HP Serviceguard Version A.11.19 Release Notes, October 2009

Bastille Compatibility
To ensure compatibility between Serviceguard (and Serviceguard Manager) and Bastille,
do the following, depending on your environment. The files (host.config, for
example) are under /etc/opt/sec_mgmt/bastille/defaults/configs/.
• If Bastille is started using Sec10Host (host.config) level lock down, change
SecureInetd.deactivate_ident=Y to
SecureInetd.deactivate_ident="N"
If you are using the Serviceguard SNMP subagent, set
MiscellaneousDaemons.snmpd="N"
• If Bastille is started using Sec20MngDMZ (mandmz.config) level lock down,
change SecureInetd.deactivate_ident=Y to
SecureInetd.deactivate_ident=N
If you are using the Serviceguard SNMP subagent, set
MiscellaneousDaemons.snmpd="N"
If you are using the Serviceguard WBEM Provider, set
IPFilter.block_wbem="N" (default)
If you are using Serviceguard IP Monitoring, set IPFilter.block_ping="N"
(default)
• If Bastille is started using SIM.config, change
SecureInetd.deactivate_ident=Y to SecureInetd.deactivate_ident=N
If you are using the Serviceguard SNMP subagent, set
MiscellaneousDaemons.snmpd="N"
• If Bastille is started using Sec30DMZ (dmz.config) level lock down, change
SecureInetd.deactivate_ident=Y to SecureInetd.deactivate_ident=N
If you are using the Serviceguard SNMP subagent, set
MiscellaneousDaemons.snmpd="N"
If you are using the Serviceguard WBEM Provider, set
IPFilter.block_wbem="N" (default)
If you are using Serviceguard IP Monitoring, set IPFilter.block_ping="N"
(default)
Add the following rules to ipf.customrules:
pass in quick proto tcp from any to any port = 2301
pass in quick proto tcp from any to any port = 2381
pass in quick from <clusternodes> to any
pass out quick from any to <clusternodes>
Compatibility Information and Installation Requirements 57