Users Guide

Installing Managed System Software on Supported Linux Operating Systems 103
Configuring CRL for the openwsman Client
You need to configure the Certificate Revocation List (CRL) used by Server
Administrator Web Server. To do this:
1
Mention a valid CRL file in /etc/openwsman/openwsman_client.conf .
2 If left blank, the CRL check is ignored.
NOTE: CRL support is only present on SUSE Linux Enterprise Server version 11 and
Red Hat Enterprise Linux Server version 5 update 5. For other operating systems,
contact your operating system vendor to provide the required CURL library with CRL
support.
Running sfcb and openwsman
Run sfcb and openwsman:
• /etc/init.d/sfcb start
• /etc/init.d/openwsmand start
The managed system is configured and is ready to be used by the Server
Administrator Web Server.
Winbind Configuration for openwsman and sfcb for Red Hat Enterprise
Linux Operating Systems
Follow the instructions mentioned below to configure openwsman and sfcb
on 32-bit OMI installation. In case of a 64-bit installation, replace "lib" with
"lib64".
1
Take a backup of the following files:
•
/etc/pam.d/openwsman
• /etc/pam.d/sfcb
• /etc/pam.d/system-auth
2 Replace the content of /etc/pam.d/openwsman and /etc/pam.d/sfcb with:
auth required pam_stack.so service=system-auth
auth required /lib/security/pam_nologin.so
account required pam_stack.so service=system-auth
3
Replace the content of /etc/pam.d/system-auth with:
%PAM-1.0