Oracle Solaris Administration - Network Services

Embed Size (px)

Citation preview

  • 8/20/2019 Oracle Solaris Administration - Network Services

    1/645

    Oracle® Solaris Administration: Network Services

    Part No:821–1454–10November2011

  • 8/20/2019 Oracle Solaris Administration - Network Services

    2/645

    Copyright© 2002, 2011, Oracleand/or itsaffiliates. Allrights reserved.

    This software and related documentation are provided undera license agreement containingrestrictions on use and disclosure and are protected by intellectualproperty laws. Exceptas expresslypermitted in your license agreementor allowed by law, youmay notuse, copy, reproduce, translate, broadcast, modify, license,transmit,distribute,exhibit,perform,publish or display anypart,in anyform,or by anymeans. Reverse engineering,disassembly,or decompilation of this software,unless required by law for interoperability, is prohibited.

    Theinformationcontained hereinis subject to changewithout noticeand is notwarranted to be error-free. If yound anyerrors,please reportthem to us in writing.

    Ifthis is software or related documentation that is deliveredto theU.S. Government or anyonelicensing it on behalfof theU.S. Government, thefollowing noticeisapplicable:

    U.S. GOVERNMENTRIGHTS

    Programs, software, databases, and related documentation and technicaldata deliveredto U.S. Governmentcustomers are "commercialcomputersoftware" or"commercial technicaldata" pursuant to the applicableFederalAcquisition Regulationand agency-specic supplemental regulations. As such, the use, duplication,disclosure, modication,and adaptation shall be subject to therestrictions andlicense terms setforthin theapplicable Government contract,and, to theextentapplicable by the termsof the Governmentcontract,the additionalrights set forthin FAR 52.227-19, CommercialComputer Software License (December 2007).OracleAmerica,Inc.,500 OracleParkway, Redwood City, CA 94065.

    This software or hardware is developedfor general usein a variety of information management applications. Itis notdeveloped or intended foruse in anyinherently dangerousapplications, includingapplications that maycreate a risk of personal injury. If youuse this software or hardware in dangerousapplications, then youshall

    be responsible to take allappropriate fail-safe, backup, redundancy, andothermeasuresto ensure itssafe use. OracleCorporationand itsaffiliatesdisclaimany liabilityfor anydamagescausedby useof this software or hardware in dangerousapplications.

    Oracleand Java areregistered trademarks of Oracleand/or itsaffiliates. Other names maybe trademarks of their respective owners.

    Inteland Intel Xeon aretrademarks or registered trademarks of Intel Corporation.All SPARCtrademarks areused under license andare trademarks or registeredtrademarks of SPARCInternational,Inc. AMD, Opteron, theAMD logo, andthe AMDOpteron logo aretrademarksor registered trademarks of Advanced MicroDevices. UNIX is a registered trademarkof TheOpen Group.

    This software or hardware anddocumentation mayprovide accessto or information on content, products,and services from third parties. OracleCorporationanditsaffiliates arenot responsible forand expresslydisclaimall warranties of anykind with respect to third-party content, products,and services.Oracle Corporationandits affiliates will notbe responsible forany loss, costs,or damages incurred dueto your accessto or useof third-party content, products,or services.

    Ce logiciel et la documentation quil’accompagnesont protégés parles lois surla propriétéintellectuelle. Ilssont concédés souslicenceet soumisà desrestrictionsd’utilisation et de divulgation.Sauf disposition de votre contrat de licence ou de la loi, vous ne pouvezpas copier, reproduire, traduire,diffuser,modier,breveter,transmettre,distribuer,exposer,exécuter, publier ou afficherle logiciel,même partiellement, sous quelque forme et parquelque procédé quece soit. Par ailleurs,il estinterdit de procéder à toute ingénierie inverse du logiciel,de le désassemblerou de le décompiler, excepté à desns d’interopérabilitéavecdes logicielstiersou telqueprescrit parla loi.

    Les informations fournies dans ce document sont susceptibles de modication sans préavis. Parailleurs, Oracle Corporationne garantit pas qu’ellessoient exemptesd’erreurs et vous invite, le caséchéant,à luien faire part parécrit.

    Sice logiciel,ou la documentation quil’accompagne, estconcédé sous licence au Gouvernementdes Etats-Unis, ou à toute entitéqui délivre la licence de ce logicielou l’utilise pour le comptedu Gouvernementdes Etats-Unis,la noticesuivantes’applique :

    U.S. GOVERNMENTRIGHTS. Programs, software, databases, and related documentation and technical datadeliveredto U.S. Government customers are"commercial computer software" or "commercialtechnical data" pursuant to the applicable Federal Acquisition Regulationand agency-specic supplementalregulations.As such, theuse, duplication,disclosure,modication, andadaptationshallbe subject to therestrictions andlicensetermsset forth in theapplicableGovernment contract,and, to theextent applicable by thetermsof theGovernment contract,the additional rightsset forth in FAR 52.227-19,CommercialComputer Software License (December 2007).Oracle America, Inc.,500 Oracle Parkway, Redwood City,CA 94065.

    Ce logiciel ou matériel a étédéveloppé pour un usage général dans le cadre d’applicationsde gestiondes informations. Ce logiciel ou matériel n’estpas conçu ni n’estdestiné à être utilisé dans desapplications à risque, notammentdans desapplications pouvant causerdes dommages corporels. Si vous utilisez ce logiciel ou matérieldans le cadre d’applicationsdangereuses,il estde votre responsabilité de prendre toutesles mesures de secours, de sauvegarde, de redondance et autresmesuresnécessairesà son utilisation dans des conditionsoptimalesde sécurité. Oracle Corporationet ses affiliés déclinent touteresponsabilitéquant aux dommages causéspar l’utilisation de ce logiciel ou matériel pource typed’applications.

    Oracleet Java sont desmarques déposées d’OracleCorporationet/oude sesaffiliés.Tout autre nommentionné peut correspondreà desmarques appartenant àd’autres propriétaires qu’Oracle.

