the HP DCE/9000 Version 1.7 product. Enhanced DFS supports all HP DCE/9000 DFS 1.7 functionality and protocols, and interoperates fully with other DFS servers. The client and - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 13
fileset • Extends the UNIX permissions to provide more HP DCE/9000 DFS configuration with little impact on other servers or clients and with few additional administrative responsibilities • Supports HP DCE 1.7 components: • DCE Security Service • DCE Directory Service • DCE Distributed Time Service • - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 14
Enhanced DFS 3.0 includes restricting RPC addresses with the use of the environment variable, RPC_SUPPORTED_NETADDRS. See the HP DCE 1.7 planning and configuration guide for a description of this environment variable. The runtime looks for a RPC_SUPPORTED_NETADDRS environment variable, which allows - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 15
About HP DCE/9000 Enhanced DFS Features DCE/DFS TCL Configuration Functions Enhanced DFS 3.0 offers a number of configuration, unconfiguration, cleanup, and miscellaneous TCL functions for DCE and - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 16
installation product. • Sentinel - a graphical file server monitoring tool that displays free files server statistics. It also detects server problems (when a free space threshold is exceeded scripts shipped with the Enhanced DFS product (see "HP Enterprise File System Admin web" in this chapter - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 17
web up, it allows you to: • run Sentinel, a graphical file server monitoring tool • run EfsStatus, a dcecp script that HP EFS home page. The HTML Release Note is the same as the printed Release Note, except it may contain post-product-release updates to the printed version. See the "What Manuals - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 18
memory, and swap space requirements for HP DCE/9000 Enhanced DFS Version 3.0 on HP Both Integrated Login and NIS attempt to solve the problem of creating a common /etc/passwd and /etc obtain a user's DCE credentials when a user performs a standard UNIX login through telnet, ftp, CDE, and so on. If - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 19
are Available for This Version What Manuals are Available for This Version Documentation for HP DCE/9000 Enhanced DFS Version 3.0 consists software upon which Enhanced DFS 3.0 is based. • OSF DCE DFS Reference Guide, Revision 1.2.2 - available at the following pathnames: /opt/dce/efs_docs/html/ - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 20
About HP DCE/9000 Enhanced DFS What Manuals are Available for This Version 20 - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 21
2 Installing and Configuring Enhanced DFS 3.0 This chapter describes how to install and configure HP DCE/9000 Enhanced DFS Version 3.0 on HP-UX 11.0. It also contains a list of the filesets for Enhanced DFS. 21 - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 22
Installing and Configuring Enhanced DFS 3.0 Planning for Enhanced DFS 3.0 Installation and Configuration Planning for Enhanced DFS 3.0 Installation and Configuration You can configure the following types of Enhanced DFS servers: • A System Control server distributes system configuration information - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 23
DFS 3.0 Installation and Configuration This problem does not arise with Episode aggregates exporting a UFS fileset, however, consider using a memory cache if you have only a single partition. in the OSF DCE DFS Administration and Reference guides. These decisions include: • Determining which machine - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 24
Installing and Configuring Enhanced DFS 3.0 Preparing to Administer DFS Preparing to Administer DFS If you are logging in as the root user and are planning to run the DFS daemons directly, adding the directory /opt/dce/sbin to the appropriate path variable for the shell makes the execution of the - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 25
.log, svc/fatal.log, svc/error.log, and svc/warning.log. • DFS Installation Size ❒ Client (Assuming a typical, single-user, graphic desktop, HP-UX workstation): A minimum of 64 MB of ram for a client-only system A minimum of 170 MB of swap space for a client-only system (A client DCE/DFS system adds - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 26
Installing and Configuring Enhanced DFS 3.0 Considerations for Enhanced DFS 3.0 Installation and Configuration system (A DCE/DFS File Server/Fileset Database Machine combination needs about 89 MB of additional swap space) A minumum of 164 MB of swap space for a file/fileset database/backup server - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 27
system, before you run dce_config or perform the migration procedure, use the HP-UX Logical Volume Manager (LVM) to create the logical volume on which you are creating a UFS file system, you can create the file system manually using HP-UX file system commands (for example, newfs), or you can use an - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 28
from the command line; however the "Match what target has" option is not supported in this mode. As root, execute the following command: /usr/sbin/swinstall when the installation is complete. It is not necessary to manually save any configuration data or to swremove the predecessor products, the - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 29
, archived libs EFS client EFS client/server common portion Japanese extended UNIX code EFS Shift JIS Japanese language support EFS client kernel libraries EFS Core man pages EFS Release Note and OSF DFS (Rev. 1.2.2) manuals EFS NFS secure gateway client EFS NFS secure gateway server Dependencies - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 30
Installing and Configuring Enhanced DFS 3.0 Enhanced DFS 3.0 Filesets Product EFS-DFSServer Fileset EFS-ADMIN EFS-EPISODE EFS-KERN-EPI EFS-KERN-SVR EFS-SERVER EFS-SERVER-CMN EFS-ENG-A-MAN EFS-ResourceKit EFS-WEB EFS-CNTRB-SNTL EFS-CNTRB-TKMAJ Description Dependencies EFS administration tools - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 31
and commands used in this procedure, consult the OSF DCE DFS Reference Guide, Revision 1.2.2. An HTML version of this document is provided in the EFS-DOCS, and installed in the directory /opt/dce/efs_docs. 1 Use the HP-UX Logical Volume Manager (LVM) to create the logical volume on which you want - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 32
