Bienvenue sur le site admin-sys

Mémo : Configuration d'IPMP sur un serveur solaris

Jerome ROBERT — 2011-05-03T09:31:50Z

Configuration d'IPMP sur un serveur solaris

0. Ce connecter sur la console du serveur

1. La version pour faire de IPMP est Au minimum Solaris 8 10/00.

pour le vérifier il faut regarder le contenue de /etc/release

2. le fichier de configuration IPMP est :

/etc/default/mpathd

#cat /etc/default/mpathd

#
#pragma ident "@(#)mpathd.dfl 1.2 00/07/17 SMI"
#
# Time taken by mpathd to detect a NIC failure in ms. The minimum time
# that can be specified is 100 ms.
#
FAILURE_DETECTION_TIME=10000
#
# Failback is enabled by default. To disable failback turn off this option
#
FAILBACK=yes
#
# By default only interfaces configured as part of multipathing groups
# are tracked. Turn off this option to track all network interfaces
# on the system
#
TRACK_INTERFACES_ONLY_WITH_GROUPS=yes

Pour information :
FAILURE_DETECTION_TIME=10000 ==> 10 secondes

3. Il faut deux interfaces réseaux, 4 adresses IP et un nom de groupe IPMP

. 2 adresses IP pour les cartes
. 2 adresses IP pour l'interface de teste
. 1 nom de groupe IPMP (ex : ipmp-oper) (le nom doit être autre que NULL)

Mise à jour du fichier /etc/hosts

@IP1 NomInterface1
@IP2 NomInterface2
@IP3 NomInterfaceDeTest1
@IP4 NomInterfaceDeTest2

4. la variable local-mac-address ? doit être à "true"

# eeprom |grep local-mac-address
local-mac-address ?=true

sinon : eeprom 'local-mac-address ?=true'

ou, ou en ajoutant @MAC en ajouter "ether 06:05:04:03:02" dans le fichier /etc/hostname.INTERFACE

5. création/modification des fichiers de configuration des interfaces

cat /etc/hostname."Interface1"

NomInterface1 netmask + broadcast + group ipmp-oper up
addif NomInterfaceDeTest1 deprecated netmask + broadcast + -failover up

cat /etc/hostname."Interface2"
NomInterface2 netmask + broadcast + group ipmp-oper up
addif NomInterfaceDeTest2 deprecated netmask + broadcast + -failover up

explication :

NomInterface1		Assigne l'adresse associée au nom de NomInterface1
netmask +		Cherche le masque dans la base netmasks
broadcast +		Assigne une adresse de broadcast par défault associée au netmask.
group ipmp-oper		Affecte le nom ipmp-oper au groupe IPMP.
up		Démarre l'interface et initialise l'adaptateur.
addif NomInterfaceDeTest1		Crée la prochaine interface virtuelle disponible et lui assigne l'adresse IP associée au nom du hôte NomInterfaceDeTest1
deprecated		Positionne le flag déprécié. Les adresses dépréciées ne sont utilisées pour le trafic en sortie sauf s'il n'existe aucune autre adresse liée à cette interface ou qu'une application utilise cette adresse de manière explicite. La commande ifconfig -a montre le flag DEPRECATED associé à cette interface.
-failover		Marque l'adresse comme une adresse de nonfailover. Les adresses de ce type restent positionnées lorsque l'interface est en panne. La commande ifconfig -a montre le flag NOFAILOVER associé à cette interface.

6. redémarrer le serveur pour valider les fichiers de configuration

init 6

Pour information :

Pour vérifier le bon fonctionnement de l'IPMP, nous pouvons utiliser la commande if-mpadm

Pour détacher une interface : if_mpadm -d NomInterface
Pour réattacher une interface : if_mpadm -r NomInterface

Autre possibilité avec une seule IP :

