HP HP-UX System Security Getting Started Guide

Getting Started with HP Domain
Software
Edition 5
Manufacturing Part Number: J1582-90143
E0699
U.S.A.
© Copyright 1999, Hewlett-Packard Company.
The information in this document is subject to change without notice.
Hewlett-Packard makes no warranty of any kind with regard to this manual, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. Hewlett-Packard
shall not be held liable for errors contained herein or direct, indirect, special, incidental or consequential damages in connection with the furnishing, performance, or use of this material.
Warranty. A copy of the specific warranty terms applicable to your Hewlett- Packard product and replacement parts can be obtained from your local Sales and Service Office.
Restricted Rights Legend. Use, duplication or disclosure by the U.S. Government is subject to restrictions as set forth in subparagraph (c) (1) (ii) of the Rights in Technical Data and Computer Software clause at DFARS 252.227-7013 for DOD agencies, and subparagraphs (c) (1) and (c) (2) of the Commercial Computer Software Restricted Rights clause at FAR 52.227-19 for other agencies.
HEWLETT-PACKARD COMPANY 3000 Hanover Street Palo Alto, California 94304 U.S.A.
Use of this manual and flexible disk(s) or tape cartridge(s) supplied for this pack is restricted to this product only. Additional copies of the programs may be made for security and back-up purposes only. Resale of the programs in their present form or with alterations, is expressly prohibited.
Copyright Notices. ©copyright 1983-97 Hewlett-Packard Company, all rights reserved.
Reproduction, adaptation, or translation of this document without prior written permission is prohibited, except as allowed under the copyright laws.
©copyright 1979, 1980, 1983, 1985-93 Regents of the University of California
This software is based in part on the Fourth Berkeley Software Distribution under license from the Regents of the University of California.
2
©copyright 1980, 1984, 1986 Novell, Inc. ©copyright 1986-1992 Sun Microsystems, Inc. ©copyright 1985-86, 1988 Massachusetts Institute of Technology. ©copyright 1989-93 The Open Software Foundation, Inc. ©copyright 1986 Digital Equipment Corporation. ©copyright 1990 Motorola, Inc. ©copyright 1990, 1991, 1992 Cornell University ©copyright 1989-1991 The University of Maryland ©copyright 1988 Carnegie Mellon University Trademark Notices. UNIX is a registered trademark in the United
States and other countries, licensed exclusively through X/Open Company Limited.
X Window System is a trademark of the Massachusetts Institute of Technology.
MS-DOS and Microsoft are U.S. registered trademarks of Microsoft Corporation.
OSF/Motif is a trademark of the Open Software Foundation, Inc. in the U.S. and other countries.
Netscape, Netscape Communications, the Netscape Communications logo, LiveWire, LiveWire Pro, Netscape Catalog Server, Netscape Commerce Server, Netscape Communications Server,NetscapeDirectory Server, Netscape Enterprise Server, Netscape FastTrack Server, Netscape Mail Server, Netscape Navigator, Netscape News Server, and Netscape Proxy Server are trademarks of Netscape Communications Corporation.
Check Point Firewall-First is a trademark of Check Point Software Technologies Ltd.
Java is a trademark of Sun Microsystems, Inc.
3
Printing History
The manual printing date and part number indicate its current edition. The printing date will change when a new edition is printed. Minor changes may be made at reprint without changing the printing date. The manual part number will change when extensive changes are made.
Manual updates may be issued between editions to correct errors or document product changes. To ensure that you receive the updated or new editions, you should subscribe to the appropriate product support service. See your HP sales representative for details.
First Edition: October 1997 (HP-UX Release 10.20) Second Edition: December 1997 (HP-UX Release 10.20) Third Edition: April 1998 (HP-UX Release 10.20) Fourth Edition: August 1998 (HP-UX Release 10.20) Fifth Edition: June 1999 (HP-UX Release 10.20 and 11.0)
4
Contents
1. Introducing the HP Domain Software
Who Should Read this Guide?. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .8
What this Guide Contains. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .9
2. Setting Up Your HP Domain Software
Domain Software Installation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .12
Minimum Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .12
Hardware. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .12
Operating System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .12
Disk Space . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .12
Other . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .12
Installing the Domain Software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .12
Documentation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .13
The HP DESMS User Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .14
Starting HP DESMS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .14
Accessing HP DESMS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .14
Using HP DESMS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .15
The HP DESMS Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .15
The HP DESMS Home Page. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .17
The Express Setup Page. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .18
Getting HP DESMS Help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .20
Additional Sources of Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .21
Starting and Stopping the HP DESMS Administration Server . . . . . . .22
5
Contents
3. After Setting Up Your Server
Configuring Your Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
Name Services. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
Internet Addresses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
Mail Services. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
Netscape Servers. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
6
1 Introducing the HP Domain
Software
7
Introducing the HP Domain Software
Who Should Read this Guide?
