This chapter describes how to install and remove the SunVTS diagnostic program.

• SunVTS Packages

• Installing SunVTS

• To Set Up Access to the SunVTS Man Pages

• To Perform Additional Setup When SunVTS Is Installed in a Directory Other Than /opt

• SunVTS Security

• Additional Instructions for Localized Environments

• Removing SunVTS

• Adding a Custom Test

The SunVTS software is installed from the packages shown in the following table.

SunVTS packages are located on the Sun Computer Systems Supplement CD that ships with the Solaris release.

• The Solaris 9 operating environment must be installed (with the Entire Distribution software group [SUNWCall] at minimum), and booted to multi-user level (run level 3).

• You must be superuser.

• There must be at least 62 MB of available disk space in the partition where SunVTS will reside. The /opt directory is the default installation location.

There are several utilities available for installing packages. This chapter describes how to use the pkgadd utility to load SunVTS from a local CD-ROM drive. For information on how to install packages using other installation methods, see the Solaris 9 Sun Hardware Platform Guide.

1. Log in to the system and become superuser:

% su

2. Check to see if any SunVTS packages are currently installed on the system:

# pkginfo -c sunvts

• If the system does not display anything, then no SunVTS packages are installed and you can proceed with the installation.

• If you see any messages such as the following message, then SunVTS is installed and you should remove the existing SunVTS software before proceeding. See Removing SunVTS.

  system SUNWvts SunVTS

  
  

3. Load the Software Supplement for the Solaris Operating Environment CD (the Supplement CD) into the CD-ROM drive.

Volume Manager automatically mounts the CD.

4. Install SunVTS using pkgadd as shown in one of the examples below.

• The following command installs SunVTS in the default directory (/opt):

  # pkgadd -d /cdrom/cdrom0/SunVTS_5.1/Product SUNWvts

  
  

• The following command prompts you to enter the directory where SunVTS will reside instead of using the default (/opt) directory.

  # pkgadd -a none -d /cdrom/cdrom0/SunVTS_5.1/Product SUNWvts

  
  
  
  

  ---

  Note - If you install SunVTS in a directory other than the default (/opt) directory, you must set the VTS_PM_PATH variable before you use the SunVTS CDE interface. See To Perform Additional Setup When SunVTS Is Installed in a Directory Other Than /opt.

  ---

  
  

5. Answer the installation questions.

You are asked if you want to enable the Kerberos-based, Sun Enterprise Authentication Mechanism (SEAM) security which provides the highest level of SunVTS security. You should only enable this if you have the SEAM software installed and the SEAM server and clients configured in your networked environment. Refer to SunVTS Security. You can always answer no to this question, even when SEAM is configured in your environment.

If you choose to run SunVTS with SEAM security, use the following SEAM assignments:

• Principal--set to sunvts

• Complete Service Name--set to sunvts@host, where host is the fully qualified domain name of the host where the SunVTS kernel is running.

6. Install the SunVTS supporting packages that are appropriate for your configuration. (See SunVTS Packages for more details.)

Example:

# pkgadd -d /cdrom/cdrom0/SunVTS_5.1/Product SUNWvtsx SUNWvtsmn

7. Verify the presence of the packages:

# pkginfo  SUNWvts SUNWvtsx SUNWvtsmn

system      SUNWvts        SunVTS

system      SUNWvtsmn      SunVTS Man Pages

system      SUNWvtsx       64-bit SunVTS

The SunVTS man pages are installed in the SunVTS_install_dir/man directory
(/opt/SUNWvts/man by default). To access them, add this directory to your MANPATH shell variable in the initialization file that corresponds to your login shell (usually .profile for the Bourne and Korn shells or .login for the C shell).

1. Using an editor, add the SunVTS man directory (/opt/SUNWvts/man by default) to the MANPATH variable in the appropriate initialization file.

Bourne, Korn Shell example:

MANPATH=/usr/share/man:/usr/man:/opt/SUNWvts/man;export MANPATH

C shell example:

setenv MANPATH /usr/share/man:/usr/man:/opt/SUNWvts/man

2. Have the shell read the modified initialization file by sourcing it (with the . [dot] or source command) or log out and log back in.

3. Verify that the SunVTS man directory is part of the MANPATH variable:

# echo $MANPATH

/usr/share/man:/usr/man:/opt/SUNWvts/man

When you install SunVTS in a directory other than the default directory (/opt), you must set the VTS_PM_PATH environment variable before you can use the SunVTS CDE user interface. This variable is used to locate graphic elements in the SunVTS CDE interface.

1. Using an editor, open the appropriate initialization file such as .profile (for the Bourne or Korn shells) or .login (for the C shell).

2. Add the VTS_PM_PATH variable as shown:

Bourne or Korn Shell example:

VTS_PM_PATH=your_base_install_dir/SUNWvts/bin/pm;export VTS_PM_PATH

C shell example:

setenv VTS_PM_PATH your_base_install_dir/SUNWvts/bin/pm

3. Have the shell read the modified initialization file by sourcing it (with the . [dot] or source command) or log out and log back in.

