This procedure enables you to use the command line and the txzonemgr GUI to administer a headless system as superuser or as a role.
Remote login by using the rlogin command is less secure than remote login by using the ssh command.
To use the Solaris Management Console to administer a remote system does not require you to use a remote login command. For the procedure, see How to Remotely Administer Systems by Using the Solaris Management Console From a Trusted Extensions System.
You have completed Enable Remote Login by a Role in Trusted Extensions.
You are a user who is enabled to log in to the headless system with that same user name and user ID, and you can assume the same role on the headless system that you can assume on the desktop system.
On the desktop system, enable processes from the headless system to display.
desktop $ xhost + headless-host desktop $ echo $DISPLAY :n.n |
Ensure that you are the user who is identically defined on both systems.
From a terminal window, remotely log in to the headless system.
Assume the role that is defined identically on both systems.
Use the same terminal window. For example, assume the root role.
headless $ su - root Password: Type the root password |
You are now in the global zone. You can now use this terminal to administer the headless system from the command line.
Enable processes on the headless system to display on the desktop system.
You can also display remote GUIs by logging in with the ssh -X command. For more information, see the ssh(1) man page. For an example, see Example 6–2.
headless $ DISPLAY desktop:n.n headless $ export DISPLAY=n:n |
You can now administer the headless system by using Trusted Extensions GUIs. For example, start the txzonemgr GUI:
headless $ /usr/sbin/txzonemgr |
The Labeled Zone Manager runs on the remote system and displays on the desktop system.
In this example, the administrator uses the txzonemgr GUI to configure labeled zones on a labeled headless system from a labeled desktop system. As in the Solaris OS, the administrator enables X server access to the desktop system by using the -X option to the ssh command. The user install1 is defined identically on both systems, and can assume the role remoterole.
TXdesk1 $ xhost + TXnohead4 TXdesk1 $ whoami install1 |
TXdesk1 $ ssh -X -l install1 TXnohead4 Password: Ins1PwD1 TXnohead4 $ |
To reach the global zone, the administrator assumes the role remoterole. This role is defined identically on both systems.
TXnohead4 # su - remoterole Password: abcd1EFG |
Then, the administrator starts the txzonemgr GUI.
TXnohead4 $ /usr/sbin/txzonemgr & |
The Labeled Zone Manager runs on the headless system and displays on the desktop system.