Who Should Read this Guide?
This guide is intended for the HP Domain Enterprise Server system administrator.
The system administrator configures and administers the HP Domain Enterprise Server and makes available network services, such as Name Services (DNS Server, DNS Client), Security Services (Anonymous FTP, Internet Services, User Accounts), and Mail Services (Netscape Messaging or Sendmail Mail Aliases) on the Domain Enterprise Server.
8 Chapter1
Introducing the HP Domain Software
What this Guide Contains
What this Guide Contains
This guide contains information to assist you in getting started using your HP Domain software. It is applicable to the following Hewlett-Packard software products:
• HP Domain Collaboration
• HP Domain SuiteSpot Pro
• HP Domain Service Control
• Any Netscape Server product, version 3.x, purchased directly from
HP
Depending on which HP product you have, some sections in this guide may not apply to that product.
Chapter 1 9
Introducing the HP Domain Software
What this Guide Contains
10 Chapter1
2 Setting Up Your HP Domain
Software
11
Setting Up Your HP Domain Software
Domain Software Installation
Domain Software Installation
Minimum Requirements
Hardware
• HP 9000 Server
• 32 MB of memory (64 MB recommended for systems with high traffic)
• CD-ROM drive to load the software
Operating System
• HP-UX 10.20 or 11.0
Disk Space
• At least 300 MB of available disk space
Other
• Long filenames
• 2 MB swap space per Netscape server
Installing the Domain Software
Before installing the HP Domain Software, make sure you have met the minimum requirements listed above.
If you are installing the HP Domain Software for the first time, do the following:
• Install the software onto your system by running the HP-UX software installation utility swinstall.
NOTE Before you can configure your HP Domain Enterprise Server, you must
run the /opt/hpwebsuite/hpsetup startup script.
12 Chapter2
Setting Up Your HP Domain Software
Documentation
Documentation
The following documentation is included when you purchase the HP Domain Software:
• J1582-90144: HP Domain Release Notes
• J1582-90143: Getting Started with HP Domain Software (this document)
Chapter 2 13
Setting Up Your HP Domain Software
The HP DESMS User Interface
The HP DESMS User Interface
Starting HP DESMS
If this is the first time you are running HP DESMS, you must run the /opt/hpwebsuite/hpsetup startup script first.
To start HP DESMS, start the HP administration server by typing /opt/hpwebsuite/start-admin.
Accessing HP DESMS
To begin configuration of your HP Domain Enterprise Server using HP DESMS, start a web browser that supports frames and is Java-enabled (such as Navigator 3.0) on a system attached to your network.
Point the browser to the following URL: http://hostname:8181 where hostname is the name of the system on which you are running the
HP administration server. Enter the administration user ID (hpadmin) and password (which you
configured using the /opt/hpwebsuite/hpsetup startup script). This URL points to the HP Domain Enterprise Server Management
System (HP DESMS). This is the HP Domain Enterprise Server web-based administration interface that allows you to:
• Control the HP and Netscape administration servers
• Configure the Internet firewall to secure your organization against intrusion
• Manage central operations and problem management for distributed systems
• Configure and administer a system in your management domain
• Monitor, add, modify, and delete nodes in your management domain
14 Chapter2
Setting Up Your HP Domain Software
The HP DESMS User Interface
NOTE Toaccess external web pages, you must set the proxies for your browser.
Using HP DESMS
The HP DESMS Page
The example page below shows the main areas (or frames) of a typical HP DESMS Administration web page. Depending on the particular task you are performing, some areas of the page may not be displayed.
