Symantec Management Platform 7.5 Red Hat Patching
1. Configuration
2. Initial Setup
3. Policy Creation
4. Agent Commands for Linux
Configuration
Assumptions: SMP is configured properly, resides on domain, and sites are setup.
1. Create an administrator account with Red Hat. www.redhat.com
2. In the Symantec Management Console select Home, Patch Management, Red Hat Linux. Under Settings select Remediation.
3. Go to the Red Hat Network tab and type in the credentials from step 1.
4. Use your company standards for the Software Update Options, Policy and Package Settings and Programs tabs.
5. Under Settings select Installation and Notification. (This is a default policy. If you have Development, QA, Test and Production Linux systems you may want to create a policy for each.) Set the policy per your company standards.
6. Under Settings select MetaData Import Task.
Note: Base channel for the first import must be selected for all required major updates. (You don’t have to select all child channels, also dependency resolving will not work without a base channel.)
Save changes and Select Import channels.
7. Setting a schedule to import MetaData from Red Hat. Under Task Status select New Schedule and create the schedule.
Initial Setup
1. Log into Red Hat website to ensure you see the SMP reporting to Red Hat.
Select Customer Portal, Subscriptions, RHN Classic, Registered Systems.
For each Channel you selected in step 6 there will be a separate entry.
2. Select each system. Than select Alter Channel Subscriptions.
3. Ensure all channels are checked
Policy Creation
1. In the Symantec Management Console select Home, Patch Management, Red Hat Linux. Under Software Updates select Errata.
2. Select the Bulletin and right click. Select Distribute Packages.
The bulletin will be applied to the default filter discussed in Configuration step 5. Select the appropriate filter and select Next. Select the advertisements and select Distribute software updates.
Agent Commands for Linux
# ./aex-bootstrap -h
aex-bootstrap - Usage:
aex-bootstrap [options]
Version 2.0.
This program will get all files at a URL/NS Package into the specified directory. It can also be used to download a file from a URL (see -onefile option). When started with no NS/URL argument, configuration must be provided in an XML file present in the same directory, or (in the case of a automatic reschedule) at one of the standard locations.
Generic options:
· --help, -h - Display this usage information and exit immediately.
· -v - Display Agent's full version and name.
· --version - Display version of the application.
Specific options:
· <NS|URL> - arg 1 = name of Notification Server, URL of a package or file. If the Notification Server is configured to work with the non-default port, it is desirable to provide the full URL info. Example: https://www.altiris.com:3476 -test - output version
·
· -dir <dir> - specify Agent installation directory
· -speedlimit <N> - limit download to n KB/sec
· -onefile - URL is for a single file, download to current directory, no other action.
# ./aex-configure -h
Altiris Agent for UNIX and Linux Configuration utility.
Usage:
· aex-configure [options]
· aex-configure <command> [command-options]
Options:
· --help, -h - Display this usage information and exit immediately.
· -v - Display Agent's full version and name.
· --version - Display version of the application.
Commands:
· -clean Remove aex-configure created files prior to uninstall.
· -configure Automatically configure/upgrade an installation from an XML config file.
· -iconfigure Interactively configure/reconfigure an installation ignoring any XML file.
· help Display help on the specified command
Run 'aex-configure help <command>' to learn more information on how to use certain commands.
# aex-diagnostics -h
Agent diagnostics tool - Usage:
aex-diagnostics [options]
Collect diagnostics information from the agent and its plug-ins
Generic options:
· --help, -h - Display this usage information and exit immediately.
· -v - Display Agent's full version and name.
· --version - Display version of the application.
Specific options:
· -com - Diagnose the default set of plugins
· -com <ids> - Diagnose the specified components
· -log - Dump the contents of the log file
#./aex-env
No parameters
#./aex-filesurveyor -h
FileSurveyor Utility
Usage: ./aex-filesurveyor [options]
Options:
--help, -h, -? : Display this usage information and exit immediately.
-v : Display full version and name information.
--version : Display version of the FileSurveyor Utility.
-c <config file> : A user-specified cfg file name
-f : Set file mode
-m : Enables scanning of the mounted partitions (by default disabled) - NOTE: This option has not been implemented.
-p : A user-specified product file
-x <dir1>...<dirN>] : Specify a list of directories to be excluded during the scan
# aex-helper -h
Usage:
· aex-helper [options]
· aex-helper <command> [command-options]
Command line utility for working with Altiris Agent for UNIX and Linux.
Options:
· --help, -h - Display this usage information and exit immediately.
· -v - Display Agent's full version and name.
· --version - Display version of the application.
Commands:
· adddep Register dependencies between solutions.
· agent Perform various tasks with the UNIX Agent.
· changerc Change properties of registered RC services.
· check Check whether the Altiris Agent for UNIX and Linux is running.
· clean Clean items from the XML registry.
· help Display help on the specified command.
· info Query agent for various information.
· installrc Install and register RC scripts.
· link Create wrapper scripts and links for libraries and executables.
· list List objects in the Agent's registry.
· query Query agent for various information.
· rc Start, stop and list registered RC services.
· register Add an object to the Agent's registry.
· uninstall Uninstall solutions.
· uninstallrc Uninstall RC scripts.
· unlink Remove wrapper scripts and links for libraries and executables.
· unregister Remove object from the Agent's registry.
· upgrade Upgrade Notification Server Agent Plugin.
Run 'aex-helper help <command>' to learn more information on how to use certain commands.
# aex-mkmanifest -h
Manifest File utility - Usage:
aex-mkmanifest [options]
Create an SWD manifest file for a directory.
Generic options:
· --help, -h - Display this usage information and exit immediately.
· -v - Display Agent's full version and name.
· --version - Display version of the applications.
Specific options:
· -o <file> - Write output to <file> (defaults to ./aex-manifest.xml)
· -s <dir> - Base directory for scanning (defaults to the current dir)
# aex-pluginmanager -h
Altiris Agent for UNIX and Linux Core
Usage:
· aex-pluginmanager [options]
Manages plug-ins, which do all the job.
Generic options:
· --help, -h - Display this usage information and exit immediately.
· -v - Display Agent's full version and name.
· --version - Display version of the application.
Specific options:
· -F - Work in the foreground mode
· -D - Work in the background mode (default)
· -nm - Do not start the monitor
· -nc - Do not check if the agent is already running
# aex-refreshpolicies -h
Refresh policies from the Notification Server.
Usage:
· aex-refreshpolicies
· aex-refreshpolicies [options]
Options:
· --help, -h - Display this usage information and exit immediately.
· -v - Display full version and name information about Agent.
· --version - Display full version of the Agent.
# aex-sendbasicinv -h
Send the basic inventory to Notification Server.
Usage:
· aex-sendbasicinv
· aex-sendbasicinv [options]
Options:
· --help, -h - Display this usage information and exit immediately.
· -v - Display full version and name information about Agent.
· --version - Display full version of the Agent.
# aex-swdapm -h
Software Delivery Advertised Package Manager - Usage:
· aex-swdapm [options]
Manual execution of Notification Server tasks and installation of packages.
Generic options:
· --help, -h - Display this usage information and exit immediately.
· -v - Display Agent's full version and name.
· --version - Display version of the application.
Specific options:
· -np - Do not use paging mode, list all tasks at once.
# ./aex-uninstall -h
aex-uninstall": usage: aex-uninstall" [-f]
-f force remove, do not ask to continue
# ./rcscript -h
rcscript: usage: rcscript: [start|stop|restart|status]