Ù×ÍõËÅÈãÎûÇô̽ÚÕ̱ (RBAC)

RBAC äÍÍÂ

ë¥øý

ÚÀÆ«ÅèÙòÝÂÆ«ûâÚæÄèËðÆîϯÍÐËÅÈãËÎǹ¡¢ÅèÄøÝÂæÚËðÆîϯÇô̽ÌÏÔºÊÑö»âõÙ¶í°¡¤ÚÀÆ«ÅèËðÆî [Solaris ê§Ü¡ÅäÚÕƺËðÆîϯ] ÄÖ̦ÄãÎû [ûâÓî] ÄÖ̦ÚæÄèÝÕËèÝÂÆ«û⡤ÚæÄèËðÆîϯÝÂÆ«ûâÇã¡ÖË·ÜÓê§Ü¡ÑÀв¡¨ÇøÇÀÍÌΤ٭¡×Îû¡ÖÐúÇ¡ÍÐüÈÊÕûâÓîÝÃÌùóò¡×ÄãßÀÓÝ¡¤prof_attr (4) îÀĸßÎÉ·Ó÷ÅýÉÖ̧Åìæñع¡¤

Sun Cluster RBAC ûâÓîÝÃÌùóò

ûâÓîÝÃÌùóò	ÅýÑÄÎûÚæûâ	ȺÚæûâÄøÝÂËÅÈãËÎǹâÐÈçÎûÉ¢äÆ
Solaris Ù×ÆÛËðÆîϯ	Ⱥܢȴ Solaris ûâÓîÝÃÌùóòÅýÉÖ Solaris ÚæûâÅèů¡¨	ÙÚÈç Solaris Ù×ÆÛËðÆîϯËÅÈãËÎǹƫÅèÙÚÈçÎûÒÞÇÑÉ¢äÆÅèů¡¨
	solaris.cluster.device.read	ûô̽ȴùÃæÒåôåúÜÚÎûæñع
	solaris.cluster.gui	Çô̽ SunPlex Manager¡¤åîë¥øýÎûËðÆîϯõäÆÒâü̦ȴġԶÍÐÇéÔ¶ö»âõÎìǵÎûûô̽Úæûâ¡¢Äß×äÝàç´ SunPlex Manager óôáþö»âõæñع¡¤
	solaris.cluster.network.read	ûô̽ȴùà IP ê½æûÇéÓìæûÕÀÎûæñع ÎÃãô¡¨ÈºÚæûâÄâïËÆîÍõ SunPlex Manager¡¤
	solaris.cluster.node.read	ûô̽ȴùÃåçöµúèÍÌÎûæñع
	solaris.cluster.quorum.read	ûô̽ȴùÃÎÎÌùæÒåôÌÏÎÎÌùÎíèèÎûæñع
	solaris.cluster.resource.read	ûô̽ȴùÃæñäãÌÏæñäãåúÜÚÎûæñع
	solaris.cluster.system.read	ûô̽ö»âõÎûÎíèè
	solaris.cluster.transport.read	ûô̽ȴùÃã®òÓÎûæñع
ö»âõÉ¢äÆ	solaris.cluster.appinstall	ÇøæÒö»âõóÜÆîá£È¢
	solaris.cluster.device.admin	è×æÒåôåúÜÚúèÍÌÙÚÈçê§Ü¡ÄÖÉ¢
	solaris.cluster.device.read	ûô̽ȴùÃæÒåôåúÜÚÎûæñع
	solaris.cluster.gui	Çô̽ SunPlex Manager¡¤åîë¥øýÎûËðÆîϯõäÆÒâü̦ȴġԶÍÐÇéÔ¶ö»âõÎìǵÎûûô̽Úæûâ¡¢Äß×äÝàç´ SunPlex Manager óôáþö»âõæñع¡¤
	solaris.cluster.install	ÇøæÒö»âõÝÔüÕ ÎÃãô¡¨ÈºÚæûâÄâïËÆîÍõ SunPlex Manager¡¤
	solaris.cluster.network.admin	è× IP ê½æûÇéÓìæûÕÀúèÍÌÙÚÈçê§Ü¡ÄÖÉ¢ ÎÃãô¡¨ÈºÚæûâÄâïËÆîÍõ SunPlex Manager¡¤
	solaris.cluster.network.read	ûô̽ȴùà IP ê½æûÇéÓìæûÕÀÎûæñع ÎÃãô¡¨ÈºÚæûâÄâïËÆîÍõ SunPlex Manager¡¤
	solaris.cluster.node.admin	è×åçöµúèÍÌÙÚÈçê§Ü¡ÄÖÉ¢
