HP OpenView Operations Administrator's Reference - filibeto.org

Starting Applications
About OVO Security
About Security in OVO Operations
Applications run under the account (user and password) specified by the
administrator during application configuration. The action agent uses
the information in this account before executing an application, that is, it
switches to the user specified and then uses the name and password
stored in the application request to start the application.
About User Root
If the user account under which the OVO agents are running has been
switched to a user other than root, you have to carry out additional
configuration steps. For more information, see the man page
opcswitchuser(1M).
About Password Aging
Application execution can be compromised by the use of password aging.
Password aging is a feature of some system security standards such as
C2 that requires passwords to expire after:
❏ Specified period of time has passed.
❏ Specified date has been reached.
❏ Specified number of unsuccessful login attempts have been made.
If password aging is enabled, application startup failures may occur due
to the account that a given application uses being temporarily
inaccessible. Such failures can be avoided by implementing the OVO
pluggable authentication module (PAM) interface, which enables
third-party authentication methods to be used while preserving existing
system environments.
Chapter 12 499