Solaris PC NetLink 1.0 Administration Guide

Chapter 2 Administering SunLink Server Software at the Command Prompt

This chapter describes how you can use SunLink Server commands, the net commands, and lanman.ini file editing to administer your SunLink Server computer at the Solaris system console. It contains the following information:

Instructions are included in this chapter for accomplishing the following tasks.

"How to Administer a Local SunLink Server Computer"

"How to Administer a Remote SunLink Server Computer"

"How to Change a lanman.ini File Parameter"

About SunLink Server Commands

You can use Solaris system commands at the SunLink Server command prompt to perform several administrative tasks.


Note -

The commands listed in this chapter have not been translated into languages other than English.


Table 2-1 lists the Solaris system commands that you can use. Make sure that your MANPATH variable is set as follows:

$MANPATH:/opt/lanman/man:/opt/SUNWlznb/man

With this variable set, you can find complete descriptions of each command by typing the following at the SunLink Server command prompt:

man name of command

The description lists the purpose and syntax of the command and provides comments and examples.

Table 2-1 Solaris Commands for SunLink Server Administration

SunLink Server Command 

Description 

acladm

Creates, checks, prunes, and removes the Access Control List (ACL) database. 

lmat

Schedules commands or programs to run on a server at a specified time or date. (Note that the Solaris system at command also exists.)

blobadm

Displays statistical information, checks, and configures well-known or specified binary large object (BLOB) files. 

delshmem

Deletes SunLink Server shared memory. 

elfread

Displays event logs on the local SunLink Server computer at the Solaris system console. 

euctosjis

Converts the coding of characters from Extended UNIX Code (EUC) to Shift-JIS (S-JIS) encoding.  

joindomain

Moves a SunLink Server computer from one domain to another. 

lmshare

Manipulates a SunLink Server share file without server intervention. 

lmshell

Provides the "look and feel" of an MS-DOS shell at the SunLink Server command prompt. Allows users to log in and link to other servers on the network, and to run a subset of DOS commands. 

lmstat

Displays statistical information retrieved from the SunLink Server computer's shared memory. 

mapuname

Maps and unmaps SunLink Server user, global group, and local group names to and from Solaris system user names. 

netevent

Sends administrative or user alerts. 

regcheck

Manipulates the SunLink Server Registry to enumerate Registry keys, dump the contents of the Registry, or to check and repair Registry files. 

regconfig

Queries or sets SunLink Server Registry key information. 

regload

Creates a Registry file if one does not exist. Also reinitializes the Registry to system defaults. 

samcheck

Checks or fixes the SAM database, or dumps the change log, built-in, account, or LSA databases. 

setdomainname

Changes the domain name of the local SunLink Server computer. 

setservername

Changes the name of the local SunLink Server computer. 

sjistoeuc

Converts the coding of characters from Shift-JIS (S-JIS) to Extended UNIX Code (EUC) encoding. 

srvconfig

Displays or modifies SunLink Server configuration information stored in the lanman.ini file.

winsadm

Configures the Windows Internet Name Service (WINS). 

About the net Command

You can perform many SunLink Server administrative tasks by using the net command with any of its various options at the SunLink Server command prompt. Complete descriptions of the net command options are in Table 2-3.

The following sections summarize the net command and its options that are available from the SunLink Server prompt, and describe syntax and usage conventions.

Administering Local and Remote Servers

When you administer a server while you are working at the server command prompt, that server is called the local server. If you are administering a server from the command prompt of another server, the server being administered is called the remote server.

Some of your network client computer users may be designated as account operators, print operators, or server operators. These users have limited administrative or operator privileges that enable them to perform specific tasks. These privileges are sufficient to use the net command to administer a local server at the SunLink Server command prompt.

However, to use the net command to administer a remote SunLink Server computer, you must be logged in to the SunLink Server computer as an administrator with full administrative privileges. If you have different operators responsible for parts of your network and you do not want to assign them full administrative privileges, then they must work only at the SunLink Server command prompt of the server being administered.

