This chapter describes Sun OTP components, plans, and plug-in. It also describes the Sun OTP deployment options and how you can customize the Sun OTP deployment.
The components installed by the N1 SPS (N1 Service Provisioning System) plans are as follows:
Table 4–1 N1 SPS Components
Components |
Folder |
Description |
---|---|---|
N1SPS |
/com/sun/OTP/management/n1sps |
Component to install Sun OTP application provisioning service (Sun N1 Service Provisioning System) |
N1SM |
/com/sun/OTP/management/n1sm |
Component to install Sun OTP system management service (Sun N1 System Manager) |
SunCluster |
/com/sun/OTP/availability/sc |
Component to install Sun OTP availability service (Sun Cluster) |
AccessManager |
/com/sun/OTP/security/jes_am |
Component to install Access Manager. This component is part of Sun OTP security service. |
DirectoryServer |
/com/sun/OTP/security/jes_ds |
Component to install Directory Server. This component is part of Sun OTP security service. |
WebServer |
/com/sun/OTP/security/jes_ws |
Component to install Web Server. This component is part of Sun OTP security service. |
Zone, ZoneRASSH, ZoneRARAW |
/com/sun/OTP/virtualization/zones |
Components to install zones |
sunotp-secure.driver.tar |
/com/sun/OTP/security/jass |
Component to administer Sun OTP JumpStart Architecture and Security Scripts (JASS) |
PatchOS |
/com/sun/OTP/Utilities |
Component to install patches on the OS |
SharedDisk |
/com/sun/OTP/Utilities |
Component to set up shared storage |
WebSSO |
/com/sun/OTP/security/WebSSO |
Component to administer Sun OTP Web SSO |
SharedComponents (internal to Sun OTP) |
/com/sun/OTP/shared_components |
Component to install Sun OTP shared services |
JESHA (internal to Sun OTP) |
/com/sun/OTP/security/jes_ha |
Component to administer high availability services for Sun OTP security service |
Init (internal to Sun OTP) |
/com/sun/OTP/Utilities |
Container Component that has constants and some common code. This common code is used by other components. |
OTPConfig (internal to Sun OTP) |
/com/sun/OTP/Utilities |
Component to store and validate the Sun OTP configuration variables |
SysMng (internal to Sun OTP) |
/com/sun/OTP/N1SM |
Component to administer N1SM |
The following figure shows the N1 SPS folder structure of Sun OTP plug-in.
This section describes the order of installing N1 SPS plans,plan re-runs, plan configuration files, and utility plans.
The following topics are discussed in this section:
A plan orchestrates deployment of multiple components.
To install Sun OTP, N1 SPS plans must be installed in the following order:
Setup Configuration
Patch
Install Availability Service
Configure Availability Service
Configure Solaris Containers (optional)
Setup Shared Storage (optional)
Install System Management Service
Install Provisioning Service
Install Security Service
Configure Components
Install Web SSO
Plan re-runs provides an option to re-run specific plans instead of reinstalling Sun OTP from the beginning. Plans can be re-run multiple times irrespective of the previous state of the plan.
The following plans can be re-run:
Set up Configuration
Configure Solaris Containers
Sun OTP system management service
Sun OTP application provisioning service
Sun OTP security service
Configure Sun OTP services for high availability
When you re-run a plan, plan re-runs read the registry and determines the state of the plan. Based on the state of the plan, plan re-runs perform the following actions.
The following are the possible actions of plan re-runs:
If you are running the plan for the first time, plan re-run runs the plan and updates the registry with the appropriate state.
If you are re-running a successful plan, plan re-run completes without performing any installation.
If you are re-running a failed plan, plan re-run uninstalls and reinstalls the components.
Plan configuration files are the variable sets provided by N1 SPS. You can create component variables for your plans using the variable sets. The Setup Configuration plan provided by Sun OTP accepts all the component variables and validates the variables provided in the variable set.
The following table lists the component variables used by Sun OTP plans. See Sun OTP Plan Settings Description for descriptions of each component variable.
Table 4–2 Component Variables Used by Sun OTP Plans
Sun OTP provides the following utility plans:
Table 4–3 Sun OTP Utility Plans
Plan |
Description |
---|---|
Patch |
Installs the OS patches on the Sun OTP host. |
Convert |
Converts the stand-alone Sun OTP host to the clustered Sun OTP host. |
Enable & Disable |
Enables and disables Sun OTP system management service and Sun OTP application provisioning service. |
Add User |
Adds Web SSO user. |
Change User Password |
Changes the password of existing Web SSO user. |
Remove User |
Removes Web SSO user. |
Install Driver |
Installs the Sun OTP SST package. |
UnInstall Driver |
Uninstalls the Sun OTP SST package. |
Harden |
Improves the security of the system by hardening the Sun OTP host. You can close the ports and disable the services that might present a security risk to the system. |
UnHarden & Keep |
Reopens the ports and enables the services that were closed by the hardening process. This plan rolls back only the unchanged configuration files to its default state. |
UnHarden & Revert |
Reopens the ports and enables the services that were closed by the hardening process. This plan rolls back all the configuration files, including the changed files, to its default state. |
A plug-in is a collection of plans and components. Sun OTP AHE plug-in is a collection of Sun OTP plans and components.
Sun OTP plans are modularized in a way that NEP developers can insert their own customization. NEP developers can insert their customization before or after the Sun OTP plans. NEP developers can copy the Sun OTP AHE plug-in and customize the OTP deployment with native command execution or with new plans. They can also write their own variable set as part of the new plans.
Sun OTP components are meant to be called only from Sun OTP plans. Sun OTP plans can be called from custom plans only if the order of installation of Sun OTP plans described in Order of Installing N1 SPS Plans is satisfied.
Do not customize the Sun OTP plans and Sun OTP variable set.
The following table lists some of the examples of solution specific steps and where it can be inserted in Sun OTP deployment.
Table 4–4 Examples of Solution Specific Steps
Examples of Solution Specific Steps |
Insertion Point in Sun OTP Deployment |
---|---|
User Administration |
After Sun OTP is installed |
Quorum Configuration |
After Sun OTP availability service is installed and configured |
Naming Services |
After OS is installed |
Shared Storage Configuration |
After Sun OTP availability service is installed and configured |