Copy rsakey to /etc/ssh/sshhostrsakey | Sun Microsystems V20Z, V40z

If the login is authorized through a mapping of a directory-service group, the ssh command is executed as the proxy user on the SP, either rmonitor, radmin or rmanager.

Support is available for SSH protocol version 2 key types (RSA or DSA) only.

If DNS is enabled on the SP, the client machine must be specified with its DNS name, (and not the IP address).

Generating Host Keys

The host’s ssh install should generate the host keys. If it does not, follow these steps to manually generate the key pair:

1.Enter the following command:

ssh-keygen -q -t rsa -f rsa_key -C '' -N ''

2.Copy rsa_key to /etc/ssh/ssh_host_rsa_key.

3.Ensure that only root has read or write permission to this file. The rsa_key.pub file is the file you will transfer to the SP.

Note – Only protocol version 2 key types and 1024 bit key sizes (the default generated by ssh-keygen) are supported.

4.Copy the host’s public key (the rsa_key.pub file) to the SP using scp (secure copy) or by copying the host key to an external file system that has been mounted on the SP.

Note – Use scp to copy the files to either /tmp or to your home directory. The sp commands will then install the file specified on the command line to /pstore.

Note – If DNS is enabled on the SP, you must specify the client that is used in the trust commands with its DNS name (and not the IP address).

