WBEM Services Release Notes (5900-1625, April 2011)

you must edit the/etc/pam.conf file and add a "wbem" service entry. See the following example.

For additional information, see the pam(3) and pam.conf(4) manpages.

# Example of /etc/pam.conf file with WBEM services (using LDAP)

# Authentication management

wbem auth required libpam_hpsec.so.1

wbem auth sufficient libpam_unix.so.1

wbem auth required libpam_ldap.so.1 try_first_pass

# Account management

wbem account required libpam_hpsec.so.1

wbem account sufficient libpam_unix.so.1

wbem account required libpam_ldap.so.1

# Session management

wbem session required libpam_hpsec.so.1

wbem session sufficient libpam_unix.so.1

wbem session required libpam_ldap.so.1

# Password management

wbem password required libpam_hpsec.so.1

wbem password required libpam_ldap.so.1 try_first_pass

NOTE: HP-UX uses the cimservera executable in HP WBEM Services to provide the cimserver

with PAM Authentication services. For more information, see the HP WBEM Services for HP-UX

System Administrator Guide .

Using Certificate Based Authentication

To use the Certificate Based Authentication (CBA) method, you must do the following:

1. Use the cimconfig command, to enable CBA . By default, the CBA is disabled. For more

information, see the cimconfig(1M) and cimtrust(1M) manpages.

2. Use the cimtrust command to include the client certificates from the trust store in the

cimserver and associate that certificate with a system user.

3. Enable the HTTPS connections for the client to authenticate its certificate for HP WBEM Services.

NOTE: HP System Insight Manager (HP SIM) Version 5.1 or later enables you to use CBA for

remote user. For more information on CBA for remote users, see the HP SIM documentation.

Certificate verification

CIM Client

The CIM Client Interface supports the trust store and verification callback function for server certificate

verification. The CIM Client applications can use one or both of these mechanism to verify the

server certificate.

Using wbemexec command

The wbemexec command provides a command-line interface to the CIM Server.

8 HP WBEM Services Version A.02.09.08 Release Notes