:


---------------------------------------------------------------
 © Copyright  
 Email: agb@krig.dp.ua
 Date: 30 Jul 1999
          
 http://www.bykov.dp.ua
---------------------------------------------------------------

RS/6000 Aix Software


IBM AIX version 4.x
















DNS

TCP/IP



AIX

DCE

COMMON DESKTOP ENVIRONMENT (CDE)

, , , , , , , , IBM AIX . , .

, AIX, (IBM, SCO .) UNIX Intel AIX, , .

" IBM AIX Version 4" AIX.

AIX - "". , ( Oracle) intranet. , (. ), AIX .

AIX, IBM, AIX .

.

IBM AIX - - UNIX, , . , , , UNIX , , , , . UNIX, "" , , . . UNIX , , UNIX. , .

UNIX, ( ), IBM. , IBM, , IBM AIX, UNIX, . , UNIX, , , , .

, AIX . , . , , .

AIX, , IBM RS/6000 AIX. , IBM , , , . , Microsoft . IBM. , , , . , , "".

, IBM, AIX.

AIX IBM, IBM, , IBM, Internet, .

, , . IBM RS/6000 AIX.

RS/6000 AIX ? , , , , , . , .

AIX

AIX UNIX X/Open XPG4. Portable Operating System Interface for Computer Environments (POSIX) IEEE 1003.1-1990 IBM Open Blueprint, Single UNIX (SPEC 1170) X/Open XPG4 UNIX 95. AIX : . AIX , , , , .

AIX:

.

AIX 3.2 . .

POWER, POWER2, P2SC PowerPC RS/6000 SP, SMP PowerPC.

, (. AIX).

2- (. ).

, : , .

X/OPEN XPG4 UNIX 95; Single UNIX Specification (SPEC1170) UNIX . .

SOMobjects SOM , . .

/ JFS (. ).

, , .

AIX CDE (. Common Desktop Environment (CDE)). .

, (. ).

C2 (. ).

, , .

Network Installation Manager (NIM) .

ITAA 2000 31 1999 .

(. ). .

Unicode UCS .

LVM (striping) , (. (RAID 0)).

IBM Network Station . Java Internet.

Welcome Center RS/6000 AIX. , , , .

AIX 4.3

64-bit 32- . 32- 64- 64- . 64- . 16GB 64- .

Web- AIX / Java 1.1

HTML HTML ( Adobe Acrobat PDF troff). web-.

Java Developer Kit (JDK) 1.1.2 IBM Just-In-Time (JIT) . - Java "" Java ( 25 - Java).

Internet Protocol Version 6 (IPV6) , IP. IP , .

IPsec IPV4 IPV6.

LDAP Secure Sockets Layer (SSL) Version 3 X.509v3. LDAP.

2000 Ready AIX 4.3 2000 2000, 2001 . , , 2000 .

Print spooler 1000 .

X11R6 Xwindow 64- .

(API) OpenGL, GL 3.2 graPHIGs 3D. API, .

/ AIX.

CacheFS ONC+ , Network File System.

/ /.

Telnet 40% 60%.

Unicode 2.0 UCS.

C2 C2 US DOD, ( AIX 4.2.0 ITSEC F-C2/E3).

Bonus Pack Version 4.3 AIX . , , :

Ultimedia Services AIX
Adobe Acrobat Version 2.01
Lotus Domino Go Webserver 4.6
Network Station Manager (NSM) Version 2.5
IP Security xx-bit DES
DCE Client Version 2.1
Netscape Navigator 3.0.3
Netscape Navigator 4.0.3 ( )
Netscape FastTrack Server 2.0.1
LDAP-SSL Version 3 xx-bit encryption

RS/6000

AIX IBM RS/6000, (, Apple Computer) PowerPC. , , , , , . , IBM RS/6000 , - IBM RS/6000 SP.

: Power PowerPC. RISC (Reduced Instruction Set Cycles). , , , CISC (, Intel), , . Power (, ). Power - IBM RS/6000 SP. PowerPC (, ).

RS/6000

RS/6000 MCA (MicroChannel) IBM SCSI-. , , .

RS/6000 PCI

RS/6000 PCI, MCA. PCI ISA ( ) MCA, EISA NuBus (, Apple Macintosh).

RS/6000

RS/6000 , . , , . , . . SCSI. , , , SSA.

/

/ RS/6000 , , . (, ) 8-, 16- 128- . , Token-Ring, Ethernet, FastEthernet, FDDI, Fiber Channel Switch, ATM, X.25 . SDLC.

RS/6000 POWERStation, - , (, CAD/CAM). RS/6000 , . , , , , 2D 3D .. ( 23- IBM PowerDisplay) .

ASCII , . , RS/6000 . ASCII .

RS/6000 , , Ethernet Token-Ring. RS/6000 () . , ASCII .

XStation

XStation (X ) , , , ( ) . RS/6000 , XStation Manager.

, , . , , , , .. AIX , . UNIX TCP/IP NFS. RS/6000, , Sun 3 Sun 4. , , NFS V4, . , , .

(Network Computers)

Network Computer - . , , . , , (, ..), , Internet. , , , , .

.

AIX , , , , , .

" ?", " ?".

:

/;
;
(, ..);
;
;

;

;

;

( ) ;

;

;

;

;

;

;

;

.

(, 15-20 , ) . , , .

AIX root ( (. )).

, root, (ID). , . ID .

root, su. , , root. root exit <Ctrl-D>.

su: /bin/su, root . "".

: su [_] , .

AIX .

:

?
?
(, ..)?
?
.. ..

(BOS): (4mm, 8mm, QIC120, QIC525) 16 .

RS/6000 PCI. BOS CD-ROM. CD-ROM 8 .

AIX Network Installation Manager (NIM). BOS .

IBM RS/6000 BOS.

AIX

AIX , , . AIX .

RS/6000 . 1-2 + root. , , , , .

RS/6000 . :

;
;
;
;
Internet;
;
;
;
;
.

. 1-2 root. IBM.

RS/6000 ( 1)

service.
reset.
CD-ROM . , , .

RS/6000 PCI ( 1)

(SCSI SSA ).
.
CD-ROM . , .

: 3.5" .

( 2 3)

******* Please define the System Console. *******


Type a 2 at this terminal and press <Enter>
if you want this display to be the System Console.

, .

:

(Terminal type) dumb
(Speed) 9600
(Parity) no
(Bits per character) 8
- (Stop bits) 1
(Line Control) IPRTS
(Operation mode) echo
Turnaround character CR

. ( ), <2> <Enter> .

, ( ). , .

( 4)

.

Welcome to Base Operating System
Installation and Maintenance


Type the number of your choise and press Enter. Choice indicated by >>>


1 Start Install now with Default Settings
2 Change/Show Installation Settings and Install
3 Start Maintenance Mode for System Recovery

88 Help ?
>>> Choice [1]: 2

Installation Settings

Either type 0 or press Enter to install with current settings, or type the
number of the setting you want to change and press Enter.

1 System Settings
Method of installation New and Complete Overwrite
Disk where you want to Install hdisk0

2 Primary Language Enviroment Settings (AFTER install)
Cultural Convention C (POSIX)
Language C (POSIX)
Keyboard C (POSIX)

3 Install Trusted Computing Base no

0 Install with the settings listed above

88 Help ?
99 Previous Menu Warning: Base Operating System Installation
will destroy or impair recovery of SOME data
on the destination disk hdisk0

>>> Choice [1]:

Trusted Computing Base (TCB) trusted path, trusted shell . Trusted path (, su), , . Trusted path , , , . TCB ( , .Trusted Computing Base), , TCB ( BOS). TCB .

Change Method of Installation

Type the number of your choice and press Enter.

1 New and Complete Overwrite
Overwrites EVERYTHING on the disk selected for installation.
Warning: Only use this method if the disk is totally empty or there is nothing
on the disk you want to preserve.


2 Preservation Install

Preserves SOME of the exiting data on the disk selected for installation.
Warning: This method overwrites the usr (/usr), variable (/var), temporary
(/tmp), and root (/root) file systems. Other product (application) files and
configuration data will be destroyed.


3 Migration Install

Upgrades the Base Operating System to current release. Other product
(application) files and configuration data will be spared.

88 Help ?
99 Previous Menu

>>> Choice [3]: 1

:

1. New and Complete Overwrite - . , , .

2. Preservation Install - , BOS . /(root), /usr, /var /temp.

3. Migration Install - AIX . /tmp.

, ( ) , .

Change Disk Where You Want to Install

Type one or more numbers for the disk(s) to be used for
installation and press Enter. To cancel a choice, type the
corresponding number and press Enter. At least one bootable
disk must be selected. The current choice indicated by >>>

Size VG
Name Location Code (MB) Status Bootable
1 hdisk0 00-01-00-0.0 305 rootvg yes
2 hdisk1 00-01-00-1.0 305 rootvg no

>>> 0 Continue with choices indicated above

66 Disks not known to Base Operating System Installation
88 Help ?
99 Previous Menu

>>> Choice [0]:

, , , , ( 66).

, ( , ..), .

RS/6000

. AIX, . . , , Installation Assistant, .

RS/6000 PCI

RS/6000 PCI , RS/6000 Normal.

( 5)

RS/6000

( CD-ROM) Normal.

RS/6000 PCI

<Enter> . System Management Services, <F4> , , AIX .

Installation Assistant Menu ( 6)

BOS : (root), , . , , . .

BOS Installation Assistant, . Installation Assistant BOS, .

Installation Assistant "Tasks Completed - Exit to AIX Login" . Installation Assistant . root Installation Assistant. Installation Assistant : Install_assist

UNIX , AIX, , , UNIX. , , , , , , .

, ( UNIX), Windows NT Server, , , .

, , .

, , AIX .

AIX Version 4

AIX - System Management Interface Tools (SMIT), AIX.

SMIT . , . .

SMIT: - (ASCII) (Motif). ( AIX, SunOS 4.1.3 HP-UX 9.0) Distributed System Management Interface Tools (DSMIT) (.DSMIT).

, 70% ( , , , ), - Visual System Manager (VSM), (. Visual System Management (VSM)).

, . , , ASCII .

AIX Object Data Manager (ODM), , ( ). , <Enter> , ODM, . ODM.

ODM: /etc/objrepos/

, , - .

SMIT

ASCII AIXWindows , .

SMIT :

;
( );
;
;
;

SMIT (ASCII)

SMIT .

System Management

Move cursor to desired item and press Enter.

Software Installation and Maintenance
Software License Management
Devices
System Storage Management (Physical and Logical Storage)
Security & Users
Communication Application and Services
Print Spooling
Problem Determination
Performance & Resource Scheduling
System Environment
Processes & Subsystems
Application
Using SMIT (information only)


F1=Help F2=Refresh F3=Cancel F8=Image
F9=Shell F10=Exit Enter=Do

. . , .

Schedule a Job

Type or select values in entry fields.
Press Enter AFTER making all desired changes.

[Entry Fields]
YEAR [98]
MONTH [Sep] #
DAY (1-31) [12] +
* HOUR (0-23) [10] #
* MINUTES (0-59) [30] #
SHELL to use for job execution Korn (ksh) +
* COMMAND or SHELL SCRIPT [] /
(full pathname)

F1=Help F2=Refresh F3=Cancel F4=List
F5=Reset F6=Command F7=Edit F8=Image
F9=Shell F10=Exit Enter=Do

, [ ].

, < >.

, :
* , ;
# ;
/ (pathname);
;
? ;
+ .

(, , +) <F4>.

SMIT AIX. <F6>.

COMMAND STATUS

Command: OK stdout: yes stderr: no

Before command completion, additional instructions may appear
below.

[TOP]
UID PID PPID C STIME TTY TIME CMD
root 1 0 4 20:15:04 - 1:49 /etc/init
root 1719 1 0 20:16:14 - 0:10 /etc/syncd 60
root 2003 1 0 20:16:19 - 0:00 /etc/srcmstr
root 2233 1 0 20:16:14 - 0:00 /usr/lib/errdemon
ray 3525 1 0 17:01:28 0 0:00 -ksh
root 3806 2003 0 20:16:23 - 0:00 /etc/syslogd
ray 4162 3525 6 19:53:22 0 0:04 smit
root 5355 1 0 20:16;27 - 0:12 /etc/cron
root 6649 2003 0 20:16:32 - 0:00 qdaemon
ray 7303 4162 8 20:09:45 0 0:00 ps –ef

[MORE . . . 6]

F1=Help F2=refresh F3=Cancel F6=Command
F8=Image F9=Shell F10=Exit /=Find

n=Find Next

. <PgDn>, <PgUp>, <Home>, <End> .

SMIT

SMIT smit.log smit.script $HOME , SMIT. , SMIT.

smit.log SMIT, . , , .

smit.script SMIT ( ). , () .

DSMIT

DSMIT SMIT . SMIT, DSMIT ASCII . DSMIT , AIX 4.1 , : Sun OS 4.1.3 HP-UX 9.0.

DSMIT root ( ). DSMIT dsmit.

: .

Visual System Management (VSM)

. , AIX 3.2.5 , , Visual System Management (VSM).

AIX VSM - .

- Common Desktop Environment (. Common Desktop Environment (CDE)), , , UNIX. ( 70% ) . "--" (drag-and-drop). .

VSM:

/ xuserm
xlvm
xprintm
xdevicem
xinstallm
xmaintm

IBM AIX, , IBM.

AIX . IBM - IBM Software Server, : IBM Communications Server, IBM Database Server (DB/2), IBM Directory and Security Server, IBM Internet Connection Server (Web-server), IBM System Management Server (IBM SystemView Server), IBM Transaction Server, Lotus Notes Release 4.

, , Oracle, , , , .

(LPP) - , (package) (fileset), LPP.

(fileset). - . (package), .

, LPP . LPP, , , , , , . .

