Copyright 2006Sun Microsystems, Inc Network Circle, Santa Clara, CA U.S.A. Sun ( ) Sun Berkeley BSD UNIX / X/Open Company, Ltd. Sun Sun Mi

Transcription

1 Sun Desktop Manager 1.0 Sun Microsystems, Inc Network Circle Santa Clara, CA U.S.A

2 Copyright 2006Sun Microsystems, Inc Network Circle, Santa Clara, CA U.S.A. Sun ( ) Sun Berkeley BSD UNIX / X/Open Company, Ltd. Sun Sun Microsystems Sun docs.sun.com AnswerBook AnswerBook2 Solaris Sun Microsystems, Inc. / SPARC SPARC International, Inc. / SPARC Sun Microsystems, Inc. OPEN LOOK Sun Graphical User Interface (Sun ) Sun Microsystems, Inc. Sun Xerox Sun Xerox Xerox OPEN LOOK GUI Sun Sun Sun Microsystems, Inc. FAR @14774

3 Sun Desktop Manager Sun Desktop Manager Desktop Manager Desktop Manager Configuration Agent Configuration Agent...24 / GConf

4 Java Preferences...25 Mozilla...26 StarSuite Configuration Agent Java Web Console Java Web Console Java Web Console...43 Java Web Console...43 Java Web Console Desktop Manager...44 Tomcat/Java A...45 B OpenLDAP Active Directory Desktop Manager...49 OpenLDAP Desktop Manager...49 Active Directory Desktop Manager...49 C Sun Desktop Manager 1.0

5 Sun Desktop Manager 1.0 Sun Desktop Manager 1 Sun Desktop Manager 2 Sun Desktop Manager 3 Java Desktop System Configuration Agent 4 Java Web Console A B Desktop Manager OpenLDAP Active Directory C Sun Desktop Manager 1.0 Sun Desktop Manager 1.0 Developer Guide 5

6 Sun URL PDF HTML Sun 6 Sun Desktop Manager 1.0

7 1 1 Sun Desktop Manager 1.0 Sun Desktop Manager Sun Desktop Manager 1.0 Sun Desktop Manager Sun Desktop Manager 1 1 Desktop Manager Desktop Manager Desktop Manager Configuration Agent (created/deleted/modified/assigned/unassigned) Web Desktop Manager Web Web 7

8 Sun Desktop Manager Configuration Agent Configuration Agent GConf Gnome StarSuite Registry Mozilla Preferences Java Preferences 8 Sun Desktop Manager 1.0

9 2 Sun Desktop Manager Sun Desktop Manager Desktop Manager Java Web Console Web ( ) Desktop Manager ( Gnome Mozilla StarSuite Evolution) Desktop Manager Java Web Console (root) # smcwebserver status Java Web Console Solaris 10 Desktop Manager Desktop Manager server/console /setup Java Web Console Desktop Manager 4 Java Web Console Desktop Manager 1 2 Desktop Manager # unzip SunDesktopMgr-1.0.zip (root) # cd SunDesktopMgr-1.0/<platform>/server/manager #./setup 9

10 Sun Desktop Manager 3 Java Web Console Web Desktop Manager URL Unix Java Web Console Desktop Manager Desktop Manager URL Desktop Manager Java Web Console Desktop Manager (root) # cd server/manager #./setup -u Desktop Manager Java Desktop System Configuration Manager ( ) Configuration Manager LDAP LDAP Configuration Manager LDAP LDAP Desktop Manager Desktop Manager LDAP LDAP 10 Sun Desktop Manager 1.0

11 Sun Desktop Manager LDAP Configuration Manager LDAP Desktop Manager (Java Desktop System Configuration Manager1.1. ) LDAP Desktop Manager Desktop Manager Configuration Manager Desktop Manager # cd server/manager #./setup -u Desktop Manager LDAP URL Unix Java Web Console Sun Desktop Manager 1.0 [ ] LDAP 2.0 Sun Desktop Manager 1.0 Java Desktop System Configuration Manager 1.1 Desktop Manager Java Web Console ( Desktop Manager ) Desktop Manager Java Web Console 2 11

12 Sun Desktop Manager URL ( Java Web Console Java Web Console #smcwebserver status #smcwebserver start Java Web Console / UNIX UNIX UNIX Desktop Manager Java Web Console Sun Desktop Manager Desktop Manager Java Web Console Desktop Manager # smreg list -a com.sun.apoc.manager_< version> Desktop Manager Tomcat/Java Desktop Manager NoClassDefFoundError:sun/tools/javac/Main Java Web Console Java # smreg list -p java.home Java Web Console Java Java JDK # smreg add -p java.home=<java_home> 12 Sun Desktop Manager 1.0

