Blogs

This was written as a quick reference guide for setting up a mirrored (RAID 1) boot device.
I used a Sun Fire V240 system for this article. The same principles apply to mirroring the boot drive of any system running Solaris.

Requirements:
If you are using Solaris 9 or 10 then the Solaris Volume Manager (SVM) software is already installed with the entire distribution installation.
If using Solaris 8 you will need to have the Solaris 8 DVD or CD Software 2 of 2 to install Solstice Disk Suite.

Overview

To use AD accounts to authenticate to the ILOM, the administrator must setup a TFTP server using the Windows 2003 install CD and the Windows Resource Kit. This will install a service on the host machine, preferably the same machine with Active Directory.

Once the TFTP daemon is up and running, an enterprise root certificate authority must be created and exported on the host. If Certificate Services is not installed, it can be through Add/Remove Programs > Add/Remove Windows Components > Certificate Services. An enterprise root certificate must be created and subsequently exported as "Base-64 encoded X.509 (.CER)", which should be placed in the TFTP root directory.

The last step is to setup the ILOM to pull the certificate from the TFTP server and then assign groups, operators, and/or single users to be authenticated through AD to the ILOM.

Before we get started, you'll need the following:

My Environment:
2 Sun Fire V245's running Solaris 10 08/07
Sun Cluster 3.2
Sun Java Enterprise Web Server 6.1

This is a situation I found myself in recently at a customer site. I started off with a clustered web server running only an unsecured port 80. My goal is to create a clustered web server instance that has both a secure and a non-secure listening port- 80 and 443.
After getting and installing an SSL certificate from VeriSign I added a listening socket to the web server instance to listen on port 443 and enabled security for that socket. When I start the web server instance by using the regular web server start command the web server started up fine.

# /opt/SUNWwbsvr/https-www.mydomain.com/start
password:
[LS ls1] http://192.168.35.10:80 ready to accept requests
[LS ls2] https://192.168.35.10:443 ready to accept requests
successful server startup

This is meant to be a basic guide to setting up a SAMP server (Solaris, Apache, MySQL, PHP). The capabilities of Apache and MySQL go far beyond the scope of what I'm covering here.

Step 1) Build Solaris Zone

For each PHP application I have I create a new Solaris zone. This way I have greater control over each application's environment. I can configure Apache, PHP and MySQL to the specific requirements of each application. Keeping each application separated into different zones also provides an additional layer of security. A security breach into one applications server environment won't effect the other applications in the other zones. The procedures I use to configure and install Solaris zones are available in an earlier article: Creating Solaris Zones.

Step 2) Download and install AMP packages.

This is meant to provide a step-by-step walkthrough on how to build a simple JumpStart server.  For more details on further capabilities of JumpStart and other advanced installation topics please visit the following link:
            http://docs.sun.com/app/docs/coll/1236.6

Requirements:
Approx. 4GB of disk space for Solaris 10 on JumpStart server.
Solaris 10 DVD or CD media kit.

Procedures:

1. Create a copy of the Solaris 10 media kit image on the local disk drive of JumpStart server.

a) Create a directory for the Solaris OE image.  This is an example of a directory created for  the Solaris 10 06/06 release.