Default
Unsupported
Unsupported
Unsupported
Has direct access to all the
services supported in the default
mode
7.2.1
Modify the Service Mode
Prerequisites
This procedure requires root privileges on the SMW.
About this task
The
urika-service-mode
command can be used to change and view Urika-GX's service mode. This
command accepts the following values, which correspond to the two service modes supported on the system:
●
secure
●
default
The system ships with the default service mode enabled. Switching to the secure mode enables Kerberos
authentication on the Urika-GX system. For a list of services available for each mode, refer to
on page 177.
CAUTION: If the Urika GX system is running in the secure mode, Cray does not recommend toggling
back to the default mode while in production. In the default service mode, the security assurances
provided by secure service mode are not in place and the security of data that was protected by secure
mode may be compromised while running in the default mode. Cray cannot extend the secure mode
security assurances to any system that has run in a production state in the default mode until that system
has been fully re-deployed.
Procedure
1. Log on to the SMW as root.
2. Execute the
urika-service-mode
command, specifying the desired security mode.
If the two options
--debug
and
--nostop
of the
urika-service-mode
command are not used, the
urika-service-mode
command will automatically stop Urika-GX services before it changes the service
mode. The admin will then need to start Urika-GX services using the
urika-start
command, unless the
--
restart
option is provided. For more information, refer to the
urika-service-mode
man page.
Some examples of using the
urika-service-mode
are shown below:
To switch to the secure mode, execute:
#
# urika-service-mode --restart secure
To switch to the default mode, execute:
#
# urika-service-mode --restart default
3. Verify that the desired service mode has been set using one of the following commands:
Security
S3016
180
