HP SnA 2일차 오전-1

IA/System Admin

HP SnA 2일차 오전-1

kiostory 2012. 6. 20. 09:36

HP-UX rx233 B.11.31 ia64 hp server rx1620

login: root
Password:
Last successful login: Mon Jun 18 16:16:02 KST 2012 ::ffff:59.29.224.128
Last authentication failure: Mon Jun 18 16:44:17 KST 2012
Please wait...checking for disk quotas
(c)Copyright 1983-2006 Hewlett-Packard Development Company, L.P.
(c)Copyright 1979, 1980, 1983, 1985-1993 The Regents of the Univ. of California
(c)Copyright 1980, 1984, 1986 Novell, Inc.
(c)Copyright 1986-2000 Sun Microsystems, Inc.
(c)Copyright 1985, 1986, 1988 Massachusetts Institute of Technology
(c)Copyright 1989-1993 The Open Software Foundation, Inc.
(c)Copyright 1990 Motorola, Inc.
(c)Copyright 1990, 1991, 1992 Cornell University
(c)Copyright 1989-1991 The University of Maryland
(c)Copyright 1988 Carnegie Mellon University
(c)Copyright 1991-2006 Mentat Inc.
(c)Copyright 1996 Morning Star Technologies, Inc.
(c)Copyright 1996 Progressive Systems, Inc.

Confidential computer software. Valid license from HP required for
possession, use or copying. Consistent with FAR 12.211 and 12.212,
Commercial Computer Software, Computer Software Documentation, and
Technical Data for Commercial Items are licensed to the U.S. Government
under vendor's standard commercial license.

You have mail.

Value of TERM has been set to "vt100".
WARNING: YOU ARE SUPERUSER !!

root@rx233 [/root]
#

root@rx233 [/root]
# smhstartconfig

HPSMH 'autostart url' mode.........: on
HPSMH 'start on boot' mode.........: OFF
Start Tomcat when HPSMH starts.....: OFF
HPSMH on Apache 2.2................: on
HPSMH on Apache 2.0................: OFF

root@rx233 [/root]
# echo "smhstartconfig -a off -b on"
smhstartconfig -a off -b on

root@rx233 [/root]
# echo "direct connection to https://server:2381"
direct connection to https://server:2381

root@rx233 [/root]
#

root@rx233 [/root]
# echo "smh can use only root group"
smh can use only root group

root@rx233 [/root]
# nsquery group root

Using "files" for the group policy.

Searching /etc/group for root
Group name: root
Group Id: 0
Group membership: root
Switch configuration: Terminates Search

root@rx233 [/root]
# nsquery hosts rx222

Using "files" for the hosts policy.

Searching /etc/hosts for rx222
Hostname: rx222
Aliases:
Address: 59.29.225.222
Switch configuration: Terminates Search

root@rx233 [/root]
# cat /etc/group
root::0:root
other::1:root,hpdb
bin::2:root,bin
sys::3:root,uucp
adm::4:root,adm
daemon::5:root,daemon
mail::6:root
lp::7:root,lp
tty::10:
nuucp::11:nuucp
users::20:root
nogroup:*:-2:
smbnull::101:
cimsrvr::102:
opcgrp::177:
hpsmh::103:
sshd::104:
tftp::105:
class::301:
class2::302:user1,user2,user3,user4,user5,user6,user7,user8,user9,user10,user11,user12,user13,user14,user15,user16,user17,user18,user19,user20,user21,user22,user23,user24

root@rx233 [/root]
# df -Ik
df: illegal option -- I
usage : df [-F FStype] [-V] [-egiklnsvfb] [-t|-P] [-o specific_options]
[special | directory ...]

root@rx233   [/root]
# df -k
/home                  (/dev/vg00/lvol4       ) : 1170704 total allocated Kb
                                                   1148872 free allocated Kb
                                                     21832 used allocated Kb
                                                         2 % allocation used
/opt                   (/dev/vg00/lvol5       ) : 10684080 total allocated Kb
                                                   4993104 free allocated Kb
                                                   5690976 used allocated Kb
                                                        54 % allocation used
/tmp                   (/dev/vg00/lvol6       ) : 1170600 total allocated Kb
                                                   1149760 free allocated Kb
                                                     20840 used allocated Kb
                                                         2 % allocation used
/usr                   (/dev/vg00/lvol7       ) : 6828408 total allocated Kb
                                                   3603352 free allocated Kb
                                                   3225056 used allocated Kb
                                                        48 % allocation used
/var                   (/dev/vg00/lvol8       ) : 4562840 total allocated Kb
                                                   4106704 free allocated Kb
                                                    456136 used allocated Kb
                                                        10 % allocation used
/stand                 (/dev/vg00/lvol1       ) : 1822248 total allocated Kb
                                                   1631456 free allocated Kb
                                                    190792 used allocated Kb
                                                        11 % allocation used
/                      (/dev/vg00/lvol3       ) : 1042248 total allocated Kb
                                                    806880 free allocated Kb
                                                    235368 used allocated Kb
                                                        23 % allocation used

