Configuring SunPlex Manager

SunPlex Manager is a GUI that you can use to administer and view the status of some aspects of quorum devices, IPMP groups, interconnect components, and global devices. You can use it in place of many of the Sun Cluster CLI commands.

The procedure for installing SunPlex Manager on your cluster is included in the Sun Cluster Software Installation Guide for Solaris OS. The SunPlex Manager online help contains instructions for completing various tasks using the GUI.

This section contains the following procedures for reconfiguring SunPlex Manager after initial installation.

• How to Change the Port Number for SunPlex Manager

• How to Change the Server Address for SunPlex Manager

• How to Configure a New Security Certificate

SunPlex Manager Character Set Support

The SunPlex Manager recognizes a limited character set to increase security. Characters that are not a part of the set are silently filtered out when HTML forms are submitted to the SunPlex Manager server. The following characters are accepted by the SunPlex Manager:

()+,-./0-9:=@A-Z^_a-z{|}~

This filter can potentially cause problems in the following two areas:

• Password entry for Sun Java System services. If the password contains unusual characters, these characters will be stripped out resulting in two problems. Either the resulting password will be under 8 characters and will fail, or the application will be configured with a different password than the user expects.

• Localization. Alternative character sets (for example: accented characters or Asian characters) will not work for input.

How to Change the Port Number for SunPlex Manager

If the default port number (3000) conflicts with another running process, change the port number of SunPlex Manager on each node of the cluster.

The port number must be identical on all nodes of the cluster.

1. Open the /opt/SUNWscvw/conf/httpd.conf configuration file using a text editor.

2. Change the Port number entry.

   The Port entry is located under Section 2, 'Main' server configuration.

3. Edit the VirtualHost entry to reflect the new port number.

   The <VirtualHost _default_:3000> entry is located in the section titled “SSL Virtual Host Context”.

4. Save the configuration file and exit the editor.

5. Restart SunPlex Manager.

   # /opt/SUNWscvw/bin/apachectl restart

6. Repeat this procedure on each node of the cluster.

How to Change the Server Address for SunPlex Manager

If you change the hostname of a cluster node, you must change the address from which SunPlex Manager runs. Because the default security certificate is generated based on the node's hostname at the time SunPlex Manager is installed, you must remove one of the SunPlex Manager installation packages and reinstall it. You must complete this procedure on any node that has had its host name changed.

1. Make the Sun Cluster CD-ROM image available to the node.

2. Remove the SUNWscvw package.

   # pkgrm SUNWscvw

3. Re-install the SUNWscvw package.

   # cd <path to CD-ROM image>/SunCluster_3_1_u1/Packages # pkgadd -d . SUNWscvw

How to Configure a New Security Certificate

You can generate your own security certificate to enable secure administration of your cluster, and then configure SunPlex Manager to use that certificate instead of the one generated by default. This procedure is an example of how to configure SunPlex Manager to use a security certificate generated by a particular security package. The actual tasks you must complete depend on the security package you use.

You must generate an unencrypted certificate to allow the server to start on its own during booting. Once you have generated a new certificate for each node of your cluster, configure SunPlex Manager to use those certificates. Each node must have its own security certificate.

1. Copy the appropriate certificate to the node.

2. Open the /opt/SUNWscvw/conf/httpd.conf configuration file for editing.

3. Edit the following entry to enable SunPlex Manager to use the new certificate.

   SSLCertificateFile <path to certificate file>

4. If the server private key is not combined with the certificate, edit the SSLCertificateKeyFile entry.

   SSLCertificateKeyFile <path to server key>

5. Save the file and exit the editor.

6. Restart SunPlex Manager.

   # /opt/SUNWscvw/bin/apachectl restart

7. Repeat this procedure for each node in the cluster.

Example—Configuring SunPlex Manager to Use a New Security Certificate

The following example shows how to edit the SunPlex Manager configuration file to use a new security certificate.

[Copy the appropriate security certificates to each node.]
[Edit the configuration file.]
# vi /opt/SUNWscvw/conf/httpd.conf
[Edit the appropriate entries.]
SSLCertificateFile /opt/SUNWscvw/conf/ssl/phys-schost-1.crt
SSLCertificateKeyFile /opt/SUNWscvw/conf/ssl/phys-schost-1.key
[Save the file and exit the editor.]
[Restart SunPlex Manager.]
# /opt/SUNWscvw/bin/apachectl restart