HEP System Administration

1. Put the “Technical Computing Operating Environment” disk 1 in drive
2. Boot and at prompt “To discontinue, press any key within 10 seconds”, press any key. Then search for boot devices.

Main Menu: Enter command > sea

Searching for potential boot devices(s)...
This may take several minutes.

To discontinue search, press any key (termination may not be immediate).

Path Number          Device Path          Device Type
---------------          -------------          --------------
P0                         IDE                     CD-532E-B
P1                         FWSCSI.6.0          QUANTUM ATLAS10K-18LVD
P2                         FWSCSI.5.0          QUANTUM ATLAS10K-18LVD
P3                         FWSCSI.4.0          SEAGATE ST218406LC
P4                         FWSCSI.3.0          HP 18.2GST318406LC

Main Menu: Enter command > b p0
Interact with IPL (Y,N,Q)?> N

Pick language: 26 USB_PS2_DIN_US_English

What to do: Install HP-UX (other choices are Run a Recovery Shell or Advanced Options)
*Media Only Installation and *Guided Installation

Configuration: HP-UX B.11.11 Default

Environment: HP-UX 11i TCOE-64bit (other choices: HP-UX 11i MTOE-64bit or HPUX 11i Base OS-64-bit)

Root Disk: QUANTUM_ATLAS10K-18LVD, 10/0/15/1.6.0,1

Root Swap (MB): 4096

File System: Logical Volume Manager (LVM) with VxFS

Number of Disks in Root Group: 1

Default Language: ASK_AT_FIRST_BOOT

Next step is to select software. Just took defaults, we can add anything extra later.

Next, shows the disk that will be overwritten for the OS. And the following screen basically asks “Are you sure?”

Click Finish to start installing the system. Takes about an hour or so. After last reboot, have to configure. This is done automatically at boot time. It reboots once or twice during this process.

Now go through local settings.

Once that’s done, set up all our other disks. This probably should have been done in the boot process, but I’ve never been able to do it correctly.

The openssl commands to make certificates are:

HP-UX

openssl genrsa -out localhost.key 1024
openssl req -new -x509 -days 3650 -key localhost.key -out localhost.pem
cat localhost.key localhost.pem > host.pem

The first line creates a private key for the server. The next line creates a self-signed certificate, using the key created in the first line to sign it. The last line just joins these two files together into one. For some reason, stunnel in hp-ux likes to have both files in one file.

Linux

With linux, we can encrypt the key, so the commands are a little different.

openssl genrsa -des3 -out localhost.key 1024
openssl req -new -x509 -nodes -sha1 -days 3650 -key localhost.key -out localhost.pem

Again, these two files can be concatenated into one, if required.

Once you have a key, if you want to read the contents, use:

openssl x509 -noout -text -in localhost.pem
openssl rsa -noout -text -in localhost.key

If you have a combined file, run each of those commands on the same file to see both the certificate and key contents.

If a user gets an error message where he can’t log in to any HP machine, but all other users are ok. Delete the following files from said user’s home:

.Xauthority
.ICEauthority
.TTauthority