Installing and Configuring Enhanced DFS 3.0 Migrating root.dfs from UFS to Episode 5 Use the dce_login command to become the administrator. Example: dce_login cell_admin password 6 Use the fts create command to create a read/write fileset to be used as the new Episode root.dfs. Example: fts create - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 33
Initial Object Creation (IO) ACLs. See Chapter 3 of the The OSF DCE DFS Administration Guide, Revision 1.2.2 for details. Note that the default ACLs for a newly created fileset are equivalent to a UNIX mode of 700; specifically: dcecp> acl show /.:/fs {user_obj rwxcid} {group_obj ------} {other_obj - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 34
, procedure. For details about the files and commands used in this procedure, and the concept of cheap replication, consult the OSF DCE DFS Reference Guide, Revision 1.2.2. An HTML version of this document is provided in the Enhanced DFS fileset EFS-DOCS, and installed in the directory /opt/dce - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 35
NOTE: Installing and Configuring Enhanced DFS 3.0 Replicating root.dfs Using "Cheap Replication" 6 Use this command to make sure that the replica (the read-only copy of root.dfs) is valid: fts lsfldb root.dfs 7 cd to /, then use this command to force the Cache Manager to update the fileset - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 36
Installing and Configuring Enhanced DFS 3.0 Handling of setuid Programs and Device Files in DFS Handling of setuid Programs and Device Files in DFS By default, the DFS Cache Manager (that is, the DFS client) does not allow a setuid program to change the effective uid or gid of the process - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 37
Installing and Configuring Enhanced DFS 3.0 Handling of setuid Programs and Device Files in DFS # These files contain the global and local configuration # for the setuid state. The global file should contain the # setuid state that is common to everyone in the cell. # Putting it into DFS makes it - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 38
read PATH STATE; do cm setsetuid ${PATH} -state ${STATE} done < ${localconf} fi For more information, see the OSF DCE DFS Reference Guide, Revision 1.2.2. Additional DFS Cache Manager Commands Enhanced DFS 3.0 provides the following new Cache Manager (cm) commands: • cm gethardmount (8dfs) - Shows - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 39
by specifying the name of a file or directory in the fileset with the -path option. This information comes from the kernel of the workstation on which the command is issued. System administrators set whether hard mount semantics are provided on a per-fileset and per-Cache Manager basis with - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 40
Installing and Configuring Enhanced DFS 3.0 Handling of setuid Programs and Device Files in DFS OUTPUT The cm gethardmount command first displays the line Fileset pathname status: In the output, pathname is the name of a file or directory specified with the -path option. For each specified file or - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 41
Installing and Configuring Enhanced DFS 3.0 Handling of setuid Programs and Device Files in DFS NAME cm sethardmount - Specifies whether hard mount semantics are in effect for the specified or current fileset. SYNOPSIS cm sethardmount [-path {file|dir}] [-state {on/off}] [-help] Hard mount semantics - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 42
Installing and Configuring Enhanced DFS 3.0 Handling of setuid Programs and Device Files in DFS DESCRIPTION The cm sethardmount command specifies whether the Cache Manager should provide hard mount semantics for the indicated filesets. Indicate each fileset for which hard mount semantics are to be - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 43
Installing and Configuring Enhanced DFS 3.0 Stopping Enhanced DFS Stopping Enhanced DFS Neither dce_config nor the SAM-based DCM (DCE Configuration Manager) can successfully stop Enhanced DFS daemons. Enhanced DFS can only be stopped by rebooting the system. A reboot is required to stop those - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 44
NOTE: Installing and Configuring Enhanced DFS 3.0 Removing Enhanced DFS Configuration Information and DFS Cache Files Removing Enhanced DFS Configuration Information and DFS Cache Files The easiest method to cleanly remove DCE configuration information and Enhanced DFS cache files from a node, - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 45
10.3.2.1, the Korn shell statements: export RPC_SUPPORTED_NETADDRS=ip:myhost or export RPC_SUPPORTED_NETADDRS=ip:10.3.2.1 forces any servers started in the current shell to support only the addresses associated with the name myhost and the network address 10.3.2.1 Since both DCE and DFS respond to - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 46
Installing and Configuring Enhanced DFS 3.0 Setting Global Variables Setting Global Variables Global variables include directory variables, execution variables, and security server variables. Global variables may be defined by the user if the default setting is not correct for whatever reason. If - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 47
Installing and Configuring Enhanced DFS 3.0 Setting Global Variables Security server variables can change how the security server is eventually configured. • LOW_UID - This is the starting UID value to use when new entries are made in the security registry. Default is '100'. • LOW_GID - This is the - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 48
Although you can pass any supported option to the various daemons using these variables, many options should notbe passed, and specifying them can cause problems for your installation. Please read and fully understand the DFS administration guide and the command reference manual before using any of - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 49
HP-UX 11.0 using the dce_config utility. You cannot configure Enhanced DFS 3.0 with the SAM-based DCM (DCE Configuration Manager) tool. Follow the instructions in this chapter to complete the installation and configuration in the "Installing and Configuring Enhanced DFS 3.0" chapter in this manual - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 50
Running dce_config to Configure Enhanced DFS Configuring a System Control Server Configuring a System Control Server A System Control server is not required. If you want to configure a System Control server, perform the following steps: 1 As root, run dce_config. From the DCE Main Menu, choose - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 51