LPP.Package.fileset.suffix

, (NFS) TCP/IP bos.net.tcp.nfs bos.net LPP bos.

:

.adt LPP
.com
.compat , LPP
.data , /usr/share
.dev LPP
.diag
.fnt
.info[lang] InfoExplorer LPP
.help[lang] LPP
.loc LPP
.mp
.msg[lang]
.rte run time
.smit SMIT
.ucode
.up

. .

LPP.msg.[lang].package.fileset

(Bundles)

SMIT LPP, (bundle). .

Supporting Code Service

:

root , root, ;
usr , ;
share , /usr/share.

, .

. Update Bundle , fixes, , .

(Maintenance Level Bundle), .

Fix States

:

Applied , ;
Commited .

:

1. (Install and Update software);
2. (Maintain Installed Software);
3. (Network Installation Management). (Custom Install)

# smit install_selectable

Install/Update Selectable Software (Custom Install)

Move cursor to desired item and press Enter.

Install Software Products at Latest Level
Install Bundles of Software
Install Maintenance Levels
Install Fileset Updates by Fix
Install Additional Printer/Plotter Software
Install Additional Device Software
Install/Update From All Available Software



F1=Help F2=Refresh F3=Cancel F8=Image
F9=Shell F10=Exit Enter=Do

.

Install Software Products at Latest Level


Type or select values in entry fields.
Press Enter AFTER making all desired changes.

[Entry Fields]
* INPUT device/directory for software /dev/rmt0.1
* SOFTWARE to install [all_licensed] +
PREVIEW only? (install operation will not occur)no +
COMMIT software updates? yes +
ALTERNATE save directory []
AUTOMATICALLY install requisite software? yes +
EXTEND filesystem if space needed? yes +
OVERWRITE same or never versions? no +
VERIFY install and check file sizes? no +
Include corresponding LANGUAGE filesets? yes +
DETAILED output? no +

F1=Help F2=Refresh F3=Cancel F4=List
F5=Reset F6=Command F7=Edit F8=Image
F9=Shell F10=Exit Enter=Do

lslpp -L .* SMIT ( : smit lslpp).

RS/6000

:

Normal .
Secure . .
Service : , CD-ROM, , ( , CD-ROM) . . .

RS/6000 PCI

:

Normal Mode
;
;
;
;
.

Standalone Mode
System Management Services diskette
:

;
;
;
(, ).

standalone :

1. System Management Services .
2. .
3. <F1> <F4> ASCII

standalone :

1. <Ctrl+Alt+Del>.
2. <F3>.
3. .

.

RS/6000

LED . (BIST). , , . BIST 100 199. (POST) (IPL). . 201 298. . 299. ( 500 999). 553 init /etc/inittab.

RS/6000 PCI

RS/6000 PCI : ( , , , , ) ( ( CD) System Management Service Diskette). , , . .

alog. . , , . alog alog ODM.

: boot, bosinst nim. alog rc.boot.

, , (maintenance mode)

alog -o -t boot

(, boot) tee.

/etc/inittab

/etc/inittab , init, , . , . .

:

_:::

_ ( 14 ). .

, . 0-9, S, s (- ), M m. init, ( ). S s, init , M m, . /etc/inittab , , . - 2 ( . , , .

, init. :

respawn ,
wait

once
sysinit ,

/etc/inittab ( ):

init:2:initdefault brc::sysinit:/sbin/rc.boot 3>/dev/console 2 > &1 #3   
powerfail::powerfail:etc/rc.powerfail 2 >&1 | alog -tboot > /dev/console
rc:2:wait:/etc/rc 2>&1 | alog -tboot > /dev/console
fbcheck:2:wait:/usr/sbin/fbcheck 2 >&1 | alog -tboot > /dev/console
srcmstr:2:respawn:/usr/sbin/srcmstr #start src cron:2:respawn:/usr/sbin/cron
rctcpip:2:wait:/etc/rc.tcpip>/dev/console 2>&1 #start tcpip daemon
qdaemon:2:wait:/usr/sbin/startsrc -s qdaemon writesrv:2:wait:/usr/sbin/startsrc -s writesrv
uprintfd:2:respawn:/usr/sbin/uprintfd
infod:2:once:startsrc -sinfod
tty0:2:respawn:/usr/sbin/getty /dev/tty0 #  getty
tty1:2:respawn:/usr/sbin/getty /dev/tty1 # 

, init /etc/inittab (, getty , - ) telinit -q.

/etc/inittab mkitab chitab.

System Resource Controller (SRC)

, .

. .

( ), .

System Resource Controller (SRC).

SRC :

, ;
;
, ;
;
.

SRC

: startsrc [options]{-s |-g }
: stopsrc [options]{-a|-g |-p PID_|-s }
: refresh {-g |-p PID_|-s }
: lssrc {-a|-g |-s }

:
-f ;
-s , ;
-g , .

(CDE Login).

:

;
System Maintenance;
root;
/usr MOUNT /USR
/usr/dt/bin/dtconfig -d #disable CDE
/usr unmount /usr
shutdown -r
ASCII ;
;
/usr/dt/bin/dtconfig -e #enable CDE
;
.

shutdown ( SMIT Stop the System).

:

shutdown [-] [+ ]

:

shutdown +2 The system will not available until tomorrow

:

Broadcast message from root on tty...
shutdown: PLEASE LOG OFF!!!
System maintenance is in progress.
All processes will be killed in 2 minutes.
The system will not be available until tomorrow

, , , . .

shutdown -F ( ), -r , -m .

-k . , root, .

:

sync
sync
halt

System Enviroment


Move cursor to desired item and press Enter.

Stop the system
Assing the Console
Change/Show Date, Time, and Time Zone
Manage Language Enviroment
Change/Show Characteristics of the Operating System
Change/Show Number of Licensed Users
Manage AIX Floating User Licenses for this Server
Broadcast Message to all Users
Manage System Logs
System Dump
Change System User Interface

F1=Help F2=Refresh F3=Cancel F8=Image
F9=Shell F10=Exit Enter=Do

/etc/environment LANG .

chlang < > , InfoExplorer, on-line help SMIT .

Manage Language Environment


Move cursor to desired item and press Enter.

Change/Show Primary Language Environment
Add Additional Language Environments
Remove Language Environment
Change/Show Language Hierarchy
Change/Show Applications for a Language
Convert System Messages and Flat Files





F1=Help F2=Refresh F3=Cancel F8=Image
F9=Shell F10=Exit Enter=Do

ASCII (, KOI-8r WIN1251 ), lconv, SMIT.

, , :

- ,
- /, . , .
- , .
- ( ) .

, , .

:

- - . . / (). .
- - - .

- - . , , - /dev/hd1, - /dev/rhd1.

- :

cd0 CD-ROM
fd0, fd0l, fd0h
hd1, lv00
hdisk0

- :

console, lft, tty0
lp0
rmt0
tok0, ent0
kmem, mem, null
rfd0, rfd0l, rfd0h
rhd1, rlv00
rhdisk0

/dev - , ( ODM ).

/dev ls -l /dev

ODM .

. , .

, . ( ).

: lsdev -P -H

: lsdev - -H

lsdev:

-P
-C
-H -c (, lsdev -Pctape; lsdev -Ccmemory .)

lsattr -E -l [__] .

:

(Defined) - . .

(Available) - . (, SCSI), , .

: inet0 stopped (.. TCP/IP).

(location code) .

, .

. :

AA-BB-CC-DD

AA BB . (AA-BB-CC) . (AA-BB-CC-DD) .

AA - /, 0 (0 -)

BB - / (0 - MCA PCI; 1 - ISA; 2 - pcmcia) - /. ISA x.

CC - . : 0P - , 0S - SCSI, S1, S2 - , 0D - -, 0K - , 0M - , 0T -

DD - .

SCSI :

AA-BB-CC-S,L

CC - 00
01
0S SCSI
S - SCSI ( 7) SCSI 0
L - (, )

, ROM , cfgmgr (configuration manager). . cfgmgr () .

: cfgmgr.

ISA

ISA, ISA , , PCI.

ISA:

/ (I/O address)
(bus memory address)
(IRQ)
DMA (DMA channels)
DMA (bus memory DMA address)

AIX ISA , . SMIT mkdev. mkdev, SMIT . mkdev ISA, ( ).

(, IBM Ethernet adapter) . RS/6000.

mkdev ISA Ethernet ( ):

mkdev -c adapter -s isa -t ethernet -a bus_intr_lvl=IRQ -a bus_io_addr=IO -a bus_mem_addr=MEM -a media_type=TYPE -p bus1

IRQ - ;
IO - /;
MEM - ;
TYPE - (bnc, utp .).

smit devices

Devices


Move cursor to desired item and press Enter.

Install/Configure Devices Added After IPL
Printer/Plotter
TTY
Asynchronous Adapters
PTY
Console
Fixed Disk
CD ROM Drive
Read/Write Optical Drive
Diskette Drive
Tape Drive
Communication
Graphic Displays
Graphic Input Devices
Low Function Terminal (LFT)
SCSI Initiator Device
Xstation Configuration
SCSI Adapter
Asynchronous I/O
Multimedia
List Devices
Install Additional Device Software
ISA Adapter
PCMCIA Adapter

F1=Help F2=Refresh F3=Cancel F8=Image
F9=Shell F10=Exit Enter=Do

:

TTY (, , )
PTY . , . AIXWindows TCP/IP.
Communication (Ethernet, X.25 .)
Xstation Configuration Xstation Manager

mkdev. , :

) , ;
) ;
) .

SMIT. , :

mkdev -c diskette -t fd -s slofd -p fda0.

SMIT :

Add a Diskette Drive


Type or select values in entry fields.
Press Enter AFTER making all desired changes.

[Entry Fields]
* PORT number [] +
Diskette DRIVE TYPE 3.5 inch +


F1=Help F2=Refresh F3=Cancel F4=List
F5=Reset F6=Command F7=Edit F8=Image
F9=Shell F10=Exit Enter=Do

1. , , , , lsdev -CH .
2. , , , part number , lscfg -v
3. lsattr -E -I sys0, .

, :

for DEV in $(lsdev -CF name)
do
ECHO $(lsdev -CI $DEV -F "NAME LOCATOR") >> /tmp/d.log
lsattr -EHI $DEV >> /tmp/d.log
done
lscfg -v >> /tmp/d.log

: PCI, ISA , .

cfgmrg , , MCA, PCI SCSI. . , , ASCII .

:

TTY (RS232 RS422)


(, , - - ...)
(dump, IBM 3151, DEC,...)

SMIT Add TTY TTY.

login:

disable ,
enable , , getty.
delay , ,
share ( ..)

/ SMIT

( )

) <Ctrl+D>;
) Setup;
) : <Ctrl+j>, stty sane, <Ctrl+j>, (log of/on).

stty -a < /dev/tty n
stty sane echo < /dev/tty n

,

kill -9 pid_of_login_shell

pid_of_login_shell ps -ef
login_shell - shell'.

1. .
2. Setup .
3. lscfg .

( , , ).

. , , ..

:

;
;
(, ) .

(qprt, lp lpr) /var/spool/lpd/qdir ( , /var/spool/qdaemon).

qdaemon, , .

, , qdaemon (piobe). , qdaemon .

qdaemon /etc/qconfig. (stanza) ( ) .

/etc/qconfig

lp0:                    * 1    1  
      device=lp0dev
      discipline=fcfs
lp0dev:
      file=/dev/lp0
      backend=/usr/lib/lpd/piobe
      header=group
      trailer=never
      feed=never
lpq:                    * 1    2- 
      device=lpqdev1, lpqdev2
lpqdev1:
      file=/dev/lp1
      backend=/usr/lib/lpd/piobe
lpqdev2:
      file=/dev/lp2
      backend=/usr/lib/lpd/piobe
ps:                     * 2    1 
      device=psdev
psdev:
      file=/dev/lp3
      backend=/usr/lib/lpd/piobe
asc:
      device=ascdev
ascdev:
      file=/dev/lp3
      backend=/usr/lib/lpd/piobe

( 20 ) . /etc/qconfig , . ().

, (discipline). :

fcfs - , , .
sjn , .

( 20 ), . backend, (, piobe).

:

access write both ( )
header never always, group
trailer never always, group
feed never Integer
aling FALSE TRUE

,

/var/spool/lpd/qdir .
/etc/qconfig , , .
/var/spool/qdaemon .
/var/spool .
/var/spool/lpd/stat qdaemon . SMIT.

.

UNIX . . AIX , UNIX System V, BSD AIX.

                     SYSTEM V     BSD     AIX
      lp           lpr     qprt
      lpstat       lpq     qchk 

.
on-line ready.
, .
/etc/qconfig.
qdaemon ( qdaemon). stopsrc -s qdaemon ( ), startsrc -s qdaemon.

smit chpq.

smit rmpq. , .

SMIT

( , , ) smit pqmanage.

DEV_BUSY . , . , , qdaemon . : , kill () , .
DEV_WAIT . , offline ( , , ..)
DOWN . , . .
OPR_WAIT . , (, ) .. .
QUEUED .
READY .
RUNNING .
UNKNOWN . , , DEV_WAIT.

AIX Version 4

" " AIX :

;
;
;
;
;
Logical Volume Manager (LVM).

. .

UNIX

(partition). . . . , , . , . , . .

LVM

AIX ( ) Logical Volume Manager (LVM).

:

;
;
;
;
;
.

( ). , . /dev /dev/hdiskn. , .

. . 4 . :

L = SV/1016,

L - ;
SV - ;
1016 - .

- AIX. (), . .

(, SCSI ) .

, root (rootvg) , . rootvg .

:

;
;
;
;
.

, .

.

varyoffvg , .

(VGDA)

(VGDA) - , . VGDA (+ ).

VGDA, (varyonvg), . 51% VGDA. .

: . .

. AIX .

. . . , SMIT.

, , .

