test

Sun N1 Advanced Architecture for SAP Solutions 5.2.1 Installation Guide

Appendix B N1 AA Tasks

This appendix contains tasks related to the following:

Starting and Stopping the N1 AA Manager

Starting the N1 AA Manager

  1. Start PostgreSQL database as superuser.

    # /etc/init.d/n1aapgsql start

    Note –

    On Solaris 10, use the following command:


    # /usr/sbin/svcadm enable svc:/application/n1aapgsql:default

  2. Start Sun Web Console as superuser.

    # /usr/sbin/smcwebserver start

Stopping the N1 AA Manager

  1. Stop the Sun Web Console as superuser.

    # /usr/sbin/smcwebserver stop

  2. Stop PostgreSQL database as superuser.

    # /etc/init.d/n1aapgsql stop

    Note –

    On Solaris 10:


    # /usr/sbin/svcadm disable svc:/application/n1aapgsql:default

Starting and Stopping the Performance Collector

The Performance Collector is managed different in the Solaris 9 and Solaris 10 environment.

Managing the Performance Collector on Solaris 9

The perfcol daemon runs under the control of the init process. Therefore, it is completely managed by the init process.

Starting the Performance Collector

Automatically started at system start by the init process. If the service is new to init, for example, no reboot has taken place since the perfcol installation, execute the init Q command as superuser. The init Q command triggers init to re-examine /etc/inittab.

Restarting the Performance Collector

Use the /opt/SUNWn1aa/perfcol/sbin/perfcol -k command to kill the perfcol process. The Performance Collector is automatically restarted by the init process.

Stopping the Performance Collector Permanently

  1. Remove the perfcol entry from the /etc/inittab file.

  2. Kill the perfcol process.


    # /opt/SUNWn1aa/perfcol/sbin/perfcol -k

Managing the Performance Collector on Solaris 10

The perfcol daemon runs under the control of the smf. Use svcadm to manage perfcol.

For more information, see the svcadm(1M) man page.

N1 AA User Management

The user accounts for the Sun Web Console have to be created at the OS level of the N1 AA Server. Create the appropriate Solaris users by using standard Solaris commands. Every user added will be allowed to login to the Sun Web Console and therefore to N1 AA.

How to disable access on the OS-level, but still allow login to Sun Web Console.

There are many different ways for OS hardening. One option is to create OS users without a valid shell.

For example in the /etc/passwd file:

smithj:x:123456:1:Account for John Smith:/export/smithj:/bin/false.

N1 AA Uninstallation

Perform the following steps to uninstall N1 AA.

ProcedureTo Uninstall N1 AA

Steps

  1. Remove PostgresSQL.

    # pkgrm SUNWn1aapgsql

    This command removes:

    • PostgreSQL

    • Database n1aa

    • Start and Stop scripts and manifest on Solaris 10

    This does not remove all database log files in /opt/SUNWn1aa/pgsql/data.

  2. Remove the Command Line Interface.

    # pkgrm SUNWn1aacli

  3. Remove N1 AA Manager.

    # /usr/sbin/smcwebserver stop

    # /usr/sbin/smreg remove -a com.sun.web.admin.n1aa_2.2.4

    Note –

    If you have N1 AA Builder or N1 AA Deployer installed, remove the link to SPS.


    # rm /usr/share/webconsole/n1aa/WEB-INF/lib/sps-api.jar

    # pkgrm SUNWn1aamngr

    This removes the /usr/share/webconsole/n1aa file. This does not remove the log file previously configured in N1 AA Manager.

  4. Remove all Tomcat generated files.


    # rm -rf /var/opt/webconsole/work/com_sun_web_console/localhost/n1aa

  5. Remove aasap and aasapd.

    # pkgrm SUNWn1aad

    This does the following:

    • Removes /opt/SUNWn1aa/aasap/bin/aasap

    • Removes /opt/SUNWn1aa/aasap/sbin/aasapd

    • Removes entry in /etc/inet/services if it exists

    • Removes entry in /etc/inet/inetd.conf if it exists

    • Removes manifest for aasap if it exists

    • Removes /etc/aasap.allow

    • Restarts inetd to deactivate service or disable aasap in smf

    This does not remove the /var/opt/SUNWn1aa/aasap.log log file.

  6. Remove perfcol.

    # pkgrm SUNWn1aaperf

    This does the following:

    • Stops perfcol

    • Removes /opt/SUNWn1aa/perfcol/sbin/perfcol

    • Removes entry in /etc/initab or removes manifest on Solaris 10

    • Removes link from /etc/init.d/acctadm to /etc/rc2.d/S92acctadm

    Removing perfcol does not do the following:

    • Deactivate extended accounting

    • Remove any extended accounting records /var/opt/SUNWn1aa/proc and /var/adm/exacct/proc_*

    • Remove log file in the /var/opt/SUNWn1aa directory