HP Operations Manager for UNIX Administrator’s Reference

About HPOM Security
About Network Security
About HPOM Process Security
In HPOM, the management server and the managed nodes
simultaneously run both RPC clients and servers. As a result, HPOM
reduces the process configuration information needed to execute RPC
calls.
To execute an RPC call, HPOM needs the following configuration
information about a process:
❏ Name and password
❏ Security level
This configuration information must be present on both the management
server and the managed node.
Configuring HPOM Security Levels
HPOM allows you to select and configure the security level that your
particular environment requires for each managed node.
NOTE
For HTTPS-based managed nodes, you can get this value by calling
ovconfget, or change it by calling ovconfchg command-line tool. For
more details, refer to HPOM HTTPS Agent Concepts and Configuration
Guide. See also ovconfget and ovconfchg man pages for more information.
In this way, security on a given managed node may be changed to handle,
for example, the addition of sensitive connections.
It is possible that the process fails or is required to run in the
unauthenticated mode due to the temporary unavailability or poor
configuration of the security service. HPOM can be configured to help
you to work around such situations.
For example, if a management server process (for example, the request
sender) receives an authentication failure when calling a control agent
on a managed node, an error message is generated. This error message
displays in the Message Browser window. As an HPOM administrator,
you can then take immediate corrective action, for example, by
temporarily changing the security level on the managed node in question
to allow the retransmitted request to succeed.
358
Chapter 11