/ 4 ( 1- 256- ).

(RAID 1)

. 2- 3- ( ) - ( ). IBM - 5 .

.

:

1. - . . - , . (mirror write consistency option).
2. - , . , , .

(RAID 0)

(striping) - , ( ) , -.

. .

:

1. .
2. , .
3. 2 .
4. SCSI ( SSA).
5. .

Logical Volume Manager / . - .

(Intra-physical volume allocation policy) , . : , . , - .

(Inter-physical volume allocation policy) , . ( ).

:

( , ) ( ).

255
32
1016 , 256
256
32512

:

;
;
;
;
(raw device).

, rootvg , ( , ). rootvg , , , .

- . () .

.

( ).

- , (boot image).

Raw device - . , , , raw device .

:

;
.

AIX :

jfs
cdrfs CD-ROM -
nfs

, , .

( ).
, , , , , .
.
, , .
.
.

AIX Version 4

AIX :

/ (root) = /dev/hd4 . , , ,
/usr = /dev/hd2 , . .
/var = /dev/hd9var .
/home = /dev/hd1 . .
/tmp = /dev/hd3 . .

/etc/filesystems

/etc/filesystems . (stanza). , .

:

check fsck . True .
dev , , , .
mount mount . :

automatic
true mount all.
false

type , mount -t.
vfs (, nfs)
vol mkfs (label) .
log ( JFS).

, , . .

, , ( nfs ). "" .

SMIT , .

, , /dev. .

, , , .

, system .

root .

AIX , 4. , UNIX, 512 .

() , (, , , inodes ( ), ) , .

. , 31 .

inodes, (, , , , (ID) / , // ). , .

: inodes , , .

, 4. , 2 2. .

- ( 512, 1024, 2048 4096 ). .

AIX . ( 2 ), , .

.

: root .

( ).

:

1. .
2. sync, . inodes jfslog (/dev/hd8) 4. . . .
3. COMMIT, jfslog inodes.
4. sync.

, .

lsfs. /etc/filesystems .

lsfs (NFS) CD-ROM.

# lsfs
Name Nodename Mount Pt VFS Size Options Auto
/dev/hd4 - / jfs 8192 - yes
/dev/hd1 - /home jfs 90112 - yes
/dev/hd2 - /usr jfs 507904 - yes
/dev/hd9var - /var jfs 8192 - yes
/dev/hd3 - /tmp jfs 16384 - yes
/dev/cd0 - /infocd cdrfs ro yes
/dev/lv00 - /home/john jfs 8192 rw yes

lsfs :

lsfs [-q][-c|-l][-v vfstype|-u mountgrp] file_system

, -q , inode;
-c -l , , ;
-v -u ( , ).

lsfs . smit fs.

mount .

 # mount
node mounted mounted over vfs date options
/dev/hd4 / jfs Jul 11 20:14 rw,log=/dev/hd8
/dev/hd2 /usr jfs Jul 11 20:15 rw,log=/dev/hd8
/dev/hd9var /var jfs Jul 11 20:15 rw,log=/dev/hd8
/dev/hd3 /tmp jfs Jul 11 20:15 rw,log=/dev/hd8
/dev/hd1 /home jfs Jul 11 20:16 rw,log=/dev/hd8
/dev/lv00 /home/john jfs Jul 11 20:16 rw,log=/dev/hd8

SMIT :

SMIT -> File System -> List all Mounted File Systems

SMIT, .

.

# smit crjfslv 

Add a File System on a Previously Defined Logical Volume


Type or select values in entry fields.
Press Enter AFTER making all desired changes.
[Entry Fields]
* LOGICAL VOLUME name
* MOUNT POINT [] +
Mount AUTOMATICALLY at system restart no +
PERMISSIONS read/write +
Mount OPTIONS [] +
Start Disk Accounting? no +
Fragment Size (bytes) 4096 +
Number of bytes per inode 4096 +
Compression algorithm no +



F1=Help F2=Refresh F3=Cancel F4=List
F5=Reset F6=Command F7=Edit F8=Image
F9=Shell F10=Exit Enter=Do

# smit crjfs

Add a Journaled File System


Type or select values in entry fields.
Press Enter AFTER making all desired changes.
[Entry Fields]
Volume group name rootvg
* SIZE of file system (in 512-byte blocks) [] #
* MOUNT POINT []
Mount AUTOMATICALLY at system restart no +
PERMISSIONS read/write +
Mount OPTIONS [] +
Start Disk Accounting? no +
Fragment Size (bytes) 4096
Number of bytes per inode 4096
Compression algorithm no



F1=Help F2=Refresh F3=Cancel F4=List
F5=Reset F6=Command F7=Edit F8=Image
F9=Shell F10=Exit Enter=Do

, SMIT, crfs .

crfs mkfs. mkfs, crfs , , mklv, , mkfs ODM /etc/filesytems .

crfs :

-g volgrp - , . , ;
-a size=SIZE - 512- ;
-m mntpt - ( ). ;
-a yes|no - . (. ) . mount=true /etc/filesystems.
-p rw|ro - . / (rw) (ro). (Mount Options) setuid setgid ( nosuid) ( nodev).
-a fragment=size - . 512, 1024, 2048 4096. - 4096 .
-a nbpl=value - inode. inodes . 512, 1024, 2048, 4096, 8192 16384. - 4096 .
-a compress={no|LZ} - . - no.

/

# smit mountfs

Mount a File System


Type or select values in entry fields.
Press Enter AFTER making all desired changes.
[Entry Fields]
FILE SYSTEM name []
DIRECTORY over which to mount []
TYPE of file system
FORCE the mount? no
REMOTE NODE containing the file system
to mount []
Mount as a REMOVABLE file system? no
Mount as a READ-ONLY system? no
Disallow DEVICE access via this mount? no
Disallow execution of SUID and sgid programs
in this file system? no

F1=Help F2=Refresh F3=Cancel F4=List
F5=Reset F6=Command F7=Edit F8=Image
F9=Shell F10=Exit Enter=Do

, system .

, /etc/filesystems.

root .

/

Change/Show Characteristics of a Journaled File System


Type or select values in entry fields.
Press Enter AFTER making all desired changes.
[Entry Fields]
File system name /home
NEW mount point [/home]
SIZE of file system (in 512-byte blocks)[8192]
Mount GROUP []
Mount AUTOMATICALLY at system restart yes +
PERMISSIONS read/write +
Mount OPTIONS [] +
Fragment Size (bytes) 4096
Number of bytes per inode 4096
Compression algorithm no

F1=Help F2=Refresh F3=Cancel F4=List
F5=Reset F6=Command F7=Edit F8=Image
F9=Shell F10=Exit Enter=Do

( ). .

.

, SMIT, rmfs. , , ODM /etc/filesystems. , , .

:

;
;
;
;
.

, AIX , . , .

df. -k.

.

, :

/var/adm/wtmp
/var/spool/*.*
/smit.log
/smit.script
/etc/security/failedlogin
/var/adm/sulog

/var/adm/wtmp /var/adm/failedlogin who -a _. .

() Berkeley Disk Quota System .

:

;
;
(, ).

:

Soft limits - 1KB , (grace period).

Hard limits - 1KB ,

Grace period - soft limits . - 7 .

: , root. quota .

1 - , , /etc/filesystems : : quota=userquota : quota=userquota,groupquota

2 - edquota. , .

edquota :

edquota [-u username|-g groupname] [-p prototype]

: -u username; -g groupname; -p ( , ), .

: edquota EDITOR ( , export EDITOR=/usr/bin/vi).

3 - Grace Period Grace Period edquota : -t - ; -tg - ; -tu - .

Grace Period , , . Grace Period 1- , Grace Period . 0 Grace Period .

quotaon : -u - ; -g - ; -a - . , . .

quotaoff. ( -a) ( ).

quotacheck . repquota .

defragfs:

/usr/sbin/defragfs [-q|-r] FILESYSTEM

-q ; -r , .

fsck. :

fsck [-p|-y|-n] [-f] [FILE SYSTEM]

-p . SMIT . -y -n yes no .

: , inodes, , , , , .

, , /etc/filesystems check true. /lost+found.

lsfs.
/etc/filesystem.
df .
mount.

. () 4 (page frames). 4 . .

, , . , , .

. . (, , ), . .

IBM , RS/6000 Kingstone.

:

256

=2;

256

=+1.25(-256)

- ; - .

.

lsps -a 70% .

: , . :

# lsps -a
Page Space
Physical Volume
Volume Group
Size
%Used
Active
Auto 
Type
hd6 
hdisk0 
rootvg 
64MB
44%
yes 
yes 
lv 
paging00 
hdisk1 
uservg 
64MB 
 9%
yes 
yes 
lv 
paging01 
hdisk1 
uservg 
16MB 
86%
yes 
yes 
lv

paging01 ( ), , paging00 .

, . , .

. (hd6) hdisk0 ( ).

:

1. .
2. , .

SMIT lsps -a.

, , SMIT, :

# lsdev -Cc memory
# lsattr -I -l sys0

, , SMIT, /etc/swapspaces

# pg /etc/swapspaces
hd6:
    dev=/dev/hd6
paging00:
    dev=/dev/paging00

( ).

: .

: . ( ).

: ( , )

: 1. .
2. ( ).
3. .
4. .

: (hd6) .

1. lsps.
2. /etc/swapspaces.

, . , , ( ) , .

.

, , , - .

( ).

:

1. - ( rootvg).
2. - .
3. () - . , .

:

, . , -, -, , .

. , .

, , n , n - , .

. , . .

:

;
;
;
rootvg.

:

;
, .

, . AIX 3 1/2" ( 1.44 2.88) 5 1/4".

3 1/2" /dev/fd0. 3 1/2" 5 1/4" /dev/fd1.

format fdformat:

format /dev/fd0 .

( -d drive) ( -l).

fdformat /dev/fd0 . -h.

flcopy.

DOS dosdir, dosread doswrite.

.

:

1/4" QIC-120 (120), QIC-150 (150), QIC-525 (525) QIC-1000. - QIC-24 (44);
4 (2 4);
8 (2.3 5);
1/2" 9- 1600bpi 6250bpi.

/dev/rmtX, X - .

/dev/rmtX.1 /dev/rmtX.7. , :

;
. 1/4" , , ;
.

()
/dev/rmtX
/dev/rmtX.1
/dev/rmtX.2
/dev/rmtX.3
/dev/rmtX.4
/dev/rmtX.5
/dev/rmtX.6
/dev/rmtX.7

. /dev/rmtX.N N=A+B+C , A - (=4, =0, ); - (=2, =0 ); - (=1, =0, ).

SMIT:

System Storage Management (Physical & Logical)
 
Move cursor to desired item and press Enter.

  Logical Volume Manager
  File Systems
  Files & Directories
  System Backup Manager



F1=Help      F2=Refresh        F3=Cancel         F8=Image
F9=Shell     F10=Exit          Enter=Do

rootvg - mksysb

bos.sysmgt.br. rootvg. :

;
;
;
;
;
.

/image.data

rootvg /image.data.

image data:
	IMAGE_TYPE=bff
	DATE_TIME=Wed Aug 17 15:47:31 CST 1996
	UNAME_INFO=AIX 9442A System 1 1 4 0000000530000
	PRODUCT_TAPE=no
	USERVG_LIST=
logical_volume_policy:
	SHRINK=no
	EXACT_FIT=no
ils_data:
	LANG=C
# Command used for vg_data, /usr/sbin/lsvg
lsvg_data:
    VGNAME=rootvg
    PPSIZE=4 VARYON=yes VG_SOURCE_DISK_LIST=hdisk0 hdisk1
# Command used for source_disk_data:
    /usr/sbin/bootinfo source_disk_data: (      rootvg)
    LOCATION=( )
    SIZE_MB=(   )
    HDISKNAME=( )
# Command used for lv_data; /usr/sbin/lslv
    lv_data: (      rootvg)
    . .
    fs_data: (       rootvg)

, lsxx; , lsvg , lslv , lsjfs .

BOSINST_FILE= post_install_data.

LOGICAL_VOLUME_POLICY .

SHRINK= YES "" ( LV_MIN_LPs FS_MIN_SIZE) .

EXACT_FIT= , .

VG_DATA .

VG_SOURCE_DISK_LIST= , .

LV_DATA . .

/bosinst.data

/bosinst.data , , .

control_flow:
CONSOLE=
INSTALL_METHOD=overwrite
PROMPT=yes
EXITING_SYSTEM_OVERWRITE=no
INSTALL_X_IF_ADAPTER=yes
RUN_STARTUP=yes
RM_INST_ROOTFS=no
ERROR_EXIT=
CUSTOMIZATION_FILE=
TCB=no
INSTALL_TYPE=
BUNDLES=

target_disk_data:
LOCATION=
SIZE_MB=
HDISKNAME=

locale:
BOSINST_LANG=
CULTURAL_CONVENTION=
MESSAGES=
KEYBOARD=

. /bosinst.data rootvg. root, /bosinst.data /usr/lpp/bosinst/bosinst.template.

CONSOLE - ( ), .

INSTALL_METHOD - (migration, preserve overwrite)

PROMPT - , . no, locale control_flow (: ERROR_EXIT CUSTOMIZATION_FILE ).

EXITING_SYSTEM_OVERWRITE - , ( ) . , ( PROMPT no).

INSTALL_X_IF_ADAPTER - , , AIXWindows .

RUN_STARTUP - Installation Assistant - BOS.

RM_INST_ROOTFS - /usr/lpp/*/Inst_roots.

ERROR_EXIT - , .

CUSTOMIZATION_FILE - , .

TCB -

INSTALL_TYPE - . : full (- ), client ( ) personal ( - ).

BUNDLES - . .

target_disk_data , BOS.

LOCATION - BOS.

SIZE_MB - ( ) BOS.

HDISKNAME - .

BOSINST_LANG - , , .

