Trusted Solaris Operating System - Technical FAQs

Question

How do I install the FLEXlm license manager on the Trusted Solaris platform?

Answer

The FLEXlm license manager is used by many applications, including the SunPro compiler/tool suite. The procedure below installs and starts a single instance of the license manager at boot time that responds at all labels.

Procedure
  1. Assume the System Administrator (admin) role and go to an ADMIN_LOW workspace.
  2. Use pkgadd(1M) to add the SUNWlicsw and the SUNWlit license software packages.
    NOTE: Do not use the installation script provided with FLEXlm.
  3. Assume the Security Administrator (secadmin) role and go to an ADMIN_LOW workspace.
  4. Set all allowed privileges on the license software.

    $ setfpriv -s -a all /opt/SUNWste/bin/*
    $ setfpriv -s -a all /etc/opt/licenses/lic_srvr_start

  5. The /etc/opt/licenses/lic_srvr_start executable may be written over as you install new licenses. Verify that the lic_srvr_start executable still has all allowed privileges after you install any new license.

    $ getfpriv -a /etc/opt/licenses/lic_srvr_start
  6. Assume the secadmin role and in an ADMIN_LOW workspace, assign the /opt/SUNWstc/bin/lit command to the Custom_Admin_Role profile, give the command a real UID of root, and assign the Custom_Admin_Role profile to the admin role.

    In Trusted Solaris 8 software, use the Users Rights tool. In earlier compatible releases, use the Profile Manager.
  7. Assume the admin role and install any license keys following the FLEXlm instructions.
  8. Use the appropriate administrative tool to create a profile that assigns the needed attributes to the license daemon.

    1. Give the profile a name beginning with a lower case letter, such as "license," which is used in our examples.
    2. Create an entry in the new profile for the /etc/opt/licenses/lic_srvr_start command with the following attributes:

      uid: same as selected during FLEXlm installation
      gid: group id of user selected during FLEXlm installation
      privileges: net_mac_read, net_reply_equal

      NOTE: net_mac_read and net_reply_equal are assigned so that processes can respond at all labels.
  9. Modify /etc/init.d/lic_mgr to invoke the system shell with the new profile defined in step 8.

    1. Enter #!/bin/sysh on the first line./li>
    2. Enter setprof on the second line.

      The following assigns the "license" profile to the system shell.

      #!/bin/sysh
      setprof license
    3. Change the line:

      su -c $lic_srvr_start

      to:

      $lic_srvr_start
  10. Reboot.
Applies to Trusted Solaris Software Release

2.5.1, 7, 8