Chapter 10
247
Managing SNAplus2 from NetView
Using UCF
In this case, the
ux-cancel
command is ignored. No action is necessary.
This message can be displayed when the
ux-cancel
command is issued
after the previous command finishes but before the
UNIX COMMAND
COMPLETED
message is received.
UCF Security
Because the UCF enables a remote operator to issue commands on the
HP-UX computer and to receive output from these commands, it is
important to consider the security implications. For example, you need to
ensure that the operator cannot access private information or issue
HP-UX commands that can disrupt other users.
The SNAplus2 configuration includes a specific HP-UX system user
name as the UCF user; this must be a valid login ID on the SNAplus2
computer. All UCF commands run with this user's ID, and therefore with
the access permissions of this user.
It is intended that you use the normal security features provided by
HP-UX to restrict the commands the UCF user can access, in order to
permit only those commands you consider reasonable for use from UCF.
The following guidelines may be useful:
• The UCF user name should be one that is used solely for UCF; you
should not use an existing login that is also used for other purposes.
This makes it easier to define the privileges of this user to include
only those that are reasonable for UCF; it also enables you to identify
processes that were started using UCF.
• You may need to restrict the users and groups for which the UCF user
can change a user ID or group ID. In particular, the UCF user must
not be permitted to do the following:
• Become root or superuser.
• Use the group ID
sna
, which enables access to the
snapadmin
program. (The functions of this program should be accessed using
SPCF, as described earlier in this chapter, instead of UCF.)
Содержание HP-UX SNAplus2
Страница 4: ...4 ...
Страница 14: ...14 Contents ...
Страница 22: ...22 ...
Страница 23: ...23 1 SNA Terms and Concepts ...
Страница 65: ...65 2 Introduction to SNAplus2 ...
Страница 107: ...107 3 Administering SNAplus2 ...
Страница 132: ...132 Chapter3 Administering SNAplus2 Using the Command Line Administration Program ...
Страница 133: ...133 4 Basic Configuration Tasks ...
Страница 142: ...142 Chapter4 Basic Configuration Tasks Configuring Logging ...
Страница 143: ...143 5 Defining Connectivity Components ...
Страница 167: ...167 6 Configuring Dependent LUs ...
Страница 174: ...174 Chapter6 Configuring Dependent LUs Defining LU Pools ...
Страница 175: ...175 7 Configuring APPC Communication ...
Страница 208: ...208 Chapter7 Configuring APPC Communication Configuring APPC Security ...
Страница 209: ...209 8 Configuring User Applications ...
Страница 222: ...222 Chapter8 Configuring User Applications Configuring RJE Workstations ...
Страница 223: ...223 9 Configuring Passthrough Services ...
Страница 235: ...235 10 Managing SNAplus2 from NetView ...
Страница 248: ...248 Chapter10 Managing SNAplus2 from NetView Using UCF ...
Страница 249: ...249 11 Managing SNAplus2 Clients ...
Страница 300: ...300 Chapter11 Managing SNAplus2 Clients Managing HP UX Clients ...
Страница 301: ...301 A Configuration Planning Worksheets ...
Страница 337: ...337 B APPN Network Management Using the Simple Network Management Protocol ...
Страница 343: ...343 C Configuring an Invokable TP Using snaptpinstall ...
Страница 353: ...353 D Using SNAplus2 in a High Availability Environment ...