Return to cimconfig.8 CVS log

Up to [Pegasus] / pegasus / rpm / manLinux / man8.Z

BUG#: 9036
TITLE: new runtime configuration options for indication service
DESCRIPTION:

.\" .TA c \" lowercase initial leter of .TH name
.TH "cimconfig" "8" "" "" ""
.SH "NAME"
cimconfig \- get, set, unset, or list CIM Server configuration properties
.SH "SYNOPSIS"
\fBcimconfig\fP \fB\-g\fP name [ \fB\-c\fP ] [ \fB\-d\fP ] [ \fB\-p\fP ]

\fBcimconfig\fP \fB\-s\fP name=value [ \fB\-c\fP ] [ \fB\-p\fP ]

\fBcimconfig\fP \fB\-u\fP name [ \fB\-c\fP ] [ \fB\-p\fP ]

\fBcimconfig\fP \fB\-l\fP [ \fB\-c\fP | \fB\-p\fP ]

\fBcimconfig\fP \fB\-h\fP

\fBcimconfig\fP \fB\-\-help\fP

\fBcimconfig\fP \fB\-\-version\fP

.SH "DESCRIPTION"
.PP 
The 
.B cimconfig 
command manages
CIM Server configuration properties. The operations are executed on the local
host by submitting requests to the CIM Server.
An operation on a current configuration property takes effect immediately,
and an operation on a planned configuration property takes effect the next time
the CIM Server is started with 
.B "cimserver (8)" .
Modifications to a configuration property via 
.B cimconfig 
remain in effect
until changed via another 
.B cimconfig 
command.  Configuration properties may also be modified temporarily via the
.B "cimserver (8)"
command, in which case, the modification of the configuration
property remains in effect for that execution of the 
.B "cimserver (8)"
command only. A default value is associated with each configuration property.
Each configuration property is initially
assigned its default value, until modified by a 
.B cimconfig 
command or 
.B "cimserver (8)"
command.  Dynamic configuration
properties are those whose current values may be set while the CIM server is
running.
.PP 
The following configuration properties are available:
.PP 
.B authorizedUserGroups
.IP 
.BR Description: " If set, the value is interpreted as a list of
comma-separated user groups whose members may issue CIM requests.
A user who is not a member of any of these groups is restricted
from issuing CIM requests, with the exception of privileged users
(superuser). If unset, any user may issue CIM requests. Note:
This configuration property operates in conjunction with other
CIM request authorization conditions rather than overriding them.
.PD 0
.IP 
.BR "Default Value: " (None)
.IP 
.BR Dynamic: \0No
.PD
.PP 
.B enableAssociationTraversal
.IP 
.BR Description: " If True, the CIM Server will support the four association traversal operators:
Associators, AssociatorNames, References, and ReferenceNames.
.PD 0
.IP 
.BR "Default Value: " True
.IP 
.BR Dynamic: \0No
.PD
.PP
.B enableAuditLog
.IP
.BR Description: " If True, audit log entries for certain types of CIM
Server activities will be written to the system log.  Examples of audited
activities include a CIM Server configuration change, a Provider registration
change, an authentication attempt and a modification to the CIM Schema or a
CIM Instance.  An audit log entry describes the who, what, and when associated
with an audited activity.
.PD 0
.IP
.BR "Default Value: " False
.IP
.BR Dynamic: \0Yes
.PD
.PP 
.B enableIndicationService
.IP 
.BR Description: " If True, the CIM Server will support CIM Indications."
.PD 0
.IP 
.BR "Default Value: " True
.IP 
.BR Dynamic: \0No
.PD
.PP 
.B enableHttpConnection
.IP 
.BR Description: " If True, allows connections to the CIM Server
using the HTTP protocol
.PD 0
.IP 
.BR "Default Value: " False
.IP 
.BR Dynamic: \0No
.PD
.PP 
.B enableHttpsConnection
.IP 
.BR Description: " If True, allows connections to the CIM Server
using the HTTPS protocol (HTTP using Secure Socket Layer encryption)
.PD 0
.IP 
.BR "Default Value: " True
.IP 
.BR Dynamic: \0No
.PD
.PP 
.B enableNamespaceAuthorization
.IP 
.BR Description: " If True, the CIM Server restricts access to
namespaces based on configured user authorizations [user authorizations may
be configured using
.B "cimauth (8)"
]
.PD 0
.IP 
.BR "Default Value: " False
.IP 
.BR Dynamic: \0No
.PD
.PP 
.B enableRemotePrivilegedUserAccess
.IP 
.BR Description: " If True, the CIM Server allows access by a
privileged user from a remote system
.PD 0
.IP 
.BR "Default Value: " True
.IP 
.BR Dynamic: \0No
.PD
.PP 
.B enableSubscriptionsForNonprivilegedUsers
.IP 
.BR Description: " If True, nonprivileged user of the system will be 
allowed to create Indication Subscription, otherwise privileged access
is required.
.PD 0
.IP 
.BR "Default Value: " False
.IP 
.BR Dynamic: \0No
.PD
.PP 
.B forceProviderProcesses
.IP 
.BR Description: " If true, the CIM Server runs Providers in separate
processes rather than loading and calling Provider libraries directly
within the CIM Server process.
.PD 0
.IP 
.BR "Default Value: " True
.IP 
.BR Dynamic: \0No
.PD
.PP 
.B idleConnectionTimeout
.IP 
