Solaris

Here is a small note on how to enable date and timestamp in shell command history on a Solaris system. In some vendor implementations of ksh, the EXTENDED_HISTORY variable can be set. However, the Solaris ksh does not implement EXTENDED_HISTORY. There are no provisions for providing date or timestamps in the ksh history. Setting date and timestamp in bash shell command history If date and time are required, use bash and set the HISTTIMEFORMAT variable. For example: # export … [Read more...] about Solaris : How to include date and timestamp in bash shell command history

By default passwords do not expire on user accounts. If an expiration date has been added to an account and you wish to remove it, use the passwd command to change the maximum number of days between password changes to -1. This post describes how to turn off password aging when a maximum and possibly minimum value for password duration have been set. Turn off a value for password duration by setting the number of days to -1. Example: # passwd -d tom tom 10/29/99 0 14 # passwd -x -1 … [Read more...] about Solaris : How to configure a user account to never expire (disable password aging)

How to enable authentication logging via syslog of SSHD daemon 1. To log ssh authentication to the messages file, add the following entry to the /etc/syslog.conf file: auth.info /var/adm/messages NOTE: When editing /etc/syslog.conf, you must use tabs (not spaces) between the selector and action. 2. Restart the syslog daemon: In Solaris 10 and above: # svcadm restart svc:/system/system-log:default In Solaris 9 and below: # /etc/init.d/syslog stop # /etc/init.d/syslog start 3. … [Read more...] about How to log SSH login attempts to a file in Solaris

For security purposes, administrators may wish to disable telnet (incoming connections) on a Solaris 10 system. The post below is a short how-to on how to disable or enable telnet on Solaris 10. Disabling telnet on Solaris 10 1. Login into the system using ssh or rsh and check current telnet service status. # svcs -a | grep telnet online Sept_01 svc:/network/telnet:default # svcs -l svc:/network/telnet:default fmri svc:/network/telnet:default name Telnet … [Read more...] about How to enable or disable telnet in Solaris 10

By default when you install a fresh solaris 10 operating system, the root user does not have an ssh login access to the system. This is done for security purposes and it is a default setting. So if you want to login to your system as root user, you have to first login as a normal non-root user and then do a switch user (su -) to root user. To remove this restriction follow the steps shown below. 1. Please check the sshd configuration file /etc/ssh/sshd_config and make sure PermitRootLogin … [Read more...] about Solaris : How to enable ssh login for root user after a fresh install

The post discusses the steps to delegate the management of an SMF service to a non-root user. For example, a non-root user wants to manage the SMF service for tomcat. Follow the steps below to delegate tomcat service management to a non-root user. Delegate SMF management to non-root user 1. Add the following entry to file /etc/security/auth_attr solaris.smf.value.tomcat:::Value tomcat Service for user01:: solaris.smf.manage.tomcat:::Manage tomcat Service for user01:: 2. Add … [Read more...] about How to delegate SMF management to a non-root user in Solaris

Types of inactivity timeouts in Solaris There are 2 types of inactivity timeouts in Solaris. login session inactivity: This is before you log in and you are at the Login: prompt. shell session inactivity: This is after you login and the session is left unattended. This applies to only bash and ksh shells. How to avoid Inactivity Timeout in Solaris We will discuss here both types of inactivity timeouts and how you can extend them as per your needs. 1. Login session inactivity … [Read more...] about How to set inactivity timeouts for logins and shells in Solaris

Here is how you find out how many inodes are in the filesystem: 1. Add the numbers of used and free inodes. The df -i option is a ufs-specific option. # df -oi Filesystem iused ifree %iused Mounted on /dev/dsk/c0t0d0s5 2506 145590 2% /opt 2506 + 145590 = 148096 2. This closely corresponds to information found by other system commands. Find the number of kbytes in the filesystem: # df -k Filesystem kbytes used avail capacity Mounted … [Read more...] about Solaris : How to determine number of free/used inodes in a file system

It is not possible to dynamically increase the number of inodes on a UFS filesystem. If you need to increase the number of inodes you will need to build the filesystem afresh using newfs. Note that the newfs command will create a new filesystem on the slice you specify. This will destroy all data already on the slice. If you wish to access the data on the slice after running newfs you must back it up first, and restore after running the newfs command as described below. Increasing inodes … [Read more...] about Solaris : How to increase the Inodes on UFS file system with newfs command