Skip to ContentSun and Oracle Channel Sun How to Buy Log In

Security, Performance, and Accounting Administration

Contained Within

Solaris 2.4 System Administrator AnswerBook

Find More Documentation

Featured Support Resources

PDF로 이 문서 다운로드

이전: C Error Messages

Index

A


absolute mode
.....about	30
.....setting permissions with	38
accounting
.....overview	165
.....billing users	177
.....data collection files	188
.....fixing corrupted files	175
.....setting up	168
.....summary of commands	191
.....summary of procedures	170
.....turning on and off	169
accounting programs	172 to 175
.....`acctcom`	187
.....`dodisk`	167
.....`runacct`	177
`admind` daemon	52, 55
Administration Tool	49
.....security policy	55
.....setting up for DES security	67
.....setting up initial security	57
`admintool`, *See*Administration Tool
aliases file
.....example of	100
.....naming	86
.....used by ASET	83
ASET
.....See alsoASET files, ASET reports,ASET tasks
.....configuring	84
.....environment variables	91
.....error messages	217
.....network operation	88
.....processes	75
.....reports	81
.....restoring the system	87
.....running interactively	89
.....running periodically	91
.....scheduling	86
.....security levels	75, 89
.....setting options	91
.....starting up	74
.....using with NFS	88
.....working directory	89
`aset` command	74
ASET files	82
.....aliases file	83
.....checklist files	83
.....configuration files	84
.....examples of	98
.....master files	83
.....tune files	83
ASET reports
.....table of	81
.....collecting	88
.....collecting on a server	93


.....directory structure	80
.....files format	81
.....managing	93
ASET tasks
.....table of	81
.....`eeprom` check	78
.....environment check	78
.....firewall	78
.....set system files permissions	76
.....system configuration files check	77
.....system files checklist	76
.....user/group checks	77
`aset.restore` utility	87
`at` command	105
AUTH_DES authentication	62
AUTH_KERB authentication	63
authentication	50
.....DES	46, 62
.....KERB	63, 71
authorization	50
Automated Security Enhancement Tool,*See* ASET

B


buffer cache parameters	194
buffers
.....activities reported by`sar`	138
.....changing size of	108

C


cache flushing statistics reported by`vmstat`	128
`chargefee` command	177
checklist task
.....defining directories	85
.....files checked	83
`chgrp` command	38
`chkey` command	62
`chmod` command	38
`chown` command	38
commands
.....`aset`	74
......`at`	105
......`chgrp`	38
......`chmod`	38
......`chown`	38
......`df`	131
......`dispadm`	205
......`groupadd`	37
......`iostat`	130
......`kdestroy`	47, 66, 72
......`keylogin`	59
......`kill`	118
......`kinit`	47, 64, 72
......`klist`	64
......`ksrvrtg`	64
......`netstat`	159
......`nfsstat`	161
......`nice`	118
......`nisaddcred`	59
......`ping`	157
......`priocntl`	120, 205
......`ps`	113
......`rlogin`	43
......`sar`	135
......`snoop`	159
......`spray`	158
......`timex`	105
......`umask`	33
......`vmstat`	127
common key	46
configuration files
......checked by ASET	77
......used to configure ASET	84
conversation key	69
CPU performance	105
CPU utilization
......checking with`sar`	150
......reported by`vmstat`	128
`cred` database	47, 59
credential table	70
credentials	52

D


data collection utility,*See*`sadc`	133


data collection, automating	154
Data Encryption Standard,*See*DES
delete permission
.....for a directory	27
.....for a file	26
DES authentication	46, 47
.....for Administration Tool	67
.....mounting files	62
.....sharing files	62
DES security	52
.....for an NIS client	61
.....for an NIS+ client	59
`df` command	131
directory permissions	27
discounts for non-prime time users	178
disk
.....activity reported by`sar`	140
.....activity reported by`vmstat`	127
.....available space	131
.....I/O	106
.....slowdowns	106
`dispadmin` command	205
distributed administrationframework	50, 55
`dodisk` program	167

