HP Serviceguard Manager Plug-in Security Whitepaper, March 2009

ManualsBrandsHP ManualsSoftwareHP Serviceguard for Linux RH AS Cluster

Table of Contents

Executive Summary

................................

..............................

Overview

................................

............

Purpose of this D

ocument

................................

..................

Scope of this Document

................................

....................

Audience

................................

........

Terms and Definiti

ons

................................

.......................

Summary of content (8 pages)

PAGE 1
HP Serviceguard Manager Plug-in Security Whitepaper Jan 2009 Table of Contents Executive Summary .............................................................................................................................. 2 Overview............................................................................................................................................ 2 Purpose of this Document ..............................................................................................................
PAGE 2
Executive Summary Serviceguard Manager plug-in is a web application to monitor and control a Serviceguard cluster. It is a "plug-in" to HP System Management Homepage framework (SMH). It runs on a node which is a member of the cluster being managed. The security model of SgmgrPI integrates tightly with that of SMH and Serviceguard. It depends on SMH to authenticate remote client, and collaborates with Serviceguard authorization system to control access to all Serviceguard operations and data.
PAGE 3
Term Definition SMH System Management Homepage. HP system administration tool for single-server administration. SgmgrPI Serviceguard Manager Plug-in. A web-based management application to access, monitor and control Serviceguard cluster and its components. Tomcat A Java Servlet container. It is managed by SMH and hosts SgmgrPI and other web applications. Table 1.
PAGE 4
Access Path In order to understand the SgmgrPI Security model, it is best to trace a client request as it enters the system and travels through the components which take part in its processing. Figure 1 below provides a high-level view of these components, their relative positions within the security model, and the path the request takes as it travels through the system: Figure 1.
PAGE 5
Authentication SMH SMH launches an instance of Tomcat for its exclusive use. Tomcat is used as a Java web application container within which SgmgrPI resides. For Java web applications, SMH acts as a web proxy; it redirects web requests for URLs belonging to SgmgrPI, which processes these requests and sends the responses back to HPSMH, which are forwarded back to the client.
PAGE 6
   To include privilege-appropriate information (e.g. property sheet) in the returned web page. To enable and disable privileged operations (e.g. delete a package) in the returned web page. To apply access-control checks before performing Serviceguard operations to service this request. The access-control process will be discussed in the next section. Authorization Smhrun To service a request from a client, SgmgrPI needs to retrieve, modify, and/or store data pertaining to the managed cluster.
PAGE 7
HPSMH User HPSMH Role Serviceguard Role Root (e.g. root) Admin Serviceguard Root non-root (e.g. jane) Admin Serviceguard Root non-root Operator non-root User Based On Serviceguard Access-control policy for the user. Can be one of Full Admin, Package Admin, or Monitor None - the user will not be allowed to access Serviceguard Manager. Table 1.
PAGE 8
Serviceguard Role Description   Enable/Disable Package Node Switching Reset Service Restart Count From the Alerts & Logs pull-down menu:    Full Admin Display Consolidated syslog Operations Log Display Consolidated Package Log This user can access all monitor and package admin menu items, as well as the following menu items from the Administration pull-down menu:     Run Cluster Halt Cluster Run Node Halt Node The package admin role can be granted to all or any package in a cluster or node,