Distributed System Management Interface Tool Information

Contents

Distributed System Management Interface Tool (DSMIT)
DSMIT files
DSMIT commands

Distributed System Management Interface Tool (DSMIT)

 The dsmit command starts the Distributed System Management Interface Tool. DSMIT is an interface designed to simplify system management tasks. The dsmit command displays a hierarchy of menus that lead to interactive dialogs. DSMIT builds and runs commands as directed by the user. Because DSMIT runs system management commands, you must be a registered DSMIT administrator to use it. The server must specify the working collective, a list of machines authorized to receive commands. The working collective is a temporary list. It must be reset beginning each DSMIT session by the DSMIT administrator.

DSMIT files
/usr/share/DSMIT/domains
Contains the list of domains used by DSMIT.


/usr/share/DSMIT/dsmitos
Contains the list of operating systems of DSMIT clients.


/usr/share/DSMIT/hosts
Contains the list of machines with DSMIT installed that can run commands built by the DSMIT server.


/usr/share/DSMIT/secuity/admin.cfg
Stores the DSMIT administrator's keys.


/usr/share/DSMIT/secuity/managing.cfg
Stores intermediate keys used by the managing systems.


/usr/share/DSMIT/secuity/managed.cfg
Stores the managed machine's DSMIT principal keys.


/usr/share/DSMIT/secuity/dsmit.ptr
Stores the name of the DSMIT configuration file server.


/tmp/dsmit/new-v5srvtab
The file on the managing system that contains the new DSMIT principal keys created when you intialize or modify the DSMIT security configuration.


/usr/share/DSMIT/security/v5srvtab
Contains the local machine's unique DSMIT principal key. The location of this file can be changed, for example, to the Kerberos v.5 or DCE keytab file by specifying the full path name in the DSMIT_KEYTAB_PATH environment variable.


/usr/share/DSMIT/security/dslock
The DSMIT lock file on the DSMIT configuration file server. Controls access to the DSMIT configuration files.


/usr/share/DSMIT/security/dslock.ctr
Contains the number of current locks for DSMIT.

DSMIT commands
chdsmitd
Thechdsmitd command changes a domain member list in DSMIT. The Domain parameter specifies the name of the domain to change. Domains must be homogeneous, consisting only of clients with operating systems of the same type. Use the -d, -m, and -o criteria flags and the -x intersect flag to add and delete domain members and to redefine the member list.


crex
The crex command allows you to bypass the DSMIT interface by entering commands at the command line. The command is sent to all the machines specified in concurrent mode. To send commands to machines specified in sequential mode, see the srex command.


dsmit-addkey
The dsmit-addkey command adds the new DSMIT principal key for the local machine to the local keytab file.


dsmit-dec
The dsmit-dec command modifies the /usr/share/DSMIT/security/dslock.ctr file. Use this command when you get the message, "Manually decrement counter in dslock.ctr." It can also be used if DSMIT abnormally terminates, or if one of the keys cannot be obtained.


dsmit-unlock
The dsmit-unlock command clears the /usr/share/DSMIT/security/dslock file and resets the /usr/share/DSMIT/security/dslock.ctr file on the DSMIT configuration file server. These lock files reside on the DSMIT configuration file server and control access to the DSMIT configuration files. In the event that DSMIT terminates abnormally, these locks may be left in a state that prevents you from restarting DSMIT. If you get a message such as, "Cannot acquire lock or Cannot create credentials", you should run the dsmit-unlock command on the DSMIT managing machine.


lsdsmitd
The lsdsmitd command displays an alphabetically ordered list of domains for DSMIT. The lsdsmitd command can print the domain names and their member clients. The lsdsmitd command defaults to display all domains in which a machine is a member. To display only a subset of the domains, use the -d flag.


lsdsmitm
The lsdsmitm command enables you to display the machines on your system and optionally display additional information about the machines. Enter the lsdsmitm command with no criteria flags to display all machines. To display only a subset of the machines, use one of the -m, -o, and -d criteria flags. To specify machines explicitly, use the -m flag. To specify machines by operating system, use the -o flag. To specify machines by domain, use the -d flag. If you specify two or three criteria flags at the same time, the subsets of machines that the criteria define are unified (all machines meeting any of the criteria are listed). If you use the -x flag with two or more of the -m, -m or -d criteria flags, the subsets are intersected (only machines meeting all the criteria are listed).


mkdsmitd
The mkdsmitd command creates a new domain of machines with its member list in DSMIT. The Domain parameter specifies the name of the newly created domain. Domains must be homogeneous, consisting only of clients with the same operating system. Use the -d, -m, and -o criteria flags and the -x intersect flag to specify the machine member list.


rmdsmitd
The rmdsmitd command removes domains from the member list in DSMIT. The Domain parameter specifies the domains to be removed. The rmdsmitd command removes only empty domains. To remove nonempty domains, specify the rmdsmitd command with the -f flag.
srex
The srex command allows you to bypass the DSMIT interface by entering commands at the command line. The command will be sent to all the machines specified in sequential mode. To send commands to machines specified in concurrent mode, see the crex command.



[ Doc Ref: 97302717919000     Publish Date: Oct. 31, 2000     4FAX Ref: none ]