E


`eeprom`, checked by ASET	78
encrypting files	34
encryption	46
environment variables
.....checked by ASET	78
.....using to set ASET options	91
error messages	215 to 220
`/etc/dfs/dfstab` file	49
`/etc/hosts.equiv` file	44
`/etc/nsswitch.conf` file	8, 53
`/etc/passwd` file	9, 10
`/etc/publickey` file	47, 69
`/etc/system` file	194, 207
execute permission
.....for a directory	27
......for a file	26

F


faults reported by`vmstat`	128
file access
......controlling	48
......reported by`sar`	137
......security of	26
......understanding	26
file permissions
......displaying	35
......set by ASET	76
......table of	26
file systems
......sharing	49
......trouble shooting	106
file table status reported by`sar`	151
files
......encrypting	34
......types of	27
firewall machines	4
......checked by ASET	78
fonts, in this manual	xx

G


gateway, *See* firewall machines
global priorities
......initial settings	207
......set by the scheduler	206
global security policy	56
`groupadd` command	37
groups, how to create	37

I


identities, setting	51
identity mapping	55
index ID	71
interprocess communication, checkingwith`sar`	145
interrupt rates reported by`vmstat`	128
`iostat` command	130

K


KDC,*See* key distribution center
`kdestroy` command	47, 66, 72
`kerbd`	71
Kerberos	47
.....acquiring a ticket for root	63
.....destroying tickets	66
.....listing tickets	64
.....logging into	64
Kerberos authentication	48
.....implementing	71
.....sharing file systems with	62
kernel memory allocation, checking with`sar`	143
kernel memory allocator	143, 144
kernel mode parameter table	214
kernel parameters	109, 193, 208
.....changing the value of	194
.....tunable	193
key distribution center	72
key, how to create for an NIS user	61
`keylogin` command	59, 69
`keyserv` command	69
keyserver program	69
`kill` command	118
`kinit` command	47, 64, 72
`klist` command	64
KMA,*See*kernel memory allocator	143
`ksrvrtgt` command	64

L


local security policy	56
logins
.....create log file	20
.....display status of	19
.....maintaining a log of	15
.....restricting access	8
.....unsuccessful	15
.....with no password	19

M


master files, used by ASET	83
`maxclsyspri`	208
`maxusers`	109
memory
......management	107
......reporting free memory pages	149
......statistics reported by`vmstat`	127
memory leak	143, 144
monitoring performance	108
`msgsys` parameters	196

N


naming service	53, 56
`netid`	55
`netstat` command	159
network collisions, checking with`netstat`	159
`newkey` command	61
NFS data, displaying with`nfsstat`	162
NFS system	46
`nfsstat` command	161
`nice` command	118
NIS password database	9
NIS+
......`cred` database	47, 59
......publickey database	47
`nisaddcred` command	59
`nobody` identity	51
`nobody` permission	49

O


octal mode, setting permissions with	30

P


`pacct` file	187
packet smashing	43
packets
......calculating packet error rate	159
......testing with`spray`	158


page faults	146
paging activity
.....reported by`sar`	142, 146
.....reported by`vmstat`	127
parameters
.....buffer cache	194
.....kernel	208
.....scheduler configuration	207
.....streams	195
.....`ufs` filesystem	195
passwords
.....aging	10, 18
.....changing	10
.....dial-up	11, 22
.....displaying status of	18
.....how to change	16
.....in NIS database	9
.....in NIS+ database	10
.....selecting	8
`perfmeter`,*See* Performance Meter
performance
.....about	103
.....monitoring	108, 126
.....of system resources	104
Performance Meter	132
permissions
.....assigning in absolute mode	38
.....assigning in symbolic mode	29, 39
.....changing with`chmod`	28
.....for shared file systems	48
`ping` command	157
`priocntl` command	120, 205
priorities
.....and`nice`	118
.....designating with`priocntl`	121
.....fixed	117
.....global	206
.....of real-time processes	209
.....of timeshare processes	203, 208
.....scheduling	117
priority levels	116
private key	47
process
.....how to change the priority of	123
......killing	118
......monitoring	113
process class
......changing	123
......displaying	120
process scheduler	201 to ??
......class policies	202
......timeshare parameter table	203
processes performed by ASET	75
`profil` command	132
`ps` command	113
`ps` report, fields in	114
public key	47, 69
`publickey`	54
`publickey map`	47