Running dce_config to Configure Enhanced DFS Configuring a System Control Server 3 From the DCE Additional Server Configuration Menu, choose DFS System Control Machine: Additional Server Configuration Menu (on hostname) 1. Additional CDS Server(s) 2. DTS 3. DFS System Control Machine 4. DFS Private - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 52
NOTE: Running dce_config to Configure Enhanced DFS Configuring a DFS Fileset Location Database Configuring a DFS Fileset Location Database Each cell that uses DFS requires at least one Fileset Location Database (FLDB) server. If you are configuring a DFS System Control server, you should do so - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 53
Running dce_config to Configure Enhanced DFS Configuring a DFS Fileset Location Database S:****** Starting bosserver... Checking for a Ubik sync site in hosts/node_name Host /.:/hosts/node_name is now the sync site 2 dce_config prompts for the name of the System Control machine. If your cell does - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 54
Running dce_config to Configure Enhanced DFS Configuring a DFS Fileset Location Database 8 dce_config prompts for a numerical aggregate ID. Enter a unique ID, corresponding to the type and integer you used in the aggregate name. Enter the LFS aggregate id (1): 1 9 dce_config displays information - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 55
same. In the steps that follow, a File server is configured to illustrate the sequence of prompts and actions. However, you can use the same instructions to configure a Private File server. To configure a File server or Private File server, perform the following steps: 1 From the Additional Server - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 56
Running dce_config to Configure Enhanced DFS Configuring a File Server and a Private File Server 5 dce_config prompts for the fileset name. Enter a name of your choice. Enter the LFS fileset name (lfs_set): root.dfs 6 dce_config prompts for the aggregate name. Enter a name of your choice. Common - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 57
must have been previously configured as a DCE client. Before you configure a DFS client, determine the following: • The cache size, where it is located (system memory or the local disk), and the directory where it will be stored. If you select disk cache, the default of 10000 will create a 10 MB - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 58
Step 5 assumes you choose 1 (in memory). 5 Choose a cache size for the memory. The default cache size is 1MB. Enter the RAM size of the cache (1000): Continue /DFS Gateway. See Chapter 1 in the Planning and Configuring HP DCE 1.7 manual for information about the NFS/DFS Gateway. Would you like to configure - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 59
Running dce_config to Configure Enhanced DFS Configuring a DFS Client 9 Reply to the prompt "Would you like to use BOS server to monitor and administer the dfsgwd process?". If you want the dfsgw server administrator to administer and monitor the dfsgw server via BOS (bosserver) commands, enter y. - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 60
used for the aggregate to be exported (for example, user.jlw). The unique numerical aggregate ID of the exported aggregate. "mem" means cache is in memory;"disk" means cache is on the local disk. The pathname of the directory to use for a local disk cache (if one is used). The number - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 61
Control Machine, "privatefs" - Private File Server, "fs"- File Server, or "fldb"- Fileset Location Database Server. The dfsgw port in /etc/services. "y" if user wishes to format a partition as an Episode aggregate; "n" otherwise. "y" if user wishes to force the initialization of a partition as - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 62
Running dce_config to Configure Enhanced DFS dfs_config Environment Variables Environment Variable LOAD_LFS_KEXT ROOT_FILESET_NM SCM_NAME Definition "y" if user wants to load the LFS kernel extension; "n" otherwise. The root fileset name. The name of the system control machine to be used during - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 63
A TCL Functions This appendix describes the DCE and DFS TCL functions. It also includes examples of primary DFS functions. 63 - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 64
TCL Functions DCE TCL Functions DCE TCL Functions The DCE TCL functions consist of configuration, unconfiguration, cleanup, and miscellaneous functions. The following sections describe these functions in detail. Configuration Functions The configuration functions include the following: • - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 65
TCL Functions DCE TCL Functions NAME tcl_dce_config_cdsclient - Configures the local host as a CDS client. Adds the correct CDS entries into the registry database and creates the cds.conf file. Once all the initialization is complete, this function starts the CDS advertiser, cdsadv, and then - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 66
TCL Functions DCE TCL Functions NAME tcl_dce_config_cdsreplica - Configures the local host as a DCE CDS replica. Gets the name of the initial CDS server and compares it with the name of the local host to make sure they are not the same. The host must also already have dced running, as well as be - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 67
TCL Functions DCE TCL Functions NAME tcl_dce_config_cdsserver - Configures the local host as a CDS server. This function first makes sure dced is running correctly on the node, and that the node is a security client. If not, it makes the node a security client. Performs the basic CDS initialization - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 68
TCL Functions DCE TCL Functions NAME tcl_dce_config_dceclient - Configures the local host as a dce client. If the DCE library does not exist, this function will not run. If all the proper conditions are met, this function configures the local (specified) host with dced in remote mode, and as a - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 69
TCL Functions DCE TCL Functions NAME tcl_dce_config_dced - Configures the local host (specified by hostname) with DCED. Also sets the correct timezone. SYNOPSIS tcl_dce_config_dced (hostname cellname sec_server) PARAMETERS hostname The name of the local host. This parameter is required (as opposed - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 70
