HP OpenView Operations Administrator's Reference - filibeto.org

About Required Names for Processes
About OVO Processes
About Process Security
OVO associates two names with the two types of node in its environment:
Management server
Managed node
All management server processes then run under the name associated
with the management server, and all managed node processes under the
identity of the name associated with the managed node.
About Required Security Levels for Processes
In addition, OVO allows you to select and configure the security level
your particular environment requires for an individual managed node:
the value is stored in the given RPC-based managed node’s opcinfo file
and in the relevant entry in the database on the management server.
NOTE For HTTPS-based managed nodes, you can get this value by calling
ovconfget, or change it by calling ovconfchg command-line tool.
For more details, refer to OVO HTTPS Agent Concepts and
Configuration Guide. See also ovconfget and ovconfchg man pages for
more information.
In this way, security on a given managed node may be changed to handle,
for example, the addition of sensitive connections through a firewall.
Troubleshooting Authentication Problems
You can configure OVO to overcome a situation where, owing to the
temporary unavailability or misconfiguration of the security service, a
process is required either to run in unauthenticated mode or to fail. For
example, if a management server process fails (for example, a request
sender receives an authentication failure when calling a control agent on
a managed node), an error message is generated. This error message
displays in the Message Browser window. The administrator is then able
to take immediate corrective action (for example, by temporarily
changing the security level on the managed node in question to allow the
retransmitted request to succeed).
Chapter 10 391