CULTURAL_CONVENTION - .

MESSAGES - .

KEYBOARD - .

, SMIT.

. Installation/Maintenance (/), "Maintenance", "Install from a System backup" .

UNIX

UNIX tar, cpio dd.

1. , , .

2. (tapechk).

3. .

4. (fsck).

5. , (fuser).

6. .

7. , .

8. .

9. , .

, , , DNS, NFS, , sendmail ., . AIX.

TCP/IP

TCP/IP - , . TCP/IP , , UNIX/AIX.

TCP/IP , , .

- , . , .

TCP/IP "Transmission Control Protocol/Internet Protocol". . TCP/IP . . , , .

TCP/IP - (LAN) Token-Ring Ethernet , FDDI HYPERchannel.

TCP/IP internet ( The Internet, TCP/IP).

.

, internet TCP/IP, (host).

( ) ( ), .

, , . . .

TCP/IP , (DNS) /etc/hosts (. ). , sys3.

TCP/IP ( ). , .

IP IP- 32- ( 1 0) , .

,

00001010000111100000000000000010

IP- , , ( ):

00001010 00011110 00000000 00000010

.

IP-:

10.30.0.2

IP- , IP-, .

IP- :

(netid), , ;
(hostid), .

, netid hostid IP-.

IP- :

0 ( 0 127) - . .
10 ( 128 191) - . .
110 ( 192 223) - . .

netid. , , netid, , .

IP-

IP-, :

127 (01111111) . ;
255 (11111111) ;
233 (11101001), ;
hostid 0 (00000000) 255 (11111111).

IP-, netid, (subnet mask).

- , , IP- netid, hostid. , Internet. , , , , , .

:

11111111 11111111 11111111 00000000 (255.255.255.0)

0 , IP- hostid. ,

11111111 11111111 11111111 11000000 (255.255.255.192)

IP-

194.93.173.67 (11000010 1011101 10101101 01000011)

netid:

11000010 1011101 10101101 0100000 (194.93.173.64)

hostid:

000011 (3)

, hostid 000001 111110 ( 1 62) 00 11. , 194.93.173 (254 ), 62- (248 + 4 netid + 2 ).

, , , , (default gateway) , . - (router).

netid, ( ). netid , , .

IP- . .

TCP/IP

TCP/IP :

Mail ( )
File Transfer ( )
Remote Login ( )
Remote Execution ( )
Remote Printing ( ).

AIX TCP/IP, :

Network File System (NFS)
Network Information Services (NIS)
Network Computing System (NCS)
Distributed Computing Environment (DCE)
Xwindow AIXwindows
Xstation Manager
AIX Netwiev/6000

TCP/IP

TCP/IP :

(TCP/IP address), (hostname) (subnet mask).

. /etc/hosts, Domain Name Server (DNS).

DNS (Domain Name) (Address of the Name Server).

(address of the default gateway).

DNS

DNS

DNS

TCP/IP IP-. , , . , 192.168.1.34 ( , 380-564-40-06-24). IP- . IP- , : , , . , account-server.

, IP-, .

, IP-. , . ( archie.univie.ac.at), IP- (140.78.3.8).

"" ().

" ", Internet ARPANET ( ), () . "" . ( /etc/hosts) IP- . Internet hosts, .

: Internet. , Internet, . , , . 80- , - (Domain Name System, DNS).

DNS . (, ). DNS Windows NT NIS. .

DNS . ( "."). . Internet , : Internet .

: com - ( ); edu - ; gov - ; mil - ; net - Internet-; int - ; org - ; - (ru - , ua - ..). . , , (, kiev - dp - ), - .

Internet (Fully Qualified Domain Name, FQDN). . FQDN . FQDN (label). 63 , FQDN - 255 .

, "-" ( ). , . . company1.krcrme.dp.ua. COMPANY1.KRCRME.DP.UA. .

. , -, , , -, .

. , , . , host2 host1 : host1.company1.krcrme.dp.ua. host1

, TCP/IP , (.. ) FQDN. , company1.krcrme.dp.ua. company1.krcrme.dp.ua .

, , - . . - , IP- Ethernet. DNS , , . , .

, DNS IP-. DNS , , . . TCP/IP.

DNS . DNS :

IP- ;
IP-;
, ;
, ;
;
:
;
IP- .

, .

DNS , . (Name Server), DNS-. DNS ( ), DNS- .

, , DNS (Resolver DNS). DNS . , , . DNS , TCP/IP. nslookup DNS. DNS TCP/IP. TCP/IP, - DNS, "" ( hosts). DNS ( ). DNS , .

, (Zone of Authority), . , , , .

. DNS , .

, , .

, .

. (Primary Name Server) (master files), . .

(Secondary Name Server) , DNS. , .

" " (Cache-Only Server) , . .

, , , ( Forwarder Slave Forwarder) DNS.

Internet, DNS . - . IP-, (master files) .

-. .

( ) .

Internet , IP-.

: .

. DNS, , IP-. , . (.. IP-) ( ). , , , . , DNS IP- , . DNS , . , , .

, .

DNS , , , . . DNS DNS.

, . , "" TCP/IP.

, . , , : .

DNS AIX

AIX. :

1. ;
2. ;
3. " ";
4. Forwarder;
5. .

DNS AIX, gethostbyaddr() gethostbyname(), - :

/etc/resolv.conf , DNS , . /etc/hosts.

, DNS :

1. DNS;
2. /etc/hosts.

AIX named. AIX SRC (system resource control). smit stnamed rc.tcpip #start /etc/named "$src_running" named startsrc -s named.

AIX :

1. /etc/resolv.conf 16- . :

domain komtek.dp.ua
nameserver 192.168.1.65
nameserver 192.168.1.194

: , . .

, - . .

, ( ), DNS .

2. /etc/named.boot named.

3. /etc/named.* . (Standard Resource Record Format).

named AIX MB (mailbox domain name), MR (mail rename domain name), MG (mail group member), MINFO (mailbox or mail list information) MX (mail exchange).

AIX/6000 host nslookup. AIX/6000 dig .

, TCP/IP DNS, hosts. /etc/resolv.conf . hosts "" . (AIX - /etc/hosts, DOS Windows - ETC\HOSTS, NetWare - SYS:\ETC\HOSTS).

: , : <IP-> <> [<> ... <>]

:

192.168.1.67 granat devil
192.168.1.80 www.komtek.dp.ua
192.168.1.37 alpha

, hosts .

, DNS Internet. DNS TCP/IP , Internet . DNS , hosts . , . ? DNS - DNS . . - IP- , DNS . , DNS Internet.

DNS

DNS . , RFC (Request For Comments). "" Internet - IETF (Internet Engineering Task Force). RFC . de facto BIND (Berkley Internet Name Domain). BSD Unix. BIND.

, DNS. , , , DNS. , DNS.

: DNS ( ), DNS ( AIX - named).

DNS

DNS (Standard Resource Record Format). :

[<Name>] [<TTL>] [<Class>] <Type> <Data>

.

<Name> - . <Type> , , . . <Name> , <Name> ( ).

<TTL> - ( ). , DNS -. , <TTL> <Minimum>, SOA (. ).

<Class> . Internet (TCP/IP) - IN. , .

<Type> - , . " ".

<Data> - , . <Type>. <Data> , . . .

( ).

. <Name> .

@ "@" <Name> .

( ) <Data> ( <Data> ).

* . .

; . .

. , , , . . , , .

<Type> . . RFC (. " "). .

SOA () .
NS .
A .
CNAME . .
HINFO .
MX .
PTR .

.

SOA ( )

SOA . SOA.

SOA

<Name>  [<TTL>]  [<Class>]  SOA  <Origin>  <Person>  (
                                 <Serial>
                                 <Refresh>
                                 <Retry>
                                 <Expire>
                                 <Minimum>  )

komtek.dp.ua.      IN  SOA  srv.komtek.dp.ua.  root.srv.komtek.dp.ua. (
                            970308
                            3600
                            600
                            3600000
                            86400  )

<Data> <Origin>, <Person>, <Serial> . .

<Name> .

<Origin> .

<Person> , . , "@" (. . alex@komtek.dp.ua alex.komtek.dp.ua).

<Serial> . , . , .

<Refresh> , .

<Retry> , .

<Expire> . , .

<Minimum> TTL , . . <TTL> .

NS ( )

NS , .

NS

[<Domain>]  [<TTL>]  [<Class>]  NS  <Server>

komtek.dp.ua.                   NS  srv1.komtek.dp.ua.
                                NS  srv2.komtek.dp.ua.

<Domain> , <Server> - . , srv1.komtek.dp.ua srv2.komtek.dp.ua komtek.dp.ua.

A ()

A . <Host> - , <Address>- IP-.

A

[<Host>] [<TTL>] [<Class>] A <Adress>

sri-nic.arpa.
A 10.0.0.51

CNAME ( )

CNAME . <Nickname> , <Host> - () .

CNAME

[<Nickname>]  [<TTL>]  [<Class>]  CNAME  <Host>

rs1                               CNAME  srv1.komtek.dp.ua.
www                               CNAME  srv2.komtek.dp.ua
ftp                               CNAME  srv2.komtek.dp.ua

HINFO ( )

HINFO , .

<Host> , <Hardware> - , <Software> - . <Hardware> <Software> , RFC 1700.

HINFO

[<Host>]  [<TTL>]  [<Class>]  HINFO  <Hardware>  <Software>

pc1                           HINFO  IBM-PC       MSDOS
rs1                           HINFO  IBM-RS/6000  AIX

MX ( )

e-mail, MX - , , . <Name> , . <Host> - . <Reference> , .

, komtek.dp.ua, unix1.komtek.dp.ua. , -dos, unix2.komtek.dp.ua.

MX

[<Name>]  [<TTL>]  [<Class>]  MX <Preference>  <Host>

komtek.dp.ua.                 MX  10  unix1.komtek.dp.ua.
*-dos.komtek.dp.ua.           MX  10  unix2.komtek.dp.ua.

, , :

1. alex@komtek.dp.ua, alex@unix1.komtek.dp.ua;
2. vad@pc-dos.komtek.dp.ua, vad@unix2.komtek.dp.ua;
3. dba@host1.komtek.dp.ua, dba@host1.komtek.dp.ua.

MX, ( - 10) .

PTR ()

PTR, IP- ( ).

, , DNS, IP- ( ). IP- .

, . IN-ADDR.ARPA. IP-. , () IP- .

, cso.uiuc.edu 128.174 (, 128.174.0.0, IP- B). vmd.cso.uiuc.edu IP- 128.174.5.98. 174.128.in-addr.arpa. 98.5.174.128.in-addr.arpa.

PTR . <Special-name> ( IN-ADDR.ARPA), <Name> - .

PTR

[<Special-name>]  [<TTL>]  [<Class>]  PTR  <Name>

98.5.174.128.in-addr.arpa.            PTR  vmd.cso.uiuc.edu.
51.0.0.10.in-addr.arpa.               PTR  sri-nic.arpa.

IN-ADDR.ARPA () . , IP-. PTR , , , PTR, IP- . 1, 2 3 () IP- IP- (A, B C).

, gw.komtek.dp.ua, A, B C IP-: 12.2.0.7, 129.14.1.3 194.140.13.2. A PTR .

PTR A

; A
gw.komtek.dp.ua.       A  192.168.1.7
                       A  192.168.2.3
                       A  194.140.13.2
;  PTR   
7.1.168.192.in-addr.arpa.   PTR  gw.komtek.dp.ua.
3.2.168.192.in-addr.arpa.   PTR  gw.komtek.dp.ua.
2.13.140.194.in-addr.arpa.  PTR  gw.komtek.dp.ua.
;  PTR  
1.1.168.192.in-addr.arpa.   PTR  gw.komtek.dp.ua.
2.168.192.in-addr.arpa.     PTR  gw.komtek.dp.ua.
13.140.194.in-addr.arpa.    PTR  gw.komtek.dp.ua.

BIND

, de facto DNS BIND. Unix-, NetWare ( Novell NFS Services, FTP Services, NetWare/IP) .

DNS. Unix- /etc/named.boot, NetWare - SYS:ETC\NAMED.CFG, - DNS .

- , DNS, . , DNS DNS .

DNS . :

1. directory <Path> DNS, . : directory /etc

2. domain <Domain> . : domain komtek.dp.ua

3. primary <Domain> <FileName> , <Domain> <FileName>. : primary komtek.dp.ua /usr/named.data

4. secondary <Domain> <IP-1> [<IP-2>...] <FileName> , <Domain>. IP- <IP-1>, <IP-2> . . <FileName>. : secondary komtek.dp.ua 192.168.1.3 named.bak

5. cache <Domain> <FileName> , - <Domain>. - ( ) <FileName>. : cache . named.ca

6. , ";", . , : .

DNS

, DNS TCP/IP. , Internet. , Internet. IP- , .

, Internet, IP- . Internet InterNIC, IP-. IP- Internet-. Internet-.

Internet, IP- . Internet, DNS .

IP- C: 194.170.12.0 194.170.13.0. , komtek.dp.ua.

IP- () gw : 194.170.12.1 194.170.13.4. Internet .

srv1 (194.170.12.2) srv2 (194.170.13.3), : host1, host2, host3.

mail (194.170.13.2) , host4.

DNS srv1.komtek.dp.ua srv2.komtek.dp.ua.