SunVTS has two security mechanisms that you can choose from:

• Basic Security--a local file is maintained that lists the valid users, groups, and hosts that are permitted to use SunVTS. This level of security does not provide secure network authentication and should not be used in an environment where network security is an issue.

• SEAM Security--uses the Sun Enterprise Authentication Mechanism (SEAM) to provide secure user authentication, data integrity and privacy, for transactions over networks using a Kerberos V5 technology.

The SunVTS installation process prompts you to specify which security mechanism you want to use. You must use one or the other, and the SEAM security implementation is the default if you press the return key through the installation questions.

2.4.1 Basic Security

The SunVTS user interface (vtsui and vtstty) must connect to the SunVTS kernel (vtsk) before it can be used to control testing. The SunVTS kernel selectively accepts "connect to" requests from the SunVTS interface based on entries in the SunVTS_install_dir/bin/.sunvts_sec file. Connection permission is governed by three categories in this file as follows:

• HOSTS--if the requesting user is on a host that belongs to the HOSTS category, then this request is granted without any authentication.

• GROUPS--if the requesting user is a member in a group that is a member of GROUPS category, then the user interface will prompt the user for a password. The SunVTS kernel compares this password against the password database on the system under test (SUT). If the password does not match, or if the user is not on the list, then the connection is rejected.

• USERS--if the requesting user is a member of the USER category, then the user interface will prompt the user for a password. The SunVTS kernel compares this password against the password database on the SUT. If the password does not match, or the user is not on the list, then the connection is rejected.

A plus (+) entry in one of these categories means all hosts, groups, or users, are trusted.

The user password needed for authentication is the same password used to log in to the system under test.

The check for connection permission starts with the HOSTS category, then the GROUP category, and finally, the USERS category. A connection is granted as soon as the connection request matches an entry.

If a security file entry is invalid or if there is no entry in the file, all access except root is denied on the local machine. However, you can correct an entry in this file even while the SunVTS kernel is running.

When you specify the -e option while starting the SunVTS kernel, the kernel accepts "connect to" requests from any host, regardless of the entries in the .sunvts_sec file.

The following shows the contents of the default .sunvts_sec file.

Code Example of the Security File (.sunvts_sec):

#This file should be <SunVTS 5.1 install directory>/bin/.sunvts_sec

#

#Any line beginning with a # is a comment line

#

# Trusted Hosts entry

# One hostname per line.

# A "+" entry on a line indicates that ALL hosts are Trusted Hosts.

# No password authentication is done.

# The line with the label HOSTS: is required to have the list of hosts

#

HOSTS:

#+

#host1

#host2

#

# Trusted Groups entry

# One groupname per line.

# A "+" entry on a line indicates that ALL groups are Trusted Groups.

# User password authentication is done.

# The line with the label GROUPS: is required to have the list of groups

#

GROUPS:

#group1

#

# Trusted Users entry

# One username per line.

# A "+" entry on a line indicates that ALL users are Trusted Users.

# User password authentication is done.

# The line with the label USERS: is required to have the list of users.

USERS:

root

#user1

#user2

2.4.2 SEAM Security

To use SEAM-based security with SunVTS, you must have the following:

• The complete SEAM 1.0.1 client/server application must be installed and running in your network environment.

• The systems for which you install SunVTS must have, at minimum, the SEAM 1.0.1 client software installed.

• Select the SEAM-based security (Kerberos V5) choice during the SunVTS installation.

The SunVTS SEAM security system is based on Kerberos V5 technology, which revolves around the concept of a ticket. A ticket is a set of electronic information that serves as identification for a user or a service. When you connect to another host through SunVTS, you transparently send a request for a ticket to a Key Distribution Center (KDC), which accesses a database to authenticate your identity. The KDC returns a ticket granting you permission to access the other machine. "Transparently" means that you do not need to explicitly request a ticket; it happens in the background as part of the remote connection. No user password is transmitted in the network. Only the authenticated client can get a ticket for a specific service; another client cannot gain access under an assumed identity.

If you choose to run SunVTS with SEAM security, use the following SEAM assignments:

• Principal--set to sunvts

• Complete Service Name--set to sunvts@host, where host is the fully qualified domain name of the host where the SunVTS kernel is running.

2.4.3 Controlling SunVTS Security

The best time to establish the SunVTS security mode is during the SunVTS installation.

1. Decide which level of security you want to use with SunVTS.

If you decide to use the SEAM security (highest level of security), make sure that your system is running SEAM.

2. Install SunVTS as described in Installing SunVTS.

The installation program asks you if you want SEAM security enabled. Answer accordingly:

• Yes (the default)--The Kerberos SEAM security is enabled for SunVTS. No additional action is required to administer SunVTS security. SunVTS uses the authentication as defined in the SEAM software configuration in your network environment to grant and deny access to SunVTS. Do NOT select this security scheme if you do not have the SEAM software installed and configured in your network environment.

• No--The basic security file is used, and SEAM is not enabled. When the installation is complete, you can access SunVTS as superuser on the system under test, or modify the .sunvts_sec file to authorize other users.