13 Sun Desktop Manager <JAVA_HOME> bin javac Java Web Console # smcwebserver restart SSL LDAP LDAP ( [ SSL] ) [ ] LDAP SSL Java Web Console LDAP SSL Java Web Console LDAP /etc/opt/webconsole/keystore keytool -import -file <certificate file> -keystore /etc/opt/webconsole/keystore changeit smcwebserver restart Java Web Console Desktop Manager noaccess noaccess 2 13

14 14

15 3 Desktop Manager Java Desktop System Configuration Agent Configuration Agent GConf Java Preferences Mozilla Preferences StarSuite Registry Solaris 10 Configuration Agent Desktop Manager Desktop Manager Desktop Manager 1. Desktop Manager # unzip SunDesktopMgr-1.0.zip 2. SunDesktopMgr-1.0/<platform>/client/Patches 3. (root) # cd SunDesktopMgr-1.0/<platform>/client #./setup Configuration Agent Configuration Agent Solaris SUNWapbas 15

16 ConfigurationAgent Solaris SUNWapmsc SUNWapoc SUNWapdc Configuration Agent Configuration Agent Configuration Agent API Java Desktop System Configuration Agent Configuration Agent Java Desktop System Solaris Desktop Manager Configuration Agent LDAP policymgr.properties apocd.properties os.properties /etc/apoc Configuration Agent ( A) Configuration Agent /usr/bin/apoc-config (root) /usr/bin/apoc-config -nodisplay 16 Sun Desktop Manager 1.0

17 ConfigurationAgent 3 1 ConfigurationAgent Configuration Agent Configuration Agent Configuration Agent Solaris ( smf(5) ) (HostIdentifierType) IP Configuration Agent IP Configuration Agent LDAP Configuration Agent root /usr/lib/apoc/apocd enable /usr/lib/apoc/apocd disable 3 17

18 ConfigurationAgent 3 2 ConfigurationAgent LDAP 3 2 LDAP URL LDAP LDAP LDAP DN URL URL URL URL URL file://<filepath> A SSL LDAP SSL SSL Java JRE <installation directory>/lib/security/cacerts JDK <installation directory>/jre/lib/security/cacerts LDAP keytool -import -file <certificate file> -keystore <cacerts file location> changeit 18 Sun Desktop Manager 1.0

19 ConfigurationAgent 3 3 ConfigurationAgent Configuration Agent [ ] [ ] [ ] (AuthDn) DN [ ] (Password) LDAP [ ] [ ] [ ] (AuthType) LDAP GSSAPI 24 / Configuration Agent [ ] (DaemonPort) ( 38900) [ ] (DaemonAdminPort) apocd ( 38901) 3 19

20 ConfigurationAgent 3 4 ConfigurationAgent Configuration Agent [ ] (ChangeDetectionInterval) ( ) ( ) -1 [ ] (DaemonChangeDetectionInterval) ( ) -1 ( ) Configuration Agent LDAP 20 Sun Desktop Manager 1.0

21 ConfigurationAgent 3 5 ConfigurationAgent [ ] (DataDir) /var/opt/apoc [ ] (TimeToLive) ( ) 3 6 ConfigurationAgent [ ] (GarbageCollectionInterval) ( ) [ ] (MaxClientThreads) [ ] (MaxClientConnections) 3 21

22 ConfigurationAgent [ ] (MaxRequestSize) [ ] (ConnectTimeout) LDAP 1 [ ] (LogLevel) Java ([ ] [ ] ) LDAP Desktop Manager Configuration Agent Desktop Manager LDAP ( DaemonChangeDetectionInterval) 3 7 ConfigurationAgent Configuration Agent 22 Sun Desktop Manager 1.0

23 ConfigurationAgent ConfigurationAgent root /usr/lib/apoc/apocd restart (ApplyLocalPolicy) true false 23 Configuration Agent Desktop Manager Desktop Manager ${DataDir}/Policies/profiles/PROFILE_REPOSITORY_default ( ) ${DataDir} Configuration Agent ( /var/opt/apoc) ${DataDir}/Policies/profiles/PROFILE_REPOSITORY_default Configuration Agent ( 23 ) 3 23

