IBM RS/6000 SP, Руководство по определению проблем

Страница: 95 / 316

This soft copy for use by IBM employees only.
For further details, see Appendix A, “RS/6000 SP Script Files” on page 229.
3.4.2 install_cw
This creates the hardware monitor ACLs in /spdata/sys1/spmon/hmacls. For
further details, see Appendix A, “RS/6000 SP Script Files” on page 229.
3.4.3 setup_server
This creates the Kerberos files intended for the nodes in the /tftpboot directory.
For further details, see Appendix A, “RS/6000 SP Script Files” on page 229.
3.4.4 Network Boot
This installs Kerberos on the nodes.
3.5 Daemons and Databases
The following daemons are described in this section:
Kerberos
kadmind
kpropd
The databases used by Kerberos are also described here.
3.5.1 Kerberos Daemon
The kerberos daemon only runs on the primary authentication server (usually
the Control Workstation). It is started by the
setup_authent
script and thereafter
invoked from /etc/inittab. This daemon is responsible for providing
ticket-granting tickets to clients so that they can access specific server
principals.
The kerberos daemon listens for requests on the kerberos4/udp port. If this port
is not defined in the /etc/services file, it uses port 750.
Notes:
1. In MIT Kerberos version 5, the kerberos daemon listens for requests on the
kerberos5/udp port (port 88).
2. There m a y be m o r e than one kerberos daemon running on the server. This
allows for faster service if there are numerous client requests.
3.5.2 kadmind Daemon
The kadmind daemon only runs on the primary authentication server (usually the
Control Workstation). It is started by the setup_authent script and thereafter
invoked from /etc/inittab. This daemon is responsible for serving the Kerberos
administrative tools, such as changing passwords and adding principals. The
kadmind daemon also manages the primary authentication database.
The kadmind daemon listens for requests on the kerberos_master /tcp port. If
this port is not defined in the /etc/services file, it uses port 751.
Note: Only one kadmind daemon may run on the server.
Chapter 3. K e r b e r o s
75