SUPER-UX Network System Administrator's Guide

Contents

Proprietary Notice

Documentation Log

Introduction

Chapter 1 Network Setup

1.1 Introduction

1.2 System Generation

1.3 Network Initialization

1.3.1 Network Initialization Notes

1.3.2 /etc/default/interface

1.3.3 /etc/inet/lhipfile

1.3.4 /etc/inet/rc.inet

1.3.5 /etc/default/rccustom

1.3.6 /etc/inet/rc.inetlog

1.3.7 /etc/inet/rc.inetroute

1.3.8 /etc/inet/rc.inetcmd

1.4 Setting Up Network System Files

1.4.1 Network System Files

1.4.2 Common Environment Files

1.4.3 Network Server

1.5 TCP Tuning

1.6 Routing

1.6.1 Static Routing

1.6.2 Dynamic Routing by /usr/sbin/routed

1.6.3 Dynamic Routing by /usr/sbin/gated

1.6.4 Routing Example

1.7 Ethernet Operation

1.7.1 IP Router Method Ethernet Operation

1.7.1.1 Hardware Configuration

1.7.1.2 Principle of Operation

1.7.1.3 SG Preparation

1.7.1.4 Line Trace

1.7.2 PCIA Ethernet Operation

1.7.2.1 Hardware Configuration

1.7.2.2 Principle of Operation

1.7.2.3 SG Preparation

1.7.2.4 Line Trace

1.7.2.5 Configuration Control

1.8 HIPPI Channel Operation

1.8.1 General Description

1.8.2 Channels

1.8.3 I-field and HIPPI Switch

1.8.4 Connection with Other I/O Devices

1.8.5 Upper Layer Driver Setup

1.8.6 System Tuning Parameters

1.8.7 Line Trace Usage

1.9 IP Router Method FDDI Operation

1.9.1 Hardware Configuration

1.9.2 Principle of Operation

1.9.3 SG Preparation

1.9.3.1 SX-4 SG Operation

1.9.3.2 IOX SG Operation

1.9.4 Line Trace

1.10 FDDI Operation

1.10.1 Hardware Configuration

1.10.2 Principle of Operation

1.10.3 SG Preparation

1.10.4 Line Trace

1.10.5 Configuration Control

1.11 Network Command Operation

1.11.1 SNMP

Chapter 2 Network File Administration

2.1 Network File System

2.1.1 Introduction

2.1.2 How NFS Works

2.1.3 Building an NFS Server

2.1.4 Remote Mounting a File System

2.1.5 Lock Manager

2.1.6 Debugging NFS

2.1.6.1 Troubleshooting

2.1.6.2 Remote Mount Failed

2.1.6.3 Programs Stop

2.1.6.4 Slow Operations

2.1.7 Incompatibility Between UNIX Versions

2.1.8 Clock Skew in User Programs

2.2 Automounter

2.2.1 Introduction

2.2.2 How the Automounter Works

2.2.3 Preparing the Maps

2.2.3.1 Conventions

2.2.3.2 Writing a Master Map

2.2.3.3 Writing a Direct Map

2.2.3.4 Writing an Indirect Map

2.2.3.5 Specifying Subdirectories

2.2.3.6 Using Substitutions

2.2.3.7 Using Environment Variables

2.2.4 Invoking the Automounter

2.2.4.1 Updating a Mount Table

2.2.4.2 Modifying the Maps

2.2.5 Troubleshooting

2.2.6 Warning

2.3 GFS

2.3.1 Introduction

2.3.2 Building a GFS Server

2.3.3 Building a GFS client

2.3.4 Remote Mounting a File System

2.3.5 Remote Mounting a File System

2.4 GFS-FC

2.4.1 Introduction

2.4.2 Building a GFS Server

2.4.3 Building a GFS client

2.4.4 Remote Mounting a File System

2.4.5 Remote Mounting a File System

Chapter 3 Network Information Service

3.1 Introduction

3.1.1 The NIS Map

3.1.2 The NIS Domain

3.1.3 Masters and Slaves

3.2 Structure and Command Summary

3.3 NIS Installation and Administration

3.3.1 Execute NIS Daemons

3.3.2 Setting Up a Master NIS Server

3.3.3 Adding Clients to NIS

3.3.4 Setting Up a Slave NIS Server

3.3.5 Setting Up an NIS Client

3.3.6 Modifying Existing Maps

3.3.6.1 Propagating an NIS Map

3.3.7 Making New NIS Maps

3.3.8 Adding a New NIS Server

3.3.9 Changing the Master Server

3.4 NIS Debugging

3.4.1 Client Problems

3.4.1.1 Commands Hang

3.4.1.2 NIS Service Unavailable

3.4.1.3 ypbind Crashes

3.4.1.4 ypwhich Inconsistent

3.4.2 Server Problems

3.4.2.1 Different Versions of an NIS Map

3.4.2.2 ypserv Crashes

3.5 C Library Routines

3.6 Security

3.6.1 Global and Local Data Base Files

3.6.2 Security Implications

3.6.3 Special NIS Password Change

3.7 When NIS Is Not in Use

3.8 Adding a User to a Node

3.8.1 Editing the Passwd NIS Data Base

3.8.2 Making a Home Directory

3.8.3 Specifying the New User's Environment

3.9 NIS Restrictions

Chapter 4 Berkeley Internet Name Domain

4.1 Introduction

4.2 The Name Service

4.3 Security

4.3.1 Unnecessary Glue

