Creating a Nameservice Domain Toolbox
Before you can create a nameservice domain toolbox, the following prerequisites must be met.
A system must be set up to run a nameservice.
The smattrpop(1M) command has been run to populate security attributes databases in a name service.
Appropriate 32 x 32 pixel and 16 x 16 pixel GIF icons are available to represent the toolbox in the SMC Console on the server where you create the toolbox.
You perform the following steps to create a nameservice domain toolbox.
Run the smattrpop command.
Create the nameservice domain toolbox.
Add the Users tool to the toolbox.
Save the toolbox.
The smattrpop Command
You use the smattrpop command to copy the information from a set of source RBAC (role-based access control) databases—auth_attr(4), exec_attr(4), prof_attr(4), and user_attr(4)—and merge each source entry field into the corresponding table entry in a target database. For example, before you create a nameservice domain toolbox, you must copy the information from the file databases to the nis or nisplus databases. If the source entry does not exist, the smattrpop command creates it. If the source entry exists in the target database, the fields are merged or replaced according to the specified command options.
The syntax for the smattrpop command used in the following example is shown below.
smattrpop -s type:/server/domain -t type:/server/domain database
The values for type are shown below.
|
Type |
Description |
|
file |
Local files. |
|
nis |
NIS nameservice. |
|
nisplus |
NIS+ nameservice. |
|
ldap |
LDAP nameservice. |
server is the name of the server and domain is the name of the domain.
The values for database are shown below.
|
Type |
Description |
|
auth_attr |
Processes the auth_attr database. |
|
prof_attr |
Processes the prof_attr database. |
|
exec_attr |
Processes the exec_attr database. |
|
user_attr |
Processes the user_attr database. |
|
all |
Processes all databases in the order shown above. |
Refer to "smattrpop" on page 238 or the smattrpop(1M) manual page for the complete syntax.
The following example uses the RBAC databases from file on the server mopoke to populate the nisplus tables on the server mopoke in the wellard.com. domain for all of the databases.
mopoke# /usr/sadm/bin/smattrpop -s file:/mopoke -t
nisplus:/mopoke/wellard.com. all
Populating the auth_attr table...
Read 67 source entries; updated 67 target entries.
Populating the prof_attr table...
Read 28 source entries; updated 28 target entries.
Populating the exec_attr table...
Read 204 source entries; updated 204 target entries.
Populating the user_attr table...
Read 1 source entries; updated 0 target entries.
mopoke#
New Toolbox for the Nameservice Domain
Use the following steps to create the new toolbox for the nameservice domain.
If necessary, start the SMC Editor.
Refer to "Starting the SMC Toolbox Editor" on page 33 for instructions on how to start the SMC Editor.
From the toolbox, choose New.
The Name and Description step of the New Toolbox wizard is displayed, as shown in Figure 52.
Figure 52 New Toolbox Wizard
Type a toolbox name in the Full Name text field.
This name is displayed in parentheses following the word Toolbox in the Navigation pane tree and in the Console header if you open the toolbox from the Console.
Type a description in the Description text field and click on Next.
Use the description to explain the contents and use of the toolbox.
In the Icons step, path and file names for the default icons are displayed. Click on Next to use the default icons or click on Browse to navigate to the appropriate folder and select GIF images.
These icons are used to represent the toolbox in the Console.
Select a management scope from the pulldown menu.
You can choose ldap, dns, nisplus, nis, or file. The Users tool currently supports only nisplus, nis, or file.
Type the domain name in the Domain field. If the management scope is nisplus, you do not need to include the trailing dot after the domain name.
If you choose file as the management scope, you do not need to specify a domain name. Otherwise, enter the name of the domain to be managed—for example, wellard.com.
Click on Finish.
The full name of the new toolbox is displayed in parentheses in the window title of the SMC Editor in the Navigation pane.
){kind=link}
The Users Tool
After you create the nameservice domain toolbox, add the Users tool to that toolbox so that you can administer user accounts within that domain. Use the following step to add the Users tool to the domain toolbox.
In the Navigation pane of the SMC Editor, select the toolbox you just created.
From the Action menu, choose Add Tool.
The first step of the Tool wizard is displayed, as shown in Figure 53.
Figure 53 Tool Wizard
Type the name of the server from which you plan to run the Users tool and click on Next.
If the server can be found and the SMC server is running on it, a list of tool class names is displayed in the Tools field.
From the list of tools, click on the Users tool.
If the SMC server is not running on the selected server or if the Users tool is not displayed in the list of tools, type the name of the users tool in the Tool Class Name field and press Return. Type com.sun.admin.usermgr.client.VUserMgr and press Return. Then click on Next.
Click on Next to use the default name and description.
To override the tool defaults, click on Override Tool Settings, type a new full name and description, and click on Next.
Click on Next to use the default icons.
To override the default icons, click on Override Tool Settings, type the path to a new large and small icon, and click on Next.
Click on Next to inherit the management scope from the parent tool.
To override the default management scope, click on Override Toolbox Settings, choose a new management scope, server, and domain, and click on Next.
Click on Next to load the tool when selected.
Click on Load tool when toolbox is opened. Note that these settings can be overridden by Console preference settings.
Click on Finish.
A generic tool is displayed in the SMC editor below the new toolbox item in the Navigation pane. The Users tool class name is displayed in parentheses after the word Tool.
){kind=link}
Save the Toolbox
Use the following steps to save the new toolbox.
From the Toolbox menu, choose Save As.
The Local Toolbox save window is displayed, as shown in Figure 54.
Figure 54 Local Toolbox Save Window
Navigate to the /var/sadm/smc/toolboxes directory.
Type the name you want to use for this toolbox in the Filename text field and then click on Save.
You do not need to add the .tbx suffix. The wizard automatically adds the suffix to the file name you specify. If you do add a .tbx suffix to the file name, it is ignored.
The changes to the toolbox are saved and the wizard is closed.
){kind=link}