Chapter 1 Using the Administration Utility

Using the Administration Utility Main Menu

Figure 1-1 shows the Administration utility for Internet Express Main Menu.

Figure 1-1 Administration Utility Main Menu

Table 1-1 shows which selection to make From the Administration utility Main menu, depending on the task you want to perform.

	Note: The availability of certain administration tasks depends on the Internet Express components installed on your system. For example, if the security components, FireScreen, and TCP Wrapper are not installed on your system, the Network Security category does not appear on the Manage Components menu.

Registering Your Internet Express Installation

The Register Online option From the Administration utility Main menu allows you to register your installation of Internet Express. After you fill out the HP registration form, you will receive information on future releases. After you complete the online registration form, the Register Online option will no longer appear on the main menu.

Navigating the Administration Utility

To navigate the Administration utility, select specific menu options listed on each screen. As you proceed through the screen hierarchy, a navigation bar appears directly under the Internet Express banner at the top of the screen. These links allow you to go back one level or several levels, as follows:

• Return to the Main menu

• Return to the Main menu for the current menu (for example, the Manage Components menu)

• Return to the menu for the current task (for example, Manage Sendmail Server)

Using Administration Utility Forms

Most of the tasks you perform using the Administration utility require you to complete a form to provide the information needed to complete the task. Figure 1-2 shows a sample Administration utility form.

Figure 1-2 Sample Administration Utility Form

Every Administration utility form has the following properties:

• A navigation bar at the top of the form (Section : Navigating the Administration Utility)

• The name of the form (in Figure 1-2, Create Generic User Accounts)

• Text fields, list boxes, buttons, and other input fields for collecting data and transmitting it to the Administration utility

• Submit, Reset, or Clear buttons (separated from the data area by a short horizontal rule):

  • The Submit button transmits the data you specified on the form to the Administration utility

  • The Reset button (not shown in Figure 1-2) erases the data you specified and restores the default values (if any)

  • The Clear button erases the data in all fields

Some forms have additional links at the bottom of the form (for example, the form for managing the Secure Web Server provides a link to the Apache documentation on the Apache Web site).

To complete the form shown in Figure 1-2, follow these steps:

1. Enter a name in the Login Name field.

2. Enter a number in the Number of Users field.

3. Click on one or more of the groups in the Secondary Groups list box. (On this form, this step is optional.) To clear a selection, click on it again.

   Use the scroll bar at any time to display additional groups.

4. Click on Submit.

Accessing Administration Servers

Internet Express provides the following administration servers for managing Internet services:

The administration servers installed are password protected. When you attempt to access one of these servers, you must provide the user name (admin by default) and password (which is set during installation). To change the password for the Internet Express Administration utility, see Chapter 7.

	Note: The Secure Web Server is initially configured to allow access to the Internet Express Administration utility from the local system only. To allow access from remote systems, see the Secure Web Server Administration Guide.

Table 1-2 summarizes the ports on which the administration accounts are installed by default, and shows the URLs for accessing these accounts. In the URLs shown in Table 1-2, host.domain.name represents the fully qualified host name of the local system (the system on which Internet Express is installed).

Table 1-2 Internet Express Accounts and Ports

Port Number	Description	URL
8081	Internet Express	http://host.domain.name:8081/
8086	Internet Monitor	http://host.domain.name:8086/

You access the administration servers from an HTML-based Web browser. Enter the appropriate URL, as shown in Table 1-2.

	Note: A user who accesses the Administration utility is granted the ability to access privileged files and perform system management tasks until exiting from the browser. The user retains privileges even when browsing files that are not part of Internet Express. Do not leave an Administration session unattended. Also, limit access to the admin account to those individuals authorized to perform Internet system management tasks.

Accessing the Internet Express Login Account

The Internet Express installation procedure creates the iass login account, which you can use to view the names and passwords for Internet Express captive accounts you have created using the Administration utility (Chapter 3).

The iass account receives mail when:

During installation, you can specify a forwarding address for the iass account to have this mail sent to a more convenient e-mail address.

You can access the iass account using two methods:

	Note: If the locker account exists from a previously installed version of Internet Express, the iass account is set up as an alias for the locker account.

Accessing and Managing the Internet Monitor

The HP Internet Monitor software allows administrators to monitor Internet services running on a Tru64 UNIX system. The Internet Monitor product can be accessed directly or from the Administration utility for Internet Express.

To access the Internet Monitor from the Administration utility:

To enable or disable the Internet Monitor from running, you use the Start/Stop the Internet Monitor menu option from the Administration utility. For details, see the Internet Monitor Administrator's Guide.

To configure the Internet Monitor components, see the Internet Monitor Administrator's Guide.

Managing Internet Express in a TruCluster Environment

TruCluster Server software provides high availability for Tru64 UNIX systems. This chapter describes the special considerations to administer Internet Express running in a cluster running TruCluster Server Version 5.0 and higher software.

Using Internet Express Services in a Cluster

If you are running Internet Express in a cluster, be aware of the following considerations:

• For all services, use the cluster alias to access the service to provide highest availability. All services have been configured to allow the cluster alias to be used.

• InterNetNews, Squid, Internet Relay Chat, OpenLDAP, and Tomcat run as single-instance servers. Only one instance of these servers will be run within the cluster. The/sbin/init.d scripts have been modified to use Cluster Application Availability (CAA) for these services. The service names are innd, squid, ircd, and slapd respectively.