	solaris.cluster.node.read	ûô̽ȴùÃåçöµúèÍÌÎûæñع
	solaris.cluster.quorum.admin	è×ÎÎÌùæÒåôÌÏÎÎÌùÎíèèúèÍÌÙÚÈçê§Ü¡ÄÖÉ¢
	solaris.cluster.quorum.read	ûô̽ȴùÃÎÎÌùæÒåôÌÏÎÎÌùÎíèèÎûæñع
	solaris.cluster.resource.admin	è×æñäãúèÍÌÌÏæñäãåúÜÚúèÍÌÙÚÈçê§Ü¡ÄÖÉ¢
	solaris.cluster.resource.read	ûô̽ȴùÃæñäãÌÏæñäãåúÜÚÎûæñع
	solaris.cluster.system.admin	ê§Ü¡Ë·ÜÓ ÎÃãô¡¨ÈºÚæûâÄâïËÆîÍõ SunPlex Manager¡¤
	solaris.cluster.system.read	ûô̽ö»âõÎûÎíèè
	solaris.cluster.transport.admin	è×ã®òÓúèÍÌÙÚÈçê§Ü¡ÄÖÉ¢
	solaris.cluster.transport.read	ûô̽ȴùÃã®òÓÎûæñع
Ë·ÜÓê§Ü¡ÔÞ	Ⱥܢȴ Solaris ûâÓîÝÃÌùóòÅýÉÖÎûÚæûâêØ Cluster Management ÝÃÌùóòÅýÉÖÎûÚæûâÒÞÇÑ¡¤	ÙÚÈçêØ Cluster Management ËÅÈãËÎǹƫÅèÙÚÈçÎûÒÞÇÑÉ¢äÆ¡¢Åèů̧ÅìË·ÜÓê§Ü¡É¢äÆ¡¤
ö»âõê§Ü¡	ȺûâÓîÝÃÌùóòÅýÉÖÎûÚæûâêØ Cluster Operation ÝÃÌùóòÅýÉÖÎûÚæûâÒÞÇÑ¡¢ÇÑÕëõäÅýÉÖÅèĶÚæû⡨	ÙÚÈçêØ Cluster Operation ËÅÈãËÎǹƫÅèÙÚÈçÎûÒÞÇÑÉ¢äÆÅèů¡¨
	solaris.cluster.device.modify	ÔºÊÑæÒåôåúÜÚúèÍÌ
	solaris.cluster.network.modify	ÔºÊÑ IP ê½æûÇéÓìæûÕÀúèÍÌ ÎÃãô¡¨ÈºÚæûâÄâïËÆîÍõ SunPlex Manager¡¤
	solaris.cluster.node.modify	ÔºÊÑåçöµúèÍÌ ÎÃãô¡¨ÈºÚæûâÄâïËÆîÍõ SunPlex Manager¡¤
	solaris.cluster.quorum.modify	ÔºÊÑÎÎÌùæÒåôÌÏÎÎÌùÎíèèúèÍÌ
	solaris.cluster.resource.modify	ÔºÊÑæñäãúèÍÌÌÏæñäãåúÜÚúèÍÌ
	solaris.cluster.system.modify	ÔºÊÑË·ÜÓúèÍÌ ÎÃãô¡¨ÈºÚæûâÄâïËÆîÍõ SunPlex Manager¡¤
	solaris.cluster.transport.modify	ÔºÊÑã®òÓúèÍÌ
Sun Cluster ÑÀÅï	àÒ¡¢ÈþÅýÑÄ Sun Cluster ÑÀÅïÛÒÞÌ¡¢ÑÀÅïÙÚÈçÕë euid=0	ÙÚÈçÒ³ØÙåôÌÏê§Ü¡ö»âõÈÔòÙ̽Îû Sun Cluster ÑÀÅï¡¢ÅýÑÄ¡¨ scgdevs(1M) scswitch(1M) (òÙ̽ÎûòÙâú) scha_control(1HA) scha_resource_get(1HA) scha_resource_setstatus(1HA) scha_resourcegroup_get(1HA) scha_resourcetype_get(1HA)