How to Administer a Local SunLink Server Computer

To administer a local SunLink Server computer using the net command:

  1. Log in to the Solaris system that is running the SunLink Server software.

  2. At the Solaris system prompt, log in to the network as Windows NTadministrator or as a user with Windows NT administrative privileges by typing the following command:

    net logon username password

  3. Enter the appropriate net command.

    See a complete listing of net command options in the section, "SunLink Server net Command Options".


    Note -

    Remember to log off when you are finished administering the SunLink Server computer by entering the net logoff command.


How to Administer a Remote SunLink Server Computer

To perform server administrative tasks using the net command remotely, use the net admin command and the appropriate net command for the task. (Note that Step 2 of the following procedure describes two ways of entering the net admin command.)

To enter a net command remotely:

  1. Log in to the network as administrator or as a user with administrative privileges. (Operator privileges are not sufficient to perform this procedure.)

  2. Enter the net admin command using one of the following methods:

    • Enter a separate net admin command for each net command you want to execute. For example, to display statistics for a server named account, type the following:

      net admin \\account /command net statistics server

    This method is useful for batch files.

    • Enter a net admin command followed by multiple net commands. For example, to execute multiple net commands on a server named payroll, type the following:

      net admin \\payroll /command

      This creates an administrative command shell from which you subsequently can issue net commands. The prompt changes to include the name of the server you are remotely administering; for example, \\payroll.

      Any net command that you type at this prompt is executed on the server that you specify. For example, at the prompt, type:

      [\\payroll] net share

      [\\payroll] net print

      where \\payroll is the prompt, and net share and net print are the commands.

  3. To exit the command shell and return to the system prompt, type exit or press CTRL+Z.


    Note -

    You can use net commands that take a domain or computer name as an option for administering remote servers. This type of administration can be performed directly at the Solaris system command prompt without using the net admin command. For example, to display local groups on a remote domain named market_dom, you would type: net localgroup /domain:market_dom


Paging Through Screens

Some displays provide more than one screen full of information. For example, the following command provides several screens of information on the net share command:

net help share /options

To display information one screen at a time, use the more command; for example:

net help share /options | more

After you have examined one screen of information and are ready to proceed, press the Spacebar to display the next screen of text.

Using Passwords With Commands

Some commands require a password as an option. You can provide a password as a command option by typing the password on the same line as the command itself. For example, to log on to the network with the user name jim and the password kahuna, you would type:

net logon jim kahuna

You can also ask the SunLink Server computer to prompt you for your password, replacing the password with an asterisk (*) when you type the command.


Note -

In the Solaris operating environment, the asterisk (*) is a special character and must be preceded by a backslash (\).


For example, to use the same resource described above, type:

net logon jim \*

The SunLink Server software then displays the following message:

Type your password:

When you enter a password at this prompt, the password does not appear on the screen as you type. This allows you to keep your password confidential, providing added security.

If you forget to type a password with a command that requires one, the SunLink Server software prompts you for it. Depending on the command that you type, the SunLink Server software also may prompt you for other pertinent information, such as your user name.

Using Command Confirmation

Some net commands require confirmation. The /yes and /no options help expedite net commands. When SunLink Server software reads one of these options, it does not pause to display the corresponding prompt. Instead, it accepts the /yes or /no option as your response to the prompt.

You can use net commands with /yes (/y) and /no (/n) options to create batch files and shell scripts that are not interrupted by SunLink Server prompts.

For example, if you use the net logoff command to log off the local area network with connections to remote shared resources intact, SunLink Server software displays a prompt similar to the following:

You have the following remote connections:

LPT1

Continuing will cancel the connections.

Do you want to continue this operation? (Y/N) [Y]:

You can use the /yes and /no options with any net command to anticipate and respond to a prompt. For example, you are not prompted for confirmation when you type the following:

net logoff /yes

Using Abbreviations

The command reference pages in this chapter always use the full command names, command options, and service names. However, SunLink Server software recognizes abbreviations.

You can abbreviate any command option by typing enough letters to distinguish it from other command options. For example, the following is the syntax for the net accounts command:

net accounts [/forcelogoff:{minutes|no }] [/minpwlen:length] [/maxpwage:{days|unlimited}][/minpwage:days] [/uniquepw:number]

You can abbreviate the options, as illustrated in the following example:

net accounts /f:10 /minpwl:6 /ma:unlimited /minpwa:7 /u:3

You cannot abbreviate option values (for example, the unlimited option value for /maxpwage).

