Controlling Access and Configuring System Messaging in Solaris 10

Objectives

The following test objectives for Exam CX-310-202 are covered in this chapter:

Configure Role-Based Access Control (RBAC), including assigning rights profiles, roles, and authorizations to users.

• This chapter describes Role-Based Access Control (RBAC), and identifies the four main databases involved with RBAC. The system administrator needs to understand the function and structure of each of these databases and how to apply the RBAC functionality in real-world situations.

Analyze RBAC configuration file summaries and manage RBAC using the command line.

• You will see how to assign a role to a user and use rights profiles by using commands that are described in this chapter. These can greatly assist the system administrator when managing a large number of rights that are to be assigned to a number of users.

Explain syslog function fundamentals, and configure and manage the /etc/syslog.conf file and syslog messaging.

• This chapter describes the basics of system messaging in the Solaris operating environment, introduces the daemon responsible for managing the messaging, and describes the configuration file that determines what information is logged and where it is stored. It also describes the new method of restarting/refreshing the syslog process when changes are made to its configuration file.

Outline

Introduction

Role-Based Access Control (RBAC)

• Using RBAC

• RBAC Components

  • Extended User Attributes (user_attr) Database
  • Authorizations (auth_attr) Database
  • Rights Profiles (prof_attr) Database
  • Execution Attributes (exec_attr) Database

syslog

• Using the logger Command

Summary

• Key Terms

Apply Your Knowledge

• Exercise
• Exam Questions
• Answers to Exam Questions

Suggested Reading and Resources

Study Strategies

The following strategies will help you prepare for the test:

• As you study this chapter, it’s important that you practice each exercise and each command that is presented on a Solaris system. Hands-on experience is important when learning these topics, so practice until you can repeat the procedures from memory.
• Be sure you understand each command and be prepared to match the command to the correct description.
• Be sure you know all the terms listed in the “Key Terms” section near the end of this chapter. Pay special attention to the databases used in Role-Based Access Control (RBAC) and the uses and format of each. Be prepared to match the terms presented in this chapter with the correct description.
• Finally, you must understand the concept of system messaging—its purpose, how it works, and how to configure and manage it.