# cat /etc/hostname.InterfacePrincipal
NomServeur netmask + broadcast + group oper up

# cat /etc/hostname.InterfaceSecours
group oper standby up

# ifconfig -a
lo0 : flags=2001000849 mtu 8232 index 1
inet 127.0.0.1 netmask ff000000
e1000g0 : flags=1000843 mtu 1500 index 2
inet 192.168.197.139 netmask ffffffc0 broadcast 10.233.197.191
groupname oper
ether 0:10:0f:9f:f0:a6
e1000g0:1 : flags=1000843 mtu 1500 index 2
inet 0.0.0.0 netmask ff000000 broadcast 0.255.255.255
e1000g1 : flags=69000842 mtu 0 index 3
inet 0.0.0.0 netmask 0
groupname oper
ether 0:10:0f:9f:f0:a7

#Pour tester la bascule, on va détache l'interface Principal de la configuration IPMP
# if_mpadm -d e1000g0

# ifconfig -a
lo0 : flags=2001000849 mtu 8232 index 1
inet 127.0.0.1 netmask ff000000
e1000g0 : flags=89000842 mtu 0 index 2
inet 0.0.0.0 netmask 0
groupname oper
ether 0:10:0f:9f:f0:a6
e1000g1 : flags=21000843 mtu 1500 index 3
inet 0.0.0.0 netmask ff000000 broadcast 0.255.255.255
groupname oper
ether 0:10:0f:9f:f0:a7
e1000g1:1 : flags=21000843 mtu 1500 index 3
inet 192.168.197.139 netmask ffffffc0 broadcast 10.233.197.191

#Pour tester la bascule, on va rattache l'interface Principal de la configuration IPMP
# if_mpadm -r e1000g0

# ifconfig -a
lo0 : flags=2001000849 mtu 8232 index 1
inet 127.0.0.1 netmask ff000000
e1000g0 : flags=1000843 mtu 1500 index 2
inet 192.168.197.139 netmask ffffffc0 broadcast 10.233.197.191
groupname oper
ether 0:10:0f:9f:f0:a6
e1000g0:1 : flags=1000843 mtu 1500 index 2
inet 0.0.0.0 netmask ff000000 broadcast 0.255.255.255
e1000g1 : flags=69000842 mtu 0 index 3
inet 0.0.0.0 netmask 0
groupname oper
ether 0:10:0f:9f:f0:a7

Gestion MPxIO

Jerome ROBERT — 2009-04-29T09:36:08Z

Pour activer le mpxio sous Solaris :

Iil suffit de modifier la ligne suivante dans /kernel/drv/fp.conf :

mpxio-disable=”yes” ;
en
mpxio-disable=”no” ;

Exemple de fichier fp.conf

#cd /kernel/drv/
#cat fp.conf
#
# Copyright 2006 Sun Microsystems, Inc. All rights reserved.
# Use is subject to license terms.
#
# Sun Fibre Channel Port driver configuration
#
#ident "@(#)fp.conf 1.4 06/06/22 SMI"
#

name="fp" class="fibre-channel" port=0 ;
name="fp" class="fibre-channel" port=1 ;

#
# Automatic configuration of the fabric is turned on by default
# and thus allows all devices discovered in the SAN zone to be
# enumerated in the Solaris devinfo tree automatically.
#
# The manual_configuration_only property may be used to
# disable the default behavior and force the manual configuration of
# the devices in the SAN. Setting manual_configuration_only=1
# will disable the automatic configuration of devices.
# NOTE : Use of this property is not recommended. If used, the
# fabric devices accessed at boot time need to get manually configured
# before the next reboot. Otherwise, fabric devices that are needed at
# boot time may not get configured and may cause boot problems.
# To manually configure fabric devices, refer to cfgadm_fp(1M).
# manual_configuration_only=1 ;
#

#
# To generate the binding-set specific 'compatible' forms used to address
# legacy issues the 'scsi-binding-set' property must be defined. (do not remove)
#
scsi-binding-set="fcp" ;