24 / Configuration Agent ApplyLocalPolicy root /usr/lib/apoc/apocd reload Configuration Agent Configuration Agent ConfigurationAgent Configuration Agent ( smf(5) ) ( ) Configuration Agent Configuration Agent root /usr/lib/apoc/apocd disable /usr/lib/apoc/apocd enable / Configuration Agent ID LDAP User/UniqueIdAttribute ID LDAP Configuration Agent IP Host/UniqueIdAttribute LDAP C LDAP GSSAPI GSSAPI Kerberos Kerberos Java Desktop System pam_krb5 gdm Kerberos /etc/pam.d/gdm #%PAM-1.0 auth required pam_unix2.so nullok #set_secrpc auth optional pam_krb5.so use_first_pass missing_keytab_ok ccache=safe putenv_direct account required pam_unix2.so password required pam_unix2.so #strict=false session required pam_unix2.so # trace or none session required pam_devperm.so session optional pam_console.so Kerberos Kerberos /etc/pam.d/xscreensaver 24 Sun Desktop Manager 1.0

25 auth required pamkrb5.so use_first_pass missing_keytab_ok ccache=safe putenv_direct Desktop Manager GConf Gnome Gnome Evolution StarSuite Registry StarSuite OpenOffice.org Mozilla Preferences Mozilla Java Preferences Java API GConf GConf Solaris SUNWapoc-adapter-gconf packageadapter /etc/gconf/2/path GConf Desktop Manager apoc:readonly: GConf GConf GConf (/etc/gconf/2/path) GConf apoc Java Preferences Java Preferences Solaris SUNWapcj 3 25

26 Java Preferences Preferences API Java Preferences Preferences API ( JRE ) Preferences API Java /usr/lib/apoc/apocjlaunch apocjlaunch ( Java ) JAVA Java APPLICATION Java classname [arguments] jar -jar jarname [arguments] CLASSPATH jar DEFINES PREFFACTORY Preferences API Mozilla Mozilla Solaris SUNWmozapoc-adapter Mozilla Mozilla StarSuite StarSuite StarSuite StarSuite StarSuite 26 Sun Desktop Manager 1.0

27 SUNWapleg SUNWardsa SUNWardsa-misc Desktop Manager Mozilla StarSuite GConf Java Preferences Java Preferences Java Preferences API Java Configuration Agent Configuration Agent ( ) ( [ ] [ ] ) ( ) Desktop Manager 3 27

28 ConfigurationAgent ConfigurationAgent Configuration Agent ConfigurationAgent Configuration Agent ( LDAP ) Configuration Agent 1. ( gconfd Mozilla StarSuite) 2. Configuration Agent 3. Configuration Agent 4. Configuration Agent 5. Configuration Agent Configuration Agent 8. Configuration Agent ConfigurationAgent Configuration Agent Solaris 10 Solaris 10 Configuration Agent Configuration Agent ConfigurationAgent Configuration Agent [Configuration Agent ] /usr/bin/apoc-config 28 Sun Desktop Manager 1.0

29 ConfigurationAgent Configuration Agent [Configuration Agent ] ConfigurationAgent 1. [Configuration Agent ](/usr/bin/apoc-config ) 2. Configuration Agent ( /usr/lib/apoc/apocd ) /usr/lib/apoc/apocd enable 3. smf(5) /usr/sbin/svcadm enable svc:/network/apocd/udp ConfigurationAgent Configuration Agent Desktop Manager ConfigurationAgent Configuration Agent smf(5) smf(5) ConfigurationAgent Configuration Agent Configuration Agent /usr/lib/apoc/apocd is-enabled Checking Configuration Agent enabled status... Enabled Checking Configuration Agent enabled status... Not enabled 3 29

30 ConfigurationAgent smf(5) /usr/bin/svcs svc:/network/apocd/udp:default svcs STATE STIME FMRI online 8:36:04 svc:/network/apocd/udp:default svcs STATE STIME FMRI disabled 15:58:34 svc:/network/apocd/udp:default svcs STATE STIME FMRI maintenance 8:38:42 svc:/network/apocd/udp:default ConfigurationAgent Configuration Agent Configuration Agent /usr/lib/apoc/apocd status Checking Configuration Agent status... Running Checking Configuration Agent status... Not running /usr/bin/svcs svc:/network/apocd/udp:default svcs STATE STIME FMRI online 8:36:04 svc:/network/apocd/udp:default svcs STATE STIME FMRI disabled 15:58:34 svc:/network/apocd/udp:default svcs 30 Sun Desktop Manager 1.0