Figure 2-1 Format of the HP DESMS Page
The menu tool bar is displayed on every DESMS page. From the menu tool bar you can access the administration program’s five major areas:
• Home: Provides an overview of each area of the menu tool bar
• Server Control: Management of the administration servers and web services
• Operations:
Chapter 2 15
Setting Up Your HP Domain Software
The HP DESMS User Interface
Management of your system
• Configuration: Configuration and administration of your system
• Node Bank: Control of nodes in your management domain
After making a selection from the menu tool bar, you select one of the action items from the menu tool bar’s associated Actions List. The Action Lists associated with each of the major areas follows:
16 Chapter2
Figure 2-2 HP DESMS Action Lists
Setting Up Your HP Domain Software
The HP DESMS User Interface
Overview
*
Select Host
*
Servers Netscape Admin
*
HP Web
*
Admin Server Setup
Firewall First
*
Setup
*
Network Management
Setup
*
Measureware Templates
Overview
*
Select Host
*
Status Reports System Information
*
Network Interface
*
File System Status
*
Top Processes
*
Processes/Who’s
*
Logged In
Monitoring Message Browser
*
History Log
*
Templates
*
Services
*
System Log Files
*
DESMS Internal
*
Log & Trace Files Integrity Check
*
Actions Ping
*
System Backup Backup System
*
Restore System
*
Overview
*
Select Host
*
Name Services DNS Server
*
DNS Client
*
DNS Database
*
/etc/hosts
*
Internet Addresses
Internet
*
Addresses Security
Anonymous FTP
*
Internet Services
*
User Accounts
*
Root User
*
Mail Services Sendmail
*
Sendmail Aliases
*
Shutdown System
*
Shutdown
External Tools
SAM
*
Terminal
*
Log Keeper
Global
*
Configuration Log Rotation
*
Overview
*
Node Bank
*
After selecting an item from the Actions List, you perform the action within the Action/Text frame.
The HP DESMS Home Page
When you point your browser to the HP DESMS web page, the HP DESMS Home page is displayed.
Chapter 2 17
Setting Up Your HP Domain Software
The HP DESMS User Interface
Figure 2-3 HP DESMS Home Page
NOTE The very first time HP DESMS is accessed, the Express Setup page is
displayed (see figure 2-4). Thereafter, when you access HP DESMS, the HP DESMS Home page is displayed.
If you choose not to perform the Express Setup options at this time, you can return to the Express Setup page at a later time, or access these setup options from the HP DESMS actions list within the Actions frame of the related HP DESMS page.
The Express Setup Page
The Express Setup page lists some steps you may want to complete to
18 Chapter2
customize your configuration. Each step is optional as factory defaults have already been chosen.
Figure 2-4 HP DESMS Express Setup Page
Setting Up Your HP Domain Software
The HP DESMS User Interface
From the Express Setup page, you can:
• Set up user login accounts
Chapter 2 19
Setting Up Your HP Domain Software
The HP DESMS User Interface
• Configure Netscape servers
• Change Domain administrative server password
• Change network management setup
• Add additional Internet addresses
Remember, you can return to the Express Setup page at any time by clicking on the “Home” button located in the Menu Tool Bar of all DESMS pages.
Getting HP DESMS Help
To obtain additional information for a specific HP DESMS function, select the “Overview” list item within the Action List frame for that HP DESMS function (see figure 2-5).
Figure 2-5 Overview
Overview
20 Chapter2
Setting Up Your HP Domain Software
Additional Sources of Information
Additional Sources of Information
• The HP-UX Java Release Notes contain the following information pertaining to the HP-UX Developer’s Kit for Java and the HP Java Virtual Machine with JIT:
— New and changed features — Installation information — Related documentation — Problem descriptions and fixes
For the latest information on Java products, including software and documentation updates, pre-releases, and patch information, visit the web page at: http://www.hp.com/go/JAVA
Chapter 2 21
Setting Up Your HP Domain Software
Starting and Stopping the HP DESMS Administration Server
Starting and Stopping the HP DESMS Administration Server
The HP Domain Enterprise Server Management System (DESMS) administration server can be restarted (that is, reset) and stopped from the HP DESMS web-based interface. The DESMS administration server can also be started and stopped from the HP-UX command line prompt. When this server is shutdown, you will be unable to manage your Internet servers through HP DESMS.
From HP DESMS: To restart (reset) the HP DESMS administration server:
1. Click on Server Control from the DESMS Menu Tool Bar
2. Select HP Web Admin from the Actions List
3. Locate the “Shutdown Admin Server” section within the Actions Frame and click on the Restart Server button
This will stop the server and immediately restart the server. Use the Restart Server function if your Admin server is not responding as expected.
To stop the HP DESMS administration server:
1. Click on Server Control from the DESMS Menu Tool Bar
2. Select HP Web Admin from the Actions List
3. Locate the “Shutdown Admin Server” section within the Actions Frame and click on the Shutdown Server button
From the HP-UX command-line prompt: To start the HP DESMS administration server, type the following:
/opt/hpwebsuite/admserv/start-admin To stop the HP DESMS administration server, type the following:
/opt/hpwebsuite/admserv/stop-admin
22 Chapter2
Setting Up Your HP Domain Software
Starting and Stopping the HP DESMS Administration Server
NOTE Stopping and starting the DESMS Administration server will not affect
the operation of the Domain Enterprise Server Operations Manager (DESOP) Services. DESOP is a central operations and problem-management product for distributed multi-vendor systems.
