In this section, we will create a non-root user with the roleadd command in the Solaris Operating Environment, and install Sun Java System Web Server using the non-root user on each Access Manager host machine. Use the following as your checklist for completing these tasks.
To Create a Non-Root User on the Access Manager 1 Host Machine
To Create a Non-Root User on the Access Manager 2 Host Machine
Web Server can also be installed with a root user.
As a root user, log in to the AccessManager–1 host machine.
Use roleadd to create a new user.
# roleadd -s /sbin/sh -m -g staff -d /export/am71adm am71adm |
We chose to use roleadd rather than useradd for security reasons as roleadd disables the ability of the user to log in.
(Optional) Verify that the user was created.
# cat /etc/passwd root:x:0:0:Super-User:/:/sbin/sh daemon:x:1:1::/: ... nobody4:x:65534:SunOS 4.x NFS Anonymous Access User:/: am71adm:x:215933:10::/export/am71adm:/sbin/sh |
(Optional) Verify that the user's directory was created.
# cd /export/am71adm # ls local.cshrc local.profile local.login |
Create a password for the non-root user.
# passwd am71adm New Password: 4m71a6m Re-ener new Pasword: 4m71a6m passwd: password successfully changed for am71adm |
If you do not perform this step, you will not be able to switch user (su) when logged in as the non-root user.
This procedure assumes you have just completed To Create a Non-Root User on the Access Manager 1 Host Machine.
On the AccessManager-1 host machine, install required patches if necessary.
# patchadd -p | grep 117461-08 |
A list of patch numbers is displayed. On our lab machine, the required patch 117461-08 is present so there is no need to install patches at this time.
Results for your machines might be different. Read the latest version of the Web Server 7.0 Release Notes to determine if you need to install patches and, if so, what they might be. You can search for patches directly at http://sunsolve.sun.com by navigating to the PatchFinder page, entering the patch number and clicking Find Patch.
Create a directory into which the Web Server bits can be downloaded and change into it.
# mkdir /export/WS7 # cd /export/WS7 |
Download the Sun Java System Web Server 7.0 software from http://www.sun.com/download/products.xml?id=45ad781d.
Follow the instructions on the Sun Microsystems Product Downloads web site for downloading the software.
Unpack the software package.
# gunzip sjsws-7_0-solaris-sparc.tar.gz # tar xvf sjsws-7_0-solaris-sparc.tar |
Run setup.
# ./setup --console |
When prompted, provide the following information.
|
Press Enter. Continue to press Enter when prompted. |
|
|
Enter yes. |
|
|
Enter /opt/SUNWwbsvr |
|
|
Enter yes. |
|
|
Enter 2. |
|
|
Enter 1,3,5. |
|
|
Enter 1. |
|
|
Enter 1. |
|
|
Enter no. |
|
|
Accept the default value. |
|
|
Accept the default value. |
|
|
Enter no. |
|
|
Enter am71adm. |
|
|
Accept the default value. |
|
|
Enter web4dmin. |
|
|
Enter web4dmin. |
|
|
Accept the default value. |
|
|
Enter 1080. |
|
|
Accept the default value. |
|
|
Enter 1. |
When installation is complete, the following message is displayed:
Installation Successful. |
To verify that Web Server was installed with the non-root user, examine the permissions.
# cd /opt/SUNWwbsvr/admin-server/ # ls -al total 16 drwxr-xr-x 8 root root 512 Jul 19 10:36 . drwxr-xr-x 11 am71adm staff 512 Jul 19 10:36 .. drwxr-xr-x 2 root root 512 Jul 19 10:36 bin drwx------ 2 am71adm staff 512 Jul 19 10:36 config drwx------ 3 am71adm staff 512 Jul 19 11:09 config-store drwx------ 3 am71adm staff 512 Jul 19 10:40 generated drwxr-xr-x 2 am71adm staff 512 Jul 19 10:40 logs drwx------ 2 am71adm staff 512 Jul 19 10:36 sessions |
The appropriate files and directories are owned by am71adm.
