The following sections provide information about the Solaris Management Console.
The Solaris Management Console is a container for GUI-based management tools that are stored in collections referred to as toolboxes. The console includes a default toolbox with many basic management tools, including tools for managing users, projects, and cron jobs; for mounting and sharing file systems; and for managing disks and serial ports. For a brief description of each Solaris management tool, see Table 2–1.
You can always add tools to the existing toolbox, or you can create new toolboxes.
The Solaris Management Console has three primary components:
The Solaris Management Console Client
Called console, this is the visible interface and contains the GUI tools used to perform management tasks.
The Solaris Management Console Server
This component is located either on the same machine as the console or remotely, and provides all the back end functionality that allows management through the console.
The Solaris Management Console Toolbox Editor
This application, which looks similar to the console, is used to add or modify toolboxes, to add tools to a toolbox, or to extend the scope of a toolbox. For example, you would add a toolbox to manage a name service domain.
The default toolbox is visible when you start the console.
This table describes the tools included in the default Solaris Management Console toolbox and provides cross-references to background information for each tool.
Table 2–1 Solaris Management Console Tool Suite
Category |
Tool |
Description |
For More Information |
---|---|---|---|
System Status |
System Information |
Monitors and manages system information such as date, time, and timezone. | “Displaying and Changing System Information (Tasks)” in System Administration Guide: Advanced Administration |
|
Log Viewer |
Monitors and manages the Solaris Management Console tools log and system logs. | |
|
Processes |
Monitors and manages system processes. |
“Processes and System Performance” in System Administration Guide: Advanced Administration |
|
Performance |
Monitors system performance. |
“Managing System Performance (Overview)” in System Administration Guide: Advanced Administration |
System Configuration |
Users |
Manages users, rights, roles, groups, and mailing lists. |
What Are User Accounts and Groups? and “Role-Based Access Control (Overview)” in System Administration Guide: Security Services |
|
Projects |
Creates and manages entries in the /etc/project database. |
“Projects and Tasks” in System Administration Guide: Resource Management and Network Services |
|
Computers and Networks |
Creates and monitors computer and network information. |
Solaris Management Console online help |
|
Patches |
Manages patches. | |
Services |
Scheduled Jobs |
Creates and manages scheduled cron jobs. |
“Ways to Automatically Execute System Tasks” in System Administration Guide: Advanced Administration |
Storage |
Mounts and Shares |
Mounts and shares file systems. | |
|
Disks |
Creates and manages disk partitions. | |
|
Enhanced Storage |
Creates and manages volumes, hot spare pools, state database replicas, and disk sets. | |
Devices and Hardware |
Serial Ports |
Sets up terminals and modems. |
“Managing Terminals and Modems (Overview)” in System Administration Guide: Advanced Administration |
Context–sensitive help is available after you start a tool. For broader, more in-depth online information than the context help provides, see the expanded help topics, which you can reach from the console Help menu.
The console provides a set of tools with many benefits for administrators. The console does the following:
Supports all experience levels
Inexperienced administrators can complete tasks by using the graphical interface, which includes dialog boxes, wizards, and context help. Experienced administrators will find that the console provides a convenient, secure alternative to using vi to manage hundreds of configuration parameters spread across tens or hundreds of systems.
Controls user access to the system
Although any user can access the console by default, only superuser can make changes in the initial configuration. As described in “Role-Based Access Control (Overview)” in System Administration Guide: Security Services, it is possible to create special user accounts called roles that can be assigned to users, typically administrators, who are permitted to make specific system changes.
The key benefit of RBAC is that roles can be limited to only those tasks that are necessary for doing their jobs. RBAC is not required for using the Solaris management tools. You can run all tools as superuser without making any changes.
Provides a command line interface
If preferred, administrators can operate the Solaris management tools through a command-line interface (CLI). Some commands are written specifically to mimic the GUI tool functions, such as the commands for managing users. These new commands are listed in Table 1–6, with the names and brief descriptions of each command. There is also a man page for each command.
For those Solaris management tools that have no special commands, such as the Mounts and Shares tools, use the standard UNIX commands.
For in-depth information about how RBAC works, its benefits, and how to apply those benefits to your site, see “Role-Based Access Control (Overview)” in System Administration Guide: Security Services.
To learn more about using RBAC with the Solaris management tools, see Using the Solaris Management Tools With RBAC (Task Map).
In the following figure, the console is shown with the Users Tool open.
The main part of the console consists of three panes:
Navigation pane (at the left) – For accessing tools (or sets of tools), folders, or other toolboxes. Icons in the navigation pane are called nodes and are expandable if they are folders or toolboxes.
View pane (at the right) – For viewing information related to the node selected in the navigation pane, shows either the contents of the selected folder, subordinate tools, or data associated with the selected tool.
Information pane (at the bottom) – For displaying context-sensitive help or console events.
The layout of the console window is highly configurable. You can use the following features to change the console window layout:
View menu – Use the Show option in the View menu to hide or display the optional bars and panes. The other options in the View menu control the display of nodes in the view pane.
Console menu – Use the Preferences option to set the following: the initial toolbox, the orientation of panes, clicking or double-clicking for selection, text or icons in the tool bar, fonts, default tool loading, authentication prompts, and advanced logins.
Context Help or Console Events toggles – Use the icons at the bottom of the information pane to toggle between the display of context-sensitive help and console events.
The main source of documentation for using the console and its tools is the online help system. Two forms of online help are available: context-sensitive help and expanded help topics.
Context-sensitive help responds to your use of the console tools.
Clicking the cursor on tabs, entry fields, radio buttons, and so forth, causes the appropriate help to appear in the Information pane. You can close, or reopen the Information pane by clicking the question mark button on dialog boxes and wizards.
Expanded help topics are available from the Help menu or by clicking cross reference links in some context-sensitive help.
These topics appear in a separate viewer and contain more in-depth information than is provided by the context help. Topics include overviews of each tool, explanations of how each tool works, files used by a specific tool, and troubleshooting.
For a brief overview of each tool, refer to Table 2–1.
As described in Why Use the Solaris Management Console?, a major advantage of using the Solaris management tools is the ability to use Role-Based Access Control (RBAC). RBAC provides administrators with access to just the tools and commands they need to perform their jobs.
Depending on your security needs, you can use varying degrees of RBAC, as follows:
RBAC Approach |
Description |
For More Information |
---|---|---|
No RBAC |
Allows you to perform all tasks as superuser. You can log in as yourself. When you select a Solaris management tool, you enter root as the user and the root password. | |
Root as a Role |
Eliminates anonymous root logins and prevents users from logging in as root. This approach requires users to log in as themselves before they assume the root role. Note that you can apply this technique whether or not you are using other roles. |
“Making a Role” in System Administration Guide: Security Services |
Single Role Only |
Uses the Primary Administrator role, which is roughly equivalent to having root access only. | |
Suggested Roles |
Uses three roles that are easily configured: Primary Administrator, System Administrator, and Operator. These roles are appropriate for organizations with administrators at different levels of responsibility whose job capabilities roughly fit the suggested roles. |
“Role-Based Access Control (Overview)” in System Administration Guide: Security Services |
Custom Roles |
You can add your own roles, depending on your organization's security needs. |
“Planning for RBAC” in System Administration Guide: Security Services |