root@rx233   [/root]
# df -k
/opt                   (/dev/vg00/lvol5       ) : 10684080 total allocated Kb
                                                   4993104 free allocated Kb
                                                   5690976 used allocated Kb
                                                        54 % allocation used
/tmp                   (/dev/vg00/lvol6       ) : 1170600 total allocated Kb
                                                   1149760 free allocated Kb
                                                     20840 used allocated Kb
                                                         2 % allocation used
/usr                   (/dev/vg00/lvol7       ) : 6828408 total allocated Kb
                                                   3603352 free allocated Kb
                                                   3225056 used allocated Kb
                                                        48 % allocation used
/var                   (/dev/vg00/lvol8       ) : 4562832 total allocated Kb
                                                   4106680 free allocated Kb
                                                    456152 used allocated Kb
                                                        10 % allocation used
/stand                 (/dev/vg00/lvol1       ) : 1822248 total allocated Kb
                                                   1631456 free allocated Kb
                                                    190792 used allocated Kb
                                                        11 % allocation used
/                      (/dev/vg00/lvol3       ) : 1042248 total allocated Kb
                                                    806880 free allocated Kb
                                                    235368 used allocated Kb
                                                        23 % allocation used

root@rx233 [/root]
# echo "umount /home through smh(web)"
umount /home through smh(web)

root@rx233   [/root]
# bdf
Filesystem          kbytes    used   avail %used Mounted on
/dev/vg00/lvol3    1048576 235368 806880   23% /
/dev/vg00/lvol1    1835008 190792 1631456   10% /stand
/dev/vg00/lvol8    4587520 456152 4106680   10% /var
/dev/vg00/lvol7    6856704 3225056 3603352   47% /usr
/dev/vg00/lvol6    1179648   20840 1149760    2% /tmp
/dev/vg00/lvol5    10723328 5690976 4993104   53% /opt

root@rx233   [/root]
# bdf
Filesystem          kbytes    used   avail %used Mounted on
/dev/vg00/lvol3    1048576 235496 806752   23% /
/dev/vg00/lvol1    1835008 190792 1631456   10% /stand
/dev/vg00/lvol8    4587520 456168 4106656   10% /var
/dev/vg00/lvol7    6856704 3225056 3603352   47% /usr
/dev/vg00/lvol6    1179648   20840 1149760    2% /tmp
/dev/vg00/lvol5    10723328 5690976 4993104   53% /opt
/dev/vg00/lvol4    1179648   21832 1148872    2% /home

root@rx233 [/root]
# echo "mount again, /home"
mount again, /home

root@rx233 [/root]
# echo "umount, mount again from command"
umount, mount again from command

root@rx233 [/root]
# umount /home

root@rx233   [/root]
# bdf
Filesystem          kbytes    used   avail %used Mounted on
/dev/vg00/lvol3    1048576 235752 806496   23% /
/dev/vg00/lvol1    1835008 190792 1631456   10% /stand
/dev/vg00/lvol8    4587520 456168 4106656   10% /var
/dev/vg00/lvol7    6856704 3225056 3603352   47% /usr
/dev/vg00/lvol6    1179648   20840 1149760    2% /tmp
/dev/vg00/lvol5    10723328 5690976 4993104   53% /opt

root@rx233 [/root]
# mount /home

root@rx233 [/root]
# echo "if user is in the filesystem that we want to umount, it can't umount"
if user is in the filesystem that we want to umount, it can't umount

root@rx233 [/root]
# umount /home
umount: cannot unmount /dev/vg00/lvol4 : Device busy
umount: return error 1.

root@rx233 [/root]
#

root@rx233 [/root]
# su - user1
(c)Copyright 1983-2006 Hewlett-Packard Development Company, L.P.
(c)Copyright 1979, 1980, 1983, 1985-1993 The Regents of the Univ. of California
(c)Copyright 1980, 1984, 1986 Novell, Inc.
(c)Copyright 1986-2000 Sun Microsystems, Inc.
(c)Copyright 1985, 1986, 1988 Massachusetts Institute of Technology
(c)Copyright 1989-1993 The Open Software Foundation, Inc.
(c)Copyright 1990 Motorola, Inc.
(c)Copyright 1990, 1991, 1992 Cornell University
(c)Copyright 1989-1991 The University of Maryland
(c)Copyright 1988 Carnegie Mellon University
(c)Copyright 1991-2006 Mentat Inc.
(c)Copyright 1996 Morning Star Technologies, Inc.
(c)Copyright 1996 Progressive Systems, Inc.

