The
following information explains how to increase the security of your
HP-UX AAA Server by changing some of the default settings. HP recommends
changing the default values to all customers.
Changing
the Default “localhost” Proxy Settings |
 |
The
HP-UX AAA Server includes a preconfigured proxy entry named localhost
for use in loop-back testing. You should change the default shared
secret value for the localhost proxy, or delete it if you do not
plan to use loop-back testing. Use the following steps to change
the shared secret for the default localhost proxy:
Select Proxies in
the Navigation Tree.
Select localhost in the Main
Screen.
Change the default shared secret
and confirm it by entering it again.
Click the Modify Button.
Changing
the Default “test_user” Settings |
|
The
HP-UX AAA Server includes a preconfigured user entry named test_user
for use in loop-back testing. You should change the default password
for test_user, or delete it if you do not plan to use loop-back
testing. Use the following steps to change the password for the default
test_user:
Select Users in the
Navigation Tree.
Select test_user in the Main
Screen.
Change the default password and
confirm it by entering it again.
Click the Modify Button.
Changing
the Default Tomcat User Name and Password |
|
All Tomcat servers come with the
same default user name and password. You should change the user
name and password to unique values. Use the following steps to change
the Tomcat user name and password:
Open /opt/hpws/tomcat/conf/tomcat-users.xml
Look for entries with the roles="tomcat"
string. These entries are valid Tomcat user names and passwords.
Modify the file to include only
the user name and password you want to use. Use the following format:
<user username="new user name" password="new password" roles="tomcat"/> |
Changing
the Default RMI Objects Secret |
|
HP recommends changing the
default RMI Objects secret. Use the following steps:
Open /opt/hpws/tomcat/webapps/aaa/WEB-INF/gui.properties
Look for the following entry:
rmi.config.secret = "secret" |
Change the "secret" portion to
a new value
Open /opt/aaa/remotecontrol/rmiserver.properties
Look for the following entry:
rmi.config.secret = "secret" |
Change the "secret" portion to
the same value configured in Step 3.
|
| |
|
 | IMPORTANT: The rmi.config.secret in /opt/aaa/remotecontrol/rmiserver.properties
and in /opt/hpws/tomcat/webapps/aaa/WEB-INF/gui.properties be identical. |
|
| |
|
Printable version
