HP WBEM Services Version A.02.09.
© Copyright 2010, 2011 Hewlett-Packard Development Company, L.P. All rights reserved Legal Notices Confidential computer software. Valid license from HP required for possession, use, or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor's standard commercial license. The information contained herein is subject to change without notice.
Contents 1 HP WBEM Services Version A.02.09.08 Release Notes...................................4 Announcement.........................................................................................................................4 What is in this version?.............................................................................................................4 Security ..................................................................................................................................
1 HP WBEM Services Version A.02.09.08 Release Notes Announcement The following information is for HP WBEM Services Version A.02.09.08: HP WBEM Services for HP-UX is available from http://software.hp.com. HP-UX implements the Distributed Management Task Force (DMTF) WBEM standard and this enables HP WBEM Services to deliver increased control of enterprise resources at reduced cost.
HP WBEM Services for HP-UX Version A.02.09 is based on the Open Pegasus 2.9 source base and CIM Schema 2.17.1. HP WBEM Services Version A.02.09.08 supports an enhancement for Insight Remote Support (IRS) for HP WBEM Services. With this enhancement, you can perform WBEM operations using non-root user privileges. For more information, see the HP WBEM Services for HP-UX System Administrator Guide. Following are the key differences between the HP WBEM Services Version A.02.07 and A.02.
• ◦ Configuration files ◦ CIM schemas Packaged provider modules ◦ Computer System ◦ Operating System ◦ Process ◦ Domain Name Service ◦ Network Time Protocol ◦ Network Information Service ◦ IP ◦ SD ◦ IOTree For information on installing HP WBEM Services Version A.02.09.08, see “Installation information” (page 13).
NOTE: OpenSSL is an open source cryptography toolkit that implements the network protocols and related cryptography standards of SSL v2 and v3, and TLS (Transport Layer Security). HP WBEM Services supports only SSL v3 and TLS protocols. For more information, see OpenSSL website at http://www.openssl.org. On the HTTPS port, the CIM clients uses SSL to establish connections with the CIM Server and to send CIM requests.
you must edit the/etc/pam.conf file and add a "wbem" service entry. See the following example. For additional information, see the pam(3) and pam.conf(4) manpages. # # Example of /etc/pam.conf file with WBEM services (using LDAP) # # Authentication management wbem auth required libpam_hpsec.so.1 wbem auth sufficient libpam_unix.so.1 wbem auth required libpam_ldap.so.1 try_first_pass # Account management wbem account required libpam_hpsec.so.1 wbem account sufficient libpam_unix.so.
The wbemexec command uses the trust store for server certificate verification. Be sure to import the certificate in the /etc/opt/hp/sslshare/cert.pem file from the system where the CIM Server is running to the client system’s trust store. For more information about the wbemexec command, see the wbemexec manpage. For more information about certificates, see “Importing server certificates to trust store” (page 10).
Importing server certificates to trust store CIM client applications must maintain a trust store in the .pem file. The CIM client applications must import the certificates stored in /etc/opt/hp/sslshare/cert.pem to a trust store file on the client machine from various CIM Server machines (ones the client wants to connect to). With C++ CIM client libraries, the trust store should be in PEM format.
NOTE: Unless otherwise stated, the tables indicate support for the listed and later versions of WBEM providers that are compatible with HP WBEM Services Version A.02.09.08. This version of HP WBEM Services can work with earlier versions of the providers that are already installed in your environment. However, these earlier versions are not tested with HP WBEM Services Version A.02.09.08.
Table 4 HP-UX 11i v3 WBEM Solution Compatibility Table Product Tag Product Title Product Version Supported HP WBEM Services Version iCOD HP-UX iCOD (Instant Capacity) B.11.31.10.00.00 A.02.09.08 NParProvider nPartition Provider - HP-UX B.31.02.01 SW-DIST HP-UX Software Distributor B.11.31.1103 WBEMP-LAN LAN Provider for Ethernet LAN interfaces B.11.31.1103 VParProvider vPar Provider - HP-UX B.11.31.01.05 WBEMP-FCP WBEM Provider for FC HBAs B.11.31.
invoked in the context of the user requesting an operation (i.e., “Run-As-Requestor”). This default setting can break backward compatibility for certain types of providers. This means that existing providers that run in the user context of the CIM Server can break. To resolve this situation, you have the following two alternatives: Alternative 1 To continue running the provider in a privileged context, you need to explicitly register the provider to run in a “Privileged User” context.
NOTE: After the OpenSSL updates are installed, the HP WBEM Services cimserver process must be shutdown and restarted in order to run against any new version of OpenSSL. For more information on shutting down and restarting the cimserver, see the HP WBEM Services System Administrator Guide.
/opt/wbem/bin commands, executables /opt/wbem/lbin Executables that are not intended to be used directly by customers.
* Beginning Analysis * Session selections have been saved in the file '/.sw/sessions/swverify.last'. Verification succeeded After installing HP WBEM Services, the CIM Server is in a running state.
cimservermain, and cimserverd. The cimserverd process is a daemon process that monitors cimserver to ensure it remains available. WARNING! HP recommends not to disable cimserver at startup. Doing so, will impact other HP products such as; iCOD/iCAP, HP SIM, VSE, and System Fault Management, as these HP solutions depend on HP WBEM Services (cimserver) to be running.
Table 5 Defects fixed in HP WBEM Services Version A.02.09.xx (continued) Identifier Description Resolution QXCR1001106183 The Pegaus core dump error occurs when the StorageNative Provider module is continuously enabled and disabled in one This defect is fixed in the current release. process, while EnumerateInstances is The destruction sequence is modified to running for StorageNative Provider in ensure that this defect does not occur. another process.
Table 5 Defects fixed in HP WBEM Services Version A.02.09.xx (continued) Identifier Description Resolution QXCR1001060784 With the current fix, cimserverd daemon The cimserverd daemon checks if the monitors the status of both cimserver and cimservermain process is running and restarts cimservermain processes and restarts cimserver if cimservermain is not active. cimserver if either one of the process is not active. QXCR1001064867 This defect is fixed in the current release.
Table 5 Defects fixed in HP WBEM Services Version A.02.09.xx (continued) Identifier Description Resolution QXCR1000873670 The manpage for the osinfo command does The manpage for the osinfo command not indicate that the /etc/opt/hp/ has been updated. sslshare/client.pem file is required for Client Based Authentication (CBA). QXCR1000914874 The cimmof and other WBEM client commands result in a core dump while accessing ICU libraries. This defect has been fixed to resolve these error messages.
NOTE: If you do not manually add the group and the user before installing HP WBEM Services, the installation scripts add a group and user using locally available IDs, returned by useradd(1M) and groupadd(1M), which may already be in use on the network. For systems using NIS the problem is encountered when HP WBEM Services is installed as part of a custom bundle that requires a system reboot or if NIS is stopped for any other reason whilst the HP WBEM Services installation is performed.
Related documentation Following are the documents available with this release of HP WBEM Services: • HP WBEM Services Administrator Guide, 5900-1624 available at www.hp.com/go/ hpux-networking-docs and select HP-UX 11i WBEM Software collection. Release Notes for this version and for previous versions of HP WBEM Services are available at www.hp.com/go/hpux-networking-docs and select HP-UX 11i WBEM Software collection. After installing HP WBEM Services, see the manpages for your system.