version 1.14, 2003/11/13 16:02:37
|
version 1.19, 2004/03/10 19:24:13
|
|
|
Tagline: OpenPegasus is an object manager for DMTF CIM objects written in C++ | Tagline: OpenPegasus is an object manager for DMTF CIM objects written in C++ |
and supported by The Open Group | and supported by The Open Group |
| |
STATUS: Revised October 2003 to match Pegasus release 2.3 |
STATUS: Revised March 10 to match Pegasus release 2.3 |
|
|
|
NOTE: Obsolete. See readme.html |
Contents: | Contents: |
========= | ========= |
| |
|
|
14. Development with Pegasus and Pegasus Tools | 14. Development with Pegasus and Pegasus Tools |
15. Commands | 15. Commands |
16. Creating SSL certifications. | 16. Creating SSL certifications. |
17. Testing with ICU enabled |
17. Configuring Pegasus to use SSL |
18. Documentation |
18. Configuring Pegasus to use PAM |
19. Participate |
19. Testing with ICU enabled |
|
20. Documentation |
|
21. Participate |
| |
| |
| |
|
|
16. Creating SSL certifications | 16. Creating SSL certifications |
================================ | ================================ |
| |
|
Please follow section 11, titled "Notes about Building Pegasus with SSL" |
|
before embarking on this endeavour. |
|
|
Type these commands in your shell to create the SSL certifications. The PEGASUS_ROOT | Type these commands in your shell to create the SSL certifications. The PEGASUS_ROOT |
and PEGASUS_HOME have to be set to your respective installation and source directory. | and PEGASUS_HOME have to be set to your respective installation and source directory. |
| |
|
|
EMAIL="test@email.address" | EMAIL="test@email.address" |
HOSTNAME=`uname -n` | HOSTNAME=`uname -n` |
sed -e "s/$CN/$HOSTNAME/" \ | sed -e "s/$CN/$HOSTNAME/" \ |
-e "s/$EMAIL/root@$HOSTNAME/" $PEGASUS_ROOT/ssl.cnf \ |
-e "s/$EMAIL/root@$HOSTNAME/" $PEGASUS_ROOT/src/Server/ssl.cnf \ |
> $PEGASUS_HOME/ssl.cnf | > $PEGASUS_HOME/ssl.cnf |
chmod 644 $PEGASUS_HOME/ssl.cnf | chmod 644 $PEGASUS_HOME/ssl.cnf |
chown bin $PEGASUS_HOME/ssl.cnf | chown bin $PEGASUS_HOME/ssl.cnf |
|
|
-keyout $PEGASUS_HOME/key.pem -out $PEGASUS_HOME/cert.pem | -keyout $PEGASUS_HOME/key.pem -out $PEGASUS_HOME/cert.pem |
| |
cat $PEGASUS_HOME/key.pem $PEGASUS_HOME/cert.pem > $PEGASUS_HOME/server.pem | cat $PEGASUS_HOME/key.pem $PEGASUS_HOME/cert.pem > $PEGASUS_HOME/server.pem |
rm $PEGASUS_HOME/key.pem $PEGASUS_HOME/cert.pem |
|
cp $PEGASUS_HOME/cert.pem $PEGASUS_HOME/client.pem | cp $PEGASUS_HOME/cert.pem $PEGASUS_HOME/client.pem |
|
rm $PEGASUS_HOME/key.pem $PEGASUS_HOME/cert.pem |
|
|
|
17. Configuring Pegasus to use SSL |
|
================================ |
|
|
|
Please follow section 11 and 16 before reading this section. |
|
|
|
To configure Pegasus to take advantage of SSL, configure |
|
CIMserver to have the following configuration options set to: |
|
|
|
sslTrustFilePath=client.pem |
|
sslCertificateFilePath=server.pem |
|
sslKeyFilePath=file.pem |
|
httpsPort=5989 |
|
enableHttpsConnection=true |
|
|
|
using the 'cimconfig' utility: |
|
|
|
cimconfig -p -s enableHttpsConnection=true |
|
|
|
(The client.pem and server.pem are the certifications |
|
files created per the steps in the earlier section). |
|
|
|
For good riddance you might consider closing down |
|
the cleartext 5988 port. Modify your CIMserver to |
|
(using 'cimconfig') to have the option: |
|
|
|
enableHttpConnection=false |
|
|
|
18.PAM Authentication |
|
=================== |
|
|
|
In order to use PAM Authentication you have to compile Pegasus |
|
with one extra enviroment flags: |
|
|
|
PEGASUS_PAM_AUTHENTICATION=1 |
|
|
|
You can also set the PEGASUS_ALWAYS_USE_PAM=1 flag to disable |
|
Pegasus password authentication using a flag text-file (recommended). |
|
|
|
After compiling (refer to section 17 for details), follow these two |
|
important steps: |
|
|
|
a). Copy the rpm/wbem file in-to /etc/pam.d directory. |
|
This notifies PAM what kind of libraries to use when authenticating |
|
Pegasus. |
|
b). Modify CIMserver configuration options: |
|
|
|
usePAMAuthentication=true |
|
enableAuthentication=true |
|
|
|
And if you want to allow 'root' (*not recommended*) |
|
enableRemotePrivilegedUserAccess=true |
|
|
|
using the 'cimconfig' operation, such as: |
|
|
|
cimconfig -p -s usePAMAuthentication=true |
|
|
|
The user is authenticated using HTTP Basic method, thererfore it is |
|
strongly suggested you use SSL connection instead of normal HTTP connection. |
|
Refer to section 16 for more details on creating and using SSL keys. |
| |
17. Testing with ICU enabled: |
19. Testing with ICU enabled: |
============================== | ============================== |
| |
ICU (International Compoments for Unicode) refers to the set of libraries that | ICU (International Compoments for Unicode) refers to the set of libraries that |
|
|
If this variable is left defined, Pegasus will not be able to load messages | If this variable is left defined, Pegasus will not be able to load messages |
using ICU resource bundles. | using ICU resource bundles. |
| |
18. Documentation: |
20. Documentation: |
=================== | =================== |
| |
The documentation is currently in preperation. The preliminary documentation | The documentation is currently in preperation. The preliminary documentation |
|
|
design documentation. | design documentation. |
| |
| |
19. Participate! |
21. Participate! |
================= | ================= |
| |
We are looking for people who want to join the Pegasus work group and | We are looking for people who want to join the Pegasus work group and |