31 ConfigurationAgent STATE STIME FMRI maintenance 8:38:42 svc:/network/apocd/udp:default ps -ef grep apoc Configuration Agent ps Java daemon :05:22? 0:03 java -Djava.library.path=/usr/lib/apoc -cp /usr/share/lib/apoc/apocd.jar:/usr/s daemon :05:22? 0:00 sh -c java -Djava.library.path=/usr/lib/apoc -cp /usr/share/lib/apoc/apocd.jar: root :08:59 pts/1 0:00 grep apoc Configuration Agent smf(5) /var/svc/log/network-apocd-udp:default.log Configuration Agent Configuration Agent /usr/lib/apoc/apocd JVM Configuration Agent /var/svc/log/svc.startd.log smf(5) Configuration Agent smf(5) Configuration Agent smf(5) Configuration Agent Configuration Agent Configuration Agent Configuration Agent (/var/opt/apoc/logs) Configuration Agent /var/opt/apoc [Configuration Agent ](/usr/bin/apoc-config) [Configuration Agent ] Configuration Agent [Configuration Agent ] /var/adm/messages SunRay /var/opt/sunwut/log/messages Configuration Agent

32 ConfigurationAgent smf(5) Configuration Agent smf(5) smf(5) smf(5) smf(5) smf(5) /usr/sbin/svcadm clear svc:/network/apocd/udp ConfigurationAgent smf(5) smf(5) / / / Configuration Agent / / / Configuration Agent / ( ) 33 Configuration Agent Configuration Agen 32 Sun Desktop Manager 1.0

33 ConfigurationAgent ConfigurationAgent Configuration Agent Configuration Agent Configuration Agent /var/opt/apoc ( /dev/null/cant/write/here) Configuration Agent smf(5) [Configuration Agent ](/usr/bin/apoc-config) [ Nov 17 14:35:38 Executing start method ("/usr/lib/apoc/apocd svcstart") ] Starting Configuration Agent... Warning: Cannot create Log directory /dev/null/cant/write/here/logs Warning:Failed to create log file handler Nov 17, :35:39 PM com.sun.apoc.daemon.misc.apoclogger config CONFIG: Daemon configuration: MaxRequestSize = 4096 DaemonAdminPort = ThreadTimeToLive = 5 DaemonChangeDetectionInterval = 10 IdleThreadDetectionInterval = 15 PROVIDER_URL = DataDir = /dev/null/cant/write/here ApplyLocalPolicy = true ChangeDetectionInterval = 60 MaxClientConnections = 50 GarbageCollectionInterval = InitialChangeDetectionDelay = 10 TimeToLive = ConnectionReadTimeout = 5000 DaemonPort = LogLevel = FINEST MaxClientThreads = 5 Nov 17, :35:39 PM Daemon main FINER: THROW com.sun.apoc.daemon.misc.apocexception at com.sun.apoc.daemon.apocd.daemon.initauthdir(unknown Source) at com.sun.apoc.daemon.apocd.daemon.init(unknown Source) at com.sun.apoc.daemon.apocd.daemon.<init>(unknown Source) at com.sun.apoc.daemon.apocd.daemon.main(unknown Source) 3 33

34 ConfigurationAgent [ Nov 17 14:36:08 Method or service exit timed out. Killing contract 980 ] [ Nov 17 14:36:08 Method "start" failed due to signal KILL ] Configuration Agent TCP/IP Configuration Agent 1234 ( ) Configuration Agent [Configuration Agent ](/usr/bin/apoc-config) Nov 17, :50:59 PM com.sun.apoc.daemon.misc.apoclogger config CONFIG: Daemon configuration: MaxRequestSize = 4096 DaemonAdminPort = ThreadTimeToLive = 5 DaemonChangeDetectionInterval = 10 IdleThreadDetectionInterval = 15 PROVIDER_URL = DataDir = /var/opt/apoc ApplyLocalPolicy = true ChangeDetectionInterval = 60 MaxClientConnections = 50 GarbageCollectionInterval = InitialChangeDetectionDelay = 10 TimeToLive = ConnectionReadTimeout = 5000 DaemonPort = 1234 LogLevel = FINEST MaxClientThreads = 5 Nov 17, :50:59 PM com.sun.apoc.daemon.misc.apoclogger info INFO: Daemon starting Nov 17, :50:59 PM com.sun.apoc.daemon.misc.apoclogger fine FINE: Garbage collection scheduled ( interval = minutes ) Nov 17, :50:59 PM Daemon main FINER: THROW com.sun.apoc.daemon.misc.apocexception: java.net.bindexception: Address already in use at com.sun.apoc.daemon.transport.channelmanager.<init>(unknown Source) at com.sun.apoc.daemon.apocd.daemon.run(unknown Source) at com.sun.apoc.daemon.apocd.daemon.main(unknown Source) Caused by: java.net.bindexception: Address already in use at sun.nio.ch.net.bind(native Method) at sun.nio.ch.serversocketchannelimpl.bind(serversocketchannelimpl.java:119) at sun.nio.ch.serversocketadaptor.bind(serversocketadaptor.java:59) at sun.nio.ch.serversocketadaptor.bind(serversocketadaptor.java:52) 34 Sun Desktop Manager 1.0

