apache 2.0.54 compatible w/ Solaris 9?

[ponetguy2]

Hello Everyone,

I'm trying to install the latest and greatest version of Apache on a Solaris 9 Sparc box (Ultra 2). Anyone know if Apache 2.0 for Solaris 8 will work with Solaris 9? If not, does anyone know where I can get Apache 2.0.54 for Solaris 9?

I went to

http://www.apache.org

and checked out the mirror site, and I was not able to find Apache 2.0.54 for Solaris 9.

My boss wants me to eventually install and configure Apache 2.0 on a Solaris 9, v240 box. I'm really freaking out since I have no real experience with Apache. I've installed it at home for fun on a PC running RH 7.3 a long time ago and at work on a ultra 10 running Solaris 8, but it was not for production, only for personal use.

Please help!!!

Carlo Reyes

Carlo Reyes

Technology/Systems - Delivery
Networks and Infrastructure

Chicago Customer Technical Support

 

[kHz]

Yes, you can run Apache httpd Server on Solaris v9 SPARC.

 

[kHz]

Oops. I meant to include the Apache version:2.0.54. It does run on Solaris 9 SPARC.

 

[kHz]

Is this for your new job?

 

[cndcadams]

http://www.sunfreeware.com

has it

ca

 

[ponetguy2]

thanx kHz. this is for my new job. my new boss emailed me a list of things i need to know. i'll be working on these things over the weekend on my lab at home.

here is the list:

1) sendmail (OUCH!!!)
2) Solaris JASS (no experience)
3) apache (very limited experience)
4) DNS (some experience)
5) solaris solstice disksuite (some experience)
6) samba (very limited experience)

i told my new boss that i have little or no experience with this list of things to know during my interview, but he still hired me. he said he'll walk me through them.

i feel confident i'll be able to adjust, but feel free to comment on these things i need to know. i guess i have a ton of studying to do.

Carlo Reyes

Technology/Systems - Delivery
Networks and Infrastructure

Chicago Customer Technical Support

 

[cndcadams]

Carlos;

here is a basic guide line to setup samba, just download packages to go with your OS. I put this together after I started working with it. All packages are on the sunfreeware site.

1) Gather all packages needed for installation of Samba.
a. gcc-3.2.3-sol8-sparc-local.gz
b. libiconv-1.8-sol8-sparc-local.gz
c. ncurses-5.4-sol8-sparc-local.gz
d. popt-1.7-sol8-sparc-local.gz
e. readline-5.0-sol8-sparc-local.gz
f. samba-3.0.10-sol8-sparc-local.gz

2) Use the command gunzip to unzip the packages.
a. Example #gunzip gcc.3.2.3-sol8-sparc-local.gz

3) Use command pkgadd –d to add packages.
a. Example #pkgadd –d gcc.3.2.3-sol8-sparc-local

4) Create the smb configuration file
a. I set up something like this to begin with;
b. # cd /usr/local/samba/lib
c. # vi smb.conf

# Global parameters
netbios name = (your server name)
workgroup = (whatever you want)
security = share
hosts allow = 192.168.1., localhost, e4500,
name resolve order = hosts
[root]
path = /
comment = Solaris Root
guest ok = Yes
read only = Yes
[export]
path = /export
comment = Solaris share
guest ok = Yes
read only = No

5) Modify your system search path depending on you shell;
a. Edit your .profile or .login or .cshrc to have similar PATH and MANPATH entries.
b. vi .profile
PATH=/usr/sbin:/usr/bin:/usr/ucb:/etc:/usr/local/bin:/usr/ccs/bin:/usr/local/samba/bin:.
export PATH
MANPATH=/usr/sbin:/usr/man:/usr/local/man:/usr/local/samba/man:.
export MANPATH

6) Check to see if the configuration is alright
a. #cd /usr/local/samba/bin
b. #testparm <return>
c. you should get output similar to the following;

Load smb config files from /usr/local/samba/lib/smb.conf
Processing section “[root]”
Processing section “[export]”
Loaded services file OK.
Press enter to see a dump of your service definitions

