HP 9000 Containers A.03.01 on HP Integrity Server Administrator Guide HP-UX 11i v3 (5900-3112, June 2013)

8 Administration of HP 9000 Containers
Most of the administration tasks for HP 9000 Containers must be performed from the HP-UX 11i
v3 host system (referred as the global container in the following sections).
8.1 Administrator privileges
By default, the root user on the host system is assigned the administrator privileges for managing
the lifecycle (start, stop, export, import, delete, and modify) of the container. Using RBAC, the
privileges for managing the lifecycle of an HP 9000 container can be assigned to additional users.
To assign administrator privileges, run the following command:
$ roleadm add <user-name> SRPadmin-<srp_name>
To delete an administrator, run the following command:
$ roleadm delete <user-name> SRPadmin-<srp_name>
8.2 Start and stop the HP 9000 container
To start the HP 9000 container:
$ srp –start <srp_name>
To stop the HP 9000 container:
$ srp –stop <srp_name>
If any warning (for example, Certain processes could not be terminated) is displayed
when stopping the container, retry the process using the same command.
The container is locked to prevent other operations during lifecycle operations. The lock file,
srp_<srp_name>.lck is created in the /var/opt/hpsrp/tmp directory.
To enable or disable auto start at system boot time:
$ srp –replace <srp_name> -s init
Startup messages are logged in the /var/hpsrp/<srp_name>/etc/rc.log file on the host
system. Inside a system container, this file is accessible as /etc/rc.log. It is not possible to
access this log file from within a classic container.
8.3 User account management
This section describes how to perform user management activities for HP 9000 system and classic
container types.
8.3.1 HP 9000 system container
User management activities can be performed locally just as on HP 9000 server. The container
has a local root user with complete access to the HP 9000 file system.
To reset the container root password from the global container, run the following command:
$ srp –replace <srp_name> -s init
User accounting and quota are not supported inside system containers.
NOTE: HP recommends not to configure any users in the global container other than the users
and groups related to system administration, or system management applications.
8.1 Administrator privileges 49