man pages section 1M: System Administration Commands

smc(1M)

NAME

smc- start the Solaris Management Console (SMC)

SYNOPSIS

smc

subcommand

args

smc

subcommand

args

-T

tool_name

--

tool_args

DESCRIPTION

The smc command starts the Solaris Management Console (SMC). The SMC is a graphical user interface that provides access to Solaris system administration tools. It relies on SMC servers running on one or more computers to perform modifications and report data. Each of these servers is a repository for code which the console can retrieve after the user of the console has authenticated himself or herself to the server.

The console can also retrieve toolboxes from the server. These toolboxes are descriptions of organized collections of tools available on that and possibly other servers. Once one of these toolboxes is loaded, the console will display it and the tools referenced in it.

The console can also run in a terminal (non-graphically), for use over remote connections or non-interactively from a script.

For information on the use of the graphical console, and for more detailed explanations of authentication, tools, and toolboxes, please refer to the SMC online help available under the "Help" menu in the SMC console.

`subcommands`

smc subcommands are:

open: The default subcommand for the SMC is open. This will launch the console and allow you to run tools from the toolboxes you load. It does not need to be specified explicitly on the command line.
edit: The edit subcommand will also launch the console, like the open subcommand. However, after loading a toolbox, you will not be able to run the referenced tools. Instead, you will be able to edit that toolbox, that is, add, remove, or modify any tools or folders in that toolbox.

OPTIONS

The following options are supported. These letter options can also be specified by their equivalent option words preceded by a double dash. For example, you can use either -D or --domain with the domain argument.

If tool_args are specified, they must be preceded by the -- option and separated from the double dashes by a space.

--auth-data file

Specifies a file which the console can read to collect authentication data. When running the SMC non-interactively, the console will still need to authenticate itself with the server to retrieve tools. This data can either be passed on the command line using the -u, -p, -r, and -l options (which is insecure, because any user can see this data), or it can be placed in a file for the console to read. For security reasons, this file should be readable only by the user running the console, although the console does not enforce this restriction.

The format of file is:

hostname=host name
username=user name
password=password for user name
rolename=role name
rolepassword=password for role name

Only one set of hostname-username-password-rolename-rolepassword may be specified in any one file. If the rolename is not specified, no role will be assumed.

-B | --toolbox toolbox

Loads the specified toolbox. toolbox can be either a fully-qualified URL or a filename. If you specify an HTTP URL as, for example,

http://host_name:port/. . .

it must point to a host_name and port on which an SMC server is running. If you omit port, the default port, 898, is used. This option overrides the -H option.

-D | --domain domain

Specifies the default domain that you want to manage. The syntax of domain is type:/host_name/domain_name, where type is nis, nisplus, dns, ldap, or file; host_name is the name of the machine that serves the domain; and domain_name is the name of the domain you want to manage. (Note: Do not use nis+ for nisplus.) This option applies only to a single tool run in the terminal console.

If you do not specify this option, the SMC assumes the file default domain on whatever server you choose to manage, meaning that changes are local to the server. Toolboxes can change the domain on a tool-by-tool basis; this option specifies the domain for all other tools.

-h | --help

Prints a usage statement about the smc command and its subcommands to the terminal window. To print a usage statement for one of the subcommands, enter -h after the subcommand.

-H | --hostname host_name:port

Specifies the host_name and port to which you want to connect. If you do not specify a port, the system connects to the default port, 898. If you do not specify host_name:port, the SMC connects to the local host on port 898. You may still have to choose a toolbox to load into the console. To override this behavior, use the -B option (see above), or set your console preferences to load a "home toolbox" by default.

-Jjava_option

Specifies an option that can be passed directly to the Java runtime (see java(1). Do not enter a space between -J and the argument. This option is most useful for developers.

-l | --rolepassword role_password

Specifies the password for the role_name. If you specify a role_name but do not specify a role_password, the system prompts you to supply a role_password. Passwords specified on the command line can be seen by any user on the system, hence this option is considered insecure.

When the SMC client and server are both running the Trusted Solaris operating environment, role assumption relies on trusted networking. The Trusted Path status and the user role identities are retrieved as network attributes. Therefore, the user must first assume the role using the CDE Trusted Path menu before invoking the SMC. Only the role password is required for authentication in this case; neither the -u, -p, nor -r options are required because they are obtained as network attributes.

If the SMC server is running the Trusted Solaris operating environment and the SMC client is not, role assumption is not allowed by default. This policy can be changed by including the -u option in the smcwbemserver script on the SMC server. See init.wbem(1M).

-p | --password password

Specifies the password for the user_name. If you do not specify a password, the system prompts you for one. Passwords specified on the command line can be seen by any user on the system, hence this option is considered insecure.

-r | --rolename role_name

Specifies a role name for authentication. If you are running the SMC in a terminal and you do not specify this option, no role is assumed. The GUI console may prompt you for a role name, although you may not need to assume a role.

If the SMC server is running the Trusted Solaris operating environment and the SMC client is not, this option is subject to the same restrictions as the -l option.

-s | --silent

Disables informational messages printed to the terminal.

-t

Runs the SMC in terminal mode. If this option is not given, the SMC will automatically run in terminal mode if it cannot find a graphical display.

--trust

Trusts all downloaded code implicitly. Use this option when running the terminal console non-interactively and you cannot let the console wait for user input.

-T | --tool tool_name

Runs the tool with the Java class name that corresponds to tool_name. If you do not specify this option and the SMC is running in terminal mode, the system prompts you. If the SMC is running in graphical mode, the system either loads a toolbox or prompts you for one (see options -H and -B).

-u | --username user_name

Specifies the user name for authentication. If you do not specify this option, the user identity running the console process is assumed.

-v | --version

Prints the version of the SMC to the terminal. In the graphical console, this information can be found in the About box, available from the Help menu.

-y | --yes

Answers yes to all yes/no questions. Use this option when running the terminal console non-interactively and you cannot let the console wait for user input.

EXAMPLES

Example 1 Printing a usage statement

The following prints a usage statement about the smc command to the terminal window:

smc --help

Example 2 Passing an option to Java

The following passes an option through to the Java VM, which sets the com.example.boolean system property to true. This system property is only an example; the SMC does not use it.

smc -J-Dcom.example.boolean=true

ENVIRONMENT VARIABLES

See environ(5) for descriptions of the following environment variables that affect the execution of the smc command:

JAVA_HOME: If you do not specify this environment variable, the /usr/java1.2 location is used.
DISPLAY: If you do not set this environment variable, set it to null, or set it to an X(7) display to which you are not authorized to connect, the SMC starts in terminal mode instead of graphical mode.

EXIT STATUS

The following exit values are returned. Other error codes may be returned if you specify a tool (using -T tool_name) that has its own error codes. See the documentation for the appropriate tool.

0: Successful completion.
1: An error occurred.

SUMMARY OF TRUSTED SOLARIS CHANGES

The -l and -r options are limited when the SMC client is not running the Trusted Solaris operating environment. The -u, -p, and -r options are obtained as network attributes.

ATTRIBUTES

See attributes(5) for descriptions of the following attributes:

ATTRIBUTE TYPE	ATTRIBUTE VALUE
Availability	SUNWmcc

Trusted Solaris 8 Reference Manual

auths(1), init.wbem(1M), smprofile(1), smrole(1)

SunOS 5.8 Reference Manual

java(1), smcconf(1M), attributes(5), environ(5), X(7)

Trusted Solaris 8 Last Revised 7 Sep 2000