Using Special Characters With Commands

Some of the names or passwords that you need to enter may contain one or more special characters; for example, an ampersand (&). When you are at the Solaris system command prompt typing a name with a special character in a SunLink Server command, you must use an escape character (the backslash [ \ ]) before each special character. If you are at a client computer, you can surround the string containing the special characters in double quotation marks.

For example, to log in with the user name marksp and the password mrkt&dev from the system command prompt, you would type the following:

net logon marksp mrkt\&dev

Some commonly used Solaris system special characters include the following: asterisk (*); semicolon (;); pipe (|); square brackets ([ ]); parentheses [( )]; question mark (?); ampersand (&); caret (^); backslash (\); greater-than and less-than signs (< >); blank ( ) and the "at" sign (@).

There are other Solaris special characters that you may encounter. For more information on special characters, consult your Solaris system documentation.

Typing Path Names With Solaris System net Commands

The Solaris system uses a forward slash to separate names in a path. This is different from client computers, which use backslashes. Note, however, that the great majority of commands will work with either forward or backward slashes.

When typing path names at a Solaris system command prompt, you can use any of the following methods:

net share tmpshare=c:/tmp /us:10 /r:"Share for temporary use"

net share tmpshare=c:\\tmp /us:10 /r:"Share for temporary use"

net share 'tmpshare=c:\tmp' r:"Share for temporary use"

When including spaces in values, you may want to enclose the value in double quotation marks. For example, to change the comment for the domain guests group, you would type the following command:

net group "domain guests" /comment: "All domain guests"

Typing Path Names at Client Computers

Client computer operating systems, such as Windows 95 and Windows NT, use backslashes to separate names in paths. For example:

net use f: \\product\data

Understanding Command Syntax

Directions in man pages for using SunLink Server commands will be easier to understand and use if you keep the following concepts in mind:

Getting Help on net Commands

Online help is available for all of the net commands that you can enter at the server command prompt. It provides command parameters, syntax, details about a command, and examples of the command in use.

To obtain information about a net command option, type one of the following commands at the SunLink Server system prompt.

Table 2-2 Help on net Commands

Command 

Description 

net help

Names of available net commands.

net help command

Description, syntax, and options for net commands.

net command /help

Description, syntax, and options for net commands.

net command /?

Syntax only for net commands.

net help command /options

Detailed description of the options of the command you selected. 

SunLink Server net Command Options

The following table includes descriptions of the SunLink Server net command options that are available at the SunLink Server command prompt.

Table 2-3 SunLink Server net Command Options

Command 

Description 

net access

Displays or modifies resource permissions on servers. Use this command only for displaying and modifying permissions on pipes and printer queues. Use net perms for managing permissions on all other types of resources.

net accounts

Displays the role of servers in a domain and displays or modifies password and login user requirements. 

net admin

Runs a SunLink Server command or starts a command processor on a remote server. 

net auditing

Displays and modifies the auditing settings of a resource. 

net browser

Displays the list of domains that are visible from a local server or the list of computers that are active in a domain. 

net computer

Displays or modifies the list of computer accounts in a domain. This command also can be entered as the following: net computers

net config

Displays the controllable services that are running.  

net config server

Displays or changes settings for the server service while it is running.  

net continue

Reactivates suspended services when typed at a server, and reactivates shared printers that have been disabled by net pause when typed at a client computer.

net device

Displays list of device names and controls shared printers. When used without options, this command displays the status of all shared printers at the specified server. When used with the printername option, this command displays only the status of the specified printer.

net file

Displays the names of all open shared files and the number of file locks, if any, on each file. You can also use this command to close shared files. When used without options, this command lists all of the open files at a server. You can also type this command as net files.

net group

Adds, displays, or modifies global groups. This command also can be typed as net groups.

net help

Provides lists of network commands and topics for which you can get help, or provides help for a specific command or topic.

net helpmsg

Provides help for a network error message. 

net localgroup

Adds, displays, or modifies local groups in domains. You can also type this command as net localgroups.