7) Arrange for inetd to start the Samba daemons:
Most of Samba's services are provided by means of three servers or daemons: smbd is the Samba server, nmbd is the NetBIOS name server and swat is a Web-based Samba configuration tool. These deal with incoming connections on ports 137, 139 and 901 respectively and we need to tell the Solaris internet daemon, inetd, to start the appropriate Samba daemons whenever an incoming request is received on these ports.
a. Edit /etc/services and make the following changes if necessary. The lines should already be in there
Immediately after the line which reads:
sunrpc 111/tcp rpcbind
insert the two lines:
netbios-ns 137/udp # Samba nmbd
netbios-ssn 139/tcp # Samba smbd
and, after the line which reads:
ldaps 636/udp # LDAP protocol over TLS/SSL (was sldap)
insert the line:
swat 901/tcp # Samba swat
b. Now edit /etc/inetd.conf and add the following three lines to the end of the file:
netbios-ssn stream tcp nowait root /usr/local/samba/sbin/smbd smbd
netbios-ns dgram udp wait root /usr/local/samba/sbin/nmbd nmbd
swat stream tcp nowait.400 root /usr/local/samba/sbin/swat swat

Tell the inetd daemon to re-read its configuration file:
# pkill -HUP inetd
and Samba is installed and working.
8) You must edit /etc/dfs/dfstab and add your entries for your share, it should look similar to this
a. Ex. #vi /etc/dfs/dfstab
share –F nfs –o rw /export

9) You must start the nfs server daemon;
a. /etc/init.d/nfs.server start

10) Try to listen for your shares;
a. smbclient –L (servername)
b. This should give you a list of you shares

11) Try connecting with unix
a. Smbclient //servername/aservice
b. Aservice is = to your share so ex. is #smbclient //e4500/export

12) Try connecting from your windows client;
a. Net use (driveletter): \\servername\service
b. Ex. c:\WINDOWS\>net use m: \\e4500\export <enter>
c. It will tell you if it completed.

13) Try starting swat:
a. Open browser put

http://localhost:901

b. Or

http://ipaddressserver:901

once you get it setup you can tweek to your likeing


DNS is not that hard either.

Thanks

CA

 

[ponetguy2]

WOW!!! your notes will truly be a life saver CA. I really appreciate your notes.

Carlo Reyes

Technology/Systems - Delivery
Networks and Infrastructure

Chicago Customer Technical Support

 

[kHz]

JASS has been renamed Solaris Security Toolkit

http://www.sun.com/software/security/jass/

It minimizes and hardens servers and it a collection of scripts. There are a lot of scripts and the driver file (script) is where you can comment out a line if you don't want it removed by running the jass-execute. It can be time consuming but isn't difficult.

DiskSuite has been renamed the Solaris Volume Manager and you can download the administration guide from Sun (good idea). The commands for SVM start with meta (i.e., metadb, metattach, metadetach, metastat, etc.) AIX takes a better approach with their volume manager than Solaris and AIX doesn't require reboots to mirror/unmirror the root volume group. That is another thing to, LVs, PVs, VGs that AIX has but Solaris doesn't so you won't have to try to understand the AIX LVM (kind of difficult at first).

Apache isn't that bad. There are a lot of directives though. Are you using SSL?

Sendmail I have never had to use. Samba no use.

10+ years AIX
3 years Solaris
4 years BSD
DB2, Apache, WebSphere, MQSeries, Tivoli Storage Manager, Veritas Netbackup, iPlanet Web Server, LDAP (Sun Directory Server), and many others.

So don't fret. I support a nationwide website (talk about stress!).

 

[ponetguy2]

thanx again kHz. yeah, they are using ssl. another thing to worry about. i've never worked with ssl either. yikes!!!

i guess i better download solaris volume manger admin guide from sun. we have a cheat sheet here at my current job for meta commands. i'm assuming it will be thesame stuff i will need to know for my new job.

any recommendations for books or pdf files i should download?