$ hmh
su: hmh: not found.
$ smh
su: smh: not found.
$ which smh
no smh in /usr/bin /usr/ccs/bin /opt/perl/bin /usr/contrib/bin /usr/contrib/Q4/bin /opt/gvsd/bin /opt/ipf/bin /opt/hpnpl//bin /opt/nettladm/bin /opt/fcms/bin /opt/wbem/bin /opt/wbem/sbin /opt/sas/bin /opt/graphics/common/bin /opt/atok/bin /usr/bin/X11 /usr/contrib/bin/X11 /opt/sec_mgmt/bastille/bin /opt/caliper/bin /opt/drd/bin /opt/dsau/bin /opt/dsau/sbin /opt/resmon/bin /opt/firefox /opt/gnome/bin /opt/perf/bin /opt/propplus/bin /usr/contrib/kwdb/bin /opt/perl_32/bin /opt/perl_64/bin /opt/prm/bin /opt/sfm/bin /opt/swm/bin /opt/sec_mgmt/spc/bin /opt/ssh/bin /opt/swa/bin /opt/hpsmh/bin /opt/thunderbird /opt/sentinel/bin /opt/langtools/bin /opt/wlm/bin /opt/gwlm/bin /opt/ignite/bin /opt/starburst/bin /opt/unzip/bin /opt/aCC/bin /opt/cadvise/bin
$ whereis smh
smh: /usr/sbin/smh /opt/prm/lbin/smh /usr/share/man/man1m.Z/smh.1m
$
$ echo "user1 cannot use smh"
user1 cannot use smh
$ echo "but we can modify the smh access control using web and tui(smh -r)"
but we can modify the smh access control using web and tui(smh -r)
$
$ exit
logout

root@rx233 [/root]
# smh -r
The privileges set for the user from the Text User Interface doesn't
apply to Graphical User Interface. System Management Homepage(SMH) in
Graphical User Interface has a different way of setting the privileges.
Please look at smh(1M) man page for more information

Do you want to continue (y/n) <y>: y

SMH->Restricted SMH->Select users

------------------------------------------------------------------------------------------------------------------------------------------------------
Login Primary Has SAM
users Group privileges
======================================================================================================================================================

<----------------------------------------------------------------------------------------------------------------------------------------- > SCROLL \/
x-Exit smh ENTER-Select /-Search
r-Remove Privileges g-Display Groups