92 Sun Fire V20z and Sun Fire V40z Servers, Server Management Guide • May, 2004

Image 114

Sun Microsystems V20Z, V40z manual Copy rsakey to /etc/ssh/sshhostrsakey

Contents

Sun Microsystems, Inc Please Recycle Contents Ipmi Server Management Configuring Scripting Capabilities Using Shell Scripts Snmp Server ManagementFurther Management Information Server Management Commands Summary Lilo Commands Return Codes Access CommandsPage Diagnostics Commands Ipmi Commands Inventory CommandsInventory Compare Versions Subcommand Format Return Codes Platform Commands Sensor Commands Service Processor Commands 161 Contents Page Contents Page Contents Page Preface How This Book Is Organized Related Documentation Contacting Sun Technical Support Accessing Sun DocumentationThird-Party Web Sites Sun Welcomes Your CommentsPage Introduction Overview Acronyms 1defines the acronyms found in this documentAcronyms Service Processor Server ManagementServer-Management Interfaces Command Line Interface Snmp Integration Server Operator Panel 2Sun Fire V20z Server Operator Panel and Buttons 2Operator Panel Buttons User Groups User Types Initial Setup of the Service Processor Part I Assigning Network Settings to the SPAssigning SP Network Settings Using Dhcp Press the Select button to display the SP menu options Following prompt appears with the default responsePress the Forward button until you reach the SP menu Press the Select button Assigning Static SP Network Settings This field can hold a value between 0 SP address is now configured and the server is ready for use LCD displays the following confirmation prompt Part II Securing the Service Processor Creating the Initial Manager Account Enabling Ipmi Access on the Server Enabling Ipmi Access on a Linux-Based Server In-Band Install the openIPMI RPM file by running the command Install IPMItoolSuccessful output should look similar to the following Enabling Ipmi Access on a Solaris-Based x86 Server In-Band Confirm installation of all packages when promptedReboot the server Enabling Ipmi LAN Access Enabling Ipmi LAN Access on a Linux-Based Server In-BandUsing IPMItool, configure the network setting for the SP Alternate Method for Enabling Ipmi LAN Access Out-of- Band Enable Ipmi LAN access and assign a password when promptedUsing IPMItool, test the Ipmi LAN access Recompile the module by running the following commands Upgrading the Linux Kernel Daisy-Chaining the Servers 5Daisy Chain Architecture Site Integration Updating the SP SoftwareLCD displays the first menu option Press Select or Enter to display the SP menu’s options Log in to the SP by running the following command Updating the Service Processor Base ComponentTo update the SP base component Run the sp command to start the update process on the SP Autoconfiguring the SP Optional Method Following message displays when autoconfiguration is running Determining SP and Platform Network MAC AddressesPage Ipmi Server Management Baseboard Management Controller Manageability Ipmi Compliance and LAN Channel Access Usernames and Passwords Further Information Lights Out Management LOMDescription Syntax Options 1lists the options available for IPMItool1Options for IPMItool Expressions 2Expressions and Parameters for IPMItool 1 2Expressions and Parameters for IPMItool 2 Interval 2Expressions and Parameters for IPMItool 3 Parameter 2Expressions and Parameters for IPMItool 4 Type Ipmi Linux Kernel Device Driver LAN Interface for the BMC Files Result returned is Viewing the Ipmi System Event Log Clearing the Ipmi System Event Log Ipmi Troubleshooting 3IPMI TroubleshootingPage Snmp Server Management Simple Network Management Protocol Snmp Integration Snmp Management Information Base MIB Sun Fire V20z and Sun Fire V40z Servers MIB Tree Integrating MIBs with Third-Party Consoles Configuring Snmp on Your Server 2SNMP Architecture and Communications Snmp Agent on the Service Processor Proxy Agent Setting the Community Name Agent Using a Third-Party MIB Browser Setting Logging OptionsSnmp standard tree displays in the MIB Browser Snmp Traps 1Server Event Traps Configuring Snmp Destinations Configuring Snmp Trap Destinations2Subcommands for Configuring Snmp Destinations Server MIB Details Events listed in -4are sent to the Snmp destination by SP-EVENT-MIB.mib SP Events 2 Enterprise Trap ID Snmp Troubleshooting 5SNMP TroubleshootingPage Configuring Scripting Capabilities Further Management Information Using Shell Scripts Remote Scripting Using SSH Configuring Multiple Systems for Scripting Enter the following commandGenerating Host Keys Creating Trusted Host Relationships Adding Public Keys Set up your host keys by executing the following command Enabling SSH Access Using Trusted HostsExecute the following command Enable access for clients by launching a Bash shell Enabling SSH Access Using Public Keys Enter your password when prompted Guidelines for Writing