#
# List of ULP modules for loading during port driver attach time
#
load-ulp-list="1","fcp" ;

#
# Force attach driver to support hotplug activity (do not remove the property)
#
ddi-forceattach=1 ;

#
# I/O multipathing feature (MPxIO) can be enabled or disabled using
# mpxio-disable property. Setting mpxio-disable="no" will activate
# I/O multipathing ; setting mpxio-disable="yes" disables the feature.
#
# Global mpxio-disable property :
#
# To globally enable MPxIO on all fp ports set :
# mpxio-disable="no" ;
#
# To globally disable MPxIO on all fp ports set :
# mpxio-disable="yes" ;
#
# Per port mpxio-disable property :
#
# You can also enable or disable MPxIO on a per port basis.
# Per port settings override the global setting for the specified ports.
# To disable MPxIO on port 0 whose parent is /pci@8,600000/SUNW,qlc@4 set :
# name="fp" parent="/pci@8,600000/SUNW,qlc@4" port=0 mpxio-disable="yes" ;
#
# NOTE : If you just want to enable or disable MPxIO on all fp ports, it is
# better to use stmsboot(1M) as it also updates /etc/vfstab.
#
#
# You can describe a list of target port WWNs and LUN numbers which will
# not be configured. LUN numbers will be interpreted as decimal. White
# spaces and ',' can be used in the list of LUN numbers.
#
# pwwn-lun-blacklist=
# "target-port-wwn,lun-list"
#
# To prevent LUNs 1 and 2 from being configured for target
# port 510000f010fd92a1 and target port 510000e012079df1, set :
#
# pwwn-lun-blacklist=
# "510000f010fd92a1,1,2",
# "510000e012079df1,1,2" ;
mpxio-disable="no" ;

# Disable MPXIO for FC ports with tapes
name="fp" parent="/pci@7c0/pci@0/pci@1/pci@0,2/SUNW,qlc@1" port=0 mpxio-disable="yes" ;
name="fp" parent="/pci@7c0/pci@0/pci@1/pci@0,2/SUNW,qlc@1,1" port=0 mpxio-disable="yes" ;

##################### fin fichier ################"

Exclure la fibre de la configuration MPxIO

Pour trouver le chemin a inscrire au paramètre "parent" pour exclure la fibre de la configuration MPxIO

ls -l /dev/rmt/3
lrwxrwxrwx 1 root root 85 Feb 11 2008 /dev/rmt/3 -> ../../devices/pci@7c0/pci@0/pci@1/pci@0,2/SUNW,qlc@1,1/fp@0,0/st@w500104f000962ca6,0 :

Vérification du statut de MPxIO :

 #!/bin/sh # Test path access to multipathed devices devs=mpathadm list lu | grep /dev/rdsk/ for dev in $devs do echo "=== $dev ===" mpathadm show lu $dev | grep 'Access State' done

ou (suivant version)

 #!/bin/sh # Test path access to multipathed devices devs=mpathadm list lu | grep /dev/rdsk/ for dev in $devs do echo "=== $dev ===" mpathadm show lu $dev | grep 'Path State' done

Mémo sur les services solaris10

Jerome ROBERT — 2009-04-24T15:35:47Z

Mémo sur les services solaris10

· Activer ou désactiver un service au démarrage du système

	Avant solaris 10	Solaris 10 et + (SMF)
Désactiver	`mv /etc/rc2.d/S75cron /etc/rc2.d/x.S75cron`	`svcadm disable system/cron:default`
Activer	Modifier `/etc/inet/inetd.conf`, retirer le « # » pour la ligne `finger`	`svcadm enable network/finger:default`

· Gérer un service : stop / start / restart

Avant solaris 10	Solaris 10 et + (SMF)
`/etc/init.d/sshd stop`	`svcadm disable -t network/ssh:default`
`/etc/init.d/sshd start`	`svcadm enable -t network/ssh:default`
`/etc/init.d/sshd stop; /etc/init.d/sshd start`	`svcadm restart network/ssh:default`
`kill -HUP cat /var/run sshd.pid`	`svcadm refresh network/ssh:default`

Connaitre les services en erreurs :

# svcs -x
svc :/network/ntp:default (Network Time Protocol (NTP).)
State : maintenance since Mon Oct 18 13:58:42 2004
Reason : Start method exited with $SMF_EXIT_ERR_CONFIG.
See : http://sun.com/msg/SMF-8000-KS
See : ntpq(1M)
See : ntpdate(1M)
See : xntpd(1M)
Impact : 0 services are not running.