    AMD, Opteron, le logo AMDet le logo AMDOpteron sont desmarques ou desmarques déposées d’Advanced Micro Devices. Intel et Intel Xeon sont desmarques oudesmarques déposées d’Intel Corporation.Toutes lesmarques SPARCsont utiliséessous licence et sont desmarques ou desmarques déposées de SPARCInternational, Inc. UNIX estune marquedéposée concédé souslicense parX/Open Company, Ltd.

    111206@25097

  • 8/20/2019 Oracle Solaris Administration - Network Services

    3/645

    Contents

    Preface ...................................................................................................................................................33

    Part I Network Services Topics ..................................................................................................................... 39

    1 Network Service (Overview)  ..............................................................................................................41

    Topics for the Oracle Solaris 11 Release ........................................................................................... 41

    Perl 5 ...................................................................................................................................................... 42

    Accessing Perl Documentation .................................................................................................. 42

    Perl Compatibility Issues ............................................................................................................ 42

    Changes to the Oracle Solaris Version of Perl .......................................................................... 43

    2 ManagingWebCache Servers  ...........................................................................................................45

    Network Cache and Accelerator (Overview) ................................................................................... 45Web Servers Using the Secure Sockets Layer Protocol ................................................................... 46

    Managing Web Cache Servers (Task Map) ...................................................................................... 47

    Planning for NCA ................................................................................................................................ 47

    System Requirements for NCA .................................................................................................. 47

    NCA Logging ................................................................................................................................ 48

    Interpositioning Library for Daemon Support of the Door Server ........................................ 48

    Multiple Instance Support .......................................................................................................... 48

    Administering the Caching of Web Pages (Tasks) .......................................................................... 48

    ▼How to Enable Caching of Web Pages ....................................................................................... 48

    ▼How to Disable Caching of Web Pages ...................................................................................... 51

    ▼How to Enable or Disable NCA Logging ................................................................................... 51

    How to Load the Socket Utility Library for NCA ..................................................................... 52

    ▼How to Add a New Port to the NCA Service ............................................................................. 52▼How to Congure an Apache 2.0 Web Server to Use the SSL Kernel Proxy ......................... 53

    3

  • 8/20/2019 Oracle Solaris Administration - Network Services

    4/645

    ▼How to Congure a Sun Java System Web Server to Use the SSL Kernel Proxy ................... 55

    Using the SSL Kernel Proxy in Zones ........................................................................................ 56

    Caching Web Pages (Reference) ........................................................................................................ 57NCA Files ...................................................................................................................................... 57

    NCA Architecture ........................................................................................................................ 58

    3 Time-Related Services   ........................................................................................................................61

    Clock Synchronization (Overview) ................................................................................................... 61

    About NTP in This Release ................................................................................................................ 62Managing Network Time Protocol (Tasks) ...................................................................................... 62

    ▼How to Set Up an NTP Server .................................................................................................... 62

    ▼How to Set Up an NTP Client ..................................................................................................... 62

    ▼How to Enable NTP Logging ...................................................................................................... 63

    ▼How to Display the SMF Properties Associated With the NTP Service ................................ 63

    Using Other Time-Related Commands (Tasks) .............................................................................. 64▼How to Synchronize Date and Time From Another System .................................................. 64

    Network Time Protocol (Reference) ................................................................................................. 64

    Part II Accessing Network File SystemsTopics ........................................................................................... 67

    4 Managing Network File Systems (Overview) .................................................................................. 69

    What's New With the NFS Service .................................................................................................... 69

    Changes in This Release .............................................................................................................. 69

    Signicant Changes in Earlier Releases ..................................................................................... 71

    NFS Terminology ................................................................................................................................ 72

    NFS Servers and Clients .............................................................................................................. 72

    NFS File Systems .......................................................................................................................... 72About the NFS Service ........................................................................................................................ 73

    About Autofs ........................................................................................................................................ 73

    Features of the NFS Service ................................................................................................................ 74

    NFS Version 2 Protocol ............................................................................................................... 74

    NFS Version 3 Protocol ............................................................................................................... 74

    NFS Version 4 Protocol ............................................................................................................... 75

    Controlling NFS Versions .......................................................................................................... 76

    Contents

    Oracle Solaris Administration: Network Services • November20114

  • 8/20/2019 Oracle Solaris Administration - Network Services

    5/645

    NFS ACL Support ........................................................................................................................ 76

    NFS Over TCP .............................................................................................................................. 76

    NFS Over UDP ............................................................................................................................. 77Overview of NFS Over RDMA ................................................................................................... 77

    Network Lock Manager and NFS ............................................................................................... 77

    NFS Large File Support ............................................................................................................... 78

    NFS Client Failover ...................................................................................................................... 78

    Kerberos Support for the NFS Service ....................................................................................... 78

    WebNFS Support ......................................................................................................................... 78

    RPCSEC_GSS Security Flavor .................................................................................................... 79

    Solaris 7 Extensions for NFS Mounting .................................................................................... 79

    Security Negotiation for the WebNFS Service .......................................................................... 79

    NFS Server Logging ..................................................................................................................... 79

    Autofs Features ............................................................................................................................. 80

    5 Network File System Administration (Tasks) .................................................................................. 81

    Automatic File System Sharing .......................................................................................................... 82

    ▼How to Set Up Automatic File-System Sharing ........................................................................ 82

    ▼How to Enable WebNFS Access ................................................................................................. 83

    ▼How to Enable NFS Server Logging ........................................................................................... 84

    Mounting File Systems ........................................................................................................................ 85

    ▼How to Mount a File System at Boot Time ................................................................................ 86

    ▼How to Mount a File System From the Command Line .......................................................... 86

    Mounting With the Automounter ............................................................................................. 87

    ▼How to Mount All File Systems from a Server .......................................................................... 87

    ▼How to Disable Large Files on an NFS Server ........................................................................... 88

    ▼How to Use Client-Side Failover ................................................................................................ 89

    ▼How to Disable Mount Access for One Client .......................................................................... 89▼How to Mount an NFS File System Through a Firewall .......................................................... 89

    ▼How to Mount an NFS File System Using an NFS URL .......................................................... 90

    Setting up a DNS Record for a Federated File System Server .................................................. 90

    Setting Up NFS Services ...................................................................................................................... 91

    ▼How to Start the NFS Services .................................................................................................... 92

