|
version 1.16, 2004/01/16 16:50:54
|
version 1.16.2.2, 2004/03/10 17:49:11
|
|
|
|
| Tagline: OpenPegasus is an object manager for DMTF CIM objects written in C++ | Tagline: OpenPegasus is an object manager for DMTF CIM objects written in C++ |
| and supported by The Open Group | and supported by The Open Group |
| | |
| STATUS: Revised October 2003 to match Pegasus release 2.3 |
STATUS: Revised March 10 to match Pegasus release 2.3 |
| | |
| NOTE: Obsolete. See readme.html | NOTE: Obsolete. See readme.html |
| Contents: | Contents: |
|
|
|
| 14. Development with Pegasus and Pegasus Tools | 14. Development with Pegasus and Pegasus Tools |
| 15. Commands | 15. Commands |
| 16. Creating SSL certifications. | 16. Creating SSL certifications. |
| 17. Testing with ICU enabled |
17. Configuring Pegasus to use SSL |
| 18. Documentation |
18. Configuring Pegasus to use PAM |
| 19. Participate |
19. Testing with ICU enabled |
| |
20. Documentation |
| |
21. Participate |
| | |
| | |
| | |
|
|
|
| 16. Creating SSL certifications | 16. Creating SSL certifications |
| ================================ | ================================ |
| | |
| |
Please follow section 11, titled "Notes about Building Pegasus with SSL" |
| |
before embarking on this endeavour. |
| |
|
| Type these commands in your shell to create the SSL certifications. The PEGASUS_ROOT | Type these commands in your shell to create the SSL certifications. The PEGASUS_ROOT |
| and PEGASUS_HOME have to be set to your respective installation and source directory. | and PEGASUS_HOME have to be set to your respective installation and source directory. |
| | |
|
|
|
| cp $PEGASUS_HOME/cert.pem $PEGASUS_HOME/client.pem | cp $PEGASUS_HOME/cert.pem $PEGASUS_HOME/client.pem |
| rm $PEGASUS_HOME/key.pem $PEGASUS_HOME/cert.pem | rm $PEGASUS_HOME/key.pem $PEGASUS_HOME/cert.pem |
| | |
| 17. Testing with ICU enabled: |
17. Configuring Pegasus to use SSL |
| |
================================ |
| |
|
| |
Please follow section 11 and 16 before reading this section. |
| |
|
| |
To configure Pegasus to take advantage of SSL, configure |
| |
cimserver_planned.conf to have: |
| |
|
| |
sslTrustFilePath=client.pem |
| |
sslCertificateFilePath=server.pem |
| |
sslKeyFilePath=file.pem |
| |
httpsPort=5989 |
| |
enableHttpsConnection=true |
| |
|
| |
(The client.pem and server.pem are the certifications |
| |
files created per the steps in the earlier section). |
| |
|
| |
For good riddance you might consider closing down |
| |
the cleartext 5988 port. Modify your cimserver_planned.conf |
| |
to include: |
| |
|
| |
enableHttpConnection=false |
| |
|
| |
18.PAM Authentication |
| |
=================== |
| |
|
| |
In order to use PAM Authentication you have to compile Pegasus |
| |
with one extra enviroment flags: |
| |
|
| |
PEGASUS_PAM_AUTHENTICATION=1 |
| |
|
| |
You can also set the PEGASUS_ALWAYS_USE_PAM=1 flag to disable |
| |
Pegasus password authentication using a flag text-file (recommended). |
| |
|
| |
After compiling (refer to section 17 for details), follow these two |
| |
important steps: |
| |
|
| |
a). Copy the rpm/wbem file in-to /etc/pam.d directory. |
| |
This notifies PAM what kind of libraries to use when authenticating |
| |
Pegasus. |
| |
b). Edit cimserver_planned.conf to include: |
| |
|
| |
usePAMAuthentication=true |
| |
enableAuthentication=true |
| |
|
| |
And if you want to allow 'root' (*not recommended*) |
| |
enableRemotePrivilegedUserAccess=true |
| |
|
| |
The user is authenticated using HTTP Basic method, thererfore it is |
| |
strongly suggested you use SSL connection instead of normal HTTP connection. |
| |
Refer to section 16 for more details on creating and using SSL keys. |
| |
|
| |
19. Testing with ICU enabled: |
| ============================== | ============================== |
| | |
| ICU (International Compoments for Unicode) refers to the set of libraries that | ICU (International Compoments for Unicode) refers to the set of libraries that |
|
|
|
| If this variable is left defined, Pegasus will not be able to load messages | If this variable is left defined, Pegasus will not be able to load messages |
| using ICU resource bundles. | using ICU resource bundles. |
| | |
| 18. Documentation: |
20. Documentation: |
| =================== | =================== |
| | |
| The documentation is currently in preperation. The preliminary documentation | The documentation is currently in preperation. The preliminary documentation |
|
|
|
| design documentation. | design documentation. |
| | |
| | |
| 19. Participate! |
21. Participate! |
| ================= | ================= |
| | |
| We are looking for people who want to join the Pegasus work group and | We are looking for people who want to join the Pegasus work group and |
Return to
readme.txt
CVS log
Up to [Pegasus] / pegasus / Attic