Distributed System Management Interface Tool Information
Contents
Distributed System Management Interface Tool (DSMIT)
DSMIT files
DSMIT commands
Distributed System Management Interface Tool (DSMIT)
The dsmit command starts the Distributed System Management Interface
Tool. DSMIT is an interface designed to simplify system management tasks. The
dsmit command displays a hierarchy of menus that lead to interactive
dialogs. DSMIT builds and runs commands as directed by the user. Because DSMIT
runs system management commands, you must be a registered DSMIT administrator to
use it. The server must specify the working collective, a list of machines
authorized to receive commands. The working collective is a temporary list. It
must be reset beginning each DSMIT session by the DSMIT administrator.
DSMIT files
- /usr/share/DSMIT/domains
- Contains the list of domains used by DSMIT.
- /usr/share/DSMIT/dsmitos
- Contains the list of operating systems of DSMIT clients.
- /usr/share/DSMIT/hosts
- Contains the list of machines with DSMIT installed that can run commands
built by the DSMIT server.
- /usr/share/DSMIT/secuity/admin.cfg
- Stores the DSMIT administrator's keys.
- /usr/share/DSMIT/secuity/managing.cfg
- Stores intermediate keys used by the managing systems.
- /usr/share/DSMIT/secuity/managed.cfg
- Stores the managed machine's DSMIT principal keys.
- /usr/share/DSMIT/secuity/dsmit.ptr
- Stores the name of the DSMIT configuration file server.
- /tmp/dsmit/new-v5srvtab
- The file on the managing system that contains the new DSMIT principal keys
created when you intialize or modify the DSMIT security configuration.
- /usr/share/DSMIT/security/v5srvtab
- Contains the local machine's unique DSMIT principal key. The location of
this file can be changed, for example, to the Kerberos v.5 or DCE keytab file by
specifying the full path name in the DSMIT_KEYTAB_PATH environment
variable.
- /usr/share/DSMIT/security/dslock
- The DSMIT lock file on the DSMIT configuration file server. Controls access
to the DSMIT configuration files.
- /usr/share/DSMIT/security/dslock.ctr
- Contains the number of current locks for DSMIT.
DSMIT commands
chdsmitd
Thechdsmitd command changes a domain member list in DSMIT. The Domain
parameter specifies the name of the domain to change. Domains must be
homogeneous, consisting only of clients with operating systems of the same type.
Use the -d, -m, and -o criteria flags and the -x
intersect flag to add and delete domain members and to redefine the member
list.
crex
The crex command allows you to bypass the DSMIT interface by entering
commands at the command line. The command is sent to all the machines specified
in concurrent mode. To send commands to machines specified in sequential mode,
see the srex command.
dsmit-addkey
The dsmit-addkey command adds the new DSMIT principal key for the
local machine to the local keytab file.
dsmit-dec
The dsmit-dec command modifies the
/usr/share/DSMIT/security/dslock.ctr file. Use this command when you get
the message, "Manually decrement counter in dslock.ctr." It can also be
used if DSMIT abnormally terminates, or if one of the keys cannot be
obtained.
dsmit-unlock
The dsmit-unlock command clears the
/usr/share/DSMIT/security/dslock file and resets the
/usr/share/DSMIT/security/dslock.ctr file on the DSMIT configuration file
server. These lock files reside on the DSMIT configuration file server and
control access to the DSMIT configuration
files. In the event that DSMIT terminates abnormally, these locks may be left in
a state that prevents you from restarting DSMIT. If you get a message such as,
"Cannot acquire lock or Cannot create credentials", you should run the
dsmit-unlock command on the DSMIT managing machine.
lsdsmitd
The lsdsmitd command displays an alphabetically ordered list of
domains for DSMIT. The lsdsmitd command can print the domain names and
their member clients. The lsdsmitd command defaults to display all
domains in which a machine is a member. To display only a subset of the domains,
use the -d flag.
lsdsmitm
The lsdsmitm command enables you to display the machines on your
system and optionally display additional information about the machines. Enter
the lsdsmitm command with no criteria flags to display all machines. To
display only a subset of the machines, use one of the -m, -o, and
-d criteria flags. To specify machines explicitly, use the -m
flag. To specify machines by operating system, use the -o flag. To
specify machines by domain, use the -d flag. If you specify two or three
criteria flags at the same time, the subsets of machines that the criteria
define are unified (all machines meeting any of the criteria are listed). If you
use the -x flag with two or more of the -m, -m or -d
criteria flags, the subsets are intersected (only machines meeting all the
criteria are listed).
mkdsmitd
The mkdsmitd command creates a new domain of machines with its member
list in DSMIT. The Domain parameter specifies the name of the newly created
domain. Domains must be homogeneous, consisting only of clients with the same
operating system. Use the -d, -m, and -o criteria flags and
the -x intersect flag to specify the machine member list.
rmdsmitd
The rmdsmitd command removes domains from the member list in
DSMIT. The Domain parameter specifies the domains to be removed. The
rmdsmitd command removes only empty domains. To remove nonempty domains,
specify the rmdsmitd command with the -f flag.
srex
The srex command allows you to bypass the DSMIT interface by entering
commands at the command line. The command will be sent to all the machines
specified in sequential mode. To send commands to machines specified in
concurrent mode, see the crex command.
[ Doc Ref: 97302717919000 Publish Date: Oct. 31, 2000 4FAX Ref: none ]