DNS SRV1

; /etc/named.boot
directory  /etc
domain   komtek.dp.ua
primary  komtek.dp.ua             named.data
primary  12.170.194.in-addr.arpa  named.rev1
primary  13.170.194.in-addr.arpa  named.rev2
primary  0.0.127.in-addr.arpa     named.local
cache    .                        named.ca


; /etc/named.data
@         IN  SOA    srv1.komtek.dp.ua.  root.mail.komtek.dp.ua.  (
                        970308
                        3600
                        600
                        3600000
                        86400  )
                 NS     srv1.komtek.dp.ua.
localhost        A      127.0.0.1
gw               A      194.170.12.1
                 A      194.170.13.4
                 HINFO  IBM-RS/6000  AIX
srv1             A      194.170.12.2
                 HINFO  IBM-RS/6000  AIX
host1            A      194.170.12.3
                 HINFO  IBM-PC  MSDOS
host2            A      194.170.12.4
                 HINFO  IBM-PC  MSDOS
host3            A      194.170.13.1
                 HINFO  IBM-PC  MSDOS
mail             A      194.170.13.2
                 HINFO  IBM-PC  UNIX
host4            CNAME  mail.komtek.dp.ua.
srv2             A      194.170.13.3
                 HINFO  IBM-PC  UNIX
komtek.dp.ua.    MX  10  mail
*.komtek.dp.ua.  MX  0   mail.komtek.dp.ua.


; /etc/named.rev1
@         IN  SOA    srv1.komtek.dp.ua.  root.mail.komtek.dp.ua.  (
                        960218
                        3600
                        600
                        3600000
                        86400  )
                          NS     srv1.komtek.dp.ua.
1                         PTR    gw.komtek.dp.ua.
12.170.194.in-addr.arpa.  PTR    gw.komtek.dp.ua.
2                         PTR    srv1.komtek.dp.ua.
3                         PTR    host1.komtek.dp.ua.
4                         PTR    host2.komtek.dp.ua.


; /etc/named.rev2
@         IN  SOA    srv1. komtek.dp.ua..  root.mail. komtek.dp.ua. (
                        970205
                        3600
                        600
                        3600000
                        86400  )
                          NS     srv1.komtek.dp.ua.
1                         PTR    host3.komtek.dp.ua.
2                         PTR    mail.komtek.dp.ua.
3                         PTR    srv2.komtek.dp.ua.
4                         PTR    gw.komtek.dp.ua.
13.170.194.in-addr.arpa.  PTR    gw.komtek.dp.ua.


; /etc/named.local
@     IN  SOA    srv1.komtek.dp.ua.  root.mail.komtek.dp.ua.  (
                        960124
                        3600
                        600
                        3600000
                        86400  )
                          NS     srv1.komtek.dp.ua.
1                         PTR    localhost


; /etc/named.ca
.   999999    IN         NS  sri-nic.arpa.
                         NS  brl-aos.arpa.
sri-nic.arpa.   999999   A  10.0.0.51
                999999   A  26.0.0.73
brl-aos.arpa.   999999   A  192.5.25.82
                999999   A  128.20.1.2

DNS SRV

; /etc/named.boot
directory  /etc
domain    komtek.dp.ua
secondary komtek.dp.ua  194.170.12.2  named.data.bak
secondary 12.170.194.in-addr.arpa 194.170.12.2 named.rev1.bak
secondary 13.170.194.in-addr.arpa 194.170.12.2 named.rev2.bak
primary  0.0.127.in-addr.arpa     named.local
;   Internet
cache    .                        named.ca


; /etc/named.local
@     IN  SOA    srv2.komtek.dp.ua.  root.mail.komtek.dp.ua.  (
                        960124
                        3600
                        600
                        3600000
                        86400  )
          NS     srv2.komtek.dp.ua.
1         PTR    localhost


; /etc/named.ca
.   999999    IN   NS  sri-nic.arpa.
                   NS  brl-aos.arpa.
sri-nic.arpa.   999999  A  10.0.0.51
                999999  A  26.0.0.73
brl-aos.arpa.   999999  A  192.5.25.82
                999999  A  128.20.1.2

, , Internet, cache /etc/named.boot /etc/named.ca.

, /etc/named.ca, Internet-. , Internet- srv1.komtek.dp.ua srv2.komtek.dp.ua DNS, Internet komtek.dp.ua.

0.0.127.in-addr.arpa, localhost (127.0.0.1) "" TCP/IP.

, DNS , , SOA .

IP . . . .

- Internet, IP . , , , , , . , . - , , , .. ..

, IP (DNS) . , - IP IP . 4- AIX (DHCP), (DDNS).

DHCP

, , TCP/IP, IP, gateway, , . TCP/IP . - , , 50 TCP/IP.

DHCP TCP/IP , , . DHCP, IP DHCP . DHCP IP . , , gateway , , X-window , .

DHCP

DHCP /. dhcp-. :

1. IP IP (DHCPDISCOVER).

2. BOOTP DHCP .

3. DHCP (DHCPOFFER), IP .

4. .

5. (DHCPREQUEST).

6. , DHCP (DHCPACK). , , IP, , DHCPDISCOVER.

7. , DHCP DHCP, DNS IP.

8. IP, () , .

9. , DHCPREQUEST , " ".

10. , " " DHCPREQUEST , . , DHCP .

" " , DHCP. DHCP " "; , , , " ".

DHCP - BOOTP, UDP. DHCP BOOTP. , - BOOTP IP . , DHCP .

DHCP , , ( 5000) . DHCP .

DHCP AIX V4

DHCP AIX :

dhcpcd
dhcpsd
dhcprd

DHCP RS/6000 LAN- , Ethernet, Token-Ring FDDI. , DHCP RFC DHCP.

, DHCP AIX.

DHCP DHCP
AIX V4.2 MacOS, Windows 3.x, Windows 95,Windows NT 3.5, Chameleon,FTP Software, AIX V4.1.4
AIX V4.1.4 OS/2 Warp Connect
OS/2 Warp Server, SUN Solaris,FTP Software, Competitive Automation AIX V4.2, AIX V4.1.4

RS/6000 : , BOOTP.

DHCP

DHCP IP, . , ASCII (GUI).

DHCP : , .

DHCP, . DHCP IP .

- . . , , , . .

- . TCP/IP MAC . , .

, . , . ( ) , , .

, :

;
;
;
.

. , IP .

, . , , .

DHCP "" IP Internet (InterNIC) IP C B.

"" .

C , () . , .

B : , , , .

B C . C, C.

, C .

network : - , , .

- 2 240, 1 "" , 240 .

( , , .)

network  192.100.10.0 192.100.10.2-192.100.10. 240
{
option 1 255.255.255.0 *     C
option 3 193.100.10.1 *   gateway/  
option 6 129.35.40.5 *      DNS
option 5 2 hours  *  « »,  2 ,
                  *     
                  *        .
option 15 "marketing.x.com"  *     
}

C , .

network 129.35.0.0 24 *  NIC    B 129.35.0.0
                      *     24 
 {
 option 1 255.255.255.0 *     B
 subnet 129.35.10.0 *  
  { *     
  client 0 0 129.35.10.1 *  129.35.10.1
                         *   
  option 3 129.35.10.1 *   gateway/  
  option 6 129.35.40.5 *      DNS
  option 15 "producttest.x.com" *     
  }

subnet 129.35.20.0 129.35.20.2-129.35.20.200
 { *     
 option 3 129.35.20.1 *   gateway/  
 option 6 129.35.40.5 *      DNS
 option 15 "manufacturing.x.com" *     
 }

subnet  129.35.30.0 129.35.30.2-129.35.30.215
 { *    
 option 3 129.35.30.1 *   gateway/  
 option 6 129.35.40.5 *      DNS
 option 15 "rnd.x.com" *     
 }
}

, C.

network 129.35.0.0 25 * nic-  B  129.35.0.0
                      *    25    
                      * 256    .
{
option 1 255.255.255.128 *      B
subnet 129.35.40.0 129.35.40.64-129.35.40.12 6
*     
 { 
 option 3 129.35.40.1 *   gateway/  
 option 6 129.35.40.5 *      DNS
 option 15 "netserver.x.com" *     
 }

subnet 129.35.40.128 *  
 { 
 option 3 129.35.40.129 *   gateway/  
 option 6 129.35.40.5 *      DNS
 option 15 "accounting.x.com" *     
 client 0 0 129.35.40.129 *   129.35.40.129 
client 10x1005ACABADAE 129.35.40.130 * IP  129.35.40.130  
*  Ethernet  0x1005ACABADAE
 }
}

.

supportunlistedClients  yes *     
                            *      
supportBOOTP            yes *  «»  -   ,
                            *   BOOTP
leasetimedefault        5 days *  « »   IP
leaseexpireInterval     1 day *    DHCP   
                                  * IP ,  - , 
                                  *      
                                  *   

DHCP .

/etc/dhcpsd.cnf.

, /etc/rc.tcpip , SMIT.

# Smit tcpip Further Configuration - > Server Network Services - > Other Available Services - > Dhcpsd Subsystem

DHCP . dhcpsconf.

:

Option list - ,
Key list - , , ,
Main window list -

DHCP

, DHCP , . , , . . DHCP . , . , DHCP , .

, :

TCP/IP - , NetBIOS ..

- (LPR), (DNS), (NTP) ..

:

dhcpcd.ini - DHCP, , . .

/etc/rc.net - .

SMIT :

smit tcpip- > Use DHCP for TCP/IP Configuration & Startup

SMIT , DHCP TCP/IP :

smit tcpip -> Further Configuration - > Server Network Services - > Other Available Services - > Dhcpcd Subsystem

, , IP .

<>, <> . - - , , MAC-.

DHCP .

:

Client     <  >  <   >  < IP  >
1=Ethernet  <> <none>
6=token-ring            <any>
1=FDDI
0= <> on the next field

. :

IP
0 0 <IP > <IP >
0 <> <IP > , <> <IP >
<type> <address> <IP > <type> <address> IP <IP >
<type> <address> none IP
0 <> none <>
<type> <address> any IP . supportunlistedclients=no.
0 <> any IP <>. supportunlistedclients=no.

BOOTP

BOOTP , ; , AIX BOOTP .

BOOTP DHCP.

/etc/dhcprd.cnffile. , .

DHCP

. - 360 .

TCP/IP

TCP/IP

, , . , , , .

? . , , .

, ping -R hostname / traceroute. - R ping IP. ping , . , , , . ping -. traceroute, , IP , -.

traceroute : ttl ( ) .

Traceroute UDP ttl, . traceroute , . . - , , traceroute .

, . , .

, PerfPMR. perfpmr 3600 , . /var/perf/tmp.

, , "" , .

TCP/IP AIX :

;
CPU, ;
;
, , ;
, .

, , .

, . , .. .

CPU .

. , , ( ..) . , , .

, . "-", , .

""

.

: , , , , , .

: (TDR)

Ethernet, , - (TDR). TDR . . TDR. , . TDR .

: ifconfig

ifconfig, ( , , Internet).

: tokstat

tokstat , Token-Ring.

: ping

Packet InterNet Groper (ping) ECHO_REQUEST ICMP ( ) , . , ping - .

ping , , . ping , , . , , .

: traceroute

traceroute, , .

: iptrace

iptrace , , . : iptrace. CPU. , , iptrace . iptrace , , , , .

, , , .

: tcpdump

tcpdump , , . , .

, : netstat

netstat . netstat - , .

, , . , netstat -i netstat -v, , , .

, netstat -s , , iptrace .

, : netpmon

- CPU.

netpmon , ( TCP UDP). .

, :

. , . .

. , OSI.

- , .

, " " . , . , , . , , .

: Performance Reporter

. IBM SystemView for AIX Performance Reporter (Performance Reporter) , , . .

, Performance Reporter , .

AIX, Sun Solaris, HP-UX. Performance Reporter . .

Performance Reporter DB2/6000 Oracle.

AIX 2. :

;
;
;
, , ;
;
.

, . , .

, AIX, . .

" - ". - … . , .

. , . . . , , .

:

, , . :

?
?
?
?
( )?
?
?
?
? ( - ).
, ?
?
?
? .
?
? , . .

?

"" . . , , . :

1. . , . ( ) .

2. ( ). , , , .

3. . , ( ) .

4. " ". . . , , .

. , .

?

, . , , , .

, .

, U.S. Department of Defence . , D, C1, C2, B1, B2, B3, A.

"D" .

"C" . , , ( ) , .

"B" ( ). .

"A" , .

, .

"B" . "B", .

, .

AIX. , , . :

1) ;

2) " userid";

3) .

AIX. , . . UNIX . , userid , .

"" " userid" ( suid), . suid - (. ()); UNIX. suid.

AIX suid (shell scripts). AIX UNIX , .

( , ) , . , , , .

, , ( ) .

( , suid, ) UNIX.

. , . "" AIX "" .

, :

;
LAN;
, " ".

.

AIX

AIX , , (UID) . , UID . . , UID , , . root .

: root - adm, sys, bin, ... - .

, , . (GID). GID .

: system - user -

, . . .

, . , .

. :

, , , .

system. root.

. , staff . security .

.

:

system .

printq .

security

adm

staff

audit

AIX . . AIX - staff.

, , pgrp /usr/lib/security/mkuser.default. mkuser smit. , office, /usr/lib/security/mkuser.default :

user :
    pgrp = staff

user :
    pgrp = office

: .

/etc/security/group admin. . /etc/security/group.

. admin=true /etc/security/group (. /etc/group /etc/security/group), . admin=true /etc/security/user (. /etc/security/user) , , adms /etc/security/group. admin=true, .

AIX. . root. ( 30 40 ) .

, su root. root, .

AIX , security. /etc/security (. ), . , security root. , .

userids

AIX userid , . , , , , :-). userid ( root).

, ( , /etc/passwd) . , NFS. , root, . ( = * /etc/security/passwd):

root:!:0:0:/:/bin/ksh
daemon:!:1:1::/etc:
bin:!:2:2::/bin:
sys:!:3:3::/usr/sys:
adm:!:4:4::/usr/adm:
uucp:!:5:5::/usr/spool/uucp
public:/usr/lib/uucp/uucico
guest:!:100:100::/usr/guest:
nobody:!:4294967294::4294967294::/:
lpd:!:104:9::/:

, , staff, .

groupids, - ( , /etc/group):

system:!:0:root
staff:!:1:
bin:!:2:root,bin
sys:!:3:root,bin,sys
adm:!:4:bin,adm
uucp:!:5:uucp
mail:!:6:
security:!:7:root
cron:!:8:root
printq:!:9:lpd
audit:!:10:root
ecs:!:28:
nobody:!:4294967294:nobody
usr:!:100:guest

( staff), , , . ( system, bin, security, cron) - . , , .