$ env
_=/usr/bin/env
MANPATH=/usr/share/man/%L:/usr/share/man:/usr/contrib/man/%L:/usr/contrib/man:/usr/local/man/%L:/usr/local/man:/opt/VRTS/vxfs5.0/man:/opt/ldapux/share/man/%L:/opt/ldapux/share/man:/opt/ipf/man:/opt/ldapux/ypldapd/man:/opt/hpnpl//man:/opt/samba/man:/opt/samba/WTEC_Support_Tools/man:/opt/samba/cfsm_man:/opt/cifsclient/share/man:/opt/openssl/man:/opt/openssl/prngd/man:/opt/wbem/share/man/%L:/opt/wbem/share/man:/opt/graphics/common/man:/opt/amgr/man/%L:/opt/amgr/man:/opt/sec_mgmt/share/man:/usr/dt/share/man:/opt/caliper/man/%L:/opt/caliper/man:/opt/drd/share/man/%L:/opt/drd/share/man:/opt/dsau/man:/opt/resmon/share/man/%L:/opt/resmon/share/man:/opt/gnome/man:/opt/perf/man/%L:/opt/perf/man:/opt/propplus/share/man:/usr/contrib/kwdb/share/man:/opt/perl_32/man:/opt/perl_64/man:/opt/prm/man/%L:/opt/prm/man:/opt/psb/healthtest/share/man:/opt/sfm/share/man:/opt/swm/share/man/%L:/opt/swm/share/man:/opt/swa/share/man/%L:/opt/swa/share/man:/opt/ssh/share/man:/opt/sentinel/man/%L:/opt/sentinel/man:/opt/langtools/share/man/%L:/opt/langtools/share/man:/opt/wlm/share/man/%L:/opt/wlm/share/man:/opt/openssl/fips/0.9.7/man:/opt/openssl/fips/0.9.8/man:/opt/gwlm/man/%L:/opt/gwlm/man:/opt/icod/man/%L:/opt/icod/man:/opt/ignite/share/man/%L:/opt/ignite/share/man:/opt/starburst/man:/opt/unzip/man:/opt/aCC/share/man/%L:/opt/aCC/share/man:/opt/cadvise/share/man/%L:/opt/cadvise/share/man:/opt/imake/man:/opt/perl/man
PATH=/usr/bin:/usr/ccs/bin:/opt/perl/bin:/usr/contrib/bin:/usr/contrib/Q4/bin:/opt/gvsd/bin:/opt/ipf/bin:/opt/hpnpl//bin:/opt/nettladm/bin:/opt/fcms/bin:/opt/wbem/bin:/opt/wbem/sbin:/opt/sas/bin:/opt/graphics/common/bin:/opt/atok/bin:/usr/bin/X11:/usr/contrib/bin/X11:/opt/sec_mgmt/bastille/bin:/opt/caliper/bin:/opt/drd/bin:/opt/dsau/bin:/opt/dsau/sbin:/opt/resmon/bin:/opt/firefox:/opt/gnome/bin:/opt/perf/bin:/opt/propplus/bin:/usr/contrib/kwdb/bin:/opt/perl_32/bin:/opt/perl_64/bin:/opt/prm/bin:/opt/sfm/bin:/opt/swm/bin:/opt/sec_mgmt/spc/bin:/opt/ssh/bin:/opt/swa/bin:/opt/hpsmh/bin:/opt/thunderbird:/opt/sentinel/bin:/opt/langtools/bin:/opt/wlm/bin:/opt/gwlm/bin:/opt/ignite/bin:/opt/starburst/bin:/opt/unzip/bin:/opt/aCC/bin:/opt/cadvise/bin
COLUMNS=150
LOGNAME=user1
ERASE=^H
SHELL=/usr/bin/sh
HOME=/home/user1
TERM=vt100
TZ=KST-9
LINES=50
$ ls
. not found
$ ls -al
. not found
$ dir
su: dir: not found.
$ ll
. not found
$ user
su: user: not found.
$ who
root pts/ta Jun 19 09:35
root pts/tb Jun 19 09:58
$ id
uid=301(user1) gid=301(class) groups=302(class2)
$ pwd
su: : Cannot access parent directories.
$ /usr/sbin/smh
DISPLAY variable is not set. Starting the Text User Interface. Please wait...
Neither the user 'user1' nor his primary group 'class' has Restricted sam privileges. Exiting!
$ ll
. not found
$ touch a
touch: a cannot create
$ pwd
su: : Cannot access parent directories.
$ exit
logout

root@rx233   [/root]
# bdf
Filesystem          kbytes    used   avail %used Mounted on
/dev/vg00/lvol3    1048576 235680 806568   23% /
/dev/vg00/lvol1    1835008 190792 1631456   10% /stand
/dev/vg00/lvol8    4587520 456440 4106376   10% /var
/dev/vg00/lvol7    6856704 3225056 3603352   47% /usr
/dev/vg00/lvol6    1179648   20840 1149760    2% /tmp
/dev/vg00/lvol5    10723328 5690976 4993104   53% /opt

root@rx233 [/root]
# mount /home

$ ll
total 0
$ exit
logout

root@rx233 [/root]
#

Do you want to continue (y/n) <y>: y

SMH->Restricted SMH->Select users

SMH->Restricted SMH->Functional Areas

Selected user : user1
------------------------------------------------------------------------------------------------------------------------------------------------------
Functional Areas Access Status
======================================================================================================================================================

SMH->Restricted SMH->Functional Areas

$ smh
su: smh: not found.
$ /usr/sbin/smh
DISPLAY variable is not set. Starting the Text User Interface. Please wait...