TCL Functions DCE TCL Functions NAME tcl_dce_config_dceserver - Configures the local host as a full DCE server. Will configure dced, a security server, a cds server, and, depending on the value of the 'dts_type' variable, a DTS client or server. The function checks to see if the standard dce library - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 71
TCL Functions DCE TCL Functions NAME tcl_dce_config_dtsserver - Configures the local host as a DTS machine, depending on the value of the 'dts_type' variable. Starts the dtsd daemon regardless of which type of DTS machine is configured. SYNOPSIS tcl_dce_config_dtsserver celladmin_pw) (hostname - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 72
database for this new client. Creates the proper entries in the security registry for the client, then starts the sec_client services (part of DCED). SYNOPSIS tcl_dce_config_secclient celladmin celladmin_pw) (hostname cellname sec_server PARAMETERS hostname The name of the local host. This - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 73
TCL Functions DCE TCL Functions NAME tcl_dce_config_secreplica - Configures the local host as a DCE security replica. The host must also already have dced running, as well as be configured as a security and cds client. Also modifies ACLs on the necessary namespace objects. SYNOPSIS - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 74
that secd has been installed, and if so, creates the dce_cf.db file. Initializes the security service database, then starts secd and the security client service. SYNOPSIS tcl_dce_config_secserver celladmin_pw) (hostname cellname celladmin PARAMETERS hostname The name of the local host. This - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 75
TCL Functions DCE TCL Functions Unconfiguration Function The unconfiguration function, tcl_dce_unconfig, unconfigures the specified host from an existing DCE cell. NAME tcl_dce_unconfig - Unconfigures the specified host from an existing DCE cell. Performs all registry and namespace removal from the - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 76
TCL Functions DCE TCL Functions Cleanup Functions The cleanup functions include the following: • tcl_cleanup - Attempts to clean up the host DCE configuration whenever global variable CLEAN_UP is set to 'yes' • tcl_dce_cleanup_cds - Set up the commands required to unconfigure the CDS client • - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 77
TCL Functions DCE TCL Functions NAME tcl_cleanup - Attempts to clean up the host DCE configuration whenever CLEAN_UP = y. SYNOPSIS tcl_dce_cleanup_dced (input) PARAMETERS input The list of commands that make up the cleanup attempt. RETURNS TCL_OK Successfully ran the cleanup commands represented by - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 78
TCL Functions DCE TCL Functions NAME tcl_dce_cleanup_cds - Sets up the commands required to unconfigure the CDS client. Unconfigures the client if CLEAN_UP = y when the tcl cleanup function is called. SYNOPSIS tcl_dce_cleanup_cds (hostname cds_server) PARAMETERS hostname The name of the local host - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 79
TCL Functions DCE TCL Functions NAME tcl_dce_cleanup_cdsreplica - Sets up the commands required to unconfigure the local machine from being a CDS replica. Unconfigures the CDS replica if CLEAN_UP = y when the tcl cleanup function is called. SYNOPSIS tcl_dce_cleanup_cdsreplica (hostname cds_dirlist) - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 80
TCL Functions DCE TCL Functions NAME tcl_dce_cleanup_dced - Sets up the commands required to unconfigure dced. Unconfigures DCED if CLEAN_UP = y when the tcl cleanup function is called. SYNOPSIS tcl_dce_cleanup_dced (hostname) PARAMETERS hostname The name of the local host to clean up. RETURNS $ - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 81
TCL Functions DCE TCL Functions NAME tcl_dce_cleanup_dtsd - Sets up the commands required to unconfigure dtsd. Unconfigures the dts server if CLEAN_UP = y when the tcl cleanup function is called. SYNOPSIS tcl_dce_cleanup_dtsd () RETURNS $result The result passed up from the tcl cleanup function. 81 - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 82
TCL Functions DCE TCL Functions NAME tcl_dce_cleanup_secreplica - Sets up the commands required to unconfigure the local machine from being a security replica. Unconfigures the security replica if CLEAN_UP = y when the tcl cleanup function is called. SYNOPSIS tcl_dce_cleanup_secreplica (hostname - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 83
TCL Functions DCE TCL Functions NAME tcl_dce_cleanup_security - Sets up the commands required to unconfigure the security client. Unconfigures the security client if CLEAN_UP = y when the tcl cleanup function is called. SYNOPSIS tcl_dce_cleanup_security (hostname cellname) PARAMETERS hostname The - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 84
cell time server • tcl_dce_cds_addserver_init - Initialize the name service to reflect an additional CDS server • tcl_dce_cds_client_init - file on the local host and adds the kerberos5 entry to /etc/services • tcl_dce_init_pesite - Performs the initialization required to add the pe_site file to - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 85
- If the specified name is found in the specified file, this function sends back TCL_OK. Otherwise it gives NOT FOUND. • tcl_get_ids - Get UNIX ID information from the system • tcl_get_pid - Returns the process identification (pid) of the process specified in proc_name or 'NOT FOUND' if the process - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 86
TCL Functions DCE TCL Functions NAME tcl_checktime - Synchronizes the local host's system time with the time on the cell time server. Updates the local host's system time if the time difference is greater than the tolerance specified below. SYNOPSIS tcl_checktime (hostname time_server) PARAMETERS - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 87
TCL Functions DCE TCL Functions NAME tcl_dce_cds_addserver_init - Initialize the name service to reflect an additional CDS server. Creates all required directories and objects in the namespace. Sets namespace ACLs as appropriate. SYNOPSIS tcl_dce_cds_addserver_init (hostname celladmin_pw) PARAMETERS - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 88
TCL Functions DCE TCL Functions NAME tcl_dce_cds_client_init - Creates the correct CDS client entries in the namespace. Sets namespace ACLs as appropriate. SYNOPSIS tcl_dce_cds_client_init (hostname cellname cds_server) PARAMETERS hostname The name of the local host. This parameter is required (as - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 89
