HP 9000 Containers A.03.01 on HP Integrity Server Administrator Guide HP-UX 11i v3 (5900-3112, June 2013)

5.5.6 Configuring root cron jobs
During HP 9000 container creation, all cron jobs configured by root are moved out because they
might contain system administration-related jobs, which might not be supported inside the container.
If you want to run any of these jobs in HP 9000 container, reconfigure the jobs using the crontab
command or restore entries from the <hp9000_root>/var/opt/HP9000-Containers/var/
spool/cron/crontabs/root backup file.
5.5.7 Configuring inittab startup file
To configure the startup configuration file inittab:
1. Examine the <hp9000_root>/var/opt/HP9000-Containers/etc/inittab to view
the configuration on the HP 9000 server.
2. Open the file /var/hpsrp/<srp_name>/etc/inittab.
3. Copy each application related entry to the container inittab.
4. Modify the fourth field (which contains the path of the executable) by prefixing with chroot
<hp9000_root>.
For example,
appdaemon:3456:respawn:chroot /hp9000 /opt/app/bin/appd
5.5.8 Configuring printers
To configure printers:
1. Store the configuration from the HP 9000 server and restore it to the HP-UX 11i v3 server
using the lpmgr command.
On the HP 9000 server, run:
$ mkdir /tmp/lpsave
$ /usr/sam/lbin/lpmgr –S –xsavedir=/tmp/lpsave
Transfer the /tmp/lpsave directory to the Integrity host HP-UX 11i v3 system and run:
$ /usr/sam/lbin/lpmgr –R –xsavedir=<dir>
5.5.9 Configuring non-local users
The HP 9000 local users (from /etc/passwd) are automatically added to a container login group
when the hp9000cl template is added. This group can access the container using RBAC. To grant
access to the non-local users, follow the instructions in Section 8.3 (page 49).
5.5.10 Configuring trusted users
Examine the /tcb/files/auth file on the HP-UX 11i v3 system and verify whether the trusted
mode users are merged from <hp9000_root>/tcb.
Examine the /var/opt/HP9000-Containers/logs/migrated_users file and verify whether
any of the UIDs are changed as a part of the user merge. If there are changed UIDs, the same
must be reflected in the /tcb/files/auth file.
For example, if the log file reports a change in the UID of user1, edit the u_id field in the
/tcb/files/auth/u/user1 file.
Enable auditing via HP SMH, if required. The audit IDs are automatically picked up from the files
in /tcb/files/auth.
5.5 Additional container configuration 37