HP OpenView System Administration Handbook [Electronic resources] : Network Node Manager, Customer Views, Service Information Portal, HP OpenView Operations نسخه متنی

20.5 USERS AND PASSWORDS

During installation of the managed node, the operations account opc_op is created. The installation process of the OpenView agent creates the account on the managed node. The name of the account for example on a UNIX node is opc_op. You can view this account after the agent is installed using the command line, as shown in Figure 20-2.

The account is made secure during installation and prevents direct login. Operations that require a local account on the managed node utilize the opc_op account. Such operations include operator actions, broadcast commands, and applications launches from the operator's list of applications on the application desktop in the MOTIF console or in the navigation pane in the JAVA console.

20.5.1 Administrators

The OVO Administrator's privileges are that of a root user on any system managed by OVO. These privileges are required to perform the systems management tasks. See Chapter 13, "Out-of-the-box with OpenView Operations," for details of the OVO Administration tasks. As an example, during agent distribution from the management server the root password is required on the managed node. For easy access, there is sometimes a .rhosts file enabled on the server and the node to make the distribution process more user friendly (no password authentication check with .rhosts).Section 20.8.7, "Secure Socket Layer (SSL)," you will find more information about implementing SSL.

20.5.2 Operators

Operators perform some tasks utilizing the privileges of the root user on the managed node. Operator-initiated actions, for example, could be programs or commands that require root privilege to execute. Automatic actions are not executed by the operator but by OVO itself. The operator is restricted to perform the tasks as root while performing these tasks. OVO also makes available the broadcast command application. This feature allows an operator to initiate the call to a command that will execute on one or multiple nodes simultaneously. Some operations management tasks require administrator privileges and these are performed as authority permits within the operator's environment. Security features built into the operator's console can restrict operators from performing certain tasks. The operators' configurations determine what messages, applications, and features of OVO are enabled during their sessions.