Set Up Public Key Authentication for ZFS Storage Controllers

Before running the Java OneCommand, you must set up public key authentication on the ZFS storage controllers for every SPARC T4-4 server where you are setting up zones on the Database Domains.

1. Log in to the first ZFS storage controller using the CLI.

   To log in remotely using the CLI, use an ssh client. If you have not configured other users to administer the appliance, you must log in as root. When you log in, the CLI prompt consists of the hostname, followed by a colon, followed by a greater-than sign:

   % ssh root@zfs-controller1-hostname
   Password:
   Last login: Mon Oct 13 15:43:05 2009 from kiowa.sf.fishpo
   zfs-controller-hostname:>

   where zfs-controller1-hostname is the host name for the first ZFS storage controller.

2. Set up the public key authentication on the first ZFS storage controller for the first Database Domain that contains zones:

   zfs-controller1-hostname:> configuration preferences keys
   zfs-controller1-hostname:configuration preferences keys> create
   zfs-controller1-hostname:configuration preferences key (uncommitted)> set type=DSA
   zfs-controller1-hostname:configuration preferences key (uncommitted)> set key="DSA-key-text"
                           key = DSA-key-text == (uncommitted)
   zfs-controller1-hostname:configuration preferences key (uncommitted)> set comment="fw-log1"
                           comment = fw-log1 (uncommitted)
   zfs-controller1-hostname:configuration preferences key (uncommitted)> commit
   zfs-controller1-hostname:configuration preferences keys> show
   Keys:
    
   NAME     MODIFIED              TYPE   COMMENT
   key-000  10/12/2009 10:54:58   DSA    fw-log1

   The DSA-key-text is the key text itself (usually hundreds of characters), without spaces.

3. Repeat Step 2 for every Database Domain to contain zones.
4. Log out of the first ZFS storage controller:

   zfs-controller1-hostname:> exit

   ---

   Note - You do not have to repeat this procedure for the second ZFS storage controller. When you set up the public key authentication on the first ZFS storage controller, it appears when you log in to the second ZFS storage controller.

   ---

5. Log in to the first Database Domain in your system, if you are not logged in already.
6. Verify that you set up the public key authentication correctly:

   % ssh root@zfs-controller1-hostname hostname 

   where zfs-controller1-hostname is the host name for the first ZFS storage controller.

   You should be able to log in to the ZFS storage controller successfully and see the CLI prompt.

7. Repeat Step 5 and Step 6 for every Database Domain in your system.