HP WBEM Services for HP-UX and Linux System Administrator's Guide

Installing and Setting up HP WBEM Services
CIM Server Properties
Chapter 5 57
• authorizedUserGroups - Set to user group names, group names are
separated by a comma. The default is not set to any user group,
means that all users on the system are authorized (if not restricted
by setting enableNamespaceAuthorization) to access CIM resources.
You can use user group authorization if you need the extra security of
restricting access to CIM resources.
A privileged user (user with root permissions on the local system) is
always authorized. A privileged user can grant user group
authorizations to other users. For more information, see Chapter 6,
Security Considerations.
• enableHttpConnection - Set to true or false. The default is false,
which means that HP WBEM Services will listen at port 5989
HTTPS connection. Setting it to true allows user access through port
5988, using HTTP TCP/IP communication. Use HTTP connections
only if you are certain your environment is secure. For more
information, see Chapter 6, Security Considerations.
• enableHttpsConnection - Set to true or false. The default, true,
allows user access through port 5989, using HTTPS TCP/IP
communication. HTTPS connection has better security than HTTP.
For more information, see Chapter 6, “Security Considerations.”
• enableNamespaceAuthorization Set to true or false. The default,
false, means that users are authorized across all namespaces. If
enableNamespaceAuthorization is set to true, you must authorize
each user, namespace by namespace, with the cimauth command.
You can use namespace authorization if you need the extra security
of restricting access to certain namespaces. Users with root
permission on the local system are always privileged users. A
privileged user can grant namespace authorizations to others. For
more information, see Chapter 6, Security Considerations.
• enableRemotePrivilegedUserAccess - Set to true or false. The
default is true as of the 1.5 version of HP WBEM Services. (In
earlier versions, it was false.) True means that an authenticated
user, with privileged access to the system running HP WBEM
Services, will be allowed to issue requests to HP WBEM Services
from a remote system.
• shutdownTimeout - Set to a number of seconds. When a cimserver
-s shutdown command is issued, the timeout is the maximum
number of seconds allowed for the CIM Server to complete