Q


queue activity, checking with`sar`	148

R


read permission
......for a directory	27
......for a file	26
real-time class
......changing process priority	209
......parameter table	213
......process priority level	116
......scheduler policy	204
remote logins	43
remote procedure call	163
......displaying data with`nfsstat`	162
response time, of hosts on thenetwork	157, 158
restricted shell	13
retransmission rates	163
`.rhosts` files	45
......removing	58
`rlogin` command	43
root access
......restricting	14
......restricting on shared files	49


.....restricting to the console	14
.....security	51
routing table, displaying with`netstat`	161
RPC, *See* remote procedure call
`rt_dptbl`	213
`runacct`	172 to 175
.....billing users	177
.....daily reports	179
.....discount billing	178
.....error messages	174
.....files produced by	174
.....reports	179
.....restarting	177
.....troubleshooting	175

S


`sa1` command	133
`sa2` command	134
`sadc` command
.....activating	154
.....at boot-up	134
`sar` command	135
.....list of options	136
.....buffer activity report	138
.....checking CPU use	150
.....disk activities report	140
.....file access report	137
.....global report	153
.....kernel memory report	143
.....options listed by function	156
.....page-in activity	146
.....page-out activity	142
.....queue activity	148
.....semaphore report	145
.....system calls	139
.....table status report	151
.....terminal activity report	153
.....unused memory report	149
scheduler
.....parameters tables	209
.....setting parameters	209
scheduling priority	117
secret key	69
secure access	62
secure NIS+, adding a user	60
Secure RPC	46
......implementation of	69
security
......hotline	5
......overview of	1
......reporting problems	5
......system access	8
security levels for AdministrationTool	52, 55
semaphore operations	145
`semsys` parameters	197
set group ID	31
set user ID	31
`setgid` permissions	31
`setuid` permissions	31
`share` commands in`dfstab` file	49
sharing file systems	49
shell, restricted	13
`shmsys` parameters	197
small memory request pool	143
`snoop` command	159
software lock	146
`spray` command	158
sticky bit	32
streams parameters	195
superuser, monitoring	24
swap
......adding space	107
......reporting free disk blocks	149
......statistics	128
symbolic link permissions	26
symbolic mode
......about	29
......setting permissions with	29, 39
SYS security level	52
`sysadmin` group	51 to 57, 66, 67
system calls reported by`sar`	139
system class
......process priority level	116


.....scheduler policy	204
system files checked by ASET	76
system resource management	104

T


`tacct` files, fixing errors in	176
tasks performed by ASET	84
`telnet`	43
terminal I/O checking with`sar`	153
time stamps used by Secure RPC	70
timeshare class
.....changing process priority	208
.....parameter table	210
.....process priority level	117
.....scheduler policy	203
`timex` command	105
translation faults reported by`sar`	146
transmitting data, using Secure RPC	70
trap/interrupt rates reported by`vmstat`	128
trusted hosts	44
trusted users	45
`ts_dptbl`	210
`ts_kmdpris`	214
`ts_maxupri`	208
`ttyhstmgr` security	57
tune files
.....example of	98
.....modifying	87
.....used by ASET	83
typographic changes	xx

U


`ufs` filesystem parameters	195
`umask` command	33
user accounts
.....automatic expiration	20
.....checked by ASET	77
.....disabling	21
user-mode daemon for kerberos	71
`/usr/aset/asetenv` file	84
`/usr/lib/rsh` file	13
`/usr/sbin/kerbd` daemon	71

V


validity fault	146
`/var/adm/pacct` file	167
`/var/adm/sulog` log file	24
`/var/adm/wtmp` file	166
verifier	71
......for Secure RPC	70
`vmstat` command	127

W


window verifier	70
write permission
......for a directory	27
......for a file	26
`wtmp` files, fixing errors in	175

이전: C Error Messages