HP OpenView Operations Administrator's Reference - filibeto.org

About OVO Security
About Network Security
492
Configuring OVO Security Levels
OVO allows you to select and configure the security level that your
particular environment requires for each managed node. The value is
stored in the nodeinfo file of RPC-based managed nodes, and in the
relevant entry in the database on the management server.
NOTE For HTTPS-based managed nodes, you can get this value by calling
ovconfget, or change it by calling ovconfchg command-line tool. For
more details, refer to OVO HTTPS Agent Concepts and Configuration
Guide. See also ovconfget and ovconfchg man pages for more information.
In this way, security on a given managed node may be changed to handle,
for example, the addition of sensitive connections.
It is possible that the process fails or is required to run in the
unauthenticated mode due to the temporary unavailability or poor
configuration of the security service. OVO can be configured to help you
to work around such situations.
For example, if a management server process (for example, the request
sender) receives an authentication failure when calling a control agent
on a managed node, an error message is generated. This error message
displays in the Message Browser window. As an OVO administrator, you
can then take immediate corrective action, for example, by temporarily
changing the security level on the managed node in question to allow the
retransmitted request to succeed.
CAUTION When correcting authentication failures, be careful. An error in the
connection can, in certain circumstances, indicate that the system is
under attack.
Chapter 12