Oracle^® SuperCluster M8 and SuperCluster M7 Security Guide

Ensure That Name Services Only Use Local Files

The OS uses a number of databases of information about hosts, ipnodes, users, and groups. Data for these items come from a variety of sources. Host names and host addresses, for example, can be found in the /etc/hosts, NIS, LDAP, DNS, or Multicast DNS. Oracle strongly recommends use of DNS with SuperCluster, particularly for database SCAN addresses. Oracle cannot guarantee the successful operation of all SuperCluster features in the absence of DNS. However, systems in restricted environments are more secure if only local file entries are used for these items. For more information, refer to the Oracle Solaris passwd(4) man page, the shadow(4) man page, and the user_attr(4) man page.

1. Log in to one of the compute servers and access the host console as superuser.

   See Log into a Compute Server.

2. Configure name services to use only local files.

   # svccfg -s name-service/switch setprop config/default = astring: "files"
   # svccfg -s name-service/switch setprop config/host = astring: "files"
   # svccfg -s name-service/switch setprop config/password = astring: "files"
   # svccfg -s name-service/switch setprop config/group = astring: "files"
   # svccfg -s name-service/switch:default refresh