net logoff

Logs off a user name from the network. 

net logon

Logs in a user name to the server and sets the user name and password for the user's client. If you do not specify a user name with this command, the default user name will be your Solaris system login name. 

net password

Changes the password for a user account on a server or in a domain. 

net pause

Suspends services or disables printers at a server. (Note: After you have followed the instructions in Chapter 4 of this guide to set up your Solaris printer, establish it as a SunLink Server shared printer, and make it available to your Microsoft Windows clients, do not use the net pause command as a method to pause the print queue. That command is interpreted by SunLink Server software as a command to disable the printer rather than merely to pause the queue. Instead, to pause the queue by way of the command line, use the net print /hold command.)

net perms

Displays or modifies resource permissions and ownership information on servers. The resources on which this command currently operates are shares, directories, and files. 

net print

Displays or controls print jobs and printer queues; also sets or modifies options for a printer queue. (See the note in the net pause section.)

net send

Sends a message to connected client computers. 

net session

Lists or disconnects sessions between a server and clients. When used without options, this command displays information about all of the sessions with the local server. You can also type this command as net sessions.

net share

Creates, deletes, modifies, or displays shared resources. Use this command to make a resource available to clients. When used without options, this command displays information about all of the resources being shared on the server.  

net sid

Performs translations between account names and their corresponding security identifiers (SIDs). 

net start

Starts a service or, if used without options, displays a list of services that are running. The services that you can start are Alerter, Computer Browser, Directory Replicator, EventLog, Net Logon, Netrun, Server, Time Source, and WINS. 

net statistics

Displays or clears the statistics log. 

net status

Displays a server's computer name, configuration settings, and a list of shared resources. 

net stop

Stops a network service. 

net time

Synchronizes the client's clock with that of a server or domain, or displays the time for a server or domain. 

net trust

Establishes and breaks trust relationships between domains, and lists trust information for a specified domain. 

net user

Adds, modifies, or deletes user accounts or displays user account information. 

net version

Displays version of network software currently running on the computer at which the command is issued. 

net view

Displays list of servers or displays resources being shared by a server. 

About lanman.ini File Entries

This section lists and describes the lanman.ini file parameters that you can modify to change SunLink Server system configuration and performance. (Other configuration values are stored in the SunLink Server Registry, as well; see Appendix A, SunLink Server Registry.) The configuration values within the lanman.ini file are vital to the proper operation of the SunLink Server program, and editing this file is a task that should be performed only by experienced administrators.

When SunLink Server software is first installed, the lanman.ini file (/etc/opt/lanman/lanman.ini) contains some default parameter values. Other parameters and the titles of the sections in which they reside are added whenever you change the SunLink Server configuration. Only parameters that have been changed to values other than their default values are added to the lanman.ini file. If a parameter does not appear in the file (or is commented out with a semicolon), it is set to its default value.

Before attempting to change any of the parameters available in the lanman.ini file, it is useful to understand the relationship between the lanman.ini file entries and server defaults.

Every server parameter has a default setting. To display and edit default settings, a utility program called srvconfig is provided in the /opt/lanman/sbin directory.

You can edit the lanman.ini file to set parameters to values other than the defaults. The value assigned to any parameter in the lanman.ini file always supersedes the default value for that parameter. Note that no changes will actually take effect until you have stopped and then restarted the server.

When you want to set the value of a parameter to something other than the default by directly editing the lanman.ini file, locate (or add) the appropriate section title in the file, and then add the desired parameter=value entry.

File Syntax

Within each section of the lanman.ini file, parameters are listed as follows:

How to Change a lanman.ini File Parameter
  1. Use the srvconfig command to display default settings for the server parameters:

/opt/lanman/sbin/srvconfig -p | more

  1. Edit the lanman.ini file using vi or a similar text editor.

    The file is in the /etc/opt/lanman directory. You may have to add a section heading to the file; for example [ lmxserver ]. You then need to add a parameter=value pair to the appropriate section of the lanman.ini file. (See the section, "About lanman.ini File Entries".)

  2. Stop and restart the server for the new values to take effect.

For more information about the srvconfig command, type man srvconfig at the SunLink Server command prompt.