HP-UX System Management Homepage (Text User Interface)
SMH->Disks and File Systems->File Systems->Details
------------------------------------------------------------------------------------------------------------------------------------------------------
Properties
------------------------------------------------------------------------------------------------------------------------------------------------------

------------------------------------------------------------------------------------------------------------------------------------------------------
x-Exit smh l-Logical Volume p-Upgrade VxFS t-Toggle Global Device View
ESC-Back m-Modify 1-FileSystems Details Help

------------------------------------------------------------------------------------------------------------------------------------------------------
x-Exit smh l-Logical Volume m-Modify 1-FileSystems Details Help
ESC-Back u-Unmount/Remove p-Upgrade VxFS t-Toggle Global Device View

                                                HP-UX System Management Homepage (Text User Interface)
                                                      SMH->Disks and File Systems->File Systems
------------------------------------------------------------------------------------------------------------------------------------------------------
MountDirectory Type             Size         %Full     Mounted        Config         Source
------------------------------------------------------------------------------------------------------------------------------------------------------

------------------------------------------------------------------------------------------------------------------------------------------------------
x-Exit smh ESC-Back v-Add VxFS n-Add NFS a-Add CacheFS 1-File Systems Help
ENTER-Select h-Add HFS c-Add CDFS i-Add CIFS t-Toggle Global Device View /-Search

$ exut
su: exut: not found.
$ exit
logout

$ id
uid=301(user1) gid=301(class) groups=302(class2)
$ newgrp class2
$ id
uid=301(user1) gid=302(class2) groups=301(class)
$ touch a
$ ll
total 0
-rw-r--r--   1 user1      class2           0 Jun 19 10:32 a
$ newgrp class
$ touch b
$ ll
total 0
-rw-r--r--   1 user1      class2           0 Jun 19 10:32 a
-rw-r--r--   1 user1      class            0 Jun 19 10:32 b
$ newgrp class2
$ id
uid=301(user1) gid=302(class2) groups=301(class)
$ newgrp
$ id
uid=301(user1) gid=301(class) groups=302(class2)
$ tail /etc/passwd
user15:fnnmD.DGyptLU:315:301:student:/home/user15:/usr/bin/sh
user16:fnnmD.DGyptLU:316:301:student:/home/user16:/usr/bin/sh
user17:fnnmD.DGyptLU:317:301:student:/home/user17:/usr/bin/sh
user18:fnnmD.DGyptLU:318:301:student:/home/user18:/usr/bin/sh
user19:fnnmD.DGyptLU:319:301:student:/home/user19:/usr/bin/sh
user20:fnnmD.DGyptLU:320:301:student:/home/user20:/usr/bin/sh
user21:fnnmD.DGyptLU:321:301:student:/home/user21:/usr/bin/sh
user22:fnnmD.DGyptLU:322:301:student:/home/user22:/usr/bin/sh
user23:fnnmD.DGyptLU:323:301:student:/home/user23:/usr/bin/sh
user24:fnnmD.DGyptLU:324:301:student:/home/user24:/usr/bin/sh
$ tail /etc/shadow
tail: cannot open input
error: No such file or directory on file /etc/shadow
$
$ tail /etc/group
users::20:root
nogroup:*:-2:
smbnull::101:
cimsrvr::102:
opcgrp::177:
hpsmh::103:
sshd::104:
tftp::105:
class::301:
class2::302:user1,user2,user3,user4,user5,user6,user7,user8,user9,user10,user11,user12,user13,user14,user15,user16,user17,user18,user19,user20,user21,user22,user23,user24
$
$ ps
   PID TTY       TIME COMMAND
1929 pts/ta    0:00 sh
2367 pts/ta    0:00 ps
21280 pts/ta    0:00 sh
21279 pts/ta    0:00 telnetd
$ chsh /usr/bin/ksh
Invalid login name.
$ chsh
Invalid arguments
Usage: chsh [-r repository] login_name [shell]
$ chsh user1 /usr/bin/ksh
$ sh
$ ps
   PID TTY       TIME COMMAND
1929 pts/ta    0:00 sh
2372 pts/ta    0:00 sh
21280 pts/ta    0:00 sh
21279 pts/ta    0:00 telnetd
2373 pts/ta    0:00 ps
$ exit
$ ps
   PID TTY       TIME COMMAND
1929 pts/ta    0:00 sh
2374 pts/ta    0:00 ps
21280 pts/ta    0:00 sh
21279 pts/ta    0:00 telnetd
$ exit

$ ps
   PID TTY       TIME COMMAND
2375 pts/ta    0:00 ksh
2387 pts/ta    0:00 ps
21280 pts/ta    0:00 sh
21279 pts/ta    0:00 telnetd
$ kill -9 2375
Killed

root@rx233   [/root]
# ps
   PID TTY       TIME COMMAND
2388 pts/ta    0:00 ps
21280 pts/ta    0:00 sh
21279 pts/ta    0:00 telnetd

root@rx233 [/root]
#

저작자표시 비영리 변경금지 (새창열림)