Installing CA Enterprise Log Manager - CA Technologies

Configuring the Event Log StoreConfiguring Non-interactive AuthenticationThe backup, restore, and monitor scripts assume that you have configurednon-interactive ssh authentication using RSA key pairs before use. You will usetwo servers for this configuration. Non-interactive means that one server canmove files to another server without requiring passwords. You can use thisconfiguration with the collection and reporting CA Enterprise Log Managerservers. You can also use the configuration for the reporting server and a normalUNIX or Linux server dedicated to storing backups.To enable non-interactive authentication, do the following:1. Log on to the collection server and generate an RSA key pair as thecaelmservice user. Copy the public key to the /tmp/authorized_keysdirectory on the reporting server.2. Log on to the reporting server as caelmadmin, create the .ssh directory, andmove the public key from the /tmp directory to the .ssh directory and set thekey file ownership to caelmservice.3. While logged on to the reporting server, generate a new RSA key pair as thecaelmservice user and copy it to the /tmp/authorized_keys directory on theremote storage server.4. Log on to the remote storage server, create the caelmadmin account, createthe caelmservice group and user account, create the /opt/CA/LogManagerpath, create the .ssh directory, move the public key from the /tmp directoryto the .ssh directory and set the key file ownership to caelmservice.5. Validate the configuration.Note: When the receiving server is also a CA Enterprise Log Manager server, youshould also use the caelmservice account on that machine.Chapter 5: Configuring Services 119