TCL Functions DCE TCL Functions NAME tcl_dce_cds_server_init - Initializes the name service. Creates all DCE required directories and objects in the name space. Sets namespace ACLs as appropriate. SYNOPSIS tcl_dce_cds_server_init (hostname cellname sec_server) PARAMETERS hostname The name - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 90
- Checks the local machine for an active or configured security client (sec_client) service. SYNOPSIS tcl_dce_check_for_sec_client_service () RETURNS TCL_OK No active sec_client service exists. ALREADY_RUNNING An active sec_client service exists. err_msg An error was encountered. 90 - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 91
TCL Functions DCE TCL Functions NAME tcl_dce_create_dcecfdb - Creates the dce_cf.db configuration file in the correct directory. The simple format of the file contains the cellname and the hostname of the local host, as well as krb5 information. SYNOPSIS tcl_dce_create_dcecfdb (hostname cellname - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 92
Functions DCE TCL Functions NAME tcl_dce_create_krbconf - Creates the krb.conf file on the local host and adds the kerberos5 entry to /etc/services. SYNOPSIS tcl_dce_create_krbconf (cellname sec_server) PARAMETERS cellname The name of the cell you wish to configure into. sec_server The name of the - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 93
TCL Functions DCE TCL Functions NAME tcl_dce_init_pesite - Performs the initialization required to add the pe_site file to the local system and to check that the host clock is synchronized with the cell security server. SYNOPSIS tcl_dce_init_pesite (hostname sec_server) PARAMETERS hostname The name - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 94
TCL Functions DCE TCL Functions NAME tcl_dce_remove - Removes the files created by DCE during the initial configuration and subsequent operations, thereby allowing the local host to be configured again. Note that if a host is being 'removed' from an existing cell (in which it is a client), it should - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 95
TCL Functions DCE TCL Functions NAME tcl_dce_set_security_acl - Sets ACLs on security objects in the namespace. Specifies the secd bindings directly on the command line. (Do not change this, unless you fully understand the implications.) It is not safe to assume that CDS is available to provide the - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 96
specify the hostname using the full domain name, as opposed to the short name. force y or n. Tells the function whether to use force (the unix 'kill' command) when shutting down the dce daemons that will not stop using normal control program means. RETURNS TCL_OK Successfully stopped the DCE daemons - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 97
TCL Functions DCE TCL Functions NAME tcl_dce_start_sec_client_service - Starts the already-configured security client services on the local host. SYNOPSIS tcl_dce_start_sec_client_service (mod_rc) PARAMETERS mod_rc Update the rcfile if set to "yes". RETURNS TCL_OK Successfully started the security - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 98
TCL Functions DCE TCL Functions NAME tcl_dce_stop_sec_client_service - Stops the already-configured security client services on the local host. SYNOPSIS tcl_dce_stop_sec_client_service () RETURNS TCL_OK Successfully stopped the security client services. err_msg An error was encountered. 98 - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 99
TCL Functions DCE TCL Functions NAME tcl_dce_verify_cds - Ensures that the CDS namespace service is up and running correctly. SYNOPSIS tcl_dce_verify_cds () RETURNS TCL_OK CDS is running correctly. err_msg An error was encountered. 99 - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 100
TCL Functions DCE TCL Functions NAME tcl_dce_verify_consistency - Ensures that any exisiting security replicas are consistent with the security master. SYNOPSIS tcl_dce_verify_consistency () RETURNS TCL_OK Security replicas and master are consistent. err_msg An error was encountered. 100 - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 101
TCL Functions DCE TCL Functions NAME tcl_dcelogin - Logs into dce as the cell administrator. SYNOPSIS tcl_dcelogin (celladmin celladmin_pw) PARAMETERS celladmin The account acting as the cell administrator. celladmin_pw The cell administrator's password. RETURNS TCL_OK Successfully logged into dce - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 102
TCL Functions DCE TCL Functions NAME tcl_find_name - Returns 'TCL_OK' if it finds the specified name in the specified file or 'NOT FOUND' if it does not. SYNOPSIS tcl_find_name (name file) PARAMETERS name The name to search for. file The file in which to search. RETURNS TCL_OK Successfully found - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 103
TCL Functions DCE TCL Functions NAME tcl_get_ids - Gets UNIX ID information from the system. SYNOPSIS tcl_get_ids (type) PARAMETERS type The type to use when looking for high UID. RETURNS high_uid The high UID calculated by the system. 103 - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 104
TCL Functions DCE TCL Functions NAME tcl_get_pid - Returns the process identification (pid) of the process specified in proc_name or 'NOT FOUND' if the process is not running. SYNOPSIS tcl_get_pid (proc_name) PARAMETERS proc_name The name of the process to search for. RETURNS pid # Successfully - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 105
TCL Functions DCE TCL Functions NAME tcl_get_ugid - Determines which uids and gids to use for the initial and subsequent additions into the security registry. SYNOPSIS tcl_get_ugid (low_uid low_gid) PARAMETERS low_uid Initial User ID (uid) to use. low_gid Initial Group ID (gid) to use. RETURNS - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 106
TCL Functions DCE TCL Functions NAME tcl_log_msg - Writes the given message to stdout and/or a logfile depending on the priority of the message type specified as the first parameter. SYNOPSIS tcl_log_msg (msg_type msg passwd) PARAMETERS msg_type The priority or type of the message. msg The full text - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 107
TCL Functions DCE TCL Functions NAME tcl_mod_rcfile - Modifies the file specified by 'filename' so the correct daemons will be started at boot time. SYNOPSIS tcl_mod_rcfile (mdaemon sw filename) PARAMETERS mdaemon The DCE/DFS daemon to mark. sw Switches to apply when the daemon is modified. filename - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 108