.BR Description: " If set to a positive integer, this value specifies a
minimum timeout value for idle client connections.  If set to zero, idle
client connections do not time out.
.BR A client connection is considered idle when it is not in the process of
sending a request and the CIM Server is not processing a request from that
connection.  An idle connection timeout allows reclamation of the system
resources allocated for idle CIM Server connections.  Note that the
CIM Server may allow an idle connection to persist longer than the configured
timeout value based on server activity.
.BR Some client applications may not behave correctly if a connection timeout
is introduced.  Client compatibility should be considered when configuring an
idle connection timeout value.
.BR The idle connection time is computed using the system clock.  Thus,
resetting the system clock may cause unexpected timeout behavior.
.PD 0
.IP 
.BR "Default Value: " 0
.IP 
.BR Dynamic: \0No
.PD
.PP 
.B maxFailedProviderModuleRestarts
.IP
.BR Description: " If set to a positive integer, this value specifies the number
of times the failed provider module with indications enabled are restarted
automatically before being moved to Degraded state. If set to zero, failed
provider module is not restarted with indications enabled automatically and
will be moved to Degraded state immediately.
.BR "This option controls the automatic re-enabling of the failed provider module
with indications enabled. If the provider module with indications enabled fails
very frequently, it affects the CIMServer normal operations because CIMServer would
be busy with reloading the provider module every time it fails. This option would be
helpful if the long running indication provider crashes and the management
application want to receive the indications from the provider while provider fix
is being delivered.
.BR "In case of provider module grouping, if one of the indication provider crashes,
it affects all indication providers in the provider modules of the group.
.BR "Note that this is the facility provided by the CIMServer for temporary
recovery of the provider and the ultimate goal SHALL be fixing the faulty provider.
.PD 0
.IP
.BR "Default Value: " 3
.IP
.BR Dynamic: \0Yes
.PD
.PP
.B maxIndicationDeliveryRetryAttempts
.IP
.BR Description: "If set to a positive integer, this value defines the number of times
that the indication service will try to deliver an indication to a particular listener
destination. This does not effect the original delivery attempt, thus if set to 0, cimserver
will only try to deliver the indication once.
.BR "This value is used to set the CIM_IndicationService.DeliveryRetryAttempts property. See
CIM_IndicationService.DeliveryRetryAttempts property for more details.
.PD 0
.IP
.BR "Default Value: " 3
.IP
.BR Dynamic: \0No
.PD
.PP
.B minIndicationDeliveryRetryInterval
.IP
.BR Description: "If set to a positive integer, this value defines the minimal time interval
in seconds for the indication service to wait before retrying to deliver an indication to a
listener destination that previously failed. Cimserver may take longer due to QoS or other processing.
.BR "This value is used to initialize the property CIM_IndicationService.DeliveryRetryInterval. See
CIM_IndicationService.DeliveryRetryInterval property for more details.
.PD 0
.IP
.BR "Default Value: " 30
.IP
.BR Dynamic: \0No
.PD
.PP
.B shutdownTimeout
.IP 
.BR Description: " When a
.B cimserver \-s
shutdown command is
issued, specifies the maximum time in seconds for the CIM Server to complete
outstanding CIM operation requests before shutting down; if the specified
timeout period expires, the CIM Server will shut down, even if there are
still CIM operations in progress.
Minimum value is 2 seconds.
.PD 0
.IP 
.BR "Default Value: " 30
.IP 
.BR Dynamic: \0Yes
.PD
.PP 
.B socketWriteTimeout
.IP
.BR Description: " Specifies the number of seconds the CIM Server will wait
for a client connection to be ready to receive data.  If the CIM Server is
unable to write to a connection in this time, the connection is closed.
.BR A client connection can become unable to receive data if the client fails
to read the data that has already been sent.  This timeout allows the CIM
Server to reclaim resources that are allocated to a malfunctioning client.
.BR One might consider increasing this timeout value if the CIM Server
prematurely closes connections with well-behaved clients.
.PD 0
.IP 
.BR "Default Value: " 20
.IP 
.BR Dynamic: \0Yes
.PD
.PP
.B sslClientVerificationMode 
.IP 
.BR Description: " Defines the desired level of support for
certificate-based authentication. It can be set to 
.B required, optional
or
.B disabled.
If set to
.B required,
the CIM Server will require all clients connecting
over HTTPS to authenticate using a certificate.  If the client