File Parameters

The following tables describe the configurable parameters in the lanman.ini file. The parameters are grouped according to the section of the lanman.ini file in which they reside.

The lanman.ini file contains additional parameters that are not included in the following tables. These parameters are for debugging purposes and you should not modify them.

Table 2-4 [Lmxserver] Section Parameters

Parameter 

Description, Values, and Default Setting 

anncmailslot

The name of the mail slot used for periodic server announcements. 

Values: A path up to a maximum of 256 characters. Default: \\*\MAILSLOT\LANMAN

Note that backslashes must be doubled on input or else the entire input line must be enclosed in single quotation marks. (Type text\\text or `text\text` to enter text with a single backslash.)

appsources

The names of the modules that can write to the application log. 

Default: The server initializes the value of this parameter at startup. 

country

The country code for server-generated messages. Default is 001. 

Other values: 

Asia--099; Australia--061; Belgium--032; Canada--002; Denmark--045; Finland--358; France--033; Germany--049; Italy--039; Japan--081; Latin America--003; Netherlands--031; Norway--047; Portugal--351; Spain--034; Sweden--046; Switzerland--041; United Kingdon--044; United States--001 (default--001) 

dll_dir

The path to the directory containing message text files used by SunLink Server Solaris system commands. 

Default: /opt/lanman/shares/asu/system32

lang

Defines the character set that SunLink Server software uses for processing client requests. 

Default: en_US

listenextension

The extension that the Solaris system Listener program, by default, applies to the name of the server computer. This parameter is ignored if the listenname parameter in the [server] section is used.

Values: 0-13 characters and a null value are acceptable. Default: .SERVE

listennamechk

If set to yes, it forces any name specified with the listenname parameter to be different than the Solaris machine name or the Solaris machine name with a .serve extension in order to avoid name conflicts with the Solaris Listener.

Default: Vendor specific 

lmaddonpath

The directory for dynamic libraries bound into the server program and called at various times during server execution, as described in the /usr/include/lmx/lmaddon.h header file. The server looks for these dynamic libraries on startup.

Values: A path up to a maximum of 256 characters. Default: /opt/lanman/lib/addon/lmaddon

lmgetmsg_path

Search order for message text files used by SunLink Server. 

Default: netmsg.dll, kernel32.dll, locallspl.dll, asumsg.dll

lptmpdir

The location of the spooling directory for temporary files used by the Solaris system's LP (printer) subsystem. 

Default: /var/spool/lp/tmp/uname

where uname is the server's Solaris system name. (This is not changeable by users.)

mapaclblob

Configures whether to use memory-mapped file operations when accessing the SunLink Server Access Control List database. 

Values: yes, no. Default: yes 

mapchangelogblob

Configures whether to use memory-mapped file operations when accessing the SunLink Server Change Log database. 

Values: yes, no. Default: no 

maplsablob

Configures whether to use memory-mapped file operations when accessing the SunLink Server Local Security Authority database. 

Values: yes, no. Default: no 

mapregistryblob

Configures whether to use memory-mapped file operations when accessing the SunLink Server Registry database. 

Values: yes, no. Default: no 

mapsamblob

Configures whether to use memory-mapped file operations when accessing the SunLink Server Security Accounts Manager database. 

Values: yes, no. Default: no 

maxfilesize

The maximum file size, in kilobytes, that the Solaris system redirector will allow a "local Solaris user" to create on a local system. 

Values: 100 - unlimited. Default: 2097152 

msgforward

Specifies if SunLink Server software implements message forwarding between clients. Implementation of message forwarding is not recommended. 

Values: yes (implement forwarding) or no (do not implement forwarding). Default: no 

nativelm

An additional field in the session setup request/response. 

Default: SunLink Server 

nativeos

An additional field in the session setup request/response.  

Default: UNIX x.x Generic (where x.x is the release number)

netaddonpath

The directory in which the SunLink Server program looks for dynamic libraries on startup. Dynamic libraries found in the directory are bound into the SunLink Server program and used to access the various network interfaces on the server computer. Sample source for a network interface file is located in the default directory. 