, , :

1. root;

2. ( security, system, printq, cron, adm, audit). security, // ;

3. .

security, root // .

:

: # cat /etc/security/user :

user1: admin=true

PATH

PATH - , (). , PATH . . ( , Trusted Computing Base (TCB) PATH.)

, root ( ) . , /tmp ( ) - PATH su /tmp, su su .

PATH - , , . PATH ( ( )), . root root /.profile ( ) , root . root su root ( su) . ( "-" su , . , "-" su.)

, su root, ( PATH), . , :

1. ( root) C, , su. , root.

2. .

3. PATH , (home) .

4. - , , , root.

5. su, root. su, su ( PATH ) su .

6. su root, , .

7. , su root. , .

8. root root.

- " ", , su PATH.

, :

1. , root, , . PATH .

2. PATH , $HOME. ( ) AIX: PATH=/usr/bin:/etc:/usr/sbin:/usr/ucb:$HOME/bin:/usr/bin/X11:/sbin:. /usr AIX, . /etc . , . $HOME/bin. "" PATH .

(X11 /sbin), PATH : , (/$HOME/bin) . - , , ("") .

, , . AIX, AIX.

. Korn shell TMOUT, Borne shell TIMEOUT. , , , .

, - . , /etc/profile /etc/security/.profile:

TMOUT=45
TIMEOUT=45
export TMOUT TIMEOUT

. (, ksh ), .

- . ( , ).

(Prompts)

, . Korn, $HOME/.profile:

PS1='$PWD $ ' (  )
export PS1

, "$". , , su root. "$" "#" su root.

, , su root, su "-".

, , , , .

( ), .

userid root

root. " " UNIX root, userid. , , , root. (, root) su root , userids.

root SMIT:

smit -Security and Users --Users
---Change / Show Characteristics of a Userid
* User NAME [root]
...
Another user can SU TO USER? [true]
...
User can LOGIN? [false] <--
User can LOGIN REMOTELY? [false] <--

root, /etc/passwd . root su telnet.

/var/adm/sulog ASCII , , , . pg, more cat. , .

/etc/utmp .

/var/adm/wtmp ( ). who file_name. who /etc/utmp.

last. , last root root, last reboot .

, who. /etc/security/failedlogin, , / . UNKNOWN.

"" (grpck, usrck, pwdch, sysck, tcbck) "" (lsuser lsgroup) root ( security).

grpck

grpck , , gid , . . -t : grpck -t ALL

, , Yes , userids, /etc/security/user .

usrck

usrck userid. -t . userid, . . , ( SMIT /etc/security/user).

usrck -t ALL userid root, . , root userid (. root userid).

pwdck

pwdck /etc/passwd /etc/security/passwd. - , /etc/security/passwd * () . : pwdck -t ALL pwdck , minalpha, minother, lastupdate.

lsgroup lsuser

SMIT, . , , :

lsgroup -f ALL >> /tmp/check lsuser -f ALL >> /tmp/check

, , /tmp/check .

. , , root ( security).

lsuser root , : lsuser joe , joe. lsuser ALL, . .

tcbck

Trusted Computing Base (.Trusted Computing Base).

()

AIX, . () , . , .

(, root) . , , , . .

, , AIX, .

, ( ) .

: BIN STREAM.

- , . AIX ( ). AIX ( , , ). , , . , .

, . . , "" .

userid ( userids). , joe.

130 , AIX. . .

, . , - .

: , . .

, . , , , /etc/security/audit/objects.

:

Audit start - . - .

Audit shutdown - , BIN ( ) /audit/auditb, "" -.

Audit off - . , .

Audit on - audit off.

Audit query - .

/

(), .

r (read), w (write) x (execute) (), (group) (others). SUID (set UID), SGID (set GID) SVTX (sticky bit).

SUID, , , (UID) . SUID (shell scripts). SUID .

SGID, , , (GID) . SGID, , /.

r
w
x (cd) PATH
SUID UID -
SGID GID , ,
SVTX -

, , , ls :

AIX

- AIX. , :

, .
, , .
.
ACL.
.
- .
- , .
- .
, userid root.

, , -rwx ------- ( 700).

( ""), . , , suid ( suid root).

, suid- root. , suid- root .

( mount - nosuid. ( CD-ROM), () ).

Inodes Links

UNIX ( JFS AIX) , .

, .

UNIX - :

   --> inode -->  

. inode, , , .

inode, . "" , /u/trial/data.

inode , "" .

:

/u/trial/data --> /xyz/j/g34/check --> inode 317 --> data blocks /joes/stuff --> 

, ( inode 317 ) "". "". ( UID GID) inode. . . ( , , inode .

inode.)

(.. - ). , /xxx /etc. , /xxx/my/data - /etc/my/data. , . .

( ) . (UID GID) inode. , . - , . root , chown, chgrp.

AIX, chown chgrp, . UNIX, .

, UID () GID ( ), userid groupid. userid ( UID) , , UID . userid . , , " " . , userid, UID, , UID.

, , .

, mv cp ( ). cp , . , .

mv , , . mv , . mv , , . ( ) ( ). .

()

( ) . "", " " "".

12 :

( );
, , ;
, ;
, , .

( ).

- ; .

. , , - , - .

ls

ls - . , . AIX li, ls.

, ls, - UNIX, , .

ls . , - :

ls -al
ls -ld
ls -l /some/file/name
ls -ld /some/directory/name

, ls -al, , "" ( ()).

, ls -ld, .

, ls -l /some/file/name, .

, ls -ld /some/directory, .

UID, GID, sticky ("") .

Userid li.

, ( ) . root.

Inode UID GID , . UID ( GID) /etc/passwd ( /etc/group), (UID GID).

()

UNIX 12 . , - r/w/x //. . :

1. UID ( suid);

2. GID ( sgid);

3. Sticky ( "") ( svtx).

, "rwxrwxrwx". , "x" .

Suid , "x" "rwx" "s", .. Suid , UID . ( UID , .)

:

-r-sr-xr-x 1 root sys 3254 Jun 1 11:30 myprog

myprog suid. ( alex) myprog, root. root , .

, , myprog ( - ). myprog ( suid root), root. , , root.

( suid root) "". AIX , suid- .

chmod, 4 .

Suid ( chmod) root. cp.

, suid root.

suid root. , , , .

:

-rw------- 1 alex eng 5432 Jun 2 13:45 mydata -r-sr-xr-x 1 alex eng 2345 Jun 1 11:30 myprog 

myprog. userid alex mydata. myprog, myprog suid, alex, mydata , myprog.

AIX suid root. , ( , suid root) , - -.

AIX , (.Trusted Computing Base).

GID (sgid) suid, . Sgid , , , .

AIX suid sgid . "" suid UID . UNIX suid.

, . , AIX.

. , , . UNIX. , , .

( ), . - , , , /tmp, -. , , -. (, root .)

, , - ; .

( ) . , , , .

:

-r--rw-rwx 1 alex xyz 3210 Jun 3 15:15 mystuff

mystuff , , . (alex) . ( , , , , , .) xyz . - ( xyz) , , .

, , , - . , , "".

, . , , , . "---". - , .

umask

( ) . chmod. , , , , umask.

, UNIX, umask . , ("rwxrwxrwx" ( 777) , "rw-rw-rw-" ( - 666) ) , umask ( ).

umask - 022. , : 666 022 = 644 = rw-r--r-- ( ) 777 022 = 755 = rwxr-xr-x ( )

022 027 077: 666 027=640=rw-r----- ( ) 777 027=750=rwxr-x--- ( )

umask - , umask ( ).

. umask $HOME/.profile . , .

umask SMIT. umask ( ).

(Timestamps)

UNIX, AIX, (timestamps) ( ). . Timestamps:

1. atime. - . , - .

2. ctime. - inode . ( - , , , ) inode , , , , ( ), ..

3. mtime. - . , . root.

ls mtime. -c -, ctime. -u , atime. timestamps.

ACL

AIX . - (ACL). - "" UNIX. UNIX ACL-, .

ACL AIX , . , ACL . .

( ) " " ( ) ACL ( ). ACL ACL.

acl- :

: SUID, or SGID or SVTX :
(): rw
(): r-x
: -wx

: SUID setuid SGID setgid SVTX Savetext ( )

. (, , ) , , , , .

ACL , .

:

permit .

deny .

specify .

. "" . - . chmod - .

:

attributes: SUID, or SGID or SVTX     :
owner(alex): rw
group(system): r-x others: --extended
permissions: enabled
permit rw- u:dhs
deny r-- u:chas, g:system
specify r-- u:lena, g:gateway, g:mail
permit rw- g:account, g:finance

: .

, ACL ; .

, dhs (r) (w).

(r) chas, - system.

, lena (r), - gateway mail.

, , account finance.

ACL , . ACL , .

, GROUP1 GROUP2. ACL GROUP1 GROUP2.

:

1. SPECIFY ( userid), SPECIFY . SPECIFY, ( - userid), SPECIFY.

2. PERMIT () ( ) .

3. DENY () ( ) .

SPECIFY .

DENY PERMIT, DENY PERMIT. , - . , , ACL DENY groupids .

SPECIFY.

ACL, - ACL, chmod, .

:

aclget ACL .

aclput ACL

acledit aclget aclput.

acledit ( , EDITOR). EDITOR .

: EDITOR = /usr/bin/vi EDITOR = /usr/bin/e

chmod

: chmod ACL. - . chmod - .

hmod ( "") . ACL ( ). ACL, chmod , ACL.

, chmod + rw myfile, chmod 644 myfile. , . .

tcbck ACL (..139).

AIX VERSION 4

- . AIX .

errpt , SMIT :

SMIT -Problem Determination --Error Log ---Generate Error Report Change / Show Characteristics of Error Log Clean Error Log

. , errupdate. .

, ( errdemon ).

SMIT:

SMIT -System Environment --Change / Show Characteristics of Operating System

.

AIX UNIX . ls -l "l" .

:

lrwxrwxrwx 1 root system 5 Jul 22 1993 u -> home

, u. . . , .

, u home ( , u home- , ).

UNIX ( AIX) , . - , . .

, .

AIX - . SVTX. , . !

AIX, root chown, . . , .

, AIX, test, , "test".

, AIX suid . suid . root, root.

unowned

(unowned files) , . ( SMIT, ), ( ) . ( ls li) UID. : , mailbox.

find , , . find / -user username -print username. , ( chown). . find / -nouser -print.

- , /dev/console. !!

, (LAN) (WAN), . , :

1. TCP/IP:

, TCP/IP ( Internet).
, "" .

2. Dial-in ASCII .

3. Uucp. (, - dial-in , uucp ).

4. , SNA.

, . .

. " " , . , . :

1. .

2. ( , , ) .

( ). , . ( ) . , . , , .

(firewall), , .

.

, DCE (. DCE) . DCE. DCE .

, ( ) , .

securetcpip

TCP/IP . - ftp, rexec, telnet. . .

, telnet ( , telnet) , , .

securetcpip "" TCP/IP. securetcpip , , "" .

securetcpip - , , /etc/inetd.conf chmod, 000 (---------).

securetcpip . SRC, : STOPSRC -G TCPIP , TCP/IP. : SECURETCPIP

securetcpip, :

:

rshd
rlogind
tftpd

:

rlogin
rcp
rsh
tftp
trpt

securetcpip , /etc/inetd.conf , .

.

securetcpip /etc/security/config, , $HOME/.netrc, ftp rexec. , telnet rlogin rsh, ftp tftp rcp, rexec rsh.

: X- tftp, X- AIX. , X- tftp, securetcpip.

TCP/IP

/etc/hosts

/etc/hosts , . IP . /etc/hosts:

9.12.2.32 gateway
9.12.2.95 bill
128.100.1.4 dtp

/etc/hosts , ( DNS), IP . , , /etc/hosts . . .

/etc/inetd.conf

TCP/IP. inetd TCP/IP, . , telnet, inetd telnetd. TCP/IP, . TCP/IP, .

- (DNS), . /etc/resolv.conf . . /etc/named.boot, /etc/named.ca, /etc/named.local /etc/named.data.

netstat

netstat . . , : netstat -p tcp TCP/IP . . , - . netstat, .

Trusted Computing Base

, AIX (Trusted Computing Base (TCB)). TCB :

1. ()

2. , tcbck

3.

4.

5.

6.

7.

TCB AIX . TCB, tcbck, .

; TCB " " .

TCB . TCB, , . ? …

TCB . TCB , AIX. , , . . TCB , , .

, TCB ( ) suid root, ( c ) .

TCB suid root, .

TCB

(Trusted Computing Base (TCB)) - , "" ("") . TCB AIX, (), passwd, . , /etc/passwd, . , , , , . .

, , . AIX TCB , IBM , .

TCB ( AIX TCB; ).

TCB, , , . (, , , , ..) /etc/security/sysck. tcbck , (, , , .

/, TCB , .

/etc/security/sysck.cfg ( pg) , . AIX TCB- inodes. , TCB , .

(Trusted Shell) TCB , TCB inode.

TCB- ( root) chtcb.

tcbck

AIX TCB, /etc/security/sysck.cfg, TCB.

tcbck -n ALL

.

tcbck "p" "y", , , , , .

. , , .

tcbck, . , TCB.

, UNIX, . : "" - ? , , , , , . , , , . userid . ( "" ). , . . - UNIX, UNIX.

AIX SAK . . SAK- .

SAK :

1. -. tpath , SAK (tsh), .