To stop and start the DESOP Message Services, click on the underlined “DESOP Message Services” text within the Shutdown Admin Server section of the HP Web Admin Actions Frame.
Chapter 2 23
Setting Up Your HP Domain Software
Starting and Stopping the HP DESMS Administration Server
24 Chapter2
3 After Setting Up Your Server
After you have completed setting up your Domain Enterprise Server, as discussed in the previous chapter “Setting Up Your HP Domain Enterprise Server”, you can use the HP DESMS web-administration program to perform further system administration tasks, such as
25
After Setting Up Your Server
configuring:
• Name Services
• Internet Addresses
• Security
• Mail Services
• Netscape Servers
Refer to the following sections in this chapter for information on these tasks.
26 Chapter3
After Setting Up Your Server
Configuring Your Server
Configuring Your Server
Name Services
• DNS Server You can configure your server as a DNS (Domain Name Server)
Server. A DNS Server can be defined as one of the following: — Primary Server
Retrieves data from the local DNS database files for hosts in the zone(s) it is authoritative for.
— Secondary Server
Gets its data from the primary server in the local zone via periodic “zone transfers”.
— Cache-only server
Gets its data from other servers without the need of a “zone transfer”.
• DNS Client You specify the domain search list, that is, the order you want the
resolver to search the domains.
• /etc/hosts You modify the /etc/hosts database used to associate an Internet
address with one or more hostnames.
To configure Name Services using HP DESMS, select “Configuration” from the menu tool bar, then select the desired Name Service from the Actions List.
Internet Addresses
You may associate additional Internet Protocol (IP) addresses with a network interface. This is useful if you wish to associate multiple hostnames with different web servers.
To configure Internet Addresses using HP DESMS, select “Configuration” from the menu tool bar, then select “Internet Addresses”
Chapter 3 27
After Setting Up Your Server
Configuring Your Server
from the Actions List.
Security
• Anonymous FTP Allows a user without a login on your host to transfer files to and from
a public directory. The ftp service must be allowed for Anonymous FTP to work.
• Internet Services Allows you to control which internetserviceswillbeallowedordenied
to remote systems requesting a service on the local host.
• User Accounts Allows you to create or modify user accounts and to create home
directories for a user.
• Root User Allows you to change the root user password.
To configure Security using HP DESMS, select “Configuration” from the menu tool bar, then select the desired Security item from the Actions List.
Mail Services
• UNIX Mail — Sendmail
Allows you access to the Sendmail Configuration File:
/etc/mail/sendmail.cf
— Sendmail Aliases
Sendmail aliases define local alias names that are expanded into mailing lists defined by each name.
To configure UNIX Mail using HP DESMS, select “Configuration” from the menu tool bar, then select the desired Mail Service from the Actions List.
• Netscape Mail ToconfigureNetscape Mail using HP DESMS, select “Server Control”
28 Chapter3
After Setting Up Your Server
Configuring Your Server
from the menu tool bar, then select “Netscape Admin”.
NOTE Your HP Domain Enterprise Server can be configured to use either UNIX
Mail or Netscape Mail, but not both.
Netscape Servers
You gain access to your Netscape Administration Servers through the HP DESMS web-administration interface.
From within the DESMS “Netscape Administration Servers” page, you can:
• Check the status Netscape Administration Servers
• Start and stop a specific Netscape Administration Server
NOTE When you initially boot your Domain Enterprise Server,thedefaultstate
of Netscape Administration Servers is “not running”.
• Specify whether that server should be automatically started at boot time
• Visit a Netscape Administration Server Visiting a server allows you access to Netscape Server administration
capabilities such as: — Installing a new server
— Removing an existing server — Server configuration
To access the Netscape Administration Servers, select “Server Control” from the DESMS menu tool bar, then select “Netscape Admin” from the Actions List.
If the server status is “running”, you can access that server by clicking on the text “Visit Admin Server” located in that server’s status table entry.
For more information on your Netscape servers, refer to the server’s online help or, if available, the hardcopy docuementation for that server.
Chapter 3 29
After Setting Up Your Server
Configuring Your Server
30 Chapter3
Loading...