35 ConfigurationAgent Configuration Agent TCP/IP Configuration Agent (/usr/lib/apoc/apocd) Configuration Agent 1234 Configuration Agent [Configuration Agent ] (/usr/bin/apoc-config) ONFIG: Daemon configuration: MaxRequestSize = 4096 DaemonAdminPort = 1234 ThreadTimeToLive = 5 DaemonChangeDetectionInterval = 10 IdleThreadDetectionInterval = 15 PROVIDER_URL = DataDir = /var/opt/apoc ApplyLocalPolicy = true ChangeDetectionInterval = 60 MaxClientConnections = 50 GarbageCollectionInterval = InitialChangeDetectionDelay = 10 TimeToLive = ConnectionReadTimeout = 5000 DaemonPort = LogLevel = FINEST MaxClientThreads = 5 Nov 17, :55:11 PM com.sun.apoc.daemon.misc.apoclogger info INFO: Daemon starting Nov 17, :55:11 PM com.sun.apoc.daemon.misc.apoclogger fine FINE: Garbage collection scheduled ( interval = minutes ) Nov 17, :55:11 PM com.sun.apoc.daemon.misc.apoclogger fine FINE: Client manager started Nov 17, :55:11 PM com.sun.apoc.daemon.misc.apoclogger fine FINE: Channel manager started Nov 17, :55:11 PM Daemon main FINER: THROW com.sun.apoc.daemon.misc.apocexception: java.net.bindexception: Address already in use at com.sun.apoc.daemon.admin.adminmanager.initchannel(unknown Source) at com.sun.apoc.daemon.admin.adminmanager.<init>(unknown Source) at com.sun.apoc.daemon.apocd.daemon.run(unknown Source) at com.sun.apoc.daemon.apocd.daemon.main(unknown Source) Caused by: java.net.bindexception: Address already in use at sun.nio.ch.net.bind(native Method) at sun.nio.ch.serversocketchannelimpl.bind(serversocketchannelimpl.java:119) at sun.nio.ch.serversocketadaptor.bind(serversocketadaptor.java:59) 3 35

36 ConfigurationAgent at sun.nio.ch.serversocketadaptor.bind(serversocketadaptor.java:52)... 4 more ConfigurationAgent Configuration Agent ( ) Configuration Agent [Configuration Agent ](/usr/bin/apoc-config) FINER: New client added Nov 18, :59:22 PM com.sun.apoc.daemon.misc.apoclogger finer FINER: CreateSession transaction started Nov 18, :59:22 PM com.sun.apoc.daemon.misc.apoclogger finer FINER: Creating new client session Nov 18, :59:22 PM com.sun.apoc.daemon.misc.apoclogger finest FINEST: Authenticating user geoffh Nov 18, :59:22 PM com.sun.apoc.daemon.misc.apoclogger finest FINEST: Authentication successful Nov 18, :59:23 PM PolicyBackend openpolicybackend FINER: THROW com.sun.apoc.daemon.misc.apocexception: com.sun.apoc.daemon.misc.apocexception: com.sun.apoc.spi.environment.invalidparameterexception: The parameter organisation PROVIDER_URL#protocol (null) is not valid, the value must be comprised in {ldaps,ldap,https,http,file}. at com.sun.apoc.daemon.apocd.policybackend.<init>(unknown Source) at com.sun.apoc.daemon.apocd.hostpolicybackend.<init>(unknown Source) at com.sun.apoc.daemon.apocd.policybackendfactory.openpolicybackend(unknown Source) at com.sun.apoc.daemon.apocd.cache$datasource.openpolicybackend(unknown Source) at com.sun.apoc.daemon.apocd.cache$datasource.open(unknown Source) at com.sun.apoc.daemon.apocd.cache.createdatasources(unknown Source) at com.sun.apoc.daemon.apocd.cache.<init>(unknown Source) at com.sun.apoc.daemon.apocd.cachefactory.createnewcache(unknown Source) at com.sun.apoc.daemon.apocd.cachefactory.opencache(unknown Source) at com.sun.apoc.daemon.apocd.session.<init>(unknown Source) at com.sun.apoc.daemon.transaction.createsessiontransaction.executetransaction (Unknown Source) at com.sun.apoc.daemon.transaction.transaction.execute(unknown Source) at com.sun.apoc.daemon.apocd.clienteventhandler.handleevent(unknown Source) at com.sun.apoc.daemon.apocd.eventworkerthread.run(unknown Source) Caused by: com.sun.apoc.daemon.misc.apocexception: com.sun.apoc.spi.environment.invalidparameterexception: The parameter organisation PROVIDER_URL#protocol (null) is not valid, the value must be comprised in {ldaps,ldap,https,http,file}. 36 Sun Desktop Manager 1.0