2. , SAK , tpath , ; .

, (, sak-) 600 ( 622, ).

SAK, ( SMIT ) sak_enable=true /etc/security/login.cfg. ( ), .

SAK Ctrl-x Ctrl-r.

- SAK, /etc/security/login.cfg:

/dev/console:
    synonym = /dev/lft0

, tpath /etc/security/user. SMIT.

:

1. tpath=nosak. - , . SAK , . SAK .

2. tpath=on. SAK . SAK .

3. tpath=always. ( SAK) . , .

4. tpath=notsh. , SAK, , .

, tsh, , TCB-, . , .

SAK , , ( ), , .

"" , .

, SAK " " . , , :

1. , Ctrl-x Ctrl-r (SAK-). ( ). - , SAK . , SAK , .

2. .

3. , .

4. tsh, sh. .

() . , , . , , , .

, , . . .

, .

. , .

1. , / .

2. , . , mkuser . , mkuser.

3. , , , (, DB2) ( CICS). .

, , . " ", . , .

. , .

:

1. ( ) .

2. "" . .

root userid

userid root, . , root. , , , , .

root userid :

1. ( CD-ROM).

2. , shutdown -F ( root ).

3. , SERVICE ( ), .

4. F1.

5. "System Maintenance".

6. "Access a Root Volume Group".

7. "Continue".

8. "Access the Volume Group and start a shell".

root.

9. SMIT .

11. sync .

12. shutdown -F.

13. NORMAL.

14. ( ). root.

, "" (1) RS/6000, (2) " " ( CD-ROM), AIX.

, AIX, .

Firewall

"Firewall" , . - Internet. firewall , "" FTP .

"", , inetd.

X Window

X Window - . X Window.

X Window

- ; - . - , ( ) . . , .

:

1. xhost, . , , ( ).

2. , /etc/Xn.hosts, n 0, 1, 2, ... ( ) , , . /etc/X?.hosts .

, xhost, XWindow . , xhost , - , - .

XWindow , , , , .

1. , .

2. , .

3. .

4. SVTX .

5. , UNIX AIX, , .

- .

"" UNIX , ( /etc/passwd /etc/group). UNIX ( ), mkuser, .

AIX, UNIX, . AIX - SMIT.

AIX, , mkuser . , SMIT.

( ), ( ), ( ), ( ) ..

AIX , , , UNIX.

SMIT , . SMIT!

, " UNIX" ( /etc/passwd). . .

: NIS.

, .

:

/etc/profile , . , TERM, MAILMSG, MAIL.

/etc/environment . : HOME, LANG, TZ, NLSPATH.

$HOME/.profile . /etc/profile.

getty init ODM
login /etc/security/login.cfg
/etc/password /etc/security/password /etc/security/failedlogin
/etc/security/environ,/etc/security/limits, /etc/security/user
/etc/motd $HOME/.hushlogin
shell
/etc/environment, /etc/profile $HOME/.profile

init getty .

SMIT

SMIT . SMIT. , .

smit
Security and Users
Users
ADD a User
1 * User NAME [alex]
2 User ID [ ]
3 ADMINISTRATIVE User? false
4 Primary GROUP [staff]
5 Group SET [staff]
6 ADMINISTRATIVE GROUPS []
7 Another user can SU TO USER true
8 SU GROUPS [ALL]
9 HOME Directory [/usr/guest]
10 Initial PROGRAM []
11 User INFORMATION []
12 EXPIRATION date (MMDDhhmmyy) 0
13 Is this user ACCOUNT LOCKED? false
14 User can LOGIN? true
15 User can LOGIN REMOTELY? true
16 Allowed LOGIN TIMES
17 Number of FAILED LOGINS before [0] user account is locked
18 Login AUTHENTICATION GRAMMAR [compat]
19 Valid TTYs [ALL]
20 Days WARN USER before pw expires [0]
21 Password CHECK METHODS []
22 Password DICTIONARY FILES []
23 Number of PASSWORDS before reuse [0]
24 WEEKS before password reuse [0]
25 Weeks between pw expire & lockout[-1]
26 Password MAX. AGE [0]
27 Password MIN. AGE [0]
28 Password MIN. ALPHA characters [0]
29 Password MIN. OTHER characters [0]
30 Password MAX. REPEATED chars [0]
31 Password MIN. DIFFERENT chars [0]
32 Password REGISTRY []
33 MAX FILE Size [2097151]
34 MAX CPU Time [-1]
35 MAX DATA Segment [262144]
36 MAX STACK Size [65536]
37 MAX CORE File Size [2048]
38 File creation UMASK [22]
39 AUDIT classes []
40 Trusted path? nosak
41 PRIMARY Authentication Method [SYSTEM]
42 SECONDARY Authentication [NONE]

( 1 42) , . .

userid ( 1, User NAME) . Userid . ( 2) - UID. SMIT UID; . .

( 3 6) . ( "false" ) .

( 14) , ( 7,8 15). . , bin, , . - root, . /etc/security/user . /etc/passwd, .

SU ( 8), SU ( 7), ( 15) , . ( ) . .

SU , , su. root su , false. SU true, SU , su . , su . root, root su . all - , ( , , su userid.)

rlogin telnet TCP/IP. true ( ), , telnet, . ftp TCP/IP.

( 10) - ( ) , , . - , /usr/ksh. ( ), /etc/security/mkuser.default.

( 12) 0 ( ). . "0330000099" (MMDDhhmmyy). , . .

( 13) false, , userid. ( , .)

, ( 16). , /etc/security/user (. /etc/security/user). .

TTYs ( 19) , ( -, telnet ). , /dev/tty1. "!" , . ALL , . , . , root , .

WARN USER ( 20) , . , ( 25). , .

( 18) "compat". .

( 21 - 31) . , . - ( 32). DCE .

( 33 37) - .

( 33) - ulimit. Ulimit - ( 512 ) , . ulimit, , SMIT. , SMIT - 8192. , - ; , .

( 34) . . , AIX. .

UMASK ( 38) - umask . umask.

39-42 ( , , , ) .

( SMIT, ) :

1. /etc/passwd , .

2. /etc/security/passwd .

3. /etc/security/user , .

4. /etc/group , .

5. /etc/security/limits , .

6. /etc/security/.ids , UID.

7. /home , .

, , . , ( 26) .

/etc/security/user. . root, ( vi ) .

, , , . , SMIT.

42 , SMIT , 30 /etc/security/user.

/etc/security/limits , ( .) .

. . , .

/etc/security/user /etc/security/limits , ; , .

UNIX /etc/passwd. . . , UID , , , ( ) .

/etc/passwd , UID ( ) userid ( ). /etc/passwd . . , , , . , , .

UNIX ( UNIX, AIX) . , . . , , UNIX. . /etc/passwd, .

: () . "" .

AIX /etc/security/passwd. /etc/passwd ( ):

1. () . () , userid.

2. . , userid . (AIX /etc/security/user, , , .)

3. . , /etc/security/passwd. - AIX.

4. ( 13 ).

/etc/passwd, /etc/security/passwd. AIX , /etc/passwd.

SMIT passwd /etc/passwd /etc/security/passwd.

/etc/security. " ''.

SMIT, , ( ) /etc/passwd . ( root) SMIT passwd .

(root), ( ADMCHG /etc/security/passwd , ). .

passwd - UNIX . , , root .

SMIT ; passwd .

SMIT . , , , SMIT .

, , ( ).

, userid , , . , passwd , SMIT.

, ( root) . .

? , , . , "", , "" .

:

1. ( ) .

2. , . , , .

, .

"" . ; . "c" :

1. .

2. , . root .

3. .

4. , , .

5. .

6. ; - , .

7. , . .

8. , .

9. , .

10. , , "" .

11. ( ), , , ( , "l" "1" "o" "0'').

12. - .

13. .

14. AIX . .

, , /etc/security/user .

, SMIT. :

            recommended default
minage      0            0 (weeks. Use 0)
maxage      12           0 (maximum age in weeks)
maxexpired  4            0 (weeks after expire)
minalpha    1            0 (alpha characters)
minother    1            0 (non-alpha characters)
minlen      6            0 (minimum length)
mindiff     3            0 (different from last pw)
maxrepeats  3            8 (repeated characters)
histexpire  26           0 (prohibit reuse, weeks)
histsize    8            0 (number of old passwords)
pwdwarntime 14           0 (warning time, days)

. , "" UNIX.

Maxage/minage / ( ). - 0 , , . , minage. .

maxage root system. . , "". , .

pwdwarntime ( ) AIX , . "" .

maxrepeat, mindiff, minlen, minalpha, minother . , , , , , , , .

AIX , ( /etc/security/pwdhist.dir /etc/security/pwdhist.pag). histexpire , , .

histsize , , .

AIX . ( dictionlist=) ( pwdchecks=) .

/usr/share/dict/words ( ) . SMIT /etc/security/user.

,

, , . , /etc/security.

1. /etc/security/.ids . mkuser , uid/gid. , () SMIT.

:

6 221 12 206

: 6 = uid
221 = uid
12 = gid
206 = gid

2. /etc/group .

3. /etc/security/group , admin adms.

4. /etc/security/login.cfg . . . . :

) , . ( ) . . dial-in "" .
) sak_enabled - .
) uth_method ( , AIX) - .
) ( ) . . , .
) usw - chsh - . .
) maxlogins - , ( chlicense, AIX).
) logintimeout - .

5. /etc/passwd .

6. /etc/security/passwd , , , , ( , ).

7. /etc/passwd.dir /etc/passwd.pag mkpasswd , userid . .

8. /etc/security/user .

9. /etc/security/environ .

10. /etc/security/limits .

11. /usr/lib/security/mkuser.default , . . , (), .

12. /etc/security/failedlogin . who:

who -a /etc/security/failedlogin >> /tmp/check

/tmp/check. . , . , , userid ( userid, /etc/passwd). userid UNKNOWN.

13. /etc/security/lastlog ( ). . , ( () ).

14. /etc/security/.profile - $HOME/.profile . . , , /etc/security, . "" "o" . , /etc/security/limits /etc/security/olimits.

, , ps -ef.

# ps -ef
USER PID  PPID C STIME TTY TIME CMD
root 1    0    0 02 Jan    -    1:30 /etc/init
root 1360 1    0 02 jan    -    0:00 /usr/sbin/srcmstr
root 3329 1    0 02 Jan    -    0:00 /usr/lib/errdaemon
root 2563 1360 0 02 Jan    -    0:00 /usr/lpp/info/bin/infod
root 4317 1    0 02 Jan    -    0:00 /usr/sbin/cron
root 7904 1360 0 02 Jan    -    0:00 /usr/sbin/qdaemon
root 8460 1360 0 02 Jan    -    0:00 /usr/sbin/writesrv

foreground ( Ctrl+C).
background kill.
crontab crontab .
cron /etc/inittab chitab.

() skulker

AIX /usr/sbin/skulker, skulker. - , .

skulker ( - root), ( cron). cron AIX.

/var/spool/cron/crontabs/root cron, , , .

skulker:

;
, ;
/tmp, ;
/var/tmp, ;
*.bak, .*.bak, a.out, core, proof, galley, ...*, ed.hup ( ), ;
.putdir, .

skulker, . root, .

cron at

, , , cron. /etc/inittab.

cron :

- crontab;
, - at;
, , - batch.

/var/adm/cron/queuedefs. AIX crontab cron. cron , crontab , , cron .

AIX cron ( crontab) , root, UNIX .

(user) crontab /var/spool/cron/crontabs/user. crontab :

    _ 

, cron . , , , . .

, . , cron .

. , . :

/var/adm/cron/cron.allow
/var/adm/cron/cron.deny
/var/adm/cron/at.allow
/var/adm/cron/at.deny

"deny" , .

"allow", . , .

cron , userid . root, .

, /var/adm/cron/cron.allow /var/adm/cron/at.allow, root , .

cronadm cron:

cronadm cron -l (list all cron files)
cronadm cron -l joe (list joe's cron files)
cronadm cron -v (list job submission status)
cronadm at -l (list existing at jobs)
cronadm at -l joe (list joe's at jobs)
cronadm at -v (list submission status)

, . cron , AIX " , ".

AIX

AIX

AIX Connections

AIX Connections , OS/2, Windows, Windows 95, Windows NT Workstation MacOS AIX.

AIX, , . AIX Connections AIX .

AIX Connections

AIX Connections Version 1.1 AIX, TotalNet Advanced Server Syntax AIX - - Ethernet Token-Ring. :

DOS 5.0 ;
IBM OS/2 2.1 IBM LAN Server 3.0 ;
MacOS 6.03 ;
Novell Netware 3.1;
Microsoft LANMAN 2.0 ;
Windows Workgroups, Windows 95/98 Windows NT 3.51 .

AIX - , . AIX , . DCE. AIX Connections .

AIX Connections:

.
.
Network File System (NFS)/Distributed File System (DFS).
Point-to-Point Protocol (PPP).
DHCP.
/, OLTP .
.
.
HACMP ().
Windows Internet Naming Service (WINS).

- IBM Version LAN Server 4, Microsoft LAN Manager, Novell Netware Apple.
AIX , .
SMIT - .
HACMP .
.
Windows NT WINS.

, RS/6000 AIX Connections AIX. , AIX. Journal File System Logical Volume Manager, , , .

AIX , AIX Connections. UNIX Network File System Distributed File System.

AIX, AIX. , userid AIX . AIX, , AIX Connections. AIX Connections. AIX Connections . . tnpasswd AIX Connections.

AIX Connections

AIX Connections :

LSserver
NWserver
MACserver

SMIT. , AIX CONNECTIONS :

connect.client AIX Connections
connect.info.en_US AIX Connections
connect.msg.en_US AIX Connections
connect.protocols Protocol stacks
connect.server.com Common Server Files
connect.server.lsserve LS_Server
connect.server.macserve MAC_Server
connect.server.nwserve NW_Server
netbios.api Netbios
netbios.rte Netbios

AIX . AIX Connections , . LSserver, NWserver MACserver.