Values: A path up to a maximum of 256 characters. Default:/opt/lanman/lib/addon/networks

nethelpfile

The location of the help file used by the net help command (relative to /var/opt/lanman/msgfiles).

Default: /opt/lanman/msgfiles/net.hlp

netmsgwait

The interval, in seconds, that the server waits for a response when it sends a message that requires one. 

Values: 0 - unlimited. Default: 300 

network

The network device names and NetBIOS name-passing type for the network(s) the server should use. 

Values: sets of four items separated by commas, each set of four separated from the next by a space. The following four items are in each set: 

  1. The device name for virtual circuit access.

    The device name for datagram network access.

    A digit identifying the NetBIOS interface convention used by the two devices above. Currently there is only one convention compiled into the server: 0 = OSI NetBIOS convention.

    The name of the transport provider, as returned by the nlsprovider system call. (For networks not configured to accept incoming connections through the Solaris system Listener program, this can be any arbitrary string.)

prebinduxredir

Controls the name that the Solaris system net command binds when it uses the Solaris system redirector (uxredir). If this parameter is set to yes, the server pre-binds a NetBIOS name that will be used by all Solaris system net commands. Because this name is pre-bound, the net command does not need to bind its own name, and this quickens the Solaris system's net access to the server. If this parameter is set to no, then each net command will use its own unique name with somewhat slower performance resulting.

Values: yes, no. Default: yes 

secsources

The names of the modules that can write to the security log.  

Default: The server initializes the value of this parameter at startup. 

srvstathelpfile

The location of the help file used by the Activity Monitor. 

Default: /opt/lanman/msgfiles/srvstat.hlp

stacksize

The size of the stack, in bytes, for each task internal to the server. 

Values: 12000 - unlimited. Default: 20000 

syssources

The names of the modules that can write to the system log. 

Default: The server initializes the value of this parameter at startup. 

Table 2-5 [Fsi] Section Parameters

Parameter 

Description, Values, and Default Setting 

fsaddonpath

The location of dynamic link libraries (DLL) that support file systems on the server. 

Values: A path up to a maximum of 256 characters. Default: /opt/lanman/lib/addon/fsaddon

fslibname

The subdirectory of the directory identified by fslibpath where new file systems are located.

Values: A path up to a maximum of 256 characters. Default: lmfsiops.so

fslibpath

The location of new file systems on the server. 

Values: A path up to a maximum of 256 characters. Default: /usr/lib/fs

fsmap

File system type identifiers that map unknown file systems to known file system types. 

Values: a comma-separated list of mappings. Default: unknown:s5,nfs:nfs,sfs:vxfs,cdfs:vxfs

fsnosupport

Maps unknown file system to specified file system.  

Default: s5

remotemounts

The names of file system types that indicate remotely mounted file systems. 

Default: nfs

Table 2-6 [Workstation] Section Parameters

Parameter 

Description, Values, and Default Setting 

domain

The name of the domain that includes the server. 

Values: any name of up to 15 characters, including letters, numbers, and the following characters: ! # $ % & ( ) - . ^ _ { } ~ ; Default: <servername>_dom

Table 2-7 [Server] Section Parameters

Parameter 

Description, Values, and Default Setting 

listenname

If set, this is the server's name on the network. If not set, the SunLink Server system may receive client connections from the Solaris Listener on the Solaris machine name with a .serve extension (such as liberty.serve). This is implementation dependent. The Solaris system machine name can be determined by using the uname -n command.

To change the value of the listenname parameter, use the setservername command. For more information about this command, type man setservername at the SunLink Server command prompt.

Values: any name of 1-15 characters. Default: null 

maxclients

Identifies the maximum number of simultaneous client sessions that the server must support. Default: 1000. 

srvservices

The list of keywords for the services that start automatically when the server is started. Because services are started in the order they appear in the srvservices entry, you must ensure that netlogon appears before any services that require it.

Default: alerter, netlogon, browser

Table 2-8 [Psi] Section Parameters

Parameter 

Description, Values, and Default Setting 

psaddonpath

The location of dynamically linked libraries (DLLs) that support printer subsystems on the server. 

Values: A path up to a maximum of 256 characters. Default: /opt/lanman/lib/addon/psaddon