Start the Web Server 1 administration server.
# su am71adm # cd /opt/SUNWwbsvr/admin-server/bin # ./startserv |
Verify that the non-root user was able to start Web Server with the following sub-procedure.
Log out of the AccessManager–1 host machine.
As a root user, log in to the AccessManager–2 host machine.
Use roleadd to create a new user.
# roleadd -s /sbin/sh -m -g staff -d /export/am71adm am71adm |
(Optional) Verify that the user was created.
# cat /etc/passwd root:x:0:0:Super-User:/:/sbin/sh daemon:x:1:1::/: ... nobody4:x:65534:SunOS 4.x NFS Anonymous Access User:/: am71adm:x:215933:10::/export/am71adm:/sbin/sh |
(Optional) Verify that the user's directory was created.
# cd /export/am71adm # ls local.cshrc local.profile local.login |
Create a password for the non-root user.
# passwd am71adm New Password: 4m71a6m Re-ener new Pasword: 4m71a6m passwd: password successfully changed for am71adm |
If you do not perform this step, you will not be able to switch user (su) when logged in as the non-root user.
This procedure assumes that you just completed To Create a Non-Root User on the Access Manager 2 Host Machine.
On the AccessManager-2 host machine, install required patches if necessary.
# patchadd -p | grep 117461-08 |
A list of patch numbers is displayed. On our lab machine, the required patch 117461-08 is present so there is no need to install patches at this time.
Results for your machines might be different. Read the latest version of the Web Server 7.0 Release Notes to determine if you need to install patches and, if so, what they might be. You can search for patches directly at http://sunsolve.sun.com by navigating to the PatchFinder page, entering the patch number and clicking Find Patch.
Create a directory into which the Web Server bits can be downloaded and change into it.
# mkdir /export/WS7 # cd /export/WS7 |
Download the Sun Java System Web Server 7.0 software from http://www.sun.com/download/products.xml?id=45ad781d.
Follow the instructions on the Sun Microsystems Product Downloads web site for downloading the software.
Unpack the software package.
# gunzip sjsws-7_0-solaris-sparc.tar.gz # tar xvf sjsws-7_0-solaris-sparc.tar |
Run setup.
# ./setup --console |
When prompted, provide the following information.
|
Press Enter. Continue to press Enter when prompted. |
|
|
Enter yes. |
|
|
Enter /opt/SUNWwbsvr |
|
|
Enter yes. |
|
|
Enter 2. |
|
|
Enter 1,3,5. |
|
|
Enter 1. |
|
|
Enter 1. |
|
|
Enter no. |
|
|
Accept the default value. |
|
|
Accept the default value. |
|
|
Enter no. |
|
|
Enter am71adm. |
|
|
Accept the default value. |
|
|
Enter web4dmin. |
|
|
Enter web4dmin. |
|
|
Accept the default value. |
|
|
Enter 1080. |
|
|
Accept the default value. |
|
|
Enter 1. |
When installation is complete, the following message is displayed:
Installation Successful. |
To verify that Web Server was installed with the non-root user, examine the permissions.
# cd /opt/SUNWwbsvr/admin-server/ # ls -al total 16 drwxr-xr-x 8 root root 512 Jul 19 10:36 . drwxr-xr-x 11 am71adm staff 512 Jul 19 10:36 .. drwxr-xr-x 2 root root 512 Jul 19 10:36 bin drwx------ 2 am71adm staff 512 Jul 19 10:36 config drwx------ 3 am71adm staff 512 Jul 19 11:09 config-store drwx------ 3 am71adm staff 512 Jul 19 10:40 generated drwxr-xr-x 2 am71adm staff 512 Jul 19 10:40 logs drwx------ 2 am71adm staff 512 Jul 19 10:36 sessions |
The appropriate files and directories are owned by am71adm.
Start the Web Server 2 administration server.
# su am71adm # cd /opt/SUNWwbsvr/admin-server/bin # ./startserv |
Verify that the non-root user was able to start Web Server with the following sub-procedure.
Log out of the AccessManager–2 host machine.