Server Management Command Scripts Command Output Other Tips For Best Results Console Redirection Over Serial on a Linux-based Server Grub Lilo Getty SecurettyList of gettys currently looks like the following Enabling and Configuring Bios Console Redirection Network Share Volume NSV CD-ROM Network Share Volume Structure1Network Share Volume Compressed Packages 2Extracted Files on the Network Share Volume To enable the feature, run the following command Enabling or Disabling the SOL Feature on the ServerYou can enable or disable the SOL feature through the SP Serial Over LAN Press Control-E Press the C key Press the period key Launching an SOL SessionTerminating an SOL Session Press Enter Press the tilde key ~ Press the period keyPage Server Management Commands Summary Interactive Shell on the SP Using the ssh ProtocolPreface each command with the following text Preface Text Commands Table A-1Server Management Commands Return Codes Table A-2Return Codes Table A-2Return Codes Page Access Commands Table B-1Access Subcommand Groups Format Access Groups SubcommandsAccess Get Group Subcommand Return Codes Access Get Groups Subcommand Table B-4lists the return codes for this subcommandTable B-4Return Codes for Subcommand access get groups Table B-6lists the arguments for this subcommand Access Map SubcommandsAccess Get Map Subcommand Table B-6Arguments for Subcommand access get map Table B-8lists the arguments for this subcommand Access Map SubcommandTable B-7lists the return codes for this subcommand Table B-7Return Codes for Subcommand access get map Table B-10lists the arguments for this subcommand Access Unmap SubcommandTable B-9lists the return codes for this subcommand Table B-9Return Codes for Subcommand access map Table B-11lists the return codes for this subcommand Table B-11Return Codes for Subcommand access unmap Table B-13lists the argument for this subcommand Access Directory Services SubcommandsAccess Disable Service Subcommand Table B-13Argument for Subcommand access disable service Access Enable Service Subcommand Table B-14lists the return codes for this subcommand Table B-15Arguments for Subcommand access enable service Table B-15lists the arguments for this subcommandTable B-16lists the return codes for this subcommand Table B-16Return Codes for Subcommand access enable service Access Get Services Subcommand Table B-17Arguments for Subcommand access get services Table B-18lists the return codes for this subcommand Table B-18Return Codes for Subcommand access get services Table B-20lists the arguments for this subcommand Access Trust SubcommandsAccess Add Trust Subcommand Table B-20Arguments for Subcommand access add trust Copy rsakey to /etc/ssh/sshhostrsakey Table B-22lists the arguments for this subcommand Access Delete Trust SubcommandTable B-21lists the return codes for this subcommand Table B-21Return Codes for Subcommand access add trust Access Get Trusts Subcommand Table B-23lists the return codes for this subcommandTable B-23Return Codes for Subcommand access delete trust Table B-24lists the return codes for this subcommand Table B-24Return Codes for Subcommand access get trusts Table B-26lists the arguments for this subcommand Access Public Key SubcommandsAccess Add Public Key Subcommand Table B-25Access Public Key Subcommands Access Get Public Key Users Subcommand Table B-27lists the return codes for this subcommandTable B-27Return Codes for Subcommand access add public key Table B-29lists the arguments for this subcommand Access Delete Public Key SubcommandTable B-28lists the return codes for this subcommand Table B-29Arguments for Subcommand access delete public key Table B-30lists the return codes for this subcommand Table B-32lists the arguments for this subcommand Access User SubcommandsAccess Add User Subcommand Table B-32Arguments for Subcommand access add user Table B-33Return Codes for Subcommand access add user Access Delete User SubcommandTable B-33lists the return codes for this subcommand Description Deletes a user Table B-34Arguments for Subcommand access delete user Table B-34lists the arguments for this subcommandTable B-35lists the return codes for this subcommand Table B-35Return Codes for Subcommand access delete user Table B-37lists the return codes for this subcommand Access Get Users SubcommandTable B-36lists the arguments for this subcommand Table B-36Arguments for Subcommand access get users Table B-38lists the arguments for this subcommand Access Update Password SubcommandDescription Changes the password of an existing user Table B-39lists the return codes for this subcommand Access Update User Subcommand Table B-40lists the arguments for this subcommandTable B-40Arguments for Subcommand access update user Table B-40lists the return codes for this subcommand Table B-41Return Codes for Subcommand access update user Diagnostics Commands Table C-1Diagnostics Subcommand Groups