Connaitre les impactes des services en erreurs.

# svcs -x -v
svc :/application/print/server:default (LP Print Service)
State : disabled since Mon Oct 18 16:17:27 2004
Reason : Disabled by an administrator.
See : http://sun.com/msg/SMF-8000-05
See : man -M /usr/share/man -s 1M lpsched
Impact : 1 service is not running :
svc :/application/print/rfc1179:default

Connaitre les processus associés a un services

% svcs -p network/smtp:sendmail
STATE STIME FMRI
online 18:20:30 svc :/network/smtp:sendmail
18:20:30 655 sendmail
18:20:30 657 sendmail

% ps -fp 655,657
UID PID PPID C STIME TTY TIME CMD
root 655 1 0 18:20:30 ? 0:01 /usr/lib/sendmail -bd -q15m
smmsp 657 1 0 18:20:30 ? 0:00 /usr/lib/sendmail -Ac -q15m

Connaitre les services qui dépende d'un autre (ici sendmail)

% svcs -d network/smtp:sendmail
STATE STIME FMRI
online 18:20:14 svc :/system/identity:domain
online 18:20:26 svc :/network/service:default
online 18:20:27 svc :/system/filesystem/local:default
online 18:20:27 svc :/milestone/name-services:default
online 18:20:27 svc :/system/system-log:default
online 18:20:30 svc :/system/filesystem/autofs:default

Connaitre le/les service(s) nécessaire(s) pour lancer un service donné (ici sendmail, autofs)

% svcs -D network/smtp:sendmail
STATE STIME FMRI
online 18:20:32 svc :/milestone/multi-user:default

% svcs -D /system/filesystem/autofs:default

STATE STIME FMRI
disabled Feb_10 svc :/network/http:apache2
online Feb_10 svc :/network/ssh:default
online Feb_10 svc :/system/system-log:default
online Feb_10 svc :/network/smtp:sendmail
online Feb_10 svc :/milestone/multi-user:default

modifier des commandes/options dans un service

# inetadm -l svc :/network/ftp:default | grep exec

exec="/usr/sbin/in.ftpd -a"

# inetadm -m svc :/network/ftp:default exec="/usr/sbin/in.ftpd -a -l"

# inetadm -l svc :/network/ftp:default

SCOPE NAME=VALUE

name="ftp"

endpoint_type="stream"

proto="tcp6"

isrpc=FALSE

wait=FALSE

exec="/usr/sbin/in.ftpd -a -l"

Memo :