ÝÃÌùÌÏËðÆî RBAC

Ó¼ÓÑ	îùÙ¶ïå
âÐÄ¡ÊãôËæØ RBAC	¡ÖSolaris Ë·ÜÓê§Ü¡ÑÀв¡¨ÇøÇÀÍÌΤ٭¡×ÄãÎû¡ÖÙ×ÍõËÅÈãÎûÇô̽ÚÕ̱ (äÍÓÝ)¡×
ÝÃÌù RBAC¡£ê§Ü¡Ì§Ä÷×ÃÅèůêØ Sun Cluster Ä¡ÇÑËðÆî	¡ÖSolaris Ë·ÜÓê§Ü¡ÑÀв¡¨ÇøÇÀÍÌΤ٭¡×ÄãÎû¡ÖÙ×ÍõËÅÈãÎûÇô̽ÚÕ̱ (ÄÖÉ¢)¡× ¡ÖSun Cluster System Administration Guide¡×ÄãÎû¡ÖSun Cluster and RBAC¡×
âÐÄ¡ÊãôËæØ RBAC Ä÷×ÃÌÏÄÖ̦	¡ÖSolaris Ë·ÜÓê§Ü¡ÑÀв¡¨ÇøÇÀÍÌΤ٭¡×ÄãÎû¡ÖÙ×ÍõËÅÈãÎûÇô̽ÚÕ̱ (Ù¶ÈÓ)¡×

àôÄ« SunPlex Manager ÕëÑÀÌùËÅÈã

1. íýÌùÚÀðßÈ´ solaris.cluster.gui Úæû⡤

   ÇñΪÄâðßȴȺÚæû⡢Ь˷ÜÓÄâäÄÄøÝÂÚÀàôÄ« SunPlex Manager¡¤

2. Çã SunPlex Manager [àôÄ«] Ó÷ÓòÎû [ËðÆîϯÇØê¢] ÌÏ [Ùïî£] úñÈíÄã¡¢õïÄ«ÚÀÎûËðÆîϯÇØê¢ÌÏÙï¤

   

3. ѺġĶ [àôÄ«]¡¤

   ÇñΪÄØÒ³ÚÀÎûËðÆîϯڨÅÂÑÀÌùËÅÈã¡¢ò­èÝĸäÄÅøÜ¢ [ÅèËÅÈãàôÄ«] Ó÷Óò¡¤

   

   ÉÁЬ¡¢ò­èÝĸäÄÅøÜ¢ SunPlex Manager ÄÖÉ¢Ù´¡¤

4. ÚÀÓÑÅèËÅÈãàôÄ«¡¢õäÑÒÅèÈÜËÎËÎǹàôÄ«¡©
   • Ó¼ÓÑÅèËÅÈãàôÄ«¡¢îùÚ· [ËÅÈãÇØê¢] ĶÍÖÈ¢Åü×äÏÐÄãòÙðåã÷ÓÑÎûËÅÈã¡¢ËäÇã [ËÅÈãÙïî£] úñÈíÄãõïÄ«æÚËÅÈãÎûÙï¢àÓѥѺġĶ [àôÄ«]¡¤

   • Ó¼ÓÑÅèÈÜËÎËÎǹàôÄ«¡¢îùÚ· [ËÅÈãÇØê¢] ĶÍÖÈ¢Åü×äÏÐÄãòÙðå [àÒËÅÈã]¡¢àÓѥѺġĶ [àôÄ«]¡¤

   ÇñΪÚÀòÙ̽ħËÅÈãÇØꢡ¢ÈþæÚËÅÈãÇØê¢ÍÐ̧ùÃôúÎûËÅÈãÙïî£Äâ×äÈ©Åüë¥øý¡¢Ð¬ [ÅèËÅÈãàôÄ«] Ó÷ÓòĸäÄÅøÜ¢ [ËÅÈãë¥øýÆÂÚõ] úÀÉË¡¤

   

   ÇñΪÅøܢȺúÀÉË¡¢îùÑÀÌù̧ÅìËÅÈãÇØê¢ÍÐËÅÈãÙï¤

   ÇñΪòÙ̽ħËÅÈãÇØꢡ¢ËäÅâæÚËÅÈãÇØê¢ÌÏËÅÈãÙïî£È©Åüë¥øý¡¢Ð¬ SunPlex Manager äÄüéÚÀÅèæÚËÅÈãàôÄ«¡¢ËäüéÚÀðßÈ´êØæÚËÅÈãÒÞùÃôúÎûÖÖû⡤êØÚÀÎûËðÆîϯڨÅÂÒÞùÃôúÎûÖÖûâÙòÄâÇÂÆ«Æ

   ÇñΪÚÀòÙ̽ [àÒËÅÈã]¡¢SunPlex Manager äÄüéÚÀÅèÚÀÎûËðÆîϯÇØê¢àôÄ«¡¢ËäðßÈ´êØÚÀÎûËðÆîϯڨÅÂÒÞùÃôúÎûÖÖû⡤

   È©ÅüàôÄ«Ñ¥¡¢ò­èÝĸäÄÅøÜ¢ SunPlex Manager ÄÖÉ¢Ù´¡¤

   

   ÚÀÒà̯Îûö»âõóôáþÙ×ÍõåîÚæûâÎûÇô̽û⡤

üÈÊÕËÅÈã