Bienvenue sur le site admin-sys

Solaris 11 / perte du mot de passe root

Jerome ROBERT — 2014-09-19T15:34:43Z

Here is another way to do it :

1) Boot from the text install DVD (or ISO file if your Solaris 11 installation is in a VM)

2) Make sure you boot into single user mode : at the initial GRUB screen, press Esc, then press 'e' to edit the Grub command line, add the switch '-s' for single-user boot

3) After booting into single-user mode, log in as 'root', the password is 'solaris'

4) Mount the ZFS root pool. Most HOWTOs recommend creating only the directory /a, this is not enough, you need two directories, we use /a/b in the following example. Also the -f flag (force) is important in the zpool import command.

mkdir -p /a/b zpool import -f -R /a rpool zfs set mountpoint=/b rpool/ROOT/solaris zfs mount rpool/ROOT/solaris

5) Edit the file /a/b/etc/shadow, you may need to make it writable first. Find the row with root's entry, it is usually the first. Delete the password hash between the first and second colons, so the line now looks like root::12345:::::: (your number may be different).

6) Edit /a/b/etc/user_attr by commenting out the line root::::type=role. This makes root a "normal user" which is not recommended BTW.

7) Edit /a/b/etc/default/login by commenting out the line PASSREQ=YES. This will ensure that no password is required when logging in as root.

8) Reset the root mountpoint by issuing the commands

zfs set mountpoint=/ rpool/ROOT/solaris zpool export rpool

The first command will complain about being unable to mount 'a' because the directory is not empty, cannot remount etc. Ignore this and reboot. You should be able to log in as root without a password.

Mise en correspondance des noms de pÃ©riphÃ©riques logiques et physiques

Jerome ROBERT — 2011-10-17T14:04:48Z

Mise en correspondance des noms de périphériques logiques et physiques

Cela est très utiles avec la commande sar ou iostat :

Exemple de sar :

 # sar -d 2 3 SunOS su560tos 5.10 Generic_141444-09 sun4v 10/17/2011 14:01:28 device %busy avque r+w/s blks/s avwait avserv 14:01:30 lofi1 0 0.0 0 0 0.0 0.0 nfs1 0 0.0 0 5 0.0 0.8 nfs2 0 0.0 0 0 0.0 0.0 sd0 5 0.0 14 311 0.0 3.4 sd0,a 5 0.0 14 311 0.0 3.4 sd0,c 0 0.0 0 0 0.0 0.0 sd1 6 0.1 14 311 0.0 4.2 sd1,a 6 0.1 14 311 0.0 4.2 sd1,c 0 0.0 0 0 0.0 0.0 sd2 0 0.0 0 0 0.0 0.0 sd3 0 0.0 0 0 0.0 0.0 sd3,a 0 0.0 0 0 0.0 0.0 sd3,h 0 0.0 0 0 0.0 0.0 sd4 0 0.0 0 0 0.0 0.0 sd4,a 0 0.0 0 0 0.0 0.0 sd4,h 0 0.0 0 0 0.0 0.0 ohci0,bu 0 0.0 0 0 0.0 0.0 ohci0,ct 0 0.0 0 0 0.0 0.0

A première vu, par évidant de dire qui est "sd4" ... c0t3d0 est plus parlant (ou devrait être) pour l'administrateur Unix.

Autre exemple avec iostat :

 # iostat tty lofi1 sd0 sd1 sd2 cpu tin tout kps tps serv kps tps serv kps tps serv kps tps serv us sy wt id 11 3366 0 0 0 64 7 10 64 7 11 0 0 6 2 1 0 97

Il y a plusieurs possibilité pour obtenir la mise en correspondance des nom logiques et physique.

* utilisation du fichier /etc/path_to_inst

 # ./NomDiskLogPhy_info.ksh c0t0d0s2 = sd0 c0t1d0s2 = sd1 c0t2d0s2 = sd3 c0t3d0s2 = sd4 c1t0d0s2 = sd2

Cette méthode est plus fiable. Elle s'appuie sur les fichiers de /dev/dsk et /etc/path_to_inst .

* utilisation de la commande iostat

 # paste -d= <(iostat -x | awk ’print $1’) <(iostat -xn | awk ’print $NF’) | tail +3 | egrep -v "nfs|lofi*" sd0=c0t0d0 sd1=c0t1d0 sd2=c1t0d0 sd3=c0t2d0 sd4=c0t3d0 #

Méthode un peu moins fiable, car elle ne montre que les disques encours d'utilisation sur le serveur

Voici contenu du script NomDiskLogPhy_info.ksh

 # more NomDiskLogPhy_info.ksh #! /usr/bin/ksh for device in /dev/dsk/*s2 do dpath="$(ls -l $device | nawk '{print $11}')" dpath="${dpath#*devices/}" dpath="${dpath%:*}" iname="$(nawk -v dpath=$dpath '{ if ($0 ~ dpath) { gsub("\"", "", $3) print $3 $2 } }' /etc/path_to_inst)" echo "$(basename ${device}) = ${iname}" done

source du script : stackoverflow.com/questions/555427/map-sd-sdd-names-to-solaris-disk-names

S10 : kill defunct

Jerome ROBERT — 2009-07-24T11:24:28Z

Pour supprimer des processus defunct sous solaris 10 sans rebooter le serveur:

# ps -ef |grep defunct | grep -v grep| awk '{print $2 }' |xargs preap -F

L'idée est d'attacher les processus a init (pid 1) qui va faire le nécessaire.