• The Secure Web Servers and the sendmail daemon run on all cluster members concurrently. Connections are distributed amongst the cluster members based on how the cluster alias has been configured. See cluamgr(8).

• All other services use inetd to make connections and start server processes. Connections are also distributed for these services among the cluster members.

TruCluster Impact on Internet Express Administration

There are some specific variations of the Administration utility user interface if you are running Internet Express in a TruCluster Server cluster environment. These variations include the following:

• Depending on the type of service, the active status of the service for each member where it may run is displayed.

• Starting and stopping a service applies to the entire cluster. If more than one instance of a service is running in the cluster, all are affected.

• Some information is specific to each member in the cluster. In these cases, a listbox is displayed at the top of the page, indicating which member is being affected. The listbox contains all cluster member names; selecting a different member will cause the display and subsequent actions to affect the selected member. The instances where this is the case include the following:

  • Tuning the kernel for Internet services

  • Installing and managing FireScreen

  • Displaying the mail log file

  • Shutting down or rebooting the operating system

Installing and Removing Components

You can use the Administration utility to add new Internet components or remove previously installed components, as well as include your own component on the Manage Components menu.

To add or remove Internet components, follow these steps:

To include your own component on the Administration Utility Manage Components menu (Figure 1-3), create a file in the /usr/internet/httpd/admin/htdocs/osis/components directory, one line per file, that includes fields with the table category name, component title and description, and URL link. Each field must be separated by a semi-colon to ensure the file is correctly parsed for display in the Manage Components table. The category name can be the same as an existing category or a completely new category.

The following example is the menu configuration file for the IMP Webmail component. (The IMP Webmail component is part of the Mail category in the Manage Components table.)

Mail;IMP Webmail;/mail/manage_imp.php

If the new component requires a URL that includes the hostname and cluster alias, the following keywords (Table 1-3) will be substituted with the appropriate value when the keywords appear in the URL that you provide in the menu configuration file:

Figure 1-3 shows the manage components with the major Internet Express components grouped by category.

Figure 1-3 Manage Components Menu

Accessing Web-Based System Management Tools

This section describes the system management options available from the Internet Express Administration utility. From the Administration utility Manage Components menu, you can:

Performing Web-Based System Management

From the Administration utility Manage Components menu, you can link to the sysman Web-based management utility to perform a variety of system management tasks such as shutting down and rebooting the system, and managing local printers. Follow these steps to access the sysman Web-based management utility:

1. Under System on the Manage Components menu, choose Web-Based Management.

2. From the Web-Based Management menu, click on the link for the sysman utility. From the sysman Main menu, you can select the type of management function you want to perform.

Tuning Kernel Attribute Values

By tuning attribute values in the following kernel subsystems, you can optimize the Internet-related services running on your AlphaServer system for various process loads, system configurations, network topologies, and other conditions:

• Generic subsystem (generic)

• Internet subsystem (inet)

• Network subsystem (net)

• Process subsystem (proc)

• Socket subsystem (socket)

• Virtual memory subsystem (vm)

For detailed information on how each kernel subsystem attribute affects the performance of Internet services on an AlphaServer system, see Tuning Compaq Tru64 UNIX for Internet Services, available at the following URL:

http://h30097.www3.hp.com/docs/internet/TITLE.HTM

To use the Administration utility to tune Internet-related kernel subsystem attributes, follow these steps:

1. Ensure that JavaScript is enabled in your browser preferences.

2. From the Administration utility Main menu, choose Manage Components.

3. From the Manage Components menu, under System, choose Tune the Kernel for Internet Services.

   The Administration utility queries the running kernel (using the sysconfig -q command) and the system configuration file (using the sysconfigdb -l command) to obtain the values to display in the Run-Time Value and Boot-Time Value text fields, respectively.

   If any messages occurred while the Administration utility was building the Tune the Kernel for Internet Services form, a link appears at the top of the form. Click on this link for details.

4. Use either of the following methods to tune the values in these text fields:

   • Type a value in the Run-Time Value field to change the value in the running kernel.

     Type a value in the Boot-Time Value field to replace the value in the /etc/sysconfigtab file.

   • Click on one of the following buttons in the Suggested Values column:

     • Recommended—Sets both the Run-Time Value and the Boot-Time Value to the optimized value recommended for AlphaServer systems with average loads, under normal conditions, and typical server hardware and network configurations.

       	Note: Because AlphaServer configurations differ, and a recommended value might not provide optimal performance for all configurations, exercise caution when modifying attribute values.

     • Current—Sets both the Run-Time Value and Boot-Time Value to the run-time value the attribute had when the form was initially displayed.

     • Default—Sets both the Run-Time Value and the Boot-Time Value to the default setting for the attribute.

5. To set the attribute values as shown on the form, click on Submit. To discard any changes you made, click on Reset.

   Run-Time Value changes are set in the running kernel and take effect immediately.

   Boot-Time Value changes are set in the system configuration file (/etc/sysconfigtab) and take effect the next time you boot the system.

6. After you submit the form, it is redisplayed and shows the attribute value changes that you made. Reboot the operating system for these changes to take effect. When you reboot, the boot-time attribute values become the run-time attribute values and the run-time values you previously set are lost.