HP OpenView Operations Administrator's Reference - filibeto.org

About OVO Security
About Security in OVO Operations
512
❏ Detecting Faked IP Addresses or Secret Keys
If you have installed the OVO Advanced Network Security (ANS)
extension, you can also check for mismatched sender addresses by
using the command-line tool ovconfchg on the OVO management
server:
ovconfchg -ovrg -ns opc -set \
OPC_CHK_SENDER_ADDR_MISMATCH TRUE
Where is the name of the management
server resource group.
This check reinforces OPC_DISABLE_REMOTE_ACTIONS TRUE by
detecting any attempts to use faked IP addresses or secret keys that
were generated by another node.
If the check detects an IP address and hostname mismatch, all
actions that are to be executed on a node other than the message
originator are removed from the message. Only local actions that
were already started on the message originator are not removed.
Failed action requests are documented in annotations, which are
added to the message automatically.
About Queue Files
The commands opcmsg and opcmon us the queue files for the message
interceptor (msgiq) and the monitor agent (monagtq) to communicate
with their corresponding processes. The queue files grant read/write
permission to all users. You can read sensitive messages by displaying
these queue files as a regular user.
CAUTION The opcmsg and opcmon commands allow any user to send a message
triggering an automatic action, even on another node.
Chapter 12