    ▼How to Stop the NFS Services ..................................................................................................... 92

    ▼How to Start the Automounter ................................................................................................... 92

    Contents

    5

  • 8/20/2019 Oracle Solaris Administration - Network Services

    6/645

    ▼How to Stop the Automounter ................................................................................................... 93

    ▼How to Select Different Versions of NFS on a Server .............................................................. 93

    ▼How to Select Different Versions of NFS on a Client .............................................................. 94▼How to Use the mount Command to Select Different Versions of NFS on a Client ............. 95

    Administering the Secure NFS System ............................................................................................. 96

    ▼How to Set Up a Secure NFS Environment With DH Authentication .................................. 96

    WebNFS Administration Tasks ......................................................................................................... 97

    Planning for WebNFS Access ..................................................................................................... 98

    How to Browse Using an NFS URL ........................................................................................... 99

    How to Enable WebNFS Access Through a Firewall ............................................................... 99

    Task Overview for Autofs Administration ..................................................................................... 100

    Task Map for Autofs Administration ...................................................................................... 100

    Using SMF Parameters to Congure Your Autofs Environment ........................................ 101

    ▼How to Congure Your Autofs Environment Using SMF Parameters ............................... 102

    Administrative Tasks Involving Maps ..................................................................................... 102

    Modifying the Maps ................................................................................................................... 103▼How to Modify the Master Map ............................................................................................... 103

    ▼How to Modify Indirect Maps .................................................................................................. 104

    ▼How to Modify Direct Maps ..................................................................................................... 104

    Avoiding Mount-Point Conicts ............................................................................................. 105

    Accessing Non-NFS File Systems ............................................................................................. 105

    ▼How to Access CD-ROM Applications With Autofs ............................................................. 105

    ▼How to Access PC-DOS Data Diskettes With Autofs ............................................................ 106

    Customizing the Automounter ................................................................................................ 106

    Setting Up a Common View of /home   ..................................................................................... 106

    ▼How to Set Up /home With Multiple Home Directory File Systems .................................... 107

    ▼How to Consolidate Project-Related Files Under /ws ........................................................... 108

    ▼How to Set Up Different Architectures to Access a Shared Namespace .............................. 109

    ▼How to Support Incompatible Client Operating System Versions ...................................... 110▼How to Replicate Shared Files Across Several Servers ........................................................... 110

    ▼How to Apply Autofs Security Restrictions ............................................................................ 111

    ▼How to Use a Public File Handle With Autofs ........................................................................ 111

    ▼How to Use NFS URLs With Autofs ........................................................................................ 111

    Disabling Autofs Browsability .................................................................................................. 112

    ▼How to Completely Disable Autofs Browsability on a Single NFS Client ........................... 112

    ▼How to Disable Autofs Browsability for All Clients ............................................................... 112

    Contents

    Oracle Solaris Administration: Network Services • November20116

  • 8/20/2019 Oracle Solaris Administration - Network Services

    7/645

    ▼How to Disable Autofs Browsability on a Selected File System ............................................ 113

    Administering NFS Referrals ........................................................................................................... 114

    ▼How to Create and Access an NFS Referral ............................................................................ 114▼How to Remove an NFS Referral .............................................................................................. 115

    Strategies for NFS Troubleshooting ................................................................................................ 115

    NFS Troubleshooting Procedures ................................................................................................... 116

    ▼How to Check Connectivity on an NFS Client ....................................................................... 116

    ▼How to Check the NFS Server Remotely ................................................................................. 117

    ▼How to Verify the NFS Service on the Server .......................................................................... 118

    ▼How to Restart NFS Services ..................................................................................................... 119

    Identifying Which Host Is Providing NFS File Service .......................................................... 119

    ▼How to Verify Options Used With the mount Command ..................................................... 120

    Troubleshooting Autofs .................................................................................................................... 120

    Error Messages Generated by automount -v  .......................................................................... 121

    Miscellaneous Error Messages ................................................................................................. 122

    Other Errors With Autofs ......................................................................................................... 124NFS Error Messages .......................................................................................................................... 124

    6 Accessing Network File Systems (Reference) ................................................................................129

    NFS Files ............................................................................................................................................. 129

    /etc/default/nfslogd File ..................................................................................................... 130

    /etc/nfs/nfslog.conf File ..................................................................................................... 131

    NFS Daemons .................................................................................................................................... 132

    automountd Daemon ................................................................................................................. 133

    lockd Daemon ........................................................................................................................... 134

    mountd Daemon ......................................................................................................................... 135

    nfs4cbd Daemon ....................................................................................................................... 135

    nfsd Daemon ............................................................................................................................. 135nfslogd Daemon ....................................................................................................................... 136

    nfsmapid Daemon ..................................................................................................................... 137

    reparsed Daemon ..................................................................................................................... 143

    statd Daemon ........................................................................................................................... 143

    NFS Commands ................................................................................................................................ 144

    automount Command ............................................................................................................... 144

    clear_locks Command ........................................................................................................... 145

    Contents

    7

  • 8/20/2019 Oracle Solaris Administration - Network Services

    8/645

    fsstat Command ..................................................................................................................... 145

    mount Command ........................................................................................................................ 146

    umount Command ..................................................................................................................... 151mountall Command ................................................................................................................. 152

    umountall Command ............................................................................................................... 153

    sharectl Command ................................................................................................................. 153

    share Command ........................................................................................................................ 156

    unshare Command ................................................................................................................... 160

    shareall Command ................................................................................................................. 160

    unshareall Command ............................................................................................................. 161

    showmount Command ............................................................................................................... 161

    setmnt Command ..................................................................................................................... 162

    nfsref Command ..................................................................................................................... 162

    Commands for Troubleshooting NFS Problems ........................................................................... 163

    nfsstat Command ................................................................................................................... 163

    pstack Command ..................................................................................................................... 165rpcinfo Command ................................................................................................................... 165

    snoop Command ........................................................................................................................ 167

    truss Command ........................................................................................................................ 167

    NFS Over RDMA ............................................................................................................................... 168

    How the NFS Service Works ............................................................................................................ 170

    Version Negotiation in NFS ..................................................................................................... 170