Service Name	FMRI	Run Script	`inetd` Service
`automount`	`svc :/system/filesystem/autofs:default`	`autofs`	Not applicable
`consadmd`	`svc :/system/consadm:default`	`rootusr`	Not applicable
`coreadm`	`svc :/system/coreadm:default`	`coreadm`	Not applicable
`cron`	`svc :/system/cron:default`	`cron`	Not applicable
`cryptoadm`	`svc :/system/cryptosvc:default`	N/A	Not applicable
`cvcd`	`svc :/system/cvc:default`	`cvcd`	Not applicable
`dcs`	`svc :/platform//dcs:default`	None	Applicable
`dtlogin`	`svc :/application/graphical-login/cde-login:default`	`dtlogin`	Not applicable
`dtprintinfo`	`svc :/application/cde-printinfo:default`	`dtlogin`	Not applicable
`dtspcd`	`svc :/network/cde-spc:default`	None	Applicable
`dumpadm`	`svc :/system/dumpadm:default`	`savecore`	Not applicable
`efdaemon`	`svc :/platform//efdaemon:default`	`efcode`	Not applicable
`fmd`	`svc :/system/fmd:default`	N/A	Not applicable
`gssd`	`svc :/network/rpc/gss:default`	None	Applicable
`imapd`	`svc :/network/imap/tcp:default` `svc :/network/imapnew/tcp:default`	None	Applicable
`in.chargend`	`svc :/network/chargen:dgram` `svc :/network/chargen:stream`	None	Applicable
`in.comsat`	`svc :/network/comsat:default`	None	Applicable
`in.daytimed`	`svc :/network/daytime:dgram` `svc :/network/daytime:stream`	None	Applicable
`in.dhcpd`	`svc :/network/dhcp-server:default`	`dhcp`	Not applicable
`in.discardd`	`svc :/network/discard:dgram` `svc :/network/discard:stream`	None	Applicable
`in.echod`	`svc :/network/echo:dgram` `svc :/network/echo:stream`	None	Applicable
`in.fingerd`	`svc :/network/finger:default`	None	Applicable
`in.ftpd`	`svc :/network/ftp:default`	None	Applicable
`in.named`	`svc :/network/dns/server:default`	`inetsvc`	Not applicable
`in.rarpd`	`svc :/network/rarp:default`	`boot.server`	Not applicable
`in.rdisc`	`svc :/network/initial:default`	`inetinit`	Not applicable
`in.rexecd`	`svc :/network/rexec:default`	None	Applicable
`in.rlogind`	`svc :/network/login:rlogin` `svc :/network/login:eklogin` `svc :/network/login:klogin`	None	Applicable
`in.routed`	`svc :/network/initial:default`	`inetinit`	Not applicable
`in.rshd`	`svc :/network/shell:default` `svc :/network/kshell`	None	Applicable
`in.talkd`	`svc :/network/talk:default`	None	Applicable
`in.telnetd`	`svc :/network/telnet:default`	None	Applicable
`in.tftpd`	`svc :/network/tftp/udp6:default`	None	Applicable
`in.timed`	`svc :/network/time:dgram` `svc :/network/time:stream`	None	Applicable
`in.tnamed`	`svc :/network/tname:default`	None	Applicable
`in.uucpd`	`svc :/network/uucp:default`	None	Applicable
`inetd-upgrade`	`svc :/network/inetd-upgrade:default`	N/A	Not applicable
`inetd`	`svc :/network/inetd:default`	`inetsvc`	Not applicable
`intrd`	`svc :/system/intrd:default`	None	Not applicable
`ipop3d`	`svc :/network/pop3/tcp:default`	None	Applicable
`kadmind`	`svc :/network/security/kadmin:default`	`kdc.master`	Not applicable
`kbd`	`svc :/system/keymap:default`	`keymap`	Not applicable
`keyserv`	`svc :/network/rpc/keyserv:default`	`rpc`	Not applicable
`kpropd`	`svc :/network/security/krb5_prop:default`	None	Applicable
`krb5kdc`	`svc :/network/security/krb5kdc:default`	`kdc`	Not applicable
`ktkt_warnd`	`svc :/network/security/ktkt_warn:default`	None	Applicable
`ldap_cachemgr`	`svc :/network/ldap/client:default`	`ldap.client`	Not applicable
`loadkeys`	`svc :/system/keymap:default`	`keymap`	Not applicable
`lockd`	`svc :/network/nfs/client:default` `svc :/network/nfs/server:default`	`nfs.server`	Not applicable
`lpsched` and `lpshut`	`svc :/application/print/server:default`	`lp`	Not applicable
`mdmonitord`	`svc :/system/mdmonitor:default`	`svm.sync`	Not applicable
`metainit`	`svc :/system/metainit:default`	`svm.init`	Not applicable
`metadevadm`	`svc :/platform//mpxio-upgrade:default`	N/A	Not applicable
