Cisco Systems OL-11390-01 manual File Ownership and Protection, 11-1

Page 1

C H A P T E R 11

Administering DFM (Advanced)

These topics are intended for system administrators who will perform Device Fault Manager (DFM) administrative functions. The topics include:

Security Considerations, page 11-1

Device Support, page 11-3

System Administration, page 11-3

Security Considerations

These topics address some important DFM security issues:

File Ownership and Protection, page 11-1

Secure Socket Layer (SSL), page 11-2

SNMPv3, page 11-2

Working with Firewalls, page 11-2

File Ownership and Protection

Security for DFM files is based on the same standards used for CiscoWorks.

Caution Do not change the protection of any file or directory to be less restrictive. You may, if you wish, make the protections more restrictive.

All DFM files are installed with owner CASUSER. Only CASUSER can create, delete, or modify the files installed in NMSROOT. NMSROOT is the directory where CiscoWorks is installed on your system. If you selected the default directory during installation, on Windows it is C:\Program Files\CSCOpx. On Solaris, it is /opt/CSCOpx.

When typing the Windows default installation directory, enter C:\Progra~1\CSCOpx.

Note File protections are not enforced on FAT partitions.

 

 

User Guide for Device Fault Manager

 

 

 

 

 

 

 

OL-11390-01

 

 

11-1

 

 

 

 

 

Image 1
Contents 11-1 File Ownership and ProtectionSNMPv3 Secure Socket Layer SSLWorking with Firewalls 11-211-3 NMSROOT/objects/smarts/bin/smserver --helpRegistering Additional DFM Servers with the LMS Portal Configuring Users ACS and Non-ACS11-4 11-5 Configuring Users Using CiscoWorks Local Mode11-6 Using DFM in ACS ModeField Description Usage Notes Creating Self-Signed Security Certificates Yearly11-7 11-8 Backing Up and Restoring DFM DataOption Description Usage Notes Changing the Password for DFM DatabasesBefore You Begin 11-911-10 Configuring LoggingViewing and Maintaining Log Files Folder Maximum Backup Function/ModuleNo. Log Files Size KB11-12 DPSName Description Dependency Starting and Stopping DFM Processes11-13 11-14 11-15 Registering and Unregistering DFM Processes11-16 Option Description and Arguments11-17 Arguments11-18 Example 1 Specifying Clients that Can Connect to DFM11-19 Reregister any processes that depend on DfmServer11-20