AIX 系统资源控制器SRC

系统资源控制器SRC （System Resource Controller）通过一组命令使管理员管理和控制子系统（Subsystem）的工作大大简化。拥有一个或多个守护进程的子系统程序可使用 SRC 服务为它们的应用程序定义一个一致的系统管理接口。SRC 提供一组单独的命令以启动、停止、跟踪、刷新以及查询子系统的状态。

子系统组（Subsystem Group）是若干相关功能的子系统集合，这是SRC中最高的一个层次(TCPIP、cluster子系统组)。

子系统（Subsystem）就是一个通过控制系统进行操作的一个或一组程序或进程，用来提供一个指定的功能，例如sshd、inetd、syslogd、sendmail等。

子服务（Subserver）是属于某个子系统的程序或进程，若干子服务构成子系统(telnet、ftp服务)。

查询TCPIP子系统组：

  $ lssrc -g tcpip

Subsystem         Group            PID          Status

 inetd            tcpip            37578        active

 xntpd            tcpip            78940        active

 hostmibd         tcpip            58908        active

 aixmibd          tcpip            59272        active

 snmpmibd         tcpip            328618       active

 snmpd            tcpip            598914       active

 muxatmd          tcpip                         inoperative

 rwhod            tcpip                         inoperative

 dpid2            tcpip                         inoperative

 

 

查询HACMP子系统组：

  $lssrc -g cluster

Subsystem         Group            PID          Status

 clstrmgrES       cluster          86494        active

 clinfoES         cluster          111022       active

查询所有子系统：

  $lssrc -a

Subsystem         Group            PID          Status

 syslogd          ras              42590        active

 portmap          portmap          58394        active

 inetd            tcpip            37578        active

 

….

LUMlmd           lumls                         inoperative

 LUMgdb           lumls                         inoperative

 keyserv          keyserv                       inoperative

 ypbind           yp                            inoperative

 

  查询所有子服务：

  $lssrc -T

#sub_type:subsysname:sub_code:

ftp:inetd:21:

uucp:inetd:540:

telnet:inetd:23:

shell:inetd:514:

login:inetd:513:

exec:inetd:512:

finger:inetd:79:

tftp:inetd:69:

ntalk:inetd:518:

echo:inetd:7:

discard:inetd:9:

chargen:inetd:19:

daytime:inetd:13:

time:inetd:37:

comsat:inetd:1512:

bootps:inetd:67:

systat:inetd:11:

netstat:inetd:15:

klogin:inetd:543:

kshell:inetd:544:

imapd:inetd:143:

pop3d:inetd:110:

cimserver:cimsys:5988:

cimlistener:cimsys:6988:

CIM_diagd:cimsys:9999:

tier1slp:platform_agent:6666:

dirsnmpd:platform_agent:6161:

  查询FTP服务：

  $lssrc -t ftp

Service       Command                  Description              Status

 ftp          /usr/sbin/ftpd           ftpd                     active

 查询TELNET服务：

  $lssrc -t telnet

Service       Command                  Description              Status

 telnet       /usr/sbin/telnetd        telnetd -a               active

查询SSH子系统：

  $lssrc -a |grep sshd

 sshd             ssh              95116        active

  $

  $lssrc -s sshd

Subsystem         Group            PID          Status

 sshd             ssh              95116        active

 

 $lssrc -g ssh

Subsystem         Group            PID          Status

 sshd             ssh              95116        active

查看SRC服务：

  $ps -ef|grep srcmstr

     frp  618582  931544   0 15:00:09  pts/3  0:00 grep srcmstr

    root   58126       1   0   Jun 01      -  0:13 /usr/sbin/srcmstr

 

  $grep srcmstr /etc/inittab

srcmstr:23456789:respawn:/usr/sbin/srcmstr # System Resource Controller

  查看inted子系统配置信息:

  $more /etc/inetd.conf

## @(#)62       1.17.1.14  src/tcpip/etc/inetd.conf, tcpinet, tcpip610 11/2/99 09:16:20

## IBM_PROLOG_BEGIN_TAG

## This is an automatically generated prolog.

## 

## tcpip610 src/tcpip/etc/inetd.conf 1.17.1.14

## 

## Licensed Materials - Property of IBM

## 

## COPYRIGHT International Business Machines Corp. 1993,1999

## All Rights Reserved

## 

## US Government Users Restricted Rights - Use, duplication or

## disclosure restricted by GSA ADP Schedule Contract with IBM Corp.

## 

## IBM_PROLOG_END_TAG

##

## COMPONENT_NAME: TCPIP inetd.conf

##

## FUNCTIONS:

##

## ORIGINS: 26  27

##

## (C) COPYRIGHT International Business Machines Corp. 1993

## All Rights Reserved

## Licensed Materials - Property of IBM

##

## US Government Users Restricted Rights - Use, duplication or

## disclosure restricted by GSA ADP Schedule Contract with IBM Corp.

##

#######################################################################

##

##                 Internet server configuration database

##

##      Services can be added and deleted by deleting or inserting a

##      comment character (ie. #) at the beginning of a line  If inetd

##      is running under SRC control then the "refresh -s inetd" command

##      needs to be executed for inetd to re-read the inetd.conf file.

##

##      NOTE: The TCP/IP servers do not require SRC and may be started

##      by invoking the service directly (i.e. /etc/inetd). If inetd

##      has been invoked directly, after modifying this file, send a

##      hangup signal, SIGHUP to inetd (ie. kill -1 "pid_of_inetd").

##

##      NOTE: The services with socket type of "sunrpc_tcp" and "sunrpc_udp"

##      require that the portmap daemon be running.

##      Also please use ## to designate comments in this file so that

##      the smit commands can edit this file correctly.

##

##      NOTE: When using IPv6 services, specify "tcp6" or "udp6" for the

##      protocol.  "tcp" and "udp" are interpreted as IPv4.

##

## service  socket  protocol  wait/  user    server    server program

##  name     type             nowait         program     arguments

##

ftp     stream  tcp6    nowait  root    /usr/sbin/ftpd         ftpd

telnet  stream  tcp6    nowait  root    /usr/sbin/telnetd      telnetd -a

shell   stream  tcp6    nowait  root    /usr/sbin/rshd         rshd

#kshell  stream  tcp     nowait  root    /usr/sbin/krshd        krshd

login   stream  tcp6    nowait  root    /usr/sbin/rlogind      rlogind

#klogin  stream  tcp     nowait  root    /usr/sbin/krlogind     krlogind

#exec    stream  tcp6    nowait  root    /usr/sbin/rexecd       rexecd

#comsat dgram   udp     wait    root    /usr/sbin/comsat       comsat

#uucp   stream  tcp     nowait  root    /usr/sbin/uucpd        uucpd

#bootps dgram   udp     wait    root    /usr/sbin/bootpd       bootpd /etc/bootptab

##

## Finger, systat and netstat give out user information which may be

## valuable to potential "system crackers."  Many sites choose to disable

## some or all of these services to improve security.

##

#finger stream  tcp     nowait  nobody  /usr/sbin/fingerd     fingerd

#systat stream  tcp     nowait  nobody  /usr/bin/ps           ps -ef

#netstat stream tcp     nowait  nobody  /usr/bin/netstat      netstat -f inet

#

#tftp    dgram  udp6    SRC     nobody  /usr/sbin/tftpd         tftpd -n

#talk   dgram   udp     wait    root    /usr/sbin/talkd         talkd

ntalk   dgram   udp     wait    root    /usr/sbin/talkd         talkd

#

# rexd uses very minimal authentication and many sites choose to disable

# this service to improve security.

#

#rquotad  sunrpc_udp     udp     wait    root    /usr/sbin/rpc.rquotad rquotad 100011 1

#rexd    sunrpc_tcp     tcp     wait    root    /usr/sbin/rpc.rexd rexd 100017 1

#rstatd  sunrpc_udp     udp     wait    root    /usr/sbin/rpc.rstatd rstatd 100001 1-3

#rusersd sunrpc_udp     udp     wait    root    /usr/lib/netsvc/rusers/rpc.rusersd rusersd 100002 1-2

#rwalld  sunrpc_udp     udp     wait    root    /usr/lib/netsvc/rwall/rpc.rwalld rwalld 100008 1

#sprayd  sunrpc_udp     udp     wait    root    /usr/lib/netsvc/spray/rpc.sprayd sprayd 100012 1

#pcnfsd  sunrpc_udp     udp     wait    root    /usr/sbin/rpc.pcnfsd pcnfsd 150001 1-2