37 ConfigurationAgent at com.sun.apoc.daemon.apocd.policybackendfactory.openpolicymgr(unknown Source) more Caused by: com.sun.apoc.spi.environment.invalidparameterexception: The parameter organisation PROVIDER_URL#protocol (null) is not valid, the value must be comprised in {ldaps,ldap,https,http,file}. at com.sun.apoc.spi.policymgrfactoryimpl.createpolicymgr(unknown Source) more Nov 18, :59:23 PM PolicyBackend openpolicybackend Configuration Agent Configuration Agent 389 LDAP [Configuration Agent ] (/usr/bin/apoc-config) LDAP LDAP LDAP LDAP SSL LDAP Configuration Agent Java apoc-config 15 Configuration Agent FINER: New client added Nov 18, :17:43 PM com.sun.apoc.daemon.misc.apoclogger finer FINER: CreateSession transaction started Nov 18, :17:43 PM com.sun.apoc.daemon.misc.apoclogger finer FINER: Creating new client session Nov 18, :17:43 PM com.sun.apoc.daemon.misc.apoclogger finest FINEST: Authenticating user geoffh Nov 18, :17:43 PM com.sun.apoc.daemon.misc.apoclogger finest FINEST: Authentication successful Nov 18, :17:43 PM PolicyBackend openpolicybackend FINER: THROW com.sun.apoc.daemon.misc.apocexception: com.sun.apoc.daemon.misc.apocexception: com.sun.apoc.spi.openconnectionexception: An error occured while connecting to ldap://sobuild:389. at com.sun.apoc.daemon.apocd.policybackend.<init>(unknown Source) at com.sun.apoc.daemon.apocd.hostpolicybackend.<init>(unknown Source) at com.sun.apoc.daemon.apocd.policybackendfactory.openpolicybackend(unknown Source) at com.sun.apoc.daemon.apocd.cache$datasource.openpolicybackend(unknown Source) at com.sun.apoc.daemon.apocd.cache$datasource.open(unknown Source) at com.sun.apoc.daemon.apocd.cache.createdatasources(unknown Source) at com.sun.apoc.daemon.apocd.cache.<init>(unknown Source) at com.sun.apoc.daemon.apocd.cachefactory.createnewcache(unknown Source) at com.sun.apoc.daemon.apocd.cachefactory.opencache(unknown Source) at com.sun.apoc.daemon.apocd.session.<init>(unknown Source) 3 37

38 ConfigurationAgent at com.sun.apoc.daemon.transaction.createsessiontransaction.executetransaction (Unknown Source) at com.sun.apoc.daemon.transaction.transaction.execute(unknown Source) at com.sun.apoc.daemon.apocd.clienteventhandler.handleevent(unknown Source) at com.sun.apoc.daemon.apocd.eventworkerthread.run(unknown Source) Caused by: com.sun.apoc.daemon.misc.apocexception: com.sun.apoc.spi.openconnectionexception: An error occured while connecting to ldap://sobuild:389. at com.sun.apoc.daemon.apocd.policybackendfactory.openpolicymgr(unknown Source) more Caused by: com.sun.apoc.spi.openconnectionexception: An error occured while connecting to ldap://nosuchhost:389. at com.sun.apoc.spi.ldap.ldapclientcontext.prepareconnection(unknown Source) at com.sun.apoc.spi.ldap.ldapclientcontext.connect(unknown Source) at com.sun.apoc.spi.ldap.ldapconnectionhandler.openauthorizedcontext(unknown Source) at com.sun.apoc.spi.ldap.ldapconnectionhandler.connect(unknown Source) at com.sun.apoc.spi.ldap.entities.ldaporganizationprovider.open(unknown Source) at com.sun.apoc.spi.policymgrfactoryimpl.createpolicymgr(unknown Source) more Caused by: netscape.ldap.ldapexception: failed to connect to server sobuild:389 (91); Cannot connect to the LDAP server at netscape.ldap.ldapconnsetupmgr.connectserver(ldapconnsetupmgr.java:422) at netscape.ldap.ldapconnsetupmgr.openserial(ldapconnsetupmgr.java:350) at netscape.ldap.ldapconnsetupmgr.connect(ldapconnsetupmgr.java:244) at netscape.ldap.ldapconnsetupmgr.access$0(ldapconnsetupmgr.java:241) at netscape.ldap.ldapconnsetupmgr$1.run(ldapconnsetupmgr.java:179) at java.lang.thread.run(thread.java:595) Nov 18, :17:44 PM PolicyBackend openpolicybackend Configuration Agent Configuration Agent FINER: New client added Nov 18, :36:55 PM com.sun.apoc.daemon.misc.apoclogger finer FINER: CreateSession transaction started Nov 18, :36:55 PM com.sun.apoc.daemon.misc.apoclogger finer FINER: Creating new client session Nov 18, :36:55 PM com.sun.apoc.daemon.misc.apoclogger finest FINEST: Authenticating user geoffh Nov 18, :36:55 PM com.sun.apoc.daemon.misc.apoclogger finest FINEST: Authentication successful Nov 18, :36:55 PM PolicyBackend openpolicybackend FINER: THROW com.sun.apoc.daemon.misc.apocexception: com.sun.apoc.daemon.misc.apocexception: com.sun.apoc.spi.environment.remoteenvironmentexception: Error on reading the 38 Sun Desktop Manager 1.0

