How do I install the FLEXlm license manager on the Trusted
Solaris platform?
Answer
The FLEXlm license manager is used by many applications,
including the SunPro compiler/tool suite. The procedure below
installs and starts a single instance of the license manager at
boot time that responds at all labels.
Procedure
Assume the System Administrator (admin) role and go to an
ADMIN_LOW workspace.
Use pkgadd(1M) to add the SUNWlicsw and the SUNWlit license
software packages. NOTE: Do not use the installation script provided with
FLEXlm.
Assume the Security Administrator (secadmin) role and go to an
ADMIN_LOW workspace.
Set all allowed privileges on the license software.
$ setfpriv -s -a all /opt/SUNWste/bin/*
$ setfpriv -s -a all /etc/opt/licenses/lic_srvr_start
The /etc/opt/licenses/lic_srvr_start executable may be written
over as you install new licenses. Verify that the lic_srvr_start
executable still has all allowed privileges after you install any
new license.
$ getfpriv -a /etc/opt/licenses/lic_srvr_start
Assume the secadmin role and in an ADMIN_LOW workspace, assign
the /opt/SUNWstc/bin/lit command to the Custom_Admin_Role profile,
give the command a real UID of root, and assign the
Custom_Admin_Role profile to the admin role.
In Trusted Solaris 8 software, use the Users Rights tool. In
earlier compatible releases, use the Profile Manager.
Assume the admin role and install any license keys following
the FLEXlm instructions.
Use the appropriate administrative tool to create a profile
that assigns the needed attributes to the license daemon.
Give the profile a name beginning with a lower case letter,
such as "license," which is used in our examples.
Create an entry in the new profile for the
/etc/opt/licenses/lic_srvr_start command with the following
attributes:
uid: same as selected during FLEXlm installation
gid: group id of user selected during FLEXlm installation
privileges: net_mac_read, net_reply_equal
NOTE: net_mac_read and net_reply_equal are assigned so that
processes can respond at all labels.
Modify /etc/init.d/lic_mgr to invoke the system shell with the
new profile defined in step 8.
Enter #!/bin/sysh on the first line./li>
Enter setprof on the second line.
The following assigns the "license" profile to the system
shell.