    Features in NFS Version 4 ......................................................................................................... 171

    UDP and TCP Negotiation ....................................................................................................... 180

    File Transfer Size Negotiation .................................................................................................. 181

    How File Systems Are Mounted ............................................................................................... 181

    Effects of the -public Option and NFS URLs When Mounting .......................................... 182

    Client-Side Failover ................................................................................................................... 183

    Large Files ................................................................................................................................... 185How NFS Server Logging Works ............................................................................................. 185

    How the WebNFS Service Works ............................................................................................ 185

    How WebNFS Security Negotiation Works ........................................................................... 186

    WebNFS Limitations With Web Browser Use ....................................................................... 187

    Secure NFS System ..................................................................................................................... 188

    Secure RPC ................................................................................................................................. 188

    How Mirror Mounts Work .............................................................................................................. 191

    Contents

    Oracle Solaris Administration: Network Services • November20118

  • 8/20/2019 Oracle Solaris Administration - Network Services

    9/645

    When to Use Mirror Mounts .................................................................................................... 191

    Mounting a File System Using Mirror Mounts ...................................................................... 191

    Unmounting a File System Using Mirror Mounts ................................................................. 192How NFS Referrals Work ................................................................................................................. 192

    When to Use NFS Referrals? ..................................................................................................... 192

    Creating an NFS Referral .......................................................................................................... 193

    Removing an NFS Referral ....................................................................................................... 193

    Autofs Maps ....................................................................................................................................... 193

    Master Autofs Map .................................................................................................................... 193Direct Autofs Maps .................................................................................................................... 195

    Indirect Autofs Maps ................................................................................................................. 197

    How Autofs Works ............................................................................................................................ 198

    How Autofs Navigates Through the Network (Maps) ........................................................... 200

    How Autofs Starts the Navigation Process (Master Map) ..................................................... 200

    Autofs Mount Process ............................................................................................................... 201

    How Autofs Selects the Nearest Read-Only Files for Clients (Multiple Locations) ........... 202

    Autofs and Weighting ............................................................................................................... 205

    Variables in a Autofs Map Entry .............................................................................................. 206

    Maps That Refer to Other Maps ............................................................................................... 206

    Executable Autofs Maps ............................................................................................................ 207

    Modifying How Autofs Navigates the Network (Modifying Maps) ..................................... 208

    Default Autofs Behavior With Name Services ........................................................................ 208

    Autofs Reference ................................................................................................................................ 210

    Autofs and Metacharacters ....................................................................................................... 210

    Autofs and Special Characters .................................................................................................. 211

    PartIII SLP Topics ............................................................................................................................................213

    7 SLP (Overview)   ...................................................................................................................................215

    SLP Architecture ................................................................................................................................ 215

    Summary of the SLP Design ..................................................................................................... 216

    SLP Agents and Processes ......................................................................................................... 216

    SLP Implementation ......................................................................................................................... 218

    Other SLP Information Sources ............................................................................................... 219

    Contents

    9

  • 8/20/2019 Oracle Solaris Administration - Network Services

    10/645

    8 Planning and Enabling SLP(Tasks)   ................................................................................................221

    SLP Conguration Considerations ................................................................................................. 221

    Deciding What to Recongure ................................................................................................. 222Using snoop to Monitor SLP Activity ............................................................................................. 222

    ▼How to Use snoop to Run SLP Traces ...................................................................................... 223

    Analyzing a snoop slp Trace ................................................................................................... 223

    9 Administering SLP(Tasks) ................................................................................................................227

    Conguring SLP Properties ............................................................................................................. 227SLP Conguration File: Basic Elements .................................................................................. 228

    ▼How to Change Your SLP Conguration ............................................................................... 229

    Modifying DA Advertising and Discovery Frequency .................................................................. 230

    Limiting UAs and SAs to Statically Congured DAs ............................................................. 230

    ▼How to Limit UAs and SAs to Statically Congured DAs ..................................................... 230

    Conguring DA Discovery for Dial-up Networks ................................................................. 231

    ▼How to Congure DA Discovery for Dial-up Networks ....................................................... 231

    Conguring the DA Heartbeat for Frequent Partitions ........................................................ 233

    ▼How to Congure DA Heartbeat for Frequent Partitions ..................................................... 233

    Relieving Network Congestion ................................................................................................ 234

    Accommodating Different Network Media, Topologies, or Congurations ............................. 234

    Reducing SA Reregistrations .................................................................................................... 234

    ▼How to Reduce SA Reregistrations .......................................................................................... 235

    Conguring the Multicast Time-to-Live Property ................................................................ 235

    ▼How to Congure the Multicast Time-to-Live Property ...................................................... 236

    Conguring the Packet Size ...................................................................................................... 237

    ▼How to Congure the Packet Size ............................................................................................ 237

    Conguring Broadcast-Only Routing ..................................................................................... 238

    ▼How to Congure Broadcast-Only Routing ........................................................................... 238Modifying Timeouts on SLP Discovery Requests ......................................................................... 239

    Changing Default Timeouts ..................................................................................................... 239

    ▼How to Change Default Timeouts ........................................................................................... 240

    Conguring the Random-Wait Bound ................................................................................... 241

    ▼How to Congure the Random-Wait Bound ......................................................................... 241

    Deploying Scopes .............................................................................................................................. 242

    When to Congure Scopes ....................................................................................................... 243

    Contents

    Oracle Solaris Administration: Network Services • November201110

  • 8/20/2019 Oracle Solaris Administration - Network Services

    11/645

    Considerations When Conguring Scopes ............................................................................ 244

    ▼How to Congure Scopes .......................................................................................................... 244

    Deploying DAs ................................................................................................................................... 245Why Deploy an SLP DA? .......................................................................................................... 245

    When to Deploy DAs ................................................................................................................. 247

    ▼How to Deploy DAs ................................................................................................................... 247

    Where to Place DAs ................................................................................................................... 248

    SLP and Multihoming ....................................................................................................................... 249

    Multihoming Conguration for SLP ....................................................................................... 249

    When to Congure for Nonrouted, Multiple Network Interfaces ....................................... 249

    Conguring Nonrouted, Multiple Network Interfaces (Task Map) .................................... 250