Diags Cancel Tests Subcommand Table C-2lists the arguments for this subcommandTable C-2Arguments for Subcommand diags cancel tests Table C-3lists the return codes for this subcommand Table C-3Return Codes for Subcommand diags cancel tests Diags Get State Subcommand Table C-4lists the return codes for this subcommandTable C-4Return Codes for Subcommand diags get state Table C-6lists the return codes for this subcommand Diags Get Tests SubcommandTable C-5lists the arguments for this subcommand Table C-5Arguments for Subcommand diags get tests Diags Run Tests Subcommand Table C-7lists the arguments for this subcommandTable C-7Arguments for Subcommand diags run tests Table C-8lists the return codes for this subcommand Table C-8Return Codes for Subcommand diags run tests Diags Start Subcommand Table C-9lists the return codes for this subcommandTable C-9Return Codes for Subcommand diags start Invalid operation for current state Diags Terminate Subcommand Table C-10lists the return codes for this subcommandTable C-10Return Codes for Subcommand diags terminate Inventory Commands Table D-1Inventory Subcommands Groups Inventory Compare Versions Subcommand Table D-2lists the arguments for this subcommand Table D-4lists the arguments for this subcommand Inventory Get Hardware SubcommandTable D-3lists the return codes for this subcommand Table D-4Arguments for Subcommand inventory get hardware Table D-5lists the return codes for this subcommand Table D-5Return Codes for Subcommand inventory get hardwareReturn Codes Table D-7lists the return codes for this subcommand Inventory Get Software SubcommandTable D-6lists the arguments for this subcommand Table D-6Arguments for Subcommand inventory get software Table D-9lists the return codes for this subcommand Inventory Get All SubcommandTable D-8lists the arguments for this subcommand Table D-8Arguments for Subcommand inventory get all Ipmi Commands Table E-1IPMI Subommands Groups Table E-2lists the arguments for this subcommand Ipmi Disable Channel SubcommandDescription Allows you to disable one of two Ipmi channels Table E-3lists the arguments for this subcommand Table E-4lists the arguments for this subcommand Ipmi Enable Channel SubcommandDescription Allows you to enable one of two Ipmi channels Table E-5lists the return codes for this subcommand Ipmi Get Channels Subcommand Table E-6lists the return codes for this subcommandTable E-6Return Codes for Subcommand ipmi get channels Ipmi Disable PEF Subcommand Table E-7lists the return codes for this subcommandTable E-7Return Codes for Subcommand ipmi disable pef Ipmi Enable PEF Subcommand Table E-8lists the return codes for this subcommandTable E-8Return Codes for Subcommand ipmi enable pef Ipmi Get Global Enables Subcommand Table E-9lists the return codes for this subcommand Ipmi Set Global Enable Subcommand Table E-10Arguments for Subcommand ipmi set global enableTable E-11Information about the aliases Table E-12lists the return codes for this subcommand Table E-12Return Codes for Subcommand ipmi set global enable Table E-14lists the return codes for this subcommand Ipmi Reset SubcommandTable E-13lists the arguments for this subcommand Table E-13Arguments for Subcommand ipmi reset Platform Commands Table F-1Platform Subcommand Groups Platform Console Subcommands Platform Console Subcommand Table F-3Common COM1 Values Table F-4Common Values for Console RedirectionTable F-5Serial-Console Values Ecl0 Table F-6lists the return codes for this subcommand Check or set the Bios settings Run the commandRun the command platform set console Table F-6Return Codes for Subcommand platform console Platform Get Console Subcommand Following output displays when successfulTable F-8Supplementary Output Table F-9lists the return codes for this subcommand Table F-9Return Codes for Subcommand platform get console Table F-10Arguments for Subcommand platform set console Platform Set Console Table F-11lists the return codes for this subcommand Table F-11Return Codes for Subcommand platform set console Platform OS State Subcommands Platform Get OS State SubcommandDescription Retrieves the current state of the platform OS Table F-13lists the return codes for this subcommand Table F-13Return codes for Subcommand platform get os state Platform Set OS State Subcommand Table F-14lists the arguments for this subcommandTable F-14Arguments for Subcommand platform set os state Platform Set OS State Boot Subcommand Table F-15lists the return codes for this subcommandTable F-15Return Codes for Subcommand platform set os state Table F-16lists the arguments for this subcommand Table F-17lists the return codes for this subcommand Platform Power State Subcommands Platform Get Power State Subcommand Platform Set Power State Subcommand Table F-19lists the return codes for this subcommand Table F-20lists the arguments for this subcommand Table F-21lists the return codes