TCL Functions DCE TCL Functions NAME tcl_rmline_file- Removes any line from the file named in 'filename' which matches the string provided in 'dline'. SYNOPSIS tcl_rmline_file (dline filename) PARAMETERS dline The info to delete when found in the file. filename The file to remove information from. - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 109
TCL Functions DCE TCL Functions NAME tcl_settimezone - Establishes a DCE timezone setting by creating a localtime link if it does not yet exist. When the HPUX TZ system variable contains a recognizable value, the localtime link is set to point to the corresponding DCE timezone information file. If - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 110
TCL Functions DCE TCL Functions NAME tcl_slay_daemon - Executes a system kill on the specified daemon and the specified process id number. SYNOPSIS tcl_slay_daemon (daemon_name daemon_pid) PARAMETERS daemon_name The name of the dce daemon to kill. daemon_pid The pid the dce daemon is running as. - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 111
TCL Functions DCE TCL Functions NAME tcl_unmod_rcfile - Modifies the file specified by 'filename' so the specified daemon will not be started at boot time. SYNOPSIS tcl_unmod_rcfile (mdaemon sw filename) PARAMETERS mdaemon The DCE/DFS daemon to unmark. sw Switches to apply when the daemon is - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 112
would like to specify a full domain name (for example, oddball.ch.apollo.hp.com) instead of the short name you get from the system hostname command. be passed as either the full domain name (for example, blech.ch.apollo.hp.com) or the short name (for example, blech). Specify the cellname parameter - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 113
be passed as either the full domain name (for example, blech.ch.apollo.hp.com) or the short name (for example, blech). Specify the cellname parameter be passed as either the full domain name (for example, blech.ch.apollo.hp.com) or the short name (for example, blech). Specify the cellname parameter - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 114
(hostname cellname \ > sec_server celladmin celladmin_pw) The hostname parameter can be passed as either the full domain name (for example, blech.ch.apollo.hp.com) or the short name (for example, blech). Specify the cellname parameter without the /.../ in front. The dts_type parameter should be one - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 115
TCL Functions DCE TCL Examples Example: dcecp> tcl_dce_config_secreplica oddball cell_admin \ > -dce: dcecp> Configuring a CDS Replica tcl_dce_config_cdsreplica (hostname cds_server \ > celladmin celladmin_pw cds_dirlist) Will create a CDS replica server on an existing dce client machine. The node - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 116
TCL Functions DCE TCL Examples Removing a Machine from an Existing Cell tcl_dce_remove (hostname) On a client, do this after an tcl_dce_unconfig. On a server, do this to completely remove the server and destroy the cell. It doesn't touch the registry or namespace, but does stop any running daemons - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 117
TCL Functions DFS TCL Functions DFS TCL Functions The DFS TCL functions consist of configuration, unconfiguration, and miscellaneous functions. The following sections describe these functions in detail. Configuration Functions The configuration functions include the following: • - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 118
TCL Functions DFS TCL Functions NAME tcl_dfs_config_bakserver - Configures a bakserver on the local host. SYNOPSIS tcl_dfs_config_bosserver (celladmin celladmin_pw) PARAMETERS celladmin The account acting as the cell administrator. celladmin_pw The cell administrator's password. RETURNS TCL_OK - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 119
TCL Functions DFS TCL Functions NAME tcl_dfs_config_bosserver - Configures a bosserver on the local host. SYNOPSIS tcl_dfs_config_bosserver () RETURNS TCL_OK Successfully configured a bosserver on the local host. err_msg An error was encountered. 119 - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 120
are 'disk' and 'mem'. Using anything else will result in an error. cache_size Size to use when creating the cache, whether it is disk or memory cache (ex: 10000). cache_dir Location of the directory (ex: /var/opt/dce/adm/dfs/cache). When the caching type is 'mem', the file created is - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 121
TCL Functions DFS TCL Functions NAME tcl_dfs_config_dfsfldb - Configures a DFS Fileset Location Database Server. SYNOPSIS tcl_dfs_config_dfsfldb (celladmin celladmin_pw) PARAMETERS celladmin The account acting as the cell administrator. celladmin_pw The cell administrator's password. RETURNS TCL_OK - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 122
TCL Functions DFS TCL Functions NAME tcl_dfs_config_dfsfs - Configures a DFS Fileset Server. SYNOPSIS tcl_dfs_config_dfsfs (celladmin celladmin_pw) PARAMETERS celladmin The account acting as the cell administrator. celladmin_pw The cell administrator's password. RETURNS TCL_OK Successfully - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 123
TCL Functions DFS TCL Functions NAME tcl_dfs_config_repserver - Configures a repserver on the local host. SYNOPSIS tcl_dfs_config_repserver (celladmin celladmin_pw) PARAMETERS celladmin The account acting as the cell administrator. celladmin_pw The cell administrator's password. RETURNS TCL_OK - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 124
TCL Functions DFS TCL Functions Unconfiguration Functions The unconfiguration functions include the following: • tcl_dfs_unconfig_bakserver - Unconfigures a bakserver on the local host • tcl_dfs_unconfig_bosserver - Unconfigures a bosserver on the local host • tcl_dfs_unconfig_dfsclient - - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 125
TCL Functions DFS TCL Functions NAME tcl_dfs_unconfig_bakserver - Unconfigures a bakserver on the local host. SYNOPSIS tcl_dfs_unconfig_bakserver (celladmin celladmin_pw force) PARAMETERS celladmin The account acting as the cell administrator. celladmin_pw The cell administrator's password. force - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 126
TCL Functions DFS TCL Functions NAME tcl_dfs_unconfig_bosserver - Unconfigures a bosserver on the local host. SYNOPSIS tcl_dfs_unconfig_bosserver (celladmin celladmin_pw) PARAMETERS celladmin The account acting as the cell administrator. celladmin_pw The cell administrator's password. RETURNS TCL_OK - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 127