    Conguring the net.slp.interfaces Property ................................................................... 250

    Proxy Advertising on Multihomed Hosts ............................................................................... 252

    DA Placement and Scope Name Assignment ......................................................................... 252

    Considerations When Conguring for Nonrouted, Multiple Network Interfaces ............ 253

    10 Incorporating Legacy Services  ........................................................................................................255

    When to Advertise Legacy Services ................................................................................................. 255

    Advertising Legacy Services ............................................................................................................. 255

    Modifying the Service ................................................................................................................ 255

    Advertising a Service That Is Not SLP Enabled ...................................................................... 256

    SLP Proxy Registration .............................................................................................................. 256▼How to Enable SLP Proxy Registration ................................................................................... 256

    Using SLP Proxy Registration to Advertise ............................................................................ 257

    Considerations When Advertising Legacy Services ...................................................................... 259

    11 SLP (Reference)  ..................................................................................................................................261

    SLP Status Codes ............................................................................................................................... 261SLP Message Types ............................................................................................................................ 262

    Part IV Mail Services Topics   ..........................................................................................................................265

    12 Mail Services (Overview)  ..................................................................................................................267

    What's New With Mail Services ....................................................................................................... 267

    Contents

    11

  • 8/20/2019 Oracle Solaris Administration - Network Services

    12/645

    Changes in this Release ............................................................................................................. 268

    Signicant Changes in Earlier Releases ................................................................................... 268

    Other sendmail Information Sources ............................................................................................ 269Introduction to the Components of Mail Services ........................................................................ 269

    Overview of the Software Components .................................................................................. 269

    Overview of the Hardware Components ................................................................................ 270

    13 Mail Services (Tasks)  .........................................................................................................................273

    Task Map for Mail Services .............................................................................................................. 273Planning Your Mail System .............................................................................................................. 274

    Local Mail Only .......................................................................................................................... 275

    Local Mail and a Remote Connection ..................................................................................... 276

    Setting Up Mail Services (Task Map) .............................................................................................. 277

    Setting Up Mail Services ................................................................................................................... 277

    ▼How to Set Up a Mail Server ..................................................................................................... 278

    ▼How to Set Up a Mail Client ...................................................................................................... 279

    ▼How to Set Up a Mail Host ........................................................................................................ 281

    ▼How to Set Up a Mail Gateway ................................................................................................. 283

    ▼How to Use DNS With sendmail ............................................................................................. 284

    Changing the sendmail Conguration (Task Map) ..................................................................... 285

    Changing the sendmail Conguration .......................................................................................... 285

    ▼How to Build a New sendmail.cf File .................................................................................... 286Setting Up a Virtual Host .......................................................................................................... 287

    ▼How to Automatically Rebuild a Conguration File ............................................................. 287

    ▼How to Use sendmail in the Open Mode ................................................................................ 288

    ▼How to Set SMTP to Use TLS ................................................................................................... 289

    ▼How to Manage Mail Delivery by Using an Alternate Conguration of sendmail.cf ..... 293

    Administering Mail Alias Files (Task Map) ................................................................................... 294Administering Mail Alias Files ........................................................................................................ 295

    ▼HowtoSetUpanNIS mail.aliases Map ............................................................................. 295

    ▼How to Set Up a Local Mail Alias File ...................................................................................... 296

    ▼How to Create a Keyed Map File .............................................................................................. 298

    Managing the postmaster Alias .............................................................................................. 298

    Administering the Queue Directories (Task Map) ....................................................................... 300

    Administering the Queue Directories ............................................................................................. 301

    Contents

    Oracle Solaris Administration: Network Services • November201112

  • 8/20/2019 Oracle Solaris Administration - Network Services

    13/645

    ▼How to Display the Contents of the Mail Queue,/var/spool/mqueue  .............................. 301

    ▼How to Force Mail Queue Processing in the Mail Queue, /var/spool/mqueue ................ 302

    ▼How to Run a Subset of the Mail Queue, /var/spool/mqueue   ............................................ 302

    ▼How to Move the Mail Queue, /var/spool/mqueue  ............................................................. 303

    ▼How to Run the Old Mail Queue, /var/spool/omqueue ...................................................... 303

    Administering .forward Files (Task Map) .................................................................................... 304

    Administering .forward Files ......................................................................................................... 304

    ▼How to Disable .forward Files ................................................................................................. 304

    ▼How to Change the .forward–File Search Path ..................................................................... 305

    ▼How to Create and Populate /etc/shells  ............................................................................. 306

    Troubleshooting Procedures and Tips for Mail Services (Task Map) ......................................... 306

    Troubleshooting Procedures and Tips for Mail Services .............................................................. 307

    ▼How to Test the Mail Conguration ........................................................................................ 307

    How to Check Mail Aliases ....................................................................................................... 308

    ▼How to Test the sendmail Rule Sets ........................................................................................ 309

    How to Verify Connections to Other Systems ....................................................................... 309Logging Error Messages ............................................................................................................ 310

    Other Sources for Mail Diagnostic Information .................................................................... 311

    Resolving Error Messages ................................................................................................................. 311

    14 Mail Services (Reference)  .................................................................................................................315

    Oracle Solaris Version of sendmail   ................................................................................................ 316Flags Used and Not Used to Compile sendmail   .................................................................... 316

    MILTER, Mail Filter API for sendmail ...................................................................................... 317

    Alternative sendmail Commands ........................................................................................... 318

    Versions of the Conguration File ........................................................................................... 318

    Software and Hardware Components of Mail Services ................................................................ 319

    Software Components ............................................................................................................... 319Hardware Components ............................................................................................................. 326

    Mail Service Programs and Files ...................................................................................................... 328

    Enhancement for vacation Utility .......................................................................................... 329

    Contents of the /usr/bin Directory ........................................................................................ 329

    Contents of the /etc/mail Directory ...................................................................................... 330

    Contents of the /etc/mail/cf Directory ............................................................................... 331

    Contents of the /usr/lib Directory ........................................................................................ 333

    Contents

    13

  • 8/20/2019 Oracle Solaris Administration - Network Services

    14/645

    Other Files Used for Mail Services ........................................................................................... 334

