HP WBEM Services Version A.02.09.
© Copyright 2010, 2011 Hewlett-Packard Development Company, L.P. Legal Notices Confidential computer software. Valid license from HP required for possession, use, or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor's standard commercial license. The information contained herein is subject to change without notice.
Contents 1 HP WBEM Services Version A.02.09.10 Release Notes....................................4 Announcement.........................................................................................................................4 What is in this version?.............................................................................................................4 Security ..................................................................................................................................
1 HP WBEM Services Version A.02.09.10 Release Notes Announcement The following information is for HP WBEM Services Version A.02.09.10: HP WBEM Services for HP-UX is available from http://software.hp.com. HP-UX implements the Distributed Management Task Force (DMTF) WBEM standard and this enables HP WBEM Services to deliver increased control of enterprise resources at reduced cost.
• From this release, the CIM Repository (/var/opt/wbem/repository) is a database instead of a file-based repository. This is done to increase the robustness of the CIM repository. • wbemassist - A command-based troubleshooting utility to identify problems related to HP WBEM Services on the managed nodes. This utility is used to troubleshoot configuration or installation problems and to determine if the CIM Server is working correctly.
• ◦ Configuration files ◦ CIM schemas Packaged provider modules ◦ Computer System ◦ Operating System ◦ Process ◦ Domain Name Service ◦ Network Time Protocol ◦ Network Information Service ◦ IP ◦ SD ◦ IOTree For information on installing HP WBEM Services Version A.02.09.10, see “Installation information” (page 12).
NOTE: OpenSSL is an open source cryptography toolkit that implements the network protocols and related cryptography standards of SSL v2 and v3, and TLS (Transport Layer Security). HP WBEM Services supports only SSL v3 and TLS protocols. For more information, see OpenSSL website at http://www.openssl.org. On the HTTPS port, the CIM clients uses SSL to establish connections with the CIM Server and to send CIM requests.
you must edit the/etc/pam.conf file and add a "wbem" service entry. See the following example. For additional information, see the pam(3) and pam.conf(4) manpages. # # Example of /etc/pam.conf file with WBEM services (using LDAP) # # Authentication management wbem auth required libpam_hpsec.so.1 wbem auth sufficient libpam_unix.so.1 wbem auth required libpam_ldap.so.1 try_first_pass # Account management wbem account required libpam_hpsec.so.1 wbem account sufficient libpam_unix.so.
The wbemexec command uses the trust store for server certificate verification. Be sure to import the certificate in the /etc/opt/hp/sslshare/cert.pem file from the system where the CIM Server is running to the client system’s trust store. For more information about the wbemexec command, see the wbemexec manpage. For more information about certificates, see “Importing server certificates to trust store” (page 10).
Importing server certificates to trust store CIM client applications must maintain a trust store in the .pem file. The CIM client applications must import the certificates stored in /etc/opt/hp/sslshare/cert.pem to a trust store file on the client machine from various CIM Server machines (machines that the client wants to connect to). With C++ CIM client libraries, the trust store should be in PEM format.
NOTE: Unless otherwise stated, the tables indicate support for the listed and later versions of WBEM providers that are compatible with HP WBEM Services Version A.02.09.10. This version of HP WBEM Services can work with earlier versions of the providers that are already installed in your environment. However, these earlier versions are not tested with HP WBEM Services Version A.02.09.10.
Table 3 HP-UX 11i v3 WBEM Solution Compatibility Table (continued) Product Tag Product Title Product Version Supported HP WBEM Services Version gWLM-Agent HP Global Workload Manager Agent A.6.3.0.84593 A.02.09.10 Additional compatibility information From the A.02.05 release, HP WBEM Services for HP-UX supports an option that allows a WBEM Provider (management instrumentation) to run as the user who issued the management request.
Prerequisites for installing HP WBEM Services Following are the prerequisites for installing HP WBEM Services Version A.02.09.10: • HP-UX 11i v3 • OpenSSL must be installed before installing HP WBEM Services Version A.02.09.10. HP recommends that the OpenSSL version available with HP-UX OE is installed before installing HP WBEM Services Version A.02.09.10. For HP-UX 11i v3, install OpenSSL version A.00.09.08k.009.
4. Run the following HP-UX command to start the installation. swinstall -s WBEMServices At installation, the following files are installed: /etc/opt/hp/sslshare Shared SSL certificate files and trust store files. /etc/opt/wbem (directory) /opt/wbem (directory) /opt/wbem/bin commands, executables /opt/wbem/lbin Executables that are not intended to be used directly by customers.
+openssl.OPENSSL-PRNG,1=/opt/openssl,r=A.00.09.08n.003,a=HP-UX B.11A +openssl.OPENSSL-PVT,1=/opt/openssl,r=A.00.09.08n.003,a=HP-UX B.11.A +openssl.OPENSSL-RUN,1=/opt/openssl,r=A.00.09.08n.003,a=HP-UX B.11.A +openssl.OPENSSL-SRC,1=/opt/openssl,r=A.00.09.08n.003,a=HP-UX B.11.A * A '+' indicates an automatic selection due to dependency or the automatic selection of a patch or reference bundle. * Selection succeeded. * Beginning Analysis * Session selections have been saved in the file '/.sw/sessions/swverify.
When starting the CIM Server using the cimserver command, the syntax can be used to set configuration property values to be used by the CIM Server. The values specified in the cimserver command apply only to the current CIM Server process that gets started. The cimconfig command can also be used to set configuration property values to apply each time the CIM Server is started.
Table 4 Defects fixed in HP WBEM Services Version A.02.09.xx (continued) Identifier Description Resolution QXCR1001089629 This defect is fixed in the current release. According to the DMTF standards, the WBEM The cimauth command and the internal namespaces are not case sensitive, but the WBEM data structures are modified to cimauth command processes namespaces ensure that the namespace case sensitive as case sensitive. error does not occur.
Table 4 Defects fixed in HP WBEM Services Version A.02.09.xx (continued) Identifier Description Resolution QXCR1001062117 Newly installed software Microsoft SCOM-Agent prevents cimserver from starting This defect is fixed in the current release after running the following command on the and cimserver starts up normally after system: installing the new software on the system. /sbin/init.
Table 4 Defects fixed in HP WBEM Services Version A.02.09.xx (continued) Identifier Description Resolution QXCR1000890091 In the Networking page of HP System Management Homepage, the following error is displayed: This defect has been fixed to resolve this error message. CIM_ERR_FAILED: Error in ioctl() request SIOCGIFCONF: Invalid argument When this error message is displayed, no other data can be displayed on the Networking page. This error is noticed only with HP WBEM Services versions prior to A.
IMPORTANT: This issue is only applicable for HP WBEM Services A.02.07 and later versions. What is the workaround? For systems using LDAP or other network services, before installing HP WBEM Services, you must manually add a local cimsrvr user and group using a unique UID and GID. You must first determine the available reserved IDs for the group (for example 130) and for the user (for example, 125) ensuring that these IDs are not in use by LDAP or other network services.
Related documentation Following are the documents available with this release of HP WBEM Services: • HP WBEM Services Administrator Guide, 5900-1802 available at www.hp.com/go/ hpux-networking-docs and select HP-UX 11i WBEM Software collection. Release Notes for this version and for previous versions of HP WBEM Services are available at www.hp.com/go/hpux-networking-docs and select HP-UX 11i WBEM Software collection. After installing HP WBEM Services, see the manpages for your system.