39 ConfigurationAgent configuration data on LDAP server ldap://sobuild:389. at com.sun.apoc.daemon.apocd.policybackend.<init>(unknown Source) at com.sun.apoc.daemon.apocd.hostpolicybackend.<init>(unknown Source) at com.sun.apoc.daemon.apocd.policybackendfactory.openpolicybackend(unknown Source) at com.sun.apoc.daemon.apocd.cache$datasource.openpolicybackend(unknown Source) at com.sun.apoc.daemon.apocd.cache$datasource.open(unknown Source) at com.sun.apoc.daemon.apocd.cache.createdatasources(unknown Source) at com.sun.apoc.daemon.apocd.cache.<init>(unknown Source) at com.sun.apoc.daemon.apocd.cachefactory.createnewcache(unknown Source) at com.sun.apoc.daemon.apocd.cachefactory.opencache(unknown Source) at com.sun.apoc.daemon.apocd.session.<init>(unknown Source) at com.sun.apoc.daemon.transaction.createsessiontransaction.executetransaction (Unknown Source) at com.sun.apoc.daemon.transaction.transaction.execute(unknown Source) at com.sun.apoc.daemon.apocd.clienteventhandler.handleevent(unknown Source) at com.sun.apoc.daemon.apocd.eventworkerthread.run(unknown Source) ConfigurationAgent Configuration Agent (gconfd Mozilla StarSuite) Configuration Agent Configuration Agent 50 [Configuration Agent ](/usr/bin/apoc-config) Configuration Agent Configuration Agent Nov 18, :20:55 PM com.sun.apoc.daemon.misc.apoclogger warning WARNING: The maximum number of client connections ( 50 ) has been reached. No new client connections can be established at this time. Desktop Manager Configuration Agent Desktop Manager Desktop Manager [Configuration Agent ] (/usr/bin/apoc-config) /usr/lib/apoc/apocd change-detect Configuration Agent 3 39

40 40

41 4 Java Web Console Java Web Console Sun Microsystems Web Web Java Web Console HTTPS Java Web Console Solaris 10 Netscape 6.2x 7.x Windows SE ME 2000 XP Netscape 6.2x 7.x Windows SE ME 2000 XP Internet Explorer 5.5x 6.x Solaris Mozilla 1.4x Solaris Firefox

42 Solaris 10 Red Hat Application Server SuSE Linux 8.0 J2SE 1.4.1_03 J2SE Java Desktop System Management Tools CD J2SE Tomcat Tomcat Java Desktop System Management Tools CD Java Web Console Java Web Console Solaris 10 Desktop Manager server/console Desktop Manager /setup Java Web Console server/console Java Web Console Java Web Console Java Web Console Desktop Manager Java Web Console Java Web Console smcwebserver start Java Web Console smcwebserver stop Java Web Console smcwebserver restart Java Web Console URL Java Web Console Unix (RBAC) LDAP 15 smreg 5 smreg add -p -c session.timeout.value=5 42 Sun Desktop Manager 1.0

43 Java Web Console Java Web Console smcwebserver smreg Java Web Console Solaris Java Web Console Java Web Console Java Web Console Java Web Console Desktop Manager Java Web Console URL ( your.server>:6789) Java Web Console LDAP LDAP LDAP Web Console / LDAP Web Console LDAP LDAP LDAP 4 Java Web Console 43