certificate is not sent or not trusted the connection 
will be rejected.
If set to
.B optional,
the CIM Server will allow, but not require, HTTPS clients
to authenticate using a certificate. If the client does not
send a certificate, the CIM Server will attempt to authenticate
the client using HTTP basic authentication.
If set to
.B disabled,
the CIM Server will not allow HTTPS clients to authenticate
using a certificate. Basic authentication will be used
to authenticate all HTTPS clients. This property is only used if
.B enableHttpsConnection
is true.
.PD 0
.IP 
.BR "Default Value: " disabled
.IP 
.BR Dynamic: \0No
.PD
.PP
If both the 
.B enableHttpsConnection
and
.B enableHttpConnection
properties are set to
.B False , 
neither HTTP nor HTTPS connections will be allowed. On some platforms, the 
OpenPegasus CIM Server has been enhanced to include support for a local 
(single system), non-standard protocol. This allows the OpenPegasus CIM Server 
to continue to receive and process requests from local OpenPegasus CIM Clients 
even if both HTTP ports are disabled. If a local protocol is not supported, 
the CIM Server will be shut down and  disabled  from  automatically  being  
re\-started.
.PP 
The current and planned
values of the configuration properties are stored in the files
.B /var/opt/tog\-pegasus/cimserver_current.conf
and
.B /var/opt/tog\-pegasus/cimserver_planned.conf ,
respectively.  The configuration
properties may only be modified via the
.B cimconfig
and
.B "cimserver (8)"
commands;
the files must not be edited directly.
.SS Options
.PP 
The 
.B cimconfig
command recognizes the following options:
.RS
.TP 15
\fB\-g\fP configuration_property
Gets the specified value (current, planned and/or default) of the specified
configuration property.  By default, gets the current value.
.TP 
\fB\-s\fP configuration_property = value
Sets the specified value (current and/or planned) of the specified configuration
property to 
.I R value .  
By default, sets the current value.
.TP 
\fB\-u\fP configuration_property
Unsets the specified
value (current and/or planned) of the specified configuration property, and
resets it to its default value.  By
default, unsets the current value and resets it to its default value.
.TP 
.B \-l
Lists all the specified (current or planned) configuration property name and 
value pairs in the CIM Server.  By default,
lists only the names of all the current configuration properties.
.TP 
.B \-c
Specifies that the operation (get, set, unset, or list) be performed on the 
current configuration properties.  For set or
unset operations, returns an error when the CIM Server is not running or the
specified property is not a dynamic property.
.TP 
.B \-p
Specifies that the operation (get, set, unset, or list) be performed on the 
planned configuration properties.  For set and
unset operations, operates on the value of the specified property in the
planned configuration file if the CIM Server is not running.
.TP 
.B \-d
Specifies that the get operation be performed on the default configuration
properties.  Returns an error when the CIM Server is not running.
.RE
.PP 
If no options are specified, 
.B cimconfig 
displays a usage message.
.SH "EXIT STATUS"
.PP 
When an error occurs, an
error message is written to stderr and an error value of 1 is returned. The
following return values are returned:
.RS
.TP 
.B 0
Successful completion
.PD 0
.TP 
.B 1
Error
.PD
.RE
.SH "EXAMPLES"
.PP 
Get the current value for the configuration property 
.B shutdownTimeout .
.IP 
.B cimconfig \-g shutdownTimeout \-c
.PP 
Get the planned value for the configuration property
.B  shutdownTimeout .
.IP 
.B cimconfig \-g shutdownTimeout \-p
.PP 
Get the default value for the configuration property 
.B shutdownTimeout .
.IP 
.B cimconfig \-g shutdownTimeout \-d
.PP 
Set the current value of the property 
.B shutdownTimeout
to the new value 15.
.IP 
.B cimconfig \-s shutdownTimeout=15 \-c
.PP 
Set the planned value of the property 
.B shutdownTimeout , 
to the new value 5.
.IP 
.B cimconfig \-s shutdownTimeout=5 \-p
.PP 
Reset the current value of the property 
.B shutdownTimeout
to its default value.
.IP 
.B cimconfig \-u shutdownTimeout \-c
.PP 
Reset the planned value of the property 
.B shutdownTimeout 
to its default value.
.IP 
.B cimconfig \-u shutdownTimeout \-p
.PP 
List all the current configuration property names.
.IP 
.B cimconfig \-l
.PP 
List all the current configuration property names and their values.
.IP 
.B cimconfig \-l \-c
.PP 
List all the planned configuration property names and their values.
.IP 
.B cimconfig \-l \-p
.SH "FILES"
.TP 30
.PD 0
.B /var/opt/tog\-pegasus/cimserver_current.conf
Current configuration
.TP 
.B /var/opt/tog\-pegasus/cimserver_planned.conf
Planned configuration
.PD
.SH "SEE ALSO"
.PP 
cimserver (8), cimauth (8).