Trusted Solaris Administrator's Procedures

To Launch the Solaris Management Console

The first time on a system that you launch the Solaris Management Console and click the Load button, a delay occurs while the tools are registered and the /var/sadm/smc/ directory and its subdirectories are created. This delay typically occurs during system configuration.

When a name service is being used, the toolbox with the appropriate scope (either NIS or NIS+) must be edited on the name service master. See "Edit SMC Toolbox Definition for the Name Service" in Trusted Solaris Installation and Configuration for how to edit the toolbox.

You also edit the name service toolbox on the clients when you want to be able to modify the NIS maps or NIS+ tables from the client. The procedure "(Optional) Copy the SMC Name Server Toolbox Definition to the Client" in Trusted Solaris Installation and Configuration describes how to copy the name service master's toolbox definition to each client.


Note -

Name services support centralized administration of all user, host, and network information, which is important for both user accountability and trusted administration. Administering users and hosts locally is not as secure. There may be special circumstances where a knowledgeable security administrator decides that local accounts are both needed and permissible within your organization's security policy--even though they can make the system harder to protect and to maintain.


  1. Assume a role that is configured to use the Solaris Management Console (SMC) and launch the tool in an administrative role workspace at ADMIN_LOW in one of the following ways:

    • From the Tools subpanel on the Front Panel, choose the Solaris Management Console option.

    • Click the Applications icon on the Applications subpanel of the Front Panel, then double-click the Solaris Management Console icon.

    • Invoke the smc command in a terminal.

    • From the Workspace Menu->Tools submenu, choose the Solaris Management Console option.

  2. Select a name from the Server list, or type the name of the computer in the Server field, and then click the Load button.

    The term server in this context is used to refer to a computer where the SMC server software is running.

    The names of any SMC toolboxes on the specified server are loaded into the Toolboxes field.

  3. Select the Trusted Solaris Management Console.

  4. From the list, choose a Trusted Solaris toolbox of the appropriate scope.

    The name of each toolbox starts with the name of the host where the SMC server software is running followed by one of three different scopes (Files, NIS, or NIS+), and then by a policy assignment. For example, the following shows the toolbox with the Files scope and the TSOL Policy for the Server eagle:


    eagle: Scope=Files, Policy=TSOL

    Note -

    When you are working in a Trusted Solaris environment, make sure that the Policy=TSOL on the toolbox you select. Only if you were administering a Trusted Solaris system remotely from a Solaris host would you select a toolbox whose Policy=SUSER. If no policy is specified in the toolbox name, the default is SUSER.


    Scope Name 

    Updates 

    Files 

    Local files on the current computer. 

    NIS 

    NIS maps on the NIS name server for a NIS client host. 

    NIS+ 

    NIS+ tables on the NIS+ name server for a NIS+ client host. 


    Note -

    If you are on a name service client, the name service scope works only if you have edited the toolbox files correctly on the client.


  5. (Optional) Save the current toolbox to save reloading time:

    1. Choose Console->Preferences.

    2. On the Console tab, click the Use Current Toolbox button.

    3. Click OK.

  6. Click the desired SMC tool.

    In a name service scope, click Trusted Solaris Configuration to see the "Users" and "Computers and Networks" tools.

    In a files scope, click Trusted Solaris Configuration to see the "Users", "Computers and Networks", and "Interface Manager" tools.

  7. Type the role's password when prompted.

    See other chapters in this guide for how to use the Users, Interface Manager, and Computers and Networks tools. Refer to the online help for additional information about the above-named tools and all other SMC tools.

  8. When done, choose Exit from the Console menu.