for this subcommandTable F-20Arguments for Subcommand platform set power state Table F-23lists the return codes for this subcommand Platform Get Hostname SubcommandTable F-22lists the argument for this subcommand Table F-22Argument for Subcommand platform get hostname Platform Get Product ID Subcommand Table F-24lists the return codes for this subcommandDescription Displays the product ID for the current system Page Sensor Commands Table G-1Sensor Subcommand Groups Sensor Get Subcommand Table G-2lists the arguments for this subcommand Table G-2Arguments for Subcommand sensor get Table G-3lists the arguments for this subcommand Table G-3Return Codes for Subcommand sensor get Appendix G Sensor Commands Sensor Set Subcommand Table G-4lists the arguments for this subcommandTable G-4Arguments for Subcommand sensor set Table G-5lists the arguments for this subcommand Table G-5Return Codes for Subcommand sensor setPage Service Processor Commands Table H-1Service Processor Subcommand Groups Subcommands in Table H-2manage the date and time on the SP SP Date SubcommandsSP Get Date Subcommand Table H-2SP Date Subcommands Table H-4lists the argument for this subcommand SP Set Date SubcommandTable H-3lists the return codes for this subcommand Description Sets the date and time on the SP RTC Table H-5lists the return codes for this command Table H-5Return Codes for Subcommand sp set date Description Disables the DNS configuration on the SP SP DNS SubcommandsSP Disable DNS Subcommand Table H-7lists the return codes for this command Table H-9lists the return codes for this subcommand SP Enable DNS SubcommandTable H-8lists the arguments for this subcommand Table H-8Arguments for Subcommand sp enable dns Table H-11lists the return codes for this subcommand SP Get DNS SubcommandTable H-10lists the arguments for this subcommand Table H-10Arguments for Subcommand sp get dns Subcommands in Table H-12manage events on the SP SP Events SubcommandsSP Delete Event Subcommand Description Clears an existing event using the event ID SP Get Events Subcommand Table H-14lists the return codes for this subcommandTable H-14Return Codes for Subcommand sp delete event Table H-15Arguments for Subcommand sp get events Table H-15lists the arguments for this subcommandTable H-16lists the return codes for this subcommand Table H-16Return Codes for Subcommand sp get events Subcommands in Table H-17manage the SP host and domain SP Hostname SubcommandsSP Get Hostname Subcommand Table H-18lists the argument for this subcommand Table H-20lists the argument for this subcommand SP Set Hostname SubcommandTable H-19lists the return codes for this subcommand Table H-19Return Codes for Subcommand sp get hostname Table H-21lists the return codes for this subcommand Table H-21Return Codes for Subcommand sp set hostname Table H-23lists the arguments for this subcommand SP IP SubcommandsSP Get IP Subcommand IP Subcommands Description Sets or modifies the SP network configuration SP Set IP SubcommandTable H-24lists the arguments for this subcommand Table H-24Return Codes for Subcommand sp get ip Table H-25Arguments for Subcommand sp set ip Table H-25lists the arguments for this subcommandTable H-26lists the return codes for this subcommand Table H-26Return Codes for Subcommand sp set ip Table H-28lists the arguments for this subcommand SP Jnet Address SubcommandsSP Get Jnet Subcommand Jnet Subcommands SP Set Jnet Subcommand Table H-29lists the return codes for this subcommandTable H-29Return Codes for Subcommand sp get jnet Table H-30Arguments for Subcommand sp set jnet Table H-30lists the arguments for this subcommandTable H-31lists the return codes for this subcommand Table H-31Return Codes for Subcommand sp set jnet Subcommands in Table H-32manage the locatelight switch SP Locate Light SubcommandsSP Get Locatelight Subcommand Table H-33lists the return codes for this subcommand SP Set Locatelight Subcommand Table H-34lists the return codes for this subcommandTable H-34Return Codes for Subcommand sp set locatelight Subcommands in Table H-35manage the SP log files SP Logfile SubcommandsSP Get Logfile Subcommand Description Retrieves the event log file configuration Table H-37Return Codes for Subcommand sp get logfile SP Set Logfile SubcommandTable H-37lists the return codes for this subcommand Table H-38Arguments for Subcommand sp set logfile Table H-39lists the arguments for this subcommand Table H-39Return Codes for Subcommand sp set logfile Subcommands in Table H-40manage miscellaneous SP functions SP Miscellaneous SubcommandsSP Create Test Events Subcommand Table H-40Miscellaneous SP Subcommands Table H-42lists the arguments for this subcommand SP Get Port 80 SubcommandTable H-41lists the return codes for this command Table H-41Return Codes for Subcommand sp create test events Table H-44lists the Post codes for the Phoenix Bios Bios Post CodesTable H-43lists the return