`mount`	`svc :/system/filesystem/local:default` `svc :/system/filesystem/minimal:default` `svc :/system/filesystem/root:default` `svc :/system/filesystem/usr:default`	`nfs.client`, `rootusr`, `standardmounts`	Not applicable
`mountd`	`svc :/network/nfs/server:default`	`nfs.server`	Not applicable
`nfsd`	`svc :/network/nfs/server:default`	`nfs.server`	Not applicable
`nfsmapid`	`svc :/network/nfs/client:default` `svc :/network/nfs/server:default`	`nfs.server`	Not applicable
`nis_cachemgr`	`svc :/network/rpc/nisplus:default`	`rpc`	Not applicable
`nscd`	`svc :/system/name-service-cache:default`	`nscd`	Not applicable
`ntpdate`	`svc :/network/ntp:default`	`xntpd`	Not applicable
`ocfserv`	`svc :/network/rpc/ocfserv:default`	`ocfserv`	Not applicable
`picld`	`svc :/system/picl:default`	`picld`	Not applicable
`pmconfig`	`svc :/system/power:default`	`power`	Not applicable
`printd`	`svc :/application/print/cleanup:default`	`spc`	Not applicable
`quotaon`	`svc :/system/filesystem/local:default`	`ufs_quota`	Not applicable
`rcapd`	`svc :/system/rcap:default`	`rcapd`	Not applicable
`rpcbind`	`svc :/network/rpc/bind:default`	`rpc`	Not applicable
`rpc.bootparamd`	`svc :/network/rpc/bootparams:default`	`boot.server`	Not applicable
`rpc.mdcomm`	`svc :/network/rpc/mdcomm:default`	None	Applicable
`rpc.metad`	`svc :/network/rpc/meta:default`	None	Applicable
`rpc.metamedd`	`svc :/network/rpc/metamed:default`	None	Applicable
`rpc.metamhd`	`svc :/network/rpc/metamh:default`	None	Applicable
`rpc.nisd`	`svc :/network/rpc/nisplus:default`	`rpc`	Not applicable
`rpc.nispasswdd`	`svc :/network/rpc/nisplus:default`	`rpc`	Not applicable
`rpc.rexd`	`svc :/network/rpc/rex:default`	None	Applicable
`rpc.rstatd`	`svc :/network/rpc/rstat:default`	None	Applicable
`rpc.rusersd`	`svc :/network/rpc/rusers:default`	None	Applicable
`rpc.smserverd`	`svc :/network/rpc/smserver:default`	None	Applicable
`rpc.sprayd`	`svc :/network/rpc/spray:default`	None	Applicable
`rpc.ttdbserverd`	`svc :/network/rpc/ttdbserver:tcp`	None	Applicable
`rpc.walld`	`svc :/network/rpc/wall:default`	None	Applicable
`rpc.yppasswdd` and `rpc.ypupdated`	`svc :/network/nis/server:default`	`rpc`	Not applicable
`rquotad`	`svc :/network/nfs/rquota:default`	None	Applicable
`sadc`	`svc :/system/sar:default`	`perf`	Not applicable
`savecore`	`svc :/system/dumpadm:default`	`savecore`	Not applicable
`sendmail`	`svc :/network/smtp:sendmail`	`sendmail`	Not applicable
`sf880drd`	`svc :/platform//sf880drd:default`	`sf880dr`	Not applicable
`slpd`	`svc :/network/slp:default`	`slpd`	Not applicable
`sshd`	`svc :/network/ssh:default`	`sshd`	Not applicable
`statd`	`svc :/network/nfs/client:default` `svc :/network/nfs/server:default`	`nfs.server`	Not applicable
`svc.startd`	`svc :/system/svc/restarter:default`	N/A	Not applicable
`syseventd`	`svc :/system/sysevent:default`	`devfsadm`	Not applicable
`sysidpm`, `sysidns`, `sysidroot`, `sysidsys`	`svc :/system/sysidtool:system`	`sysid.sys`	Not applicable
`sysidnet`	`svc :/system/sysidtool:net`	`sysid.net`	Not applicable
`syslogd`	`svc :/system/system-log:default`	`syslog`	Not applicable
`ttymon`	`svc :/system/console-login:default`	`inittab`	Not applicable
`utmpd`	`svc :/system/utmp:default`	`utmpd`	Not applicable
`vold`	`svc :/system/filesystem/volfs:default`	`volmgt`	Not applicable
`xntpd`	`svc :/network/ntp:default`	`xntpd`	Not applicable
`ypbind`	`svc :/network/nis/client:default`	`rpc`	Not applicable
`ypserv`	`svc :/network/nis/server:default`	`rpc`	Not applicable
`ypxfrd`	`svc :/network/nis/server:default`	`rpc`	Not applicable
`zoneadm`	`svc :/system/zones:default`	N/A	Not applicable
None	`svc :/network/loopback:default`	`network`	Not applicable
None	`svc :/network/physical:default`	`network`	Not applicable