Disable Anonymous FTP in Solaris 9

By default Anonymous FTP is enabled in Solaris 9/10 server .
in order to disable anonymous FTP just add guestserver keyword to /etc/ftpd/ftpaccess file
no need to bounce services .Changes will take place immediate

echo "guestserver" >> /etc/ftpd/ftpaccess

Then try ftp as anonymous ,you will get error message like below

$ftp serverip
Connected to T2000 FTP server ready
User (129.227.159.23:(none)): anonymous
530 Guest login not allowed on this machine.
Connection closed by remote host.

$

Introduction to ZFS Administration

This presentation gives you a brief introduction to SUN ZFS file system.
http://www.4shared.com/dir/6679470/2ef45125/SUN.html

Configure Wuftp in Solaris 8 with Restricted home directory

By defualt ftp service in soalris 8 dosnt have option to restrict ftp users to thier home directory
By installing wuftpd service we can enable this option.I have used wuftpd solaris package from sunfreeware.com

Download wuftpd from www.sunfreeware.com

wuftpd-2.6.2-sol8-sparc-local.gz
upload package to server /tmp directory

Install package

cd /tmp
gunzip wuftpd-2.6.2-sol8-sparc-local.gz

pkgadd -d wuftpd-2.6.2-sol8-sparc-local


edit /etc/inetd.conf

Comment following line in /etc/inetd.conf
#ftp stream tcp6 nowait root /usr/sbin/in.ftpd in.ftpd -a

Add following line .(Make sure not mentioning tcp6)

ftp stream tcp nowait root /usr/local/sbin/in.ftpd in.ftpd -al


copy sample configuration files

#cd /usr/local/doc/wuftpd/doc/examples/
#cp ftpaccess /etc
#cp ftpconversions.solaris /etc/ftpconversions

*if /etc/ftpusers doent exist on your system copy that file also
#cp ftusers /etc

Restrict users only to their home directories

Add following lines to /etc/ftpaccess
restricted-uid *

Restart inetd
pkill -HUP inetd

Wuftpd gives lots of configuration option . /etc/ftpaccess can be configured to restrict users and in many ways .
here is a good link for configure logging with wuftpd
http://www.landfield.com/wu-ftpd/logging.html

Solaris 10 with VERITAS Volume Manager 5.0 in VMware

This setup will be very useful for experienced administrator to test/practice various volume manager configurations. I have used normal PC with 1Gb Ram/and 40gb hdd. Base OS is running on fedora

If you want to connect VMware console remotely from your desktop
Login to Linux box and find wmware authentication service port number

# grep vmware-authd /etc/services
vmware-authd 904/tcp

verify vmware –authd service is running using
#netstat –a grep vmware-authd
tcp 0 0 *:vmware-authd *:* LISTEN

Open VMware console from your system
Select remote host and specify ipaddress:portnumber and give login as root
192.168.80.5:904


Configuration

.I have installed Base Solaris 10 package with some addition packages which will enable to install Storage Foundation suite .

VERITAS storage foundation 5.0 for x86 is free downloadable from VERITAS site and you create maximum 4 volume with free version .


Since I’m not using any Xwindow manager I have chosen following configuration for Solaris 10 in vmware

Memory : 256m
HDD : 2 * 3 GB SCSI rootdisk/mirrodisk

HDD 1GB * 6 SCSI HDD.
Crete HDD based on your requirement and HDD availability

NIC : 1

Note : Make sure you are creating SCSI disks only .Volume manager will not work with IDE DISK.


Download packages

I have downloaded all the required packages on my Linux server and shared across NFS.
Since I’m using a 3gb disk for bootdisk its better to store source package outside the virtual machine


Download all packages to /home/downloads

10_x86_Recommended.zip
sxrt5.0x64_x86_5.0x64a.dvd2.tar.gz

unzip 10_x86_Recommended.zip
mkdir Veritas
cd Veritas
tar zxvf ../ sxrt5.0x64_x86_5.0x64a.dvd2.tar.gz



Installation

Partition
S0 / 2.4Gb
S1 swap 512mb

Install Solaris reduced network configuration .once system is booted with minimal Solaris add additional packages .most of these packages are available in Solaris 10 disk 2

Source Compatibility :SUNWscpr
SUNWscpu
Bash : SUNWbash
OD :SUNWtoo

SSH packages :SUNWsshcu
SUNWsshdr
SUNWsshdu
SUNWsshr
SUNWsshu

OD and Source campatibilty pakages are must,otherwise veritas installation will fail

Enable ssh
# svcadm enable ssh


Install Solaris 10 recommended patch cluster.


#mount 172.16.166.1: /home/downloads -o vers=3 /mnt

#cd 10_x86_Recommended
#./install_cluster
# init 6


Install Storage Foundation 5.0.

#mount 172.16.166.1: /home/downloads -o vers=3 /mnt
#cd /mnt/Veritas/cd storage_foundation_basic
#./installsf

After succefull installation of SF reboot the system
# init 6

Configure VVM


Encapsulate rootdisk
# vxdiskadm –option 2..

system requires reboot …

once encapsulation is over add second disk to rootdg



bash-3.00# vxdisk list
DEVICE TYPE DISK GROUP STATUS
c1t0d0s2 auto:sliced rootdg01 rootdg online
c1t1d0s2 auto:none - - online invalid
c1t2d0s2 auto:none - - online invalid
c1t3d0s2 auto:none - - online invalid
c1t4d0s2 auto:none - - online invalid
c2t0d0s2 auto:none - - online invalid
c2t1d0s2 auto:none - - online invalid
c2t2d0s2 auto:none - - online invalid
bash-3.00#

CDSDISk type will not be supported by this configuration so use

#/etc/vx/bin/vxdisksetup -i c1t1d0s cds=off
#vxdg –g rootdg adddisk rootmirror=c1t1d0s

#vxdiskadm -->use option 6 to mirror volume


bash-3.00# vxdisk list
DEVICE TYPE DISK GROUP STATUS
c1t0d0s2 auto:sliced rootdg01 rootdg online
c1t1d0s2 auto:sliced rootmirror rootdg online
c1t2d0s2 auto:none - - online invalid
c1t3d0s2 auto:none - - online invalid
c1t4d0s2 auto:none - - online invalid
c2t0d0s2 auto:none - - online invalid
c2t1d0s2 auto:none - - online invalid
c2t2d0s2 auto:none - - online invalid

VMware appliance
I have created a VMware appliance using above procedure
configuration for Virtul machine
Memory : 256Mb
OS Disk : 3GB * 2
other Disks: 1G * 6
Network : DHCP
root password : solaris

I have uploaded files to 4shared site
you need to down load all 9 zip files and extract .use winzip 11 for extract

http://www.4shared.com/dir/8310080/5cdfb5f2/Veritas.html

Script for Coverting IP to Hex

#!/usr/bin/bash
# Covert Ip addresses to HEX - For setting up TFP server#
# (c)dhanesh
#
echo "Enter IP address :"
read ip
ip=` echo $ip | sed 's/\./ /g'`
printf '%.2x%.2x%.2x%.2x\n' $ip | tr "[:lower:]" "[:upper:]"