codes for this subcommand Table H-43Return Codes for Subcommand sp get port80 Table H-44BIOS Post Codes Table H-44BIOS Post Codes Table H-44BIOS Post Codes Enable hardware interrupts Boot Block Codes for Flash ROM Table H-45lists the boot block codes in Flash ROMTable H-45Boot Block Codes in Flash ROM SP Load Settings Subcommand Table H-46lists the arguments for this subcommandTable H-46Arguments for Subcommand sp load settings Table H-48lists the arguments for this subcommand SP Get Status SubcommandTable H-47lists the return codes for this subcommand Description Returns the status of the overall system SP Get TDULog Subcommand Table H-49lists the return codes for this subcommandTable H-49Return Codes for Subcommand sp get status Table H-50lists the arguments for this subcommand Table H-50Arguments for Subcommand sp get tdulog Table H-53lists the argument for this command SP Reboot SubcommandTable H-52lists the return codes for this subcommand Table H-52Return Codes for Subcommand sp get tdulog SP Reset Subcommand Table H-54lists the return codes for this commandTable H-54Return Codes for Subcommand sp reboot Table H-55lists the arguments for this command Table H-55Arguments for Subcommand sp reset Table H-56list the return codes for this command Table H-56Return Codes for Subcommand sp reset Subcommands in Table H-57manage the SP mount points SP Mount SubcommandsSP Add Mount Subcommand Description Creates or resets a mount point Table H-59lists the return codes for this subcommand Table H-59Return Codes for Subcommand sp add mount SP Delete Mount Table H-60lists the arguments for this subcommandTable H-61lists the return codes for this subcommand Description Deletes a mount point Table H-63lists the return codes for this subcommand SP Get Mount SubcommandTable H-62lists the arguments for this subcommand Description Displays the current mount points on the SP SP Smtp Subcommands SP Get Smtp Server SubcommandSubcommands in Table H-64manage Smtp communications Table H-65Arguments for Subcommand sp get smtp server Table H-65lists the arguments for this subcommandTable H-66lists the return codes for this subcommand Table H-66Return Codes for Subcommand sp get smtp server Table H-68lists the return codes for this subcommand SP Set Smtp Server SubcommandTable H-67lists the arguments for this subcommand Table H-67Arguments for Subcommand sp set smtp server SP Get Smtp Subscribers Subcommand Table H-69Arguments for Subcommand sp get smtp sebscribersTable H-70Default Smtp Subscribers SP Update Smtp Subscriber Subcommand Table H-71lists the return codes for this subcommand Table H-72Arguments for Subcommand sp update smtp subscriber Table H-73Default Smtp Subscribers Table H-74lists the return codes for this command SP Snmp Subcommands SP Add Snmp Destination SubcommandSubcommands in Table H-75manage Snmp communications Table H-76lists the argument for this subcommand Table H-77lists the return codes for this subcommandTable H-76Argument for Subcommand sp add snmp-destination SP Delete Snmp Destination Subcommand Table H-78lists the arguments for this subcommandTable H-79lists the return codes for this subcommand SP Get Snmp Destinations Subcommand Table H-80lists the return codes for this subcommand SP Get Snmp Proxy Community Subcommand SP Set Snmp Proxy Community SubcommandTable H-81lists the return codes for this subcommand Table H-82lists the argument for this subcommand Table H-83lists the return codes for this subcommand Subcommands in Table H-84manage SSL capabilities SP SSL SubcommandsSP Disable SSL-Required Subcommand Table H-85lists the return codes for this command SP Enable SSL-Required Subcommand Table H-86lists the return codes for this command Table H-88lists the return codes for this subcommand SP Get SSL SubcommandTable H-87lists the arguments for this subcommand Table H-87Arguments for Subcommand sp get ssl Table H-90lists the return codes for this subcommand SP Set SSL SubcommandTable H-89lists the arguments for this subcommand Table H-89Arguments for Subcommand sp set ssl SP Update Subcommands SP Update Flash All SubcommandSubcommands in Table H-91manage the SP flash Table H-92Arguments for Subcommand sp update flash all Table H-92lists the arguments for this subcommandTable H-93lists the return codes for this subcommand Table H-93Return Codes for Subcommand sp update flash all SP Update Flash Applications Subcommand Table H-94lists the arguments for this subcommandTable H-95lists the return codes for this subcommand Table H-97lists the return codes for this subcommand SP Update Flash PIC SubcommandTable H-96lists the arguments for this subcommand Table H-96Arguments for Subcommand sp update flash pic Table H-99lists the return codes for this subcommand SP Update Diags SubcommandTable H-98lists the argument for this subcommand Table H-98Argument for Subcommand sp update diags Index Page Index Page Index