Carlo Reyes

Technology/Systems - Delivery
Networks and Infrastructure

Chicago Customer Technical Support

 

[kHz]

Is your new job using JumpStart for installing servers? What are they using for backups? What do they have in place for business contiuity/disaster recovery? What are they using for performance monitoring (BMC Patrol, Sun Management Center, etc.)? What are they doing for capacity planning? Are they doing incremental zone transfers or full zone transfers? How are they doing security and OS patch management and upgrades? Is there any room for server consolidation?

Be sure to know Solaris' OBP.

If they are using JASS to secure their servers, they should also incorporate the Center for Internet Security Solaris Benchmark Tool. They also have one for Apache. They developed it with NSA. Go to

http://www.cisecurity.org

Download the "BIND9 Administrator Reference Manual" if you are administering DNS.

Download the Solaris Volume Manager Administration Guide on docs.sun.com as you mentioned.

Do a Google search for "Solaris Administrators Quick Reference" and download the PDF. I believe there is one for Apache and Sendmail too. They list all the common and most useful command with the options and arguments that can be used.

All I can think of now.

 

[ponetguy2]

hello kHz,

i'm okay with obp, but i need to refamiliarize my self w/ bind. they are not using jumpstart. i proposed it to my boss, and he said it's up to me if i want to implement it. i've installed a basic setup for jumpstart server at my current job for installing our electronic trading servers and it is great!!!

i'm not sure what they use to monitor their sun boxes. we presently use sun management console at my current job. i'm personally not too happy with it. we constantly need to restart the monitoring agents and we get alot of false alarms. i was going to write a script to auto start the agent when it dies, but our managers decided against it.

i finished installing apache. i'm in the process of configuring it. once i'm done with that, i will need to incorporate opssl. never worked with opssl, but here i go.


Carlo Reyes

Technology/Systems - Delivery
Networks and Infrastructure

Chicago Customer Technical Support

 

[coffeysm]

I use Big Brother to monitor all my servers it is a Client-Server program that is free, and you can write your own scripts. It displays all information via webpage you can check it out at

http://www.bb4.org.

I would also look in to creating a flash archive and using that instead of plain old jumpstart if you have not done that already.

 

[ponetguy2]

shoot!!! I installed Apache 2.0.54 on my Sparc Solaris 9 box, but now I have two different versions. I have Apache 2.0 located in /usr/local/apache2 and 1.3 in /usr/apache.

I found a ton of information on how to upgrade apache for linux, but I'm not sure if it will work for solaris. I'll work on it tomorrow and see what I can learn from this experience.

If anyone has notes for upgrading apache on solaris, I would really appreciate it.

Carlo Reyes

Technology/Systems - Delivery
Networks and Infrastructure

Chicago Customer Technical Support

 

[ponetguy2]

thanx coffeysm and kHz. I'll check out

http://www.bb4.org

and

http://www.cisecurity.org.

I really appreciate your help.

I sure have alot of re-learning to do. I guess I'm a little pampered at my current job. Everything was setup already and all I need to do is your typical maintenance and troubleshoot.





Carlo Reyes

Technology/Systems - Delivery
Networks and Infrastructure

Chicago Customer Technical Support

 

[Annihilannic]

ponetguy2, I wouldn't worry about the two versions of Apache, the Solaris preinstalled version doesn't start up by default, and because they are installed in different locations they shouldn't conflict. However if you wish you can remove the existing one by removing the SUNWtcatu, SUNWapchd and SUNWapchu packages using pkgrm.

Annihilannic.

 

[kHz]

When do you begin your new job?

I hate being bored and that was one reason I left my last job (and the boss was a reason, too).

 

[ponetguy2]

i'm starting at the new company on september 21st. honestly, i'm scared, excited, and nervous.

was you old boss a a-hole? why were you bored? did you get along with your colleagues?

i get along with my current boss and mostly everyone at work. we all have our moments, but we all usually get along. maybe except for some of our colleagues overseas. i hate how they stereotype americans as lazy and stupid. they talk to us like we don't know anything. unfortunately, we can't say anything since we are just a branch location for the company.