Specifications

Java Security Policy
They take effect on the user's next login or when the GUI server is restarted, whichever comes first.
Each user has a single permission on a given server. Previous permission entries are deleted if a new
permission is specified on that server.
l To grant a user Administrator permission for the LifeKeeper GUI, type the following
command:
/opt/LifeKeeper/bin/lkpasswd -administrator <user>
l To grant a user Operator permission for the LifeKeeper GUI, type the following command:
/opt/LifeKeeper/bin/lkpasswd -operator <user>
l To grant a user Guest permission for the LifeKeeper GUI, type the following command:
/opt/LifeKeeper/bin/lkpasswd -guest <user>
l To change the password for an existing user without changing their permission level, type the
following command:
/opt/LifeKeeper/bin/lkpasswd <user>
l To prevent an existing user from using the LifeKeeper GUI, type the following command:
/opt/LifeKeeper/bin/lkpasswd -delete <user>
This command does not require password entry.
Note: These commands update the GUI password file only on the server being administered. You
should repeat the command on all servers in the LifeKeeper cluster.
Java Security Policy
The LifeKeeper GUI uses policy-based access control. When the GUI client is loaded, it is assigned
permissions based on the security policy currently in effect. The policy, which specifies permissions
that are available for code from various signers/locations, is initialized from an externally configurable
policy file.
There is, by default, a single system-wide policy file and an optional user policy file. The system
policy file, which is meant to grant system-wide code permissions, is loaded first, and then the user
policy file is added to it. In addition to these policy files, the LifeKeeper GUI policy file may also be
loaded if the LifeKeeper GUI is invoked as an application.
Location of Policy Files
The system policy file is by default at:
<JAVA.HOME>/lib/security/java.policy (Linux)
<JAVA.HOME>\lib\security\java.policy (Windows)
Note: JAVA.HOME refers to the value of the system property named "JAVA.HOME", which
specifies the directory into which the JRE or JDK was installed.
162User Guide