4.3.2 Insertion of Data into a Zone that is being Served

4.3.3 Denial of Service: Hash Bug Exploit

4.3.4 Denial of Service: TTL Inconsistency Attacks

4.4 Types of Zones

4.5 Types of Servers

4.5.1 Caching Only Server

4.5.2 Remote Server

4.5.3 Slave Server

4.6 Files

4.6.1 Boot Files

4.6.2 Resolver Configuration

4.6.3 Cache Initialization File

4.6.4 Domain Data Files

4.6.5 Standard Resource Record Format

4.6.6 Discussion aboutg the TTL

4.6.7 About Secure Zones

4.6.8 About Hesiod, and HS-class Resource Records

4.6.9 Sample Files

4.6.9.1 Boot Files

4.6.9.2 Remote Server / DNS Client

4.6.9.3 root.cache

4.6.9.4 named.local

4.6.9.5 host.rev

4.6.9.6 Hosts

4.7 Setting up Your Own Domain

4.7.1 Internet

4.7.2 Subdomains of Existing Domains

4.8 Domain Management

4.8.1 /var/run/named.pid

4.8.2 /etc/hosts

4.8.3 Signals

4.9 Building a System with a Name Server

4.9.1 Resolver Routines in libc

4.10 Bibliography

Chapter 5 Sendmail

5.1 Abstract

5.2 Normal Operations

5.2.1 The System Log

5.2.1.1 Format

5.2.1.2 Levels

5.2.2 Dumping State

5.2.3 The Mail Queue

5.2.3.1 Printing the Queue

5.2.3.2 Forcing the Queue

5.2.4 Disk Based Connection Information

5.2.5 The Alias Database

5.2.5.1 Rebuilding the Alias database

5.2.5.2 Potential Problems

5.2.5.3 List Owners

5.2.6 Per-User Forwarding (.forward Files)

5.2.7 Special Header Lines

5.2.7.1 Errors-To:

5.2.7.2 Apparently-To:

5.2.7.3 Precedence

5.2.8 IDENT Protocol Support

5.2.9 Internet Domain Name Server

5.3 Arguments

5.3.1 Queue Interval

5.3.2 Daemon Mode

5.3.3 Forcing the Queue

5.3.4 Debugging

5.3.5 Changing the Values of Options

5.3.6 Trying a Different Configuration File

5.3.7 Logging Traffic

5.3.8 Testing Configuration Files

5.3.9 Persistent Host Status Information

5.4 Tuning

5.4.1 Time-Outs

5.4.1.1 Queue Interval

5.4.1.2 Read Time-Outs

5.4.1.3 Message Time-Outs

5.4.2 Forking During Queue Runs

5.4.3 Queue Priorities

5.4.4 Load Limiting

5.4.5 Delivery Mode

5.4.6 Log Level

5.4.7 File Modes

5.4.7.1 To suid or not to suid?

5.4.7.2 Should my Alias Database be Writeable?

5.4.8 Connection Caching

5.4.9 Name Server Access

5.4.10 Moving the Per-User Forward Files

5.4.11 Free Space

5.4.12 Maximum Message Size

5.4.13 Privacy Flags

5.4.14 Send to Me Too

5.5 The Whole Scoop On The Configuration File

5.5.1 R and S -- Rewriting Rules

5.5.1.1 The Left-hand Side

5.5.1.2 The Right-hand Side

5.5.1.3 Semantics of Rewriting Rule Sets

5.5.1.4 Ruleset Hooks

5.5.1.4.1 check_relay

5.5.1.4.2 check_mail

5.5.1.4.3 check_rcpt

5.5.1.4.4 check_compat

5.5.1.5 IPC Mailers

5.5.2 D -- Define Macro

5.5.3 C and F -- Define Classes

5.5.4 M -- Define Mailer

5.5.5 H -- Define Header

5.5.6 O -- Set Option

5.5.7 P -- Precedence Definitions

5.5.8 V -- Configuration Version Level

5.5.9 K -- Key File Declaration

5.6 Command Line Flags

5.7 Queue File Formats

5.8 Summary Of Support Files

Chapter 6 Timed Installation and Operation Guide

6.1 Introduction

6.2 Guidelines

6.3 Startup of timed

6.4 Daily Operation

6.5 References

Chapter 7 Notes on ntpd Configuration

7.1 Introduction

7.2 How NTP Works

7.3 Configuring Your Subnet

7.4 Configuring Your Server or Client

7.5 ntp4 Versus Previous Versions

7.6 Traffic Monitoring

7.7 Address-and-Mask Restrictions

7.8 Authentication

7.9 Query Programs

7.10 Run Time Reconfiguration

7.11 Tuning Your Subnet

7.12 Provisions for Leap Seconds and Accuracy Metrics

7.13 Copyright

7.14 References

Index

Figures

1-1 Network Configuration for Routing (1)

1-2 Network Configuration for Routing (2)

1-3 Hardware Configuration

1-4 Principle of Operation

1-5 Principle of Operation

1-6 HIPPI Standards

1-7 Interface Signals

1-8 Signal Sequence

1-9 Simple Model of HIPPI Switch

1-10 I-field Format

1-11 HIPPI Channel Sharing

1-12 PPC and KPC Mode Examples

1-13 Hardware Configuration

1-14 Principle of Operation

5-1 Rewriting Set Semantics

Tables

1-1 System Constants

1-2 Network Initialization

1-3 Network System Files

1-4 Mode Control