44 Java Web Console Desktop Manager Web Console Desktop Manager Desktop Manager Tomcat/Java Desktop Manager NoClassDefFoundError:sun/tools/javac/Main Java Web Console Java Web /var/log/webconsole/ smreg smreg add -p debug.trace.level=3 smreg add -p debug.trace.options=tmp smreg add -p debug.trace.level=0 smreg add -p debug.trace.options=m smreg list Desktop Manager Web Web smcwebserver start/restart Desktop Manager smcwebserver stop 6789 (netstat -a grep 6789) Web (ps -ef grep java) Sun Desktop Manager 1.0

45 A Desktop Manager Desktop Manager ( /etc/opt/sunwapcmg/) Configuration Agent /etc/apoc/policymgr.properties Desktop Manager CLI $HOME/pgtool.properties CLI LDAP A 1 ORGANIZATION_ DOMAIN_ PROFILE_ ASSIGNMENT_ LDAP_META_CONF_ [ ] LDAP 45

46 A 2 PROVIDER_URL URL URL URL URL ldap://<host>:<port>/<basedn> ldaps://<host>:<port>/<basedn> file://<filepath> SECURITY_PRINCIPAL SECURITY_CREDENTIALS SECURITY_CREDENTIALS _ENCODING SECURITY_PRINCIPAL SECURITY_PRINCIPAL scramble ( ) none none MAX_SEARCH_RESULT LDAP A 3 LDAP AuthDn LDAP SECURITY_PRINCIPAL 46 Sun Desktop Manager 1.0

47 A 3 LDAP ( ) Password AuthDN Password_ENCODING scramble ( ) none none Connect Timeout ( ) 0 1 A 1 LDAP #Organization, Domain, MetaConf PROVIDER_URL = ldap://server1.sun.com:389/o=apoc ldap://server2.sun.com:389/o=apoc SECURITY_PRINCIPAL = jmonroe SECURITY_CREDENTIALS = JmonroE SECURITY_CREDENTIALS_ENCODING = none AuthDn = cn=reader,ou=special users,o=apoc Password = lakjflajf Password_ENCODING = scramble ConnectTimeout = 5 #Profile PROFILE_PROVIDER_URL = file:///path/to/repository #Assignment ASSIGNMENT_PROVIDER_URL = file:///path/to/repository A 47

48 48

49 B OpenLDAP Active Directory Desktop Manager OpenLDAP Desktop Manager OpenLDAP Desktop Manager /usr/share/webconsole/apoc/deploy apoc.schema OpenLDAP (/etc/openldap) schema slapd.conf OpenLDAP include /etc/openldap/schema/apoc.schema OpenLDAP OpenLDAP Desktop Manager Desktop Manager Agent DN OpenLDAP OpenLDAP slapd.conf ( OpenLDAP /etc/openldap) allow bind_anon_cred Active Directory Desktop Manager Active Directory Desktop Manager /usr/share/webconsole/apoc/deploy apoc-ad.ldf apoc-ad.ldf Active Directory 1. Active Directory 49

50 Active Directory Desktop Manager 2. ldifde -i -c "DC=Sun,DC=COM" <BaseDN> -f apoc-ad-registry.ldf Active Directory DN <BaseDN> Active Directory Desktop Manager LDAP Active Directory Active Directory Active Directory Desktop Manager /etc/hosts Active Directory IP Active Directory GSSAPI Active Directory Active Directory GSSAPI Active Directory Kerberos Kerberos 50 Sun Desktop Manager 1.0

51 C LDAP Desktop Manager Organization LDAP # Object class that all user entries use User/ObjectClass=inetorgperson # Attribute whose value in user entries is unique within the repository User/UniqueIdAttribute=uid # Optional container in organization entries of the user entries, # remove line if not used User/Container=ou=People # Display name format within the management application User/DisplayNameFormat=sn, givenname <item1> <item2>... <itemn> n n VirtualMemberAttribute DN MemberAttribute DN VirtualMemberAttribute MemberAttribute # List of object classes for roles Role/ObjectClass=nsRoleDefinition # Aligned list of corresponding naming attributes Role/NamingAttribute=cn 51

52 # Physical attribute (usable in a filter) containing the DNs # of the roles of a user/host Role/MemberAttribute=nsRoleDN # Attribute whose query on a user or host return the DNs of the # roles it belongs to Role/VirtualMemberAttribute=nsRole # List of object classes for organizations Organization/ObjectClass=organization # Aligned list of corresponding naming attributes Organization/NamingAttribute=o # List of object classes for domains Domain/ObjectClass=ipNetwork # Aligned list of corresponding naming attributes Domain/NamingAttribute=cn # Object class that all host entries use Host/ObjectClass=ipHost # Attribute whose value in host entries is unique within the repository Host/UniqueIdAttribute=cn # Optional container in domain entries of the host entries, # remove line if not used Host/Container=ou=Hosts 52 Sun Desktop Manager 1.0