HP OpenView Operations Administrator's Reference - filibeto.org

Accessing the Java-based Operator GUI
About OVO Security
About Security in OVO Operations
The OVO Java-based operator GUI communicates with the OVO
management server through port 2531. The inetd listens at port 2531
and starts the process /opt/OV/bin/OpC/opcuiwww when it receives a
request for the service ito-e-gui.
By default, the OVO management server accepts connections from any
client. You can restrict client acceptance to specific systems by editing
the /var/adm/inetd.conf file on the management server. Make sure to
specify the systems for the service ito-e-gui.
NOTE It is not necessary for opcuiwww to query the database when a new active
message arrives. Set the following configuration variables for opcuiwww
to receive all messages:
OPCMSGM_USE_GUI_THREAD=NO_RPC
OPCUIWWW_NEW_MSG_NO_DB=TRUE
About Program Security
This section describes security for HP-UX and MPE/iX programs.
Accessing HP-UX Programs
The HP-UX 11.x programs /opt/OV/bin/OpC/opc and
/opt/OV/bin/OpC/opcuiadm) have the s-bit (set user-ID on execution).
Accessing MPE/iX Programs
For MPE/iX, the job OPCSTRTJ.BIN.OVOPC contains the readable
password of AGENT.OVOPC if the standard STREAM facility is used. If you
have specified a customized stream command in the Advanced Options
sub-window of the Add/Modify Node window, no password is inserted in
OPCSTRTJ.BIN.OVOPC. This entry is only established during first-time
installation, or if the OVO entry is found in SYSSTART.PUB.SYS.
Change the job according to your security policies. The job is streamed
during system boot by SYSSTART.PUB.SYS and is responsible for starting
the Local Location Broker (if not yet running) and the OVO agents.
Chapter 12 497