pegasus/Attic/readme.html - diff

Return to readme.html CVS log

Up to [Pegasus] / pegasus / Attic

Diff for /pegasus/Attic/readme.html between version 1.2 and 1.2.8.3

version 1.2, 2003/11/19 23:40:02

version 1.2.8.3, 2004/03/10 20:20:23

Line 13

PEP #: 103

Title: OpenPegasus Version 2.3

Release Readme file

Version: 1.0

Version: 1.1

Created: 12 November 2003

Authors: Karl Schopmeyer

Authors: Karl Schopmeyer, Konrad Rzeszutek

Status:  draft

Version History:

<table border="1" cellspacing="1" bordercolordark="#666666"

Line 34

<td>Update from 2.2 Release notes. Converted to HTML</td>

</tr>

<tr>

<td align="center">March 10 2004</td>

<td align="center">Konrad Rzeszutek</td>

<td>Added sections describing SSL and PAM configuration</td>

</tr>

<tr>

Line 108

Line 114

<a href="#Commands">Commands</a>

<a href="#Creating SSL certifications">Creating SSL certifications</a>.

<a href="#Creating SSL certifications">Creating SSL certifications</a>

<a href="#Configuring SSL">Configuring Pegasus to use SSL</a>

<a href="#Configuring PAM">Configuring Pegasus to use PAM</a>

<a href="#Testing with ICU enabled">Testing with ICU enabled </a>

Line 842

Line 854

bin/tomof CIM_Config (extract CIM_Config from repository and present it in MOF type)

</pre>

</blockquote><h1><a name="Creating SSL certifications">Creating SSL certifications </a></h1>

Type these commands in your shell to create the SSL certifications. The PEGASUS_ROOT and PEGASUS_HOME have to be set to your respective installation and source

Please follow section <a href="#Notes about Building Pegasus with SSL">Notes on building Pegasus with SSL</a> before embarking on this endeavour.

directory. <blockquote><pre>CN="Common Name"

Type these commands in your shell to create the SSL certifications. The PEGASUS_ROOT

and PEGASUS_HOME have to be set to your respective installation and source directory.

<blockquote><pre>CN="Common Name"

EMAIL="test@email.address"

HOSTNAME=`uname -n`

sed -e "s/$CN/$HOSTNAME/" \

Line 860

Line 876

cat $PEGASUS_HOME/key.pem $PEGASUS_HOME/cert.pem > $PEGASUS_HOME/server.pem

rm $PEGASUS_HOME/key.pem $PEGASUS_HOME/cert.pem

cp $PEGASUS_HOME/cert.pem $PEGASUS_HOME/client.pem

</pre></blockquote><h1><a name="Testing with ICU enabled">Testing with ICU enabled</a></h1>

</pre></blockquote>

<h1><a name="Configuring SSL">Configuring Pegasus to use SSL</a></h1>

Please follow section <a href="#Notes about Building Pegasus with SSL">Notes on building Pegasus with SSL</a> and <a href="#Creating SSL certifications">Creating SSL certifications</a>

before embarking on this endeavour.

To configure Pegasus to take advantage of SSL, configure

CIMServer to have the following configuration options set to:

sslTrustFilePath=client.pem

sslCertificateFilePath=server.pem

sslKeyFilePath=file.pem

httpsPort=5989

enableHttpsConnection=true

</pre></blockquote>

using the cimconfig utility:

cimconfig -p -s enableHttpsConnection=true

</pre></blockquote>

(The client.pem and server.pem are the certifications

files created per the steps in the earlier section).

For good riddance you might consider closing down

the cleartext 5988 port. Modify your CIMServer configuration

to include:

enableHttpConnection=false

</pre></blockquote>

using cimconfig.

<h1><a name="Configuring PAM">Configuring Pegasus to use PAM</a></h1>

In order to use PAM Authentication you have to compile Pegasus

with one extra enviroment flags:

PEGASUS_PAM_AUTHENTICATION=1

</blockquote></pre>

You can also set the PEGASUS_ALWAYS_USE_PAM=1 flag to disable

Pegasus password authentication using a flag text-file (recommended).

After compiling (refer to section <a href="#Building Pegasus">Building Pegasus </a>

for details), follow these two important steps:

<ul>

<ul>a). Copy the rpm/wbem file in-to /etc/pam.d directory.

This notifies PAM what kind of libraries to use when authenticating

Pegasus.</uL>

<ul>

b). Modify CIMServer configuration options:

usePAMAuthentication=true

enableAuthentication=true

</blockquote></pre>

And if you want to allow 'root' to login (*not recommended*)

enableRemotePrivilegedUserAccess=true

</blockquote></pre>

using the cimconfig utility, such as:

cimconfig -p -s usePAMAuthentication=true

</pre></blockquote>

</ul>

The user is authenticated using HTTP Basic method, thererfore it is

strongly suggested you use SSL connection instead of normal HTTP connection.

Refer to section

<a href="#Configuring SSL">Configuring Pegasus to use SSL</a> for more details on creating and using SSL keys.

<h1><a name="Testing with ICU enabled">Testing with ICU enabled</a></h1>

ICU (International Components for Unicode) refers to the set of libraries that

Pegasus uses to run globalized. For example: these libraries are used to

load messages in different languages, format currency and numbers according to

Legend:

Removed from v.1.2
changed lines
	Added in v.1.2.8.3

No CVS admin address has been configured