TCL Functions DFS TCL Functions NAME tcl_dfs_unconfig_dfsclient - Unconfigures the local host as a dfs client. SYNOPSIS tcl_dfs_unconfig_dfsclient () RETURNS TCL_OK Successfully unconfigured the host as a dfs client. err_msg An error was encountered. 127 - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 128
TCL Functions DFS TCL Functions NAME tcl_dfs_unconfig_dfsfldb - Unconfigures a DFS Fileset Location Database Server. SYNOPSIS tcl_dfs_unconfig_dfsfldb (celladmin celladmin_pw force) PARAMETERS celladmin The account acting as the cell administrator. celladmin_pw The cell administrator's password. - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 129
TCL Functions DFS TCL Functions NAME tcl_dfs_unconfig_dfsfs - Unconfigures a DFS Fileset Server. SYNOPSIS tcl_dfs_unconfig_dfsfs (celladmin celladmin_pw) PARAMETERS celladmin The account acting as the cell administrator. celladmin_pw The cell administrator's password. RETURNS TCL_OK Successfully - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 130
TCL Functions DFS TCL Functions NAME tcl_dfs_unconfig_repserver - Unconfigures a repserver on the local host. SYNOPSIS tcl_dfs_unconfig_repserver (celladmin celladmin_pw) PARAMETERS celladmin The account acting as the cell administrator. celladmin_pw The cell administrator's password. RETURNS TCL_OK - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 131
TCL Functions DFS TCL Functions Miscellaneous Functions The miscellaneous functions include the following: • tcl_dfs_add_episode_aggregate - Creates an episode aggregate • tcl_dfs_add_episode_fileset - Creates an episode fileset • tcl_dfs_add_native_fileset - Configures a native (UFS) fileset • - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 132
TCL Functions DFS TCL Functions NAME tcl_dfs_add_episode_aggregate - Creates an episode aggregate. SYNOPSIS tcl_dfs_add_episode_aggregate (agg_name agg_dev_name agg_id format epi_force blksize fragsize) PARAMETERS agg_name The name of the aggregate (ex: epi1). agg_dev_name The name of the aggregate - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 133
TCL Functions DFS TCL Functions NAME tcl_dfs_add_episode_fileset - Creates an episode fileset. SYNOPSIS tcl_dfs_add_episode_fileset (fileset_name agg_name) PARAMETERS fileset_name The name of the fileset (ex: root.dfs). agg_name The name of the aggregate (ex: epi1). RETURNS TCL_OK Successfully - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 134
TCL Functions DFS TCL Functions NAME tcl_dfs_add_native_fileset - Configures a native (UFS) fileset. SYNOPSIS tcl_dfs_add_native_fileset (fileset_name agg_name agg_dev_name agg_id) PARAMETERS fileset_name The name of the initial fileset (ex: root.dfs). agg_name The name of the aggregate (ex: epi1). - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 135
TCL Functions DFS TCL Functions NAME tcl_dfs_format_episode_aggregate - Checks to see if an aggregate already exists (agg_dev_name) and creates one if not. Optionally reinitializes an existing aggregate if epi_format_force is "y", and deletes any existing data on that aggregate. SYNOPSIS - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 136
. # If using an SCM, create that first. # Then create the first FLDB server. # Then create the first Fileset Server (ie root.dfs). # Having problems when first FLDB server and first server # are not on the same machine. # Then create the dfsclients. fileset # The upserver (SCM) is written to - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 137
TCL Functions DFS TCL Functions # CONFIGURE A FILESET # On client (softtail) # tcl_dfs_config_episode_fileset hostname celladmin celladmin_pw \ # fileset_name agg_name agg_dev_name agg_id \ # epi_force blksize fragsize tcl_dfs_config_episode_fileset softtail cell_admin -dce- \ mgmfs - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 138
TCL Functions DFS TCL Functions Unconfigure (and remove) a dfs System Control Machine # This must be the SCM (machine running upserver) #tcl_dfs_unconfig_dfsscm hostname celladmin celladmin_pw tcl_dfs_unconfig_dfsscm harpoon cell_admin -dce Stop (unconfigure) an upclient # Upclient should only be - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 139
B The DFS/NFS Secure Gateway This appendix describes how to use the Distributed File Service/Network File System (DFS/NFS) Secure Gateway to grant authenticated access to the DFS filespace from an NFS client. 139 - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 140
The DFS/NFS Secure Gateway Overview of the DFS/NFS Gateway Overview of the DFS/NFS Gateway The Distributed File Service/Network File System (DFS/NFS) Secure Gateway provides a mechanism for granting authenticated access to the DFS filespace from an NFS client. The DFS/NFS Secure - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 141
a ticket-granting ticket (TGT) for the user from the DCE Security Service. The TGT is used to create a valid login context for the user credentials. On the Gateway Server machine, an association is created between the UNIX user identification number (UID) of the user and the network address of - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 142
to obtain the credentials. Because the authentication table resides in memory, all authenticated sessions are terminated if the machine configured as a Gateway Server is rebooted. The following two subsections provide complete instructions for configuring Gateway Server machines and NFS clients to - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 143
command to administrators only. To configure a Gateway Server machine without enabling remote authentication via the dfs_login command, follow the instructions in "Configuring a Gateway Server Without Enabling Remote Authentication." • Configure the Gateway Server machines so that users can issue - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 144
The DFS/NFS Secure Gateway Configuring Gateway Server Machines Before configuring a Gateway Server machine, you must do the following: • Configure a DCE cell that includes DFS. • Configure each machine that is to become a Gateway Server as a DFS client and an NFS server. • Ensure proper - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 145
The DFS/NFS Secure Gateway Configuring Gateway Server Machines 3 Export the DCE global root directory, /..., via NFS. This is typically accomplished via the exportfs command; the exact command and procedure depends on your vendor's implementation of NFS. (See your vendor's NFS documentation for more - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 146
