Ipaddress 1013 security level 3 corba security user id

This preview shows page 400 - 403 out of 524 pages.

moshell -v corba_class=3,sa_credential=/path/to/sam.pbe,sa_password=pw_for_file <ipaddress> 10.1.3 Security Level 3: corba security, user id control - COLI interface only supports ssh. Each user has their own password - File transfer interface only supports sftp. Each user has their own password Note: in some cases telnet/ftp might be allowed (the security administrator will decide this) - MO/PM interface only supports secure corba (SSLIIOP), there is authentication via credential file. The credential file must contain the userid, therefore we must use a credential called “Network mode” credential. The file name is “ssucredentials.xml” and is automatically downloaded by moshell from the Single Logon Server (SLS). RNC11> secmode -s $ secmode -s Security configuration settings: Access method Current security mode -------------------------------------------------------------- TelnetFtpServers secure, node internal Telnet and FTP servers are OFF. (only ssh/sftp allowed) CorbaSecurity secure, corba security is ON. (secure corba, TCP port 56836) OperationalSecLevel level 3 ConfiguredSecLevel level 3 --End settings------------------------------------------------ $ For connecting with corba security level 3, the following moshell uservariable values are required: - corba_class=4 - sls_username=(the userid for SLS login) - username=(the userid for COLI and file transfer login) Optional: - sls_urls=(the URL(s) of the SLS, usually read from the node directly) In case telnet/ftp are blocked, the following settings are also needed: - secure_shell=1 - secure_ftp=1 Example: Finn Magnusson 2010-03-17 rev PA8 400/524)
Image of page 400
moshell -v corba_class=4,sls_username=<sls_user>,username=<node_user>,secure_shell=1,secure_ftp=1 <ipaddress> 10.1.4 Changing security settings on the node Examples: - Block telnet/ftp: secmode -t s - Allow telnet/ftp: secmode -t u - Bring the node to security level 1: secmode -l 1 - Put all protocols in unsecure mode: secmode -a u For more details, refer to CPP O&M chapter in “Moshell advanced” document and moshell UG. 10.2 O&M connectivity problems 10.2.1 Case 1: moshell hangs at “Trying file= .... Symptom: RNC10> lt all Checking MOM version...RNC_NODE_MODEL_G_1_4 Using MOM version: RNC_NODE_MODEL_G_1_4_COMPLETE Parsing MOM (cached): /home/eanzmagn/moshell/jarxml/RNC_NODE_MODEL_G_1_4_COMPLETE.xml.cache ................................. Done. Fetching IOR file...Done. **** Welcome to the Simple Mo Browser (version 3.0)! Trying file=/home/eanzmagn/moshell_logfiles/logs_moshell/tempfiles/20061130-094222_6050/ior6050 Possible cause: JVM ran out of memory RNC10> lh ommp jheapinfo $ lhsh 001200 jheapinfo Java Heap Information Total size: 204800000 Total used: 204700134 Finn Magnusson 2010-03-17 rev PA8 401/524)
Image of page 401
Total used high water-mark: 20470593 $ ==> Try to restart the JVM RNC11> lh ommp sma -all $ lhsh 001200 sma -all Tue Dec 11 20:19:53 2007 Root Pid Load Module ---------- ---------------------- 0x0001024f CXC1329861_R10AV03 (RncLmCenOm) 0x0001014c CXC1329860_R10AY01 (RncLmFro) 0x0002012c CXC1321344_R51EL02 (pms) 0x00010121 CXC1320784_R51LX04 (jvm) 0x00020113 CXC1320783_R51LX02 (http_server) 0x000100e2 CXC1322506_R51LX02 (iputil) 0x000200dd CXC1322506_R51LX02 (iputil) 0x000200f1 CXC1322705_R51LX02 (xpm) 0x000100ed CXC1323464_R51LX02 (objectsuppor) 0x000100eb CXC1323464_R51LX02 (objectsuppor) 0x000200e6 CXC1323464_R51LX02 (objectsuppor) 0x000100ec CXC1323464_R51LX02 (objectsuppor) 0x000100ee CXC1323464_R51LX02 (objectsuppor) Load Module RPU State Mode Container ID ReplNoOfRecs RecSize SnapSeq PeerSmnApn --------------------------- ----- ----- ------------------------------------------- ------- ------- ---------- CXC1329861_R10AV03 49 Activ A_w_S - - - - - ( 0, 13) (RncLmCenOm) CXC1329860_R10AY01 48 Activ A_w_S - - - - - ( 0, 13) (RncLmFro) CXC1322705_R51LX02 47 Activ A_w_S - - - - - (
Image of page 402
Image of page 403

You've reached the end of your free preview.

Want to read all 524 pages?

  • Fall '19

What students are saying

  • Left Quote Icon

    As a current student on this bumpy collegiate pathway, I stumbled upon Course Hero, where I can find study resources for nearly all my courses, get online help from tutors 24/7, and even share my old projects, papers, and lecture notes with other students.

    Student Picture

    Kiran Temple University Fox School of Business ‘17, Course Hero Intern

  • Left Quote Icon

    I cannot even describe how much Course Hero helped me this summer. It’s truly become something I can always rely on and help me. In the end, I was not only able to survive summer classes, but I was able to thrive thanks to Course Hero.

    Student Picture

    Dana University of Pennsylvania ‘17, Course Hero Intern

  • Left Quote Icon

    The ability to access any university’s resources through Course Hero proved invaluable in my case. I was behind on Tulane coursework and actually used UCLA’s materials to help me move forward and get everything together on time.

    Student Picture

    Jill Tulane University ‘16, Course Hero Intern

Ask Expert Tutors You can ask You can ask ( soon) You can ask (will expire )
Answers in as fast as 15 minutes