1. Explain about kadmin command?
Local kerbeors services can be managed by administering policies, keytabs and principles by managing the kadmin command. Kadmin.local is used to master KDC and it does not require any authentication. On the server login information is passed through a secured server. It checks the principle name by the value of the user environment variable.
2. Explain about the command prof_attr?
This forms the RBAC profile database. It displays the relationship between among the profiles in the database. It also gives authorizations between navigation for those files. One of the samples is
Solaris.admin.fsmgr.read.solaris.admin.serialmgr.read.
3. Explain the differences between setting files using octal codes and symbolic codes?
The main difference between setting files using octal and symbolic code files is symbolic codes are relative whereas octal codes are numeric codes. These settings will remain unless you change the settings explicitly by using symbolic codes. If group execute access gets executed it automatically removes write access permission.
4. What is the best solution to avoid large number of groups?
The best solution for not creating large number of groups lies with the system administrator. It is best to use structural group membership which reflects organizational divisions. To manage file access a system admin can use access control lists.
Wide set permissions can be set by using umask which can set write, read and execute permissions on new files created by the user. These settings can be made from the command line to reflect broad settings. It can also be set from the global system settings file. Umask command displays all the settings made with that command.
6. How can you determine whether a file is setUID?
The easiest way to determine whether a file is setUID or not by checking for files which are owned by the root and after checking for files that are owned by root you can check for s flag files assigned to the user permissions. In the permission table the first s refers to setUID root.
7. Explain about sticky bit permissions?
This command helps the network administrator to relax a bit. This command will not allow the deletion of the common files present in the common area. This command helps the users by not allowing them to rewrite on other files. Certain permissions can be set which will restrict users to delete files created by them.
8. Explain about the command ls?
Ls command gives a way to the main directory and also gives access permissions for files in Solaris. It displays and prints user and group ownerships, file access permissions, filename and files size and creation date.
9. Explain about the limitations present in sudo?
There are some limitations for sudo which makes RBAC popular they are
1) It is not possible to assign a user to work on specific file or profile.
2) It is also not possible to assign a user to work on a specific command.
3) By using shell commands and certain functions it is possible to have some restrictions on a user but it would consume time for a larger setup.
Sudo maintains database of all the privileges assigned to a user name. These privileges can be indentified by different commands present in the database. This feature helps a user to format a disk but the root system cannot be changed.
11. What are the different ways to execute profiles?
Profiles can be executed in many different ways some of them are
1) Pfexec executes a single command in profile
2) With some restrictions pfsh and pfcsh can be executed.
3) By directly logging into the account using su.
12. What are the three different system management roles?
There are three different roles specified by Solaris they are
1) Primary administrator who is responsible for security
2) System administrator is responsible for day to day roles
3) Operator is responsible for data back up and maintenance.
RBAC implementation depends upon the role specified in the administrator profiles. Roles are implemented according to the profile. Also access to certain files and configuration can be assigned by the user profile. It also allows RBAC to differentiate high technical knowledge roles from low ones.
RBAC is introduced into Solaris for managing specific tasks. These specific tasks are based and defined in the administrator profile. It is based on the standard developed by NIST. RBAC is a very important tool for performing multiple tasks. It also separates tasks which require high technical knowledge from low ones.
15. Describe about Logical Domains and its functions?
LDOMS system administrator center provides resources and links to developers who are trying to install Ldoms technology. It gives you flexibility to group system resources and discrete systems within a computer system physically. It allows you to group system resources physically within its own operating system, identity and resources.
16. Explain the interoperability features of Solaris?
Solaris UNIX version runs on intel, AMD and SPARC platforms. It has migrated from solely a SPARC platform to include other platforms from leading companies. It provides interoperability across various technologies such as developer products, desktop applications, data center, etc.
Solaris is a UNIX based operating system which is available for free. It supports workstations and servers from sun. It is widely recognized for its scalability. This product is almost supported by many server vendors. It is the famous successor to sun operating systems.
18. Display the all files recursively with path under current directory ?
- find . -depth -print
19. Set the Display automatically for the current new user ?
- export DISPLAY=`eval ‘who am i | cut -d”(” -f2 | cut -d”)” -f1′`Here in above command, see single quote, double quote, grave ascent is used. Observe carefully.
20. Display the processes, which are running under your username ?
- ps .aef | grep MaheshvjHere, Maheshvj is the username.
21. List some Hot Keys for bash shell ?
- Ctrl+l . Clears the Screen. Ctrl+r . Does a search in previously given commands in shell. Ctrl+u - Clears the typing before the hotkey. Ctrl+a . Places cursor at the beginning of the command at shell. Ctrl+e . Places cursor at the end of the command at shell. Ctrl+d . Kills the shell. Ctrl+z . Places the currently running process into background.
22. Display the files in the directory by file size ?
- ls .ltr | sort .nr .k 5
23. How to save man pages to a file ?
- man | col .b > Example : man top | col .b > top_help.txt
24. How to know the date and time for . when script is executed ?
- Add the following script line in shell script.eval echo “Script is executed at `date`” >> timeinfo.infHere, .timeinfo.inf. contains date & time details ie., when script is executed and history related to execution.
25. How do you find out drive statistics?
- iostat -E