    Interactions of Mail Programs .................................................................................................. 335

    sendmail Program ..................................................................................................................... 336Mail Alias Files ........................................................................................................................... 339

    .forward Files ............................................................................................................................ 342

    /etc/default/sendmail File ................................................................................................... 343

    Mail Addresses and Mail Routing .................................................................................................... 344

    Interactions of sendmail With Name Services .............................................................................. 345

    sendmail.cf and Mail Domains .............................................................................................. 345

    sendmail and Name Services ................................................................................................... 345

    Interactions of NIS and sendmail ............................................................................................ 347

    Interactions of sendmail With NIS and DNS ........................................................................ 347

    Changes in Version 8.14 of sendmail ............................................................................................. 348

    Changes in Version 8.13 of sendmail ............................................................................................. 349

    Support for Running SMTP With TLS in Version 8.13 of sendmail   .................................. 349

    Additional Command-Line Options in Version 8.13 of sendmail   ..................................... 354Additional and Revised Conguration File Options in Version 8.13 of sendmail ............ 354

    Additional and Revised FEATURE() Declarations in Version 8.13 of sendmail ................. 356

    Changes From Version 8.12 of sendmail ....................................................................................... 357

    Support for TCP Wrappers From Version 8.12 of sendmail   ............................................... 357

    submit.cf Conguration File From Version 8.12 of sendmail ........................................... 358

    Additional or Deprecated Command-Line Options From Version 8.12 of sendmail ...... 359

    Additional Arguments for the PidFile and ProcessTitlePrefix Options From Version8.12 of sendmail ......................................................................................................................... 360

    Additional Dened Macros From Version 8.12 of sendmail ............................................... 361

    Additional Macros From Version 8.12 of sendmail .............................................................. 362

    Additional MAX Macros From Version 8.12 of sendmail ....................................................... 363

    Additional and Revised m4 Conguration Macros From Version 8.12 of sendmail   ......... 363

    Changes to the FEATURE() Declaration From Version 8.12 of sendmail   ........................... 364Changes to the MAILER() Declaration From Version 8.12 of sendmail .............................. 367

    Additional Delivery Agent Flags From Version 8.12 of sendmail ....................................... 367

    Additional Equates for Delivery Agents From Version 8.12 of sendmail   .......................... 368

    Additional Queue Features From Version 8.12 of sendmail ................................................ 369

    Changes for LDAP From Version 8.12 of sendmail .............................................................. 370

    Change to the Built-In Mailer From Version 8.12 of sendmail   ........................................... 371

    Additional Rule Sets From Version 8.12 of sendmail   ........................................................... 371

    Contents

    Oracle Solaris Administration: Network Services • November201114

  • 8/20/2019 Oracle Solaris Administration - Network Services

    15/645

    Changes to Files From Version 8.12 of sendmail   .................................................................. 372

    sendmail Version 8.12 and IPv6 Addresses in Conguration ............................................. 373

    Part V Serial NetworkingTopics  .................................................................................................................375

    15 Solaris PPP4.0 (Overview)  ...............................................................................................................377

    Solaris PPP 4.0 Basics ........................................................................................................................ 377

    Solaris PPP 4.0 Compatibility ................................................................................................... 378

    Which Version of Solaris PPP to Use ...................................................................................... 378

    Where to Go for More Information About PPP ..................................................................... 379

    PPP Congurations and Terminology ........................................................................................... 381

    Dial-up PPP Overview .............................................................................................................. 381

    Leased-Line PPP Overview ....................................................................................................... 385

    PPP Authentication ........................................................................................................................... 387

    Authenticators and Authenticatees ......................................................................................... 388PPP Authentication Protocols .................................................................................................. 388

    Why Use PPP Authentication? ................................................................................................. 388

    Support for DSL Users Through PPPoE ......................................................................................... 389

    PPPoE Overview ........................................................................................................................ 389

    Parts of a PPPoE Conguration ............................................................................................... 390

    Security on a PPPoE Tunnel ..................................................................................................... 391

    16 Planning for the PPP Link (Tasks) ................................................................................................... 393

    Overall PPP Planning (Task Map) .................................................................................................. 393

    Planning a Dial-up PPP Link ........................................................................................................... 394

    Before You Set Up the Dial-out Machine ................................................................................ 394

    Before You Set Up the Dial-in Server ...................................................................................... 395Example of a Conguration for Dial-up PPP ......................................................................... 395

    Where to Go for More Information About Dial-up PPP ...................................................... 397

    Planning a Leased-Line Link ............................................................................................................ 397

    Before You Set Up the Leased-Line Link ................................................................................ 397

    Example of a Conguration for a Leased-Line Link .............................................................. 398

    Where to Go for More Information About Leased Lines ...................................................... 399

    Planning for Authentication on a Link ........................................................................................... 399

    Contents

    15

  • 8/20/2019 Oracle Solaris Administration - Network Services

    16/645

    Before You Set Up PPP Authentication .................................................................................. 400

    Examples of PPP Authentication Congurations .................................................................. 400

    Where to Go for More Information About Authentication .................................................. 404Planning for DSL Support Over a PPPoE Tunnel ......................................................................... 405

    Before You Set Up a PPPoE Tunnel ......................................................................................... 405

    Example of a Conguration for a PPPoE Tunnel ................................................................... 407

    Where to Get More Information About PPPoE ..................................................................... 408

    17 Setting Upa Dial-up PPP Link(Tasks) ............................................................................................ 409Major Tasks for Setting Up the Dial-up PPP Link (Task Map) .................................................... 409

    Conguring the Dial-out Machine .................................................................................................. 410

    Tasks for Conguring the Dial-out Machine (Task Map) .................................................... 410

    Dial-up PPP Template Files ...................................................................................................... 410

    Conguring Devices on the Dial-out Machine ...................................................................... 411

    ▼How to Congure the Modem and Serial Port (Dial-out Machine) .................................... 411

    Conguring Communications on the Dial-out Machine ..................................................... 412

    ▼How to Dene Communications Over the Serial Line .......................................................... 412

    ▼How to Create the Instructions for Calling a Peer .................................................................. 413