If you need to switch the security from SEAM to basic, or vice-versa, after you have installed SunVTS, follow these steps:

1. Become superuser.

2. Make sure that SunVTS is not started.

3. Change directories to the SunVTS binary directory:

# cd /opt/SUNWvts/bin

4. With an editor, open the .sunvts_sec_gss file.

This file contains one line that is appended with one of the following:

• ON--indicates SEAM security is enabled.

• OFF--indicates SEAM security is disabled, and basic security is used.

5. Change the ON (or OFF) value to the opposite value, save the change, and quit the editor.

6. Start SunVTS.

The security mechanism that you specified is enabled.

Use environmental variables to control certain aspects of SunVTS as described in the following table. Except for the MANPATH variable, you only use these variables when you need to alter the default characteristics of SunVTS.

SunVTS software is available in English, and is Internationalization (I18N) compliant, which means it is structured in a way that a user who is familiar with internationalization can take advantage of this feature to run SunVTS in a localized environment.

In a localized environment, you can run SunVTS in English or with localized fonts. Perform one of the two following procedures based on how you want SunVTS to run.

Set the LANG variable to English before you start SunVTS. The following is an example using the C shell:

1. Set the LANG variable:

# setenv LANG C

1. As superuser, create a directory as follows:

# mkdir -p /opt/SUNWvts/lib/locale/LANG/app-defaults

Where LANG is the language code (for example, ja for Japan EUC, or fr for French) for the language that you are using.

2. Copy the SunVTS Xresource (Vtsui) file into the directory you just created:

# cp /opt/SUNWvts/lib/Vtsui /opt/SUNWvts/lib/locale/LANG/app-defaults

3. Customize the font definitions in the Vtsui file to accommodate font specifications required by your localized environment.

Developers can add their own custom tests to the SunVTS environment. This book does not describe custom test development, but does list the tasks necessary to add a custom test into the SunVTS environment.

1. Copy your custom test binary to the SunVTS bin directory based on the 32-bit or 64-bit functionality of your binary test:

• 32-bit: /opt/SUNWvts/bin

• 64-bit: /opt/SUNWvts/bin/sparcv9

2. Modify one of the following .customtest files based on the 32-bit or 64-bit functionality of your binary test:

• 32-bit: /opt/SUNWvts/bin/.customtest

• 64-bit: /opt/SUNWvts/bin/sparcv9/.customtest

The format of the .customtest file is described in The .customtest File Format.

3. Restart SunVTS or reprobe the system.

When invoked, SunVTS displays the custom test in the SunVTS user interface.

2.7.1 The .customtest File Format

The .customtest file defines the test options and the default option values for your custom test. The tester can change these options using the option dialog boxes through the SunVTS user interface. However, the Reset button returns the options to the default settings as defined in the .customtest file.

Each line in this file is made up of two or more fields that are separated by a semicolon where:

• The first field is the label or device name (mandatory field).

• The second field is the test name (mandatory field).

• The third field is an option line (optional field). If used, this field must be in the format specified.

• The fourth field is used if the test is scalable. If used, append the keyword SCA to this field.

Examples:

• To add a test with no options:

  % your_label_name;your_test_name

  
  

• To add the scalability option, append the keyword SCA:

  % your_label_name;your_test_name;SCA

  
  

• To custom build an option menu, add an option specification:

  % Option_Name<Option_Type|Value|Default_Value|Command_Line_Option>

  
  

• To specify more than one option, separate each option by a comma:

  % label_name;test_name;Numeric<NUMERIC|0,100|50|numeric>, Exc_Choice<EXC_CHOICE|Top,Middle,Bottom|Middle|exc_choice>, Inc_Choice <INC_CHOICE|Left,Center,Right|Left+Center+Right|inc_choice>, Toggle<TOGGLE|This,That|This|toggle>, Text<TEXT|20|Type_Here|text>, Slidebar<SLIDEBAR|0,10|5|slidebar>, Errors<CYCLE|Yes,No|No|errors>, Cycle<CYCLE|First,Second,Third|First|cycle>;SCA

  
  

SunVTS invokes the above test as follows:

% ./test_name -s[vq..] [-i n] -o dev=user[0,1..],Command_Line_Option=Value...

You cannot use the .customtest file when a test has a probe attached. You must ensure that the binaries are compatible with the version of the Solaris kernel on which SunVTS is currently running.

It is necessary to remove SunVTS before installing a new version. The following instructions describe how to remove SunVTS using the pkgrm command.

Use the same tool or utility for installation and removal of the SunVTS software. If you use pkgadd for installation, use pkgrm to uninstall; if you use Web Start for installation, use the product registry to uninstall.

Caution - If you used Web Start to install the SunVTS packages, make sure to use the product registry to remove the packages. Using pkgrm to remove packages that were installed with Web Start could cause the package database and the product registry to be out of sync.

1. Log in to the system and become superuser.

% su

2. Remove the packages with the pkgrm command:

# pkgrm  SUNWvtsx SUNWvtsmn SUNWvtsol SUNWvts

Answer y (yes) to the removal questions.

You should see Removal of package_name was successful.

SunVTS 5.1 User's Guide

816-5144-10

Copyright © 2002, Sun Microsystems, Inc. All rights reserved.