#echo   stream  tcp     nowait  root    internal

#discard        stream  tcp     nowait  root    internal

#chargen        stream  tcp     nowait  root    internal

daytime stream  tcp     nowait  root    internal

time    stream  tcp     nowait  root    internal

#echo   dgram   udp     wait    root    internal

#discard        dgram   udp     wait    root    internal

#chargen        dgram   udp     wait    root    internal

#daytime        dgram   udp     wait    root    internal

time    dgram   udp     wait    root    internal

## The following line is for installing over the network.

#instsrv stream tcp     nowait  netinst /u/netinst/bin/instsrv instsrv -r /tmp/netinstalllog /u/netinst/scripts

#imap2  stream  tcp     nowait  root    /usr/sbin/imapd imapd

#pop3   stream  tcp     nowait  root    /usr/sbin/pop3d pop3d

xmquery dgram   udp     wait    root    /usr/bin/xmtopas xmtopas -p3

wsmserver       stream  tcp     nowait  root    /usr/websm/bin/wsmserver wsmserver -start

dtspcd  stream  tcp     nowait  root    /usr/dt/bin/dtspcd /usr/dt/bin/dtspcd

cmsd    sunrpc_udp      udp     wait    root    /usr/dt/bin/rpc.cmsd cmsd 100068 2-5

#ttdbserver     sunrpc_tcp      tcp     wait    root    /usr/dt/bin/rpc.ttdbserver rpc.ttdbserver 100083 1

godm    stream  tcp     nowait  root    /usr/es/sbin/cluster/godmd

bpcd    stream  tcp     nowait  root    /usr/openv/netbackup/bin/bpcd bpcd

vnetd   stream  tcp     nowait  root    /usr/openv/bin/vnetd vnetd

vopied  stream  tcp     nowait  root    /usr/openv/bin/vopied vopied

bpjava-msvc     stream  tcp     nowait  root    /usr/openv/netbackup/bin/bpjava-msvc bpjava-msvc -transient

bgssd stream  tcp  nowait patrol  /etc/bgs/SD/bgssd.exe bgssd.exe -d /etc/bgs/SD

 

 

查看ODM库中子服务信息：

  $odmget SRCsubsvr

 

SRCsubsvr:

        sub_type = "ftp"

        subsysname = "inetd"

        sub_code = 21

 

SRCsubsvr:

        sub_type = "uucp"

        subsysname = "inetd"

        sub_code = 540

 

SRCsubsvr:

        sub_type = "telnet"

        subsysname = "inetd"

        sub_code = 23

 

SRCsubsvr:

        sub_type = "shell"

        subsysname = "inetd"

        sub_code = 514

 

SRCsubsvr:

        sub_type = "login"

        subsysname = "inetd"

        sub_code = 513

 

SRCsubsvr:

        sub_type = "exec"

        subsysname = "inetd"

        sub_code = 512

 

SRCsubsvr:

        sub_type = "finger"

        subsysname = "inetd"

        sub_code = 79

 

SRCsubsvr:

        sub_type = "tftp"

        subsysname = "inetd"

        sub_code = 69

 

查看ODM库中子系统定义：

  $odmget SRCsubsys |more

SRCsubsys:

        subsysname = "inetd"

        synonym = ""

        cmdargs = ""

        path = "/usr/sbin/inetd"

        uid = 0

        auditid = 0

        standin = "/dev/console"

        standout = "/dev/console"

        standerr = "/dev/console"

        action = 2

        multi = 0

        contact = 3

        svrkey = 0

        svrmtype = 0

        priority = 20

        signorm = 0

        sigforce = 0

        display = 1

        waittime = 20

        grpname = "tcpip"

SRCsubsys:

        subsysname = "sshd"

        synonym = ""

        cmdargs = "-D"

        path = "/usr/sbin/sshd"

        uid = 0

        auditid = 0

        standin = "/dev/console"

        standout = "/dev/console"

        standerr = "/dev/console"

        action = 1

        multi = 0

        contact = 2

        svrkey = 0

        svrmtype = 0

        priority = 20

        signorm = 15

        sigforce = 9

        display = 1

        waittime = 20

        grpname = "ssh"

来自 “ ITPUB博客 ” ，链接：http://blog.itpub.net/24274429/viewspace-690303/，如需转载，请注明出处，否则将追究法律责任。

转载于:http://blog.itpub.net/24274429/viewspace-690303/