Novell ZENWORKS LINUX MANAGEMENT 7.2 IR2 - 07-20-2009, Руководство по установке

Страница: 68 / 134

68 Novell ZENworks 7.2 Linux Management Installation Guide
no
vd
ocx
(e
n)
13
Ma
y 20
09
IMPORTANT: The default setting for remote services on SUSE
®
Linux Enterprise Server 10 is set
to false (remote-enabled=false). After you install the ZENworks agent on a SLES 10 device, the
remote services setting is changed to true (remote-enabled=true).
For remote services, the agent listens on port 2544. If you want to secure the ZENworks Agent so
that it can only be controlled from the local device, use the
novell-zmd no-remote
command. If
you want to change the listening port, use the
rug set remote-port port_number
command,
then restart the agent (
novell-zmd restart
).
On Intel Itanium* IA64 managed devices, the privileges of the user application connecting to the
XLM-RPC socket (/
var/run/zmd/zmd-web.socket
) are not checked.
9.4 Database Connections
All connections to the ZENworks Object Store are secured through SSL. However, all connections
from the ZENworks Server to the ZENworks Data Store are not secure because they use an
unencrypted JDBC* connection. You might want to take precautions to ensure that the connections
between all ZENworks Servers and the ZENworks Data Store are as secure as possible. For
example, you might want to use a private network for all communications between the ZENworks
Server and its Data Store.
ZENworks administrator credentials are stored in the ZENworks Object Store. No administrator
credentials are stored in the Data Store, which ensures that they are not passed as clear text.
9.5 Device Ports
By default, the ZENworks Agent listens on ports 2544, 5950, and 5951. The ZENworks Server
listens on ports 80, 443, 998, 1229, 1521, 5432 (PostgreSQL), 5505, 5506, and 8089, and also uses
certain ports for eDirectory
TM
services.
Š “Agent Listening Ports” on page 68
Š
Section 9.5.2, “Server Listening Ports,” on page 69
9.5.1 Agent Listening Ports
The following table explains the services available on the Agent ports.
Table 9-1
ZENworks Agent Listening Ports and Services
Ports Used For
2544
Š
Triggering device refresh actions from the ZENworks Server
Š
Deploying bundles and immediate install schedules
Š
Sending agent registration requests to the ZENworks Server
Š
Checking the health status of the ZENworks Agent
5950
Š
Remote Control and Remote View
5951
Š
Remote Login