    ▼How to Dene the Connection With an Individual Peer ...................................................... 414

    Conguring the Dial-in Server ........................................................................................................ 416

    Tasks for Conguring the Dial-in Server (Task Map) ........................................................... 416

    Conguring Devices on the Dial-in Server ............................................................................. 416▼How to Congure the Modem and Serial Port (Dial-in Server) ........................................... 417

    ▼How to Set the Modem Speed ................................................................................................... 417

    Setting Up Users of the Dial-in Server ..................................................................................... 417

    ▼How to Congure Users of the Dial-in Server ........................................................................ 418

    Conguring Communications Over the Dial-in Server ....................................................... 418

    ▼How to Dene Communications Over the Serial Line (Dial-in Server) ............................. 419

    Calling the Dial-in Server ................................................................................................................. 420

    ▼How to Call the Dial-in Server .................................................................................................. 420

    18 Setting Up a Leased-Line PPPLink(Tasks) .................................................................................... 423

    Setting Up a Leased Line (Task Map) .............................................................................................. 423

    Conguring Synchronous Devices on the Leased Line ................................................................ 424

    Prerequisites for Synchronous Devices Setup ........................................................................ 424

    Contents

    Oracle Solaris Administration: Network Services • November201116

  • 8/20/2019 Oracle Solaris Administration - Network Services

    17/645

    ▼How to Congure Synchronous Devices ................................................................................ 424

    Conguring a Machine on the Leased Line .................................................................................... 425

    Prerequisites for Conguring the Local Machine on a Leased Line .................................... 425▼How to Congure a Machine on a Leased Line ...................................................................... 425

    19 Setting Up PPP Authentication (Tasks) ..........................................................................................429

    Conguring PPP Authentication (Task Map) ............................................................................... 429

    Conguring PAP Authentication .................................................................................................... 430

    Setting Up PAP Authentication (Task Maps) ......................................................................... 430Conguring PAP Authentication on the Dial-in Server ........................................................ 431

    ▼How to Create a PAP Credentials Database (Dial-in Server) ................................................ 431

    Modifying the PPP Conguration Files for PAP (Dial-in Server) ........................................ 432

    ▼How to Add PAP Support to the PPP Conguration Files (Dial-in Server) ........................ 433

    Conguring PAP Authentication for Trusted Callers (Dial-out Machines) ....................... 434

    ▼How to Congure PAP Authentication Credentials for the Trusted Callers ...................... 434

    Modifying PPP Conguration Files for PAP (Dial-out Machine) ....................................... 435

    ▼How to Add PAP Support to the PPP Conguration Files (Dial-out Machine) ................. 436

    Conguring CHAP Authentication ................................................................................................ 437

    Setting Up CHAP Authentication (Task Maps) ..................................................................... 437

    Conguring CHAP Authentication on the Dial-in Server .................................................... 438

    ▼How to Create a CHAP Credentials Database (Dial-in Server) ............................................ 439

    Modifying the PPP Conguration Files for CHAP (Dial-in Server) .................................... 439▼How to Add CHAP Support to the PPP Conguration Files (Dial-in Server) .................... 440

    Conguring CHAP Authentication for Trusted Callers (Dial-out Machines) ................... 440

    ▼How to Congure CHAP Authentication Credentials for the Trusted Callers .................. 441

    Adding CHAP to the Conguration Files (Dial-out Machine) ............................................ 442

    ▼How to Add CHAP Support to the PPP Conguration Files (Dial-out Machine) ............. 442

    20 Setting Up a PPPoE Tunnel (Tasks) ................................................................................................. 443

    Major Tasks for Setting Up a PPPoE Tunnel (Task Maps) ........................................................... 443

    Setting Up the PPPoE Client ............................................................................................................ 444

    Prerequisites for Setting Up the PPPoE Client ....................................................................... 444

    ▼How to Congure an Interface for a PPPoE Client ................................................................ 444

    ▼How to Dene a PPPoE Access Server Peer ............................................................................ 445

    Setting Up a PPPoE Access Server ................................................................................................... 446

    Contents

    17

  • 8/20/2019 Oracle Solaris Administration - Network Services

    18/645

    ▼How to Set Up a PPPoE Access Server ..................................................................................... 447

    ▼How to Modify an Existing /etc/ppp/pppoe File .................................................................. 448

    How to Restrict the Use of an Interface to Particular Clients ............................................... 448

    21 Fixing Common PPPProblems (Tasks) ...........................................................................................451

    Solving PPP Problems (Task Map) .................................................................................................. 451

    Tools for Troubleshooting PPP ....................................................................................................... 452

    ▼How to Obtain Diagnostic Information From pppd .............................................................. 453

    ▼How to Turn on PPP Debugging ............................................................................................. 454

    Solving PPP-Related and PPPoE-Related Problems ..................................................................... 455

    ▼How to Diagnose Network Problems ...................................................................................... 455

    Common Network Problems That Affect PPP ....................................................................... 457

    ▼How to Diagnose and Fix Communications Problems ......................................................... 458

    General Communications Problems That Affect PPP .......................................................... 458

    ▼How to Diagnose Problems With the PPP Conguration .................................................... 459

    Common PPP Conguration Problems ................................................................................. 459

    ▼How to Diagnose Modem Problems ........................................................................................ 460

    ▼How to Obtain Debugging Information for Chat Scripts ..................................................... 461

    Common Chat Script Problems ............................................................................................... 461

    ▼How to Diagnose and Fix Serial-Line Speed Problems ......................................................... 463

    ▼How to Obtain Diagnostic Information for PPPoE ............................................................... 464

    Fixing Leased-Line Problems ........................................................................................................... 466Diagnosing and Fixing Authentication Problems ......................................................................... 467

    22 Solaris PPP4.0 (Reference)  ..............................................................................................................469

    Using PPP Options in Files and on the Command Line ............................................................... 469

    Where to Dene PPP Options .................................................................................................. 469

    How PPP Options Are Processed ............................................................................................. 470How PPP Conguration File Privileges Work ....................................................................... 471

    /etc/ppp/options Conguration File ................................................................................... 473

    /etc/ppp/options.ttyname Conguration File .................................................................... 474

