HP Operations Manager for UNIX Administrator’s Reference

About HPOM Security
About Security in HPOM
}
About Java GUI Permissions
This section describes permissions in the Java-based operator GUI.
Accessing the Java-based Operator GUI
The HPOM Java-based operator GUI communicates with the HP
Operations management server through port 2531. The inetd listens at
port 2531 and starts the process /opt/OV/bin/OpC/opcuiwww when it
receives a request for the service ito-e-gui.
By default, the HP Operations management server accepts connections
from any client. You can restrict client acceptance to specific systems by
editing the /var/adm/inetd.conf file on the management server. Make
sure to specify the systems for the service ito-e-gui.
About Program Security
This section describes security for HP-UX and MPE/iX programs.
Accessing HP-UX Programs
The HP-UX 11.x programs /opt/OV/bin/OpC/opc and
/opt/OV/bin/OpC/opcuiadm) have the s-bit (set user-ID on execution).
Accessing MPE/iX Programs
For MPE/iX, the job OPCSTRTJ.BIN.OVOPC contains the readable
password of AGENT.OVOPC if the standard STREAM facility is used. If the
managed node has a customized stream command specified, no password
is inserted in OPCSTRTJ.BIN.OVOPC. This entry is only established
during first-time installation, or if the HPOM entry is found in
SYSSTART.PUB.SYS.
Change the job according to your security policies. The job is streamed
during system boot by SYSSTART.PUB.SYS and is responsible for starting
the Local Location Broker (if not yet running) and the HPOM agents.
362
Chapter 11