HP Operations Manager for UNIX Administrator’s Reference

About HPOM Security
About Security in HPOM
About Database Security
Security of the database is controlled by the operating system and by the
database itself. Users must have an operating system logon for either
remote or local access to the data. After a user is logged on, security
mechanisms of the database control access to the database and tables.
For more information about database security, see Using Relational
Databases with HP Network Node Manager and the vendor’s manuals
supplied with the database.
Starting Applications
Applications run under the account (user and password) specified by the
administrator during application configuration. The action agent uses
the information in this account before executing an application, that is, it
switches to the user specified and then uses the name and password
stored in the application request to start the application.
About User Root
If the user account under which the HPOM agents are running has been
switched to a user other than root, you have to carry out additional
configuration steps. For more information, see the man page
opcswitchuser(1M).
About Password Aging
Application execution can be compromised by the use of password aging.
Password aging is a feature of some system security standards such as
C2 that requires passwords to expire after:
❏
❏
❏
Specified period of time has passed.
Specified date has been reached.
Specified number of unsuccessful login attempts have been made.
If password aging is enabled, application startup failures may occur due
to the account that a given application uses being temporarily
inaccessible. Such failures can be avoided by implementing the HPOM
pluggable authentication module (PAM) interface, which enables
third-party authentication methods to be used while preserving existing
system environments.
Chapter 11 363