pegasus/Attic/readme.txt - diff

Return to readme.txt CVS log

Up to [Pegasus] / pegasus / Attic

version 1.16.2.2, 2004/03/10 17:49:11

version 1.16.2.3, 2004/03/10 20:20:23

Line 565

Please follow section 11 and 16 before reading this section.

To configure Pegasus to take advantage of SSL, configure

cimserver_planned.conf to have:

CIMserver to have the following configuration options set to:

sslTrustFilePath=client.pem

sslCertificateFilePath=server.pem

Line 573

httpsPort=5989

enableHttpsConnection=true

using the 'cimconfig' utility:

cimconfig -p -s enableHttpsConnection=true

(The client.pem and server.pem are the certifications

files created per the steps in the earlier section).

For good riddance you might consider closing down

the cleartext 5988 port. Modify your cimserver_planned.conf

the cleartext 5988 port. Modify your CIMserver to

to include:

(using 'cimconfig') to have the option:

enableHttpConnection=false

Line 599

Line 603

a). Copy the rpm/wbem file in-to /etc/pam.d directory.

This notifies PAM what kind of libraries to use when authenticating

Pegasus.

b). Edit cimserver_planned.conf to include:

b). Modify CIMserver configuration options:

usePAMAuthentication=true

enableAuthentication=true

Line 607

Line 611

And if you want to allow 'root' (*not recommended*)

enableRemotePrivilegedUserAccess=true

using the 'cimconfig' operation, such as:

cimconfig -p -s usePAMAuthentication=true

The user is authenticated using HTTP Basic method, thererfore it is

strongly suggested you use SSL connection instead of normal HTTP connection.

Refer to section 16 for more details on creating and using SSL keys.

Legend: