HP OpenView Operations Administrator's Reference - filibeto.org

About OVO Security
About Security in OVO Operations
494
About Security in OVO Operations
As an OVO administrator, you need to carefully think through the
security implications of your OVO configurations. For example, managed
nodes allow only those management servers that they recognize as
action-allowed managers to execute operator-initiated actions.
Accessing OVO
Only registered OVO users can access the OVO GUI. By default, the
users opc_adm and opc_op are available.
Changing User Names
OVO user names and passwords have no direct relation to UNIX user
names and passwords. However, you can use UNIX user names. If you do
so, and if the user name is defined in the OVO database, the user is not
prompted for OVO password. This is the fastest way to open an OVO
GUI. If you use UNIX user names, you should map UNIX user names
(1:1) to OVO operator names.
Changing Passwords
As an OVO administrator, you can change operator passwords. However,
you cannot see new passwords set by operators (that is, the characters
are masked with asterisks). By default, operators can change their own
passwords.
To Prevent Operators from Changing Passwords
To remove the change password functionality from all operators, follow
these steps:
1. Open the following file:
/etc/opt/OV/share/conf/OpC/mgmt_sv/appl/registration/\
C/opc_op/opcop
2. Add the following lines to the file:
Action “Change Password”
{
}
Chapter 12