    Conguring User-Specic Options ................................................................................................. 477

    Conguring $HOME/.ppprc on a Dial-in Server ..................................................................... 477

    Conguring $HOME/.ppprc on a Dial-out Machine .............................................................. 477

    Specifying Information for Communicating With the Dial-in Server ....................................... 477

    Contents

    Oracle Solaris Administration: Network Services • November201118

  • 8/20/2019 Oracle Solaris Administration - Network Services

    19/645

    /etc/ppp/peers/ peer-name File ............................................................................................. 478

    /etc/ppp/peers/myisp.tmpl Template File ......................................................................... 479

    Where to Find Examples of the /etc/ppp/peers/ peer-name Files ..................................... 480Conguring Modem Speed for a Dial-up Link .............................................................................. 480

    Dening the Conversation on the Dial-up Link ............................................................................ 480

    Contents of the Chat Script ....................................................................................................... 481

    Chat Script Examples ................................................................................................................. 481

    Invoking the Chat Script ........................................................................................................... 487

    ▼How to Invoke a Chat Script (Task) ......................................................................................... 488

    Creating a Chat File That Is Executable ................................................................................... 489

    ▼How to Create an Executable Chat Program .......................................................................... 489

    Authenticating Callers on a Link ..................................................................................................... 489

    Password Authentication Protocol (PAP) ............................................................................... 489

    Challenge-Handshake Authentication Protocol (CHAP) .................................................... 492

    Creating an IP Addressing Scheme for Callers .............................................................................. 495

    Assigning Dynamic IP Addresses to Callers ........................................................................... 495

    Assigning Static IP Addresses to Callers ................................................................................. 496

    Assigning IP Addresses by sppp Unit Number ...................................................................... 497

    Creating PPPoE Tunnels for DSL Support ..................................................................................... 497

    Files for Conguring Interfaces for PPPoE ............................................................................. 498

    PPPoE Access Server Commands and Files ............................................................................ 499

    PPPoE Client Commands and Files ......................................................................................... 504

    23 Migrating From Asynchronous Solaris PPPto Solaris PPP 4.0 (Tasks) ......................................507

    Before Converting asppp Files ......................................................................................................... 507

    Example of the /etc/asppp.cf Conguration File ............................................................... 507

    Example of the /etc/uucp/Systems File ................................................................................ 508

    Example of the /etc/uucp/Devices File ................................................................................ 509

    Example of the /etc/uucp/Dialers File ................................................................................ 509

    Running the asppp2pppd Conversion Script (Tasks) ................................................................... 510

    Task Prerequisites ...................................................................................................................... 510

    ▼How to Convert From asppp to Solaris PPP 4.0 ..................................................................... 510

    ▼How to View the Results of the Conversion ........................................................................... 511

    Contents

    19

  • 8/20/2019 Oracle Solaris Administration - Network Services

    20/645

    24 UUCP (Overview) ................................................................................................................................513

    UUCP Hardware Congurations .................................................................................................... 513

    UUCP Software ................................................................................................................................. 514

    UUCP Daemons ........................................................................................................................ 514

    UUCP Administrative Programs ............................................................................................. 515

    UUCP User Programs ............................................................................................................... 515

    UUCP Database Files ........................................................................................................................ 516

    Conguring UUCP Database Files .......................................................................................... 517

    25 Administering UUCP (Tasks)  ............................................................................................................519

    UUCP Administration (Task Map) ................................................................................................ 519

    Adding UUCP Logins ....................................................................................................................... 520

    ▼How to Add UUCP Logins ....................................................................................................... 520

    Starting UUCP ................................................................................................................................... 521

    ▼How to Start UUCP ................................................................................................................... 521

    uudemon.poll Shell Script ........................................................................................................ 522

    uudemon.hour Shell Script ........................................................................................................ 522

    uudemon.admin Shell Script ...................................................................................................... 522

    uudemon.cleanup Shell Script .................................................................................................. 522

    Running UUCP Over TCP/IP ......................................................................................................... 523

    ▼How to Activate UUCP for TCP/IP ......................................................................................... 523

    UUCP Security and Maintenance ................................................................................................... 524Setting Up UUCP Security ........................................................................................................ 524

    Regular UUCP Maintenance .................................................................................................... 524

    Troubleshooting UUCP ................................................................................................................... 525

    ▼How to Check for Faulty Modems or ACUs ........................................................................... 525

    ▼How to Debug Transmissions .................................................................................................. 526

    Checking the UUCP /etc/uucp/Systems File ...................................................................... 527

    Checking UUCP Error Messages ............................................................................................. 527

    Checking Basic Information ..................................................................................................... 527

    26 UUCP (Reference) ...............................................................................................................................529

    UUCP /etc/uucp/Systems File ...................................................................................................... 529

    System-Name Field in /etc/uucp/Systems File .................................................................... 530

    Time Field in /etc/uucp/Systems File ................................................................................... 530

    Contents

    Oracle Solaris Administration: Network Services • November201120

    C t t

  • 8/20/2019 Oracle Solaris Administration - Network Services

    21/645

    Type Field in /etc/uucp/Systems File ................................................................................... 531

    Speed Field in /etc/uucp/Systems File .................................................................................. 532

    Phone Field in /etc/uucp/Systems File ................................................................................. 532

    Chat-Script Field in /etc/uucp/Systems File ........................................................................ 533

    Enabling Dialback Through the Chat Script .......................................................................... 534

    Hardware Flow Control in /etc/uucp/Systems File ............................................................ 535

    Setting Parity in /etc/uucp/Systems File .............................................................................. 535

    UUCP /etc/uucp/Devices File ...................................................................................................... 536

    Type Field in /etc/uucp/Devices File ................................................................................... 536

    Line Field in the /etc/uucp/Devices File .............................................................................. 538Line2 Field in the /etc/uucp/Devices File ............................................................................ 538

    Class Field in the /etc/uucp/Devices File ............................................................................. 538

    Dialer-Token-Pairs Field in the /etc/uucp/Devices File .................................................... 539

    Structure of the Dialer-Token-Pairs Field in the /etc/uucp/Devices File ........................ 539

    Protocol Denitions in /etc/uucp/Devices File ............