The DFS/NFS Secure Gateway Configuring Gateway Server Machines Configuring the BOS Server Process To configure the BOS Server (bosserver) process, perform the following steps on the machine to be configured as a Gateway Server. In all cases, hostname is the hostname of the local machine. (Note that - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 147
The DFS/NFS Secure Gateway Configuring Gateway Server Machines 4 Use the su command to become the local root user on the machine: $ su Password: root_password 5 Add a server key for the hosts/hostname/dfs-server principal to the /krb5/v5srvtab keytab file on the machine. The dced process recognizes - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 148
machine. The dfsgwd process provides users of NFS clients with a remote interface to the authentication table maintained on the Gateway Server machine. 4 Add the dfsgw service to the Internet services database. The dfsgw service provides the login facility for the DFS/NFS Secure Gateway. To add the - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 149
The DFS/NFS Secure Gateway Configuring Gateway Server Machines 5 Authenticate to DCE as a principal who has the following ACL permissions on entries in the registry database: • The i permission on the directory hosts/hostname. • For the first Gateway Server process, the i permission on the directory - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 150
configured on the machine. Configuring NFS Clients to Access DFS Once you have configured at least one Gateway Server machine according to the instructions in "Configuring Gateway Server Machines," you can configure your NFS clients to provide access to the DFS filespace. Users who have DCE accounts - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 151
issue the dfs_login command to authenticate to DCE, configure your NFS clients and enable DCE authentication via the dfs_login command; follow the instructions in "Configuring a Client and Enabling Remote Authentication." Because the steps in each of these sections mount /... on an NFS client, users - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 152
The DFS/NFS Secure Gateway Configuring Gateway Server Machines # mkdir /... # mount hostname:/... /... 3 Create a symbolic link from //: to the root of the DFS filespace for the host DCE cell, /.../cellname/fs. In the command, cellname is the name of the DCE cell to be accessed from the NFS client ( - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 153
this command.) • dfs_logout allows users on the NFS client to end an authenticated session established with the dfs_login command. (See "Authenticating commands use version 5 of Kerberos to communicate with the DCE Security Service. 4 Create the Kerberos configuration file named /krb5/krb.conf. The - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 154
in this manner. Accessing DFS from an NFS Client Once a Gateway Server machine and one or more NFS clients are configured according to the instructions in "Configuring Gateway Server Machine" and "Configuring NFS Clients to Access DFS", users of the NFS clients can access data in the DFS filespace - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 155
group. To authenticate to DCE, you can issue either of the following commands, both of which establish credentials recognized by the DCE Security Service: • From an NFS client, enter the dfs_login command. (See "Authenticating to DCE from an NFS Client.") • From a Gateway Server machine, enter the - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 156
with respect to the registry database; see the OSF DCE Administration Guide-Core Components for more information.) The dfs_login and dfsgw add commands obtain the DCE Security Service. Once they expire, the tickets can no longer be used for authenticated access. To end an authenticated session - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 157
exports /.... to the NFS client. Use this option to contact a different Gateway Server. -l hh[:mm] Specifies the lifetime to be assigned to the service ticket obtained with the command. Enter the lifetime as a number of hours and, optionally, minutes. A value specified with this option is subject to - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 158
command prompts for the user's password and obtains a TGT for the user. If the login succeeds, the dfs_login command returns no messages. To end the authenticated session before the DCE credentials expire, issue the dfs_logout command from the NFS client. The command removes the user's entry from - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 159
from the authentication table. By default, the command deletes the entry for the user who issues the command. For example, the following ends the authenticated session of the issuer of the command: $ dfs_logout See the man pages for the dfs_login and dfs_logout commands for detailed information - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 160
-af address_family Specifies the style of network address to be used to identify hosts. By default, the command uses the only address family currently supported, inet (Internet). For example, the following dfsgw add command obtains DCE credentials for the user ludwig, who has UID 7439, from the NFS - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 161
style of network address to be used to identify hosts. By default, the command uses only address family currently supported, inet (Internet). For example, the following dfsgw delete command ends the authenticated session for the user ludwig from the NFS client that has network address 15.27.32.40 - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 162
Specifies the style of network address to be used to identify hosts. By default, the command uses the only address family currently supported, inet (Internet). For example, the following dfsgw query command determines whether the user ludwig is authenticated from the NFS client that has - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 163
The DFS/NFS Secure Gateway Configuring Gateway Server Machines to DCE The dfsgw list command lists all users who are authenticated to DCE via the Gateway Server machine. The command lists all entries from the authentication table on the Gateway Server machine on which it is issued. If your - HP Visualize b1000 | hp enterprise file system: planning and configuring hp DCE/ - Page 164
The DFS/NFS Secure Gateway Configuring Gateway Server Machines 164
HP Enterprise File System
Planning and Configuring HP DCE/9000
Enhanced DFS Version 3.0
HP Part No.
B6863-IE002-E0302
Edition 1
© Hewlett-Packard Company, 2002. All rights reserved.