How to Manage Password Aging in Solaris, AIX, and Linux

LogoIts possible that sometime in your short, meaningless life, you may need to create an account that has a password that is set to never expire. This is somethimes the case with headless accounts and specialty accounts such as the type you might have to setup for monitoring or security scanning. You might also find yourself setting up shared headless accounts that have locked passwords in order to block direct logins. This second scenario can be especially troublesome when this is some sort of application or database user with cron jobs, as even an account without a password and expire and lock. If this occurs all of a users cron jobs will fail. All because the account expired.

Sudosh Make Me a Sandwich: Install and Configure Sudosh in Solaris 9/10

SandwichWelcome to the way-back machine again. This time we are going to take a look at installing and configuring sudosh on Solaris with the purpose of using sudosh as a replacement for sudo (at least sudo to root). Using sudosh in this manner allows us to still allow users to become root, but also allows us to track each and every command that they run once they become root.

Disable SSH for SFTP Users in UNIX and Linux

SFTP is a file transfer mechanism that is an extension of the SSH (Secure Shell) protocol and by design they share the same configuration file (/etc/ssh/sshd_config). By default when a user is given access to a server via SSH they also gain access to a server via SFTP. however it is pretty easy to disallow … Continue reading Disable SSH for SFTP Users in UNIX and Linux

Solaris 9 Scan for New SAN Luns & and Vertias Volume Manager Quick Start

Today we are going to take a little trip into the past and learn about how to add disks to Solaris 9, put them under Veritas control, and, create a volume group and a volume. This information will come in very handy if you acidentally time travel back 10 years and are forced to get … Continue reading Solaris 9 Scan for New SAN Luns & and Vertias Volume Manager Quick Start

Solaris: Password Complexity and Truncation Issues

Wow. Look a Solaris post. So today I was forced to log into a couple of Solaris boxes and ran into a very annoying issue that I thought I would document for the other 5 people in the world who still use Solaris. Anway I was ssh'ing into the server and found that my password … Continue reading Solaris: Password Complexity and Truncation Issues

Recovering from failed vxevac

If you have ever evacuated disks in Veritas, every so often this will happen to hang.  Usually you terminate your session or who knows what.  Kinda like Joe Girardi's willingness to sacrifice outs for no good reason every time the Yankees hottest hitter is at the plate.  It happens, you can't explain it, you move … Continue reading Recovering from failed vxevac

ZFS Cheat Sheets and Quick Commands

Solaris is not dead, at least not yet, which is a good thing Solaris 10 included ZFS. What is ZFS you ask, well its a filesystem and logical volume manager in one. ZFS filesystems are built on top of virtual storage pools called zpools. A zpool is constructed of virtual devices(vdevs), which are themselves constructed of block devices: files, hard drives or partitions, or entire drives, with the last being the recommended usage.