AIX Connections /usr/tn. . :

;
;
;
.

- . , . , .

, lock.smb, . , , .

. tnwho . tninfo . tnck . SMIT.

, . :

AIX;
;
;
;
;
;
;
;
;
- LSserver, NWserver MACserver.

Novell Network Services (NNS) 4.1 on AIX

bonus-pack, AIX, Novell Network Services 4.1 (NNS) on AIX Novell NetWare 4 RS/6000. NNS on AIX Novell Directory Services (NDS) , - Novell ( bonus-pack 2- ), RS/6000.

RS/6000 Internet , DOS 5.0, OS/2 2.1, Windows 3.11, Windows 95 Windows NT 3.51 . NNS on AIX , NDS.

NNS on AIX:

, Novell Directory Services (NDS) PC.
NDS LDAP Internet/intranet.
.
Novell .
RS/6000 Netware NDS .
AIX 4.2. 4.3

High Availability Cluster Multi-Processing (HACMP)

, IBM . UNIX . IBM UNIX.

IBM HACMP - RS/6000 ( 16 IBM RS/6000 SP). HACMP , , .

High Availability Geographic Cluster (HAGEO)

High Availability Geographic Cluster (HAGEO) .

HAGEO , .

: , , .

HAGEO

HAGEO HACMP 4.1.1, AIX 4.1.4 for Servers. " " AIX CLVM Oracle Parallel Edition.

"-" , AIX TCP/IP. , , . HAGEO .

DCE

DCE

Distributed Computing Environment (DCE) - , (OSF). .

DCE, 1990 ., , , . , (DFS), DCE :

() , .
, , .
() , Kerberos RPC
ONT>OCT , . RPC

DCE

, DCE , - , . , , .

, , DCE () (, NetWare (NDS) Banyan StreetTalk).

( ) , .

DCE . . RPC . , RPC - .

DCE RPC - .

DCE

RPC . . .

, RPC . , .

, RPC, "" , .

-, , RPC DCE .

, , .

DCE - RPC. . , .

RPC .

DCE , , . , - Encina Recoverable Queuing System Transarc, DCE.

IBM , , . DCE , LAN Server.

Microsoft, DCE . . Windows NT, Windows 95 RPC DCE, DCE .

Network OLE, Microsoft, Common Object Model , DCE RPC, , DCE.

, Microsoft DCE. Microsoft DCE, RPC . , Microsoft DCE. Microsoft WOSA API , - , DCE .

ODBC SQL , Microsoft , , .

DCE

, , , . , . .

CDE :

:

_-_-.

, , C :

, ;
;
;
;
;
, .

. , , . .

. , , :

;
;
;
, .

DCE. DCE , DCE.

: , , , .

:

;
, ;
, ;
, .

DCE

DCE, , : ? ? ? ? ? ? ?

, .

? , .

DCE , DCE. DCE , .

, , , , , .

, . , , . , .

, - , , .

.

, , , . , . , , , .

, , . .

DCE . , , .

. DCE . . , , , .

. , . , , .

DCE . , DCE 1.2. , , DCE, , DCE 1.2 . .

, , . , . , , CDE (, 1.0 1.1) .

- , - . . , , . , , , .

. , , , .

, , . DCE , , . .

. DCE .

, 11 10 , , , .

- DCE. .

, , , 2 50200 , .

, DCE , , , - .

DCE 1.2 . . , .

DCE, .

- , DCE. , DCE - .

DCE , - dced, 1.1 . . , , .

.

, , , DCE .

DCE, , , . , .

, , , . DCE.

, , , .

, , .

, .

, , . , .

DCE , : , DCE, .

DCE .

, DCE . , - , .

, , .

. , , , , .

( ). , .

, . , DCE .

cdsclerks, - , - , . cdsclerks -. , - , .

OSF "OSF DCE Administration Guide, Core Components", DCE. , . DCE, .

DCE DCE . , . DCE, . , , .

. .

, DCE .

.

. , NetWare : 100 .

, . , - , .

, , , , .

. .

AIX iFOR/LS (Information For Operation and Retrieval License System). Network Computing System (NCS) /.

LPP AIX : /

iFOR/LS .

iFOR/LS

iFOR/LS NetLS 100% NetLS. Hewlett-Packard NetLS Apollo Computers. 1987 Gradient Technologies HP AIX - iFOR/LS.

iFOR/LS :

NCS 1.5.1.
ARK
ADK iFOR/LS NCS 1.5.1.

NCS bos.net.ncs.obj, .

iFOR/LS : .

Application Developer's Kit (ADK). Administrator Runtime Kit (ARK), , .

iFOR/LS :

Node Lock , , , . ( ID ).

Concurrent use "" , , .

Use once . 0 . (try and buy).

Compound . .

() , . , , () , , .

.

. , .

iFOR/LS , . iFOR/LS, .

:

Softstop , ,

Hardstop , . :

Wait . , .

Quit .

List .

Queue .

( ). . . . : 5-10 . AIX BOS login 15 .

""

"" :

1. iFOR/LS

2. NCS iFOR/LS

3. ( ) llbd dlbd netlsd

/usr/lib/netls/conf netls_config, .

Common Desktop Environment (CDE)

Common Desktop Environment (CDE)

CDE?

Common Desktop Environment (CDE) desktop - , IBM, HP, Sun, Novell . Desktop - , X11 release 5 OSF/Motif 1.2. .

CDE : , , .

, , . . .

CDE , . CDE , . , CDE.

, .

AIX. , .

X Window, OSF/MOTIF OPENLOOK.

CDE?

CDE

CDE UNIX, .

, .

, , , , , .

- .

, . , .

CDE X-OPEN, X11 release 5, OSF/MOTIF 1.2 Spec 1170.

CDE .

AIX CDE

/

, , .

OSF/MOTIF 1.2 ( ).

. . ; , , . . , , , , , .

, . , , .

, , , . ( drag and drop) .

. : , , , , .

CDE

Desktop - , SGML. API - . API .

CDE Desktop . , , , . desktop. , , man- ..

Desktop , . - Application Builder dtscript.

Dtscript - , Windowing Korn Shell.

Application Builder - , widgets CDE.

, drag and drop.

Desktop ( ). .

AIX - " ". , .

:

1. AIX;

2. ;

3. NFS ( NIS, ).

1. TCB.

2. root.

3. /etc/security/user:

pw_restrictions:
maxage = 12 (force change after 12 weeks)
maxrepeat = 3 (max three repeated characters)
minalpha = 1 (at least 1 alpha character)
mindiff = 3 (at least 3 different from last time)
minother = 1 (at least 1 nonalpha character)
maxexpired = 4 (allow logon 4 weeks after expired)
histexpire = 26 (prohibit reuse for 26 weeks)
histsize = 8 (prohibit reusing last 8 passwords)
pwdwarntime = 14 (start warning 14 days before expire)

4. . /etc/profile, :

TMOUT=1800 (for Korn shell)
TIMEOUT=1800 (for Borne shell)
export TIMEOUT TMOUT

. , 1800 , , 30 . , TMOUT TIMEOUT, .

5. .

6. skulker , , /tmp/dailyreport - .

7. securetcpip . rlogin , .

8. /var/adm/cron, cron.allow, cron.deny, at.allow, at.deny cron.

9. , .

10. , .

11. root . , root . , root.

12. . , , . .

13. dial-in . .

14. /etc/security/user. - . .

15. root , root. userid su root. / /var/adm/sulog .

16. mkuser.default.

17. SAK , , .

1. . . , - , .

2. " ", " " , ftp-. root, .

. ( ) "" , . "-" ( ) ( ) root.

3. , SMIT, , ( SMIT passwd). , , .

4. :

4.1. , , , .
4.2. .
4.3. .
4.4. . . , .
4.5. , (, /u/userid) - ( /tmp).
4.6. ( "") .

5. userid ( ) UID ( UID).

6. , su root . , ( PATH) . su root , , root.

7. , IFS ( ) . /etc/profile. IFS .

8. PATH root. PATH ( /etc/profile) a.profile root. a.profile .

9. umask . umask - 022, 027 ( "") . umask $HOME/.profile ( , umask ).

10. , , . , , su, ..

11. tcbck .

12. tcbck, ( ) suid .

13. /tmp/dailyreport , .

AIX ("") . AIX, ; .

- . ( AIX.)

, . ( ). .

, , . , , SMIT:

SMIT Security and Users Users Change/Show Characteristics of a User *User NAME [alex] ... PRIMARY Authentication Method [SYSTEM,SYSTEM;serg]

alex , , . , serg (, alex , ).

. SYSTEM , . , .

SYSTEM . ;serg, , .

ASCII :

/etc/passwd
/etc/group
/etc/security
/etc/security/passwd
/etc/security/user ,
/etc/security/limits
/etc/security/environ
/etc/security/login.cfg
/etc/security/group

/etc/passwd

/etc/passwd . . ():

# catr /etc/passwd
root:!:0:0::/:/bin/ksh
daemon:!:1:1::/etc:
bin:!:2:2::/bin:
sys:!:3:3::/usr/sys:
adm:!:4:4::/var/adm:
uucp:!:5:5::/usr/lib/uucp:
guest:!:100:100::/home/guest:
nobody:!:4294967294:4294967294::/: lpd:!:104:9::/:
alex:!:200:0:X7560 5th floor:/home/alex:/bin/ksh

, ":", :

- 8- - .
- UNIX . AIX "!" /etc/security/passwd. "*", , , , .
- .
- .
- .
- $HOME.
login - $SHELL.

/etc/security/passwd

root. login, passwd, pwdadm pwdck, root.

. .

():

# cat /etc/security/passwd
root:
    password=92t.mzJBjlfbY
    lastupdate=668124164
    flags=
daemon:
    password=*
bin:
    password=*
:
alex:
    password=q/qD6q.ss21x.
    lastupdate=666293529
    flags=ADMCHG,ADMIN,NOCHECK

:

password "*" .
lastupdate 1 1970 .
flags ADMCHG - root. ADMIN - root. NOCHECK - .

/etc/security/user

():

#cat /etc/security/user
default:
	admin=false
	login=true
	su=true
	daemon=true
	rlogin=true
	sugroups=ALL
	admgroups=
	ttys=ALL
	auth1=SYSTEM
	auth2=NONE
	tpath=nosak
	umask=022
	expires=0
	SYSTEM="compat"
	logintimes=
	pwdwarntime=0
	account_locked=false
	loginretries=0
	histexpire=0
	histsize=0
	minage=0
	maxage=0
	maxexpired=-1
	minalpha=0
	minother=0
	minlen=0
	mindiff=0
	maxrepeats=8
	dictionlist=
	pwdchecks=

:

admin . true false.
login , . true false.
su , su . true false.
daemon , cron (SRC). true false.
rlogin , . telnet rlogin. true false.
sugroups . "!" , . : , , ALL "*".
admgroups , . : , .
ttys , . "!" . : , , ALL "*".
auth1 , . login, telnet, rlogin su. SYSTEM;NAME1,SYSTEM;NAME2.
auth2 .
tpath . : nosak, notsh, always on.
umask umask . 027.
expires . : MMDDHHMMYY 0, . 0101000070 .
SYSTEM 4. . :

files .
compat NIS.
DCE (Distributed Computing Enviroment, DCE).

logintimes , . , , : [!] [MMdd[-MMdd]]:hhmm-hhmm [!] [MMdd[-MMdd][:hhmm-hhmm] [!] [w[-w]]:hhmm-hhmm [!] w[-w][:hhmm-hhmm] , MM - (00=, 11=), dd - , hh - (00-23), mm - w - (0=, 6=).
pwdwarntime . : 0 .
account_disable true, - . false.
logintries , . : 0 .
histexpire . : 0 260. - 26 ( 6- ).
histsize , . : 0 50.
minage . =0. 0 52. .
maxage pwdwarntime (.). . =0, . 0 52.
maxexpired , maxage, . =-1, . -1 52.
minalpha . =0. - 0 8.
minother . =0. - 0 8. minalpha minother 8. 8 minother 8 minalpha.
minlen . =0. - 0 8. minalpha+minother, , .
mindiff , . =0. - 0 8.
maxrepeats . =8, . - 0 8.
dictionlist "" . : . , . 7- ASCII. - , root. .
pwdchecks . : / /usr/lib. .

/etc/group /etc/security/group

#more /etc/group
system:!:0:root,alex
staff:!:1:alex
bin:!:2:root,bin
sys:!:3:root,bin,sys
adm:!:4:bin,adm
uucp:!:5:uucp
mail:!:6:
security:!:7:root
nobody:!:4294967294:nobody,lpd
usr:!:100:guest
accounts:!:200:alex

/etc/group :

8 - .
AIX 4- "!"
, .

#more /etc/security/group
system:
    admin=true
staff:
    admin=false
:
accounts:
    admin=false
    adms=alex

/etc/security/group . :
admin true false, .
adms , . admin=true, , root .

/etc/security/login.cfg

default:
:
herald="\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nThis is the console. Restricted use only.\nlogin:
logintimes=
logindisable=0
logininterval=0
loginreenable=0
logindelay=0

.

:

herald . . herald , herald , /etc/environment.

logintimes .

logindisable . logininterval (.).

logininterval , logindisable.

loginreenable .

logindelay . . - 2, 2 , - 4, - 6 .

- "", . , .

1990 2- " " - "", . "-", 1992 "" ( ), .

"", Microsoft Windows NT Server, IBM AIX, IBM, Hewlett-Packard, Cisco, 3Com. "" - ( AIX, Oracle, SmartCity, Cisco).

E-mail: agb@krig.dp.ua


Last-modified: Tue, 03 Aug 1999 09:30:31 GMT
: