HP 3PAR StoreServ 7200 2-node HP 3PAR System Reporter 3.1.0 Software User& - Page 125

About File Permissions, Modifying the Apache HTTP Server Configuration Files

Page 125 highlights

NOTE: For complete details on how to configure and use Adaptive Optimization, see "Using Adaptive Optimization" (page 180). About File Permissions The files installed or created by the HP 3PAR System Reporter installer have default permissions that allow any user to read file contents. Use the appropriate Windows or Linux security mechanisms to limit file access as desired. The minimum level for correct operation is READ access by the SYSTEM account (the Apache HTTP Server and HP 3PAR System Reporter services run as the SYSTEM account). For Windows Systems If System Reporter has been configured to use MySQL, Microsoft SQL or Oracle, the following files (shown in their default locations) contain password information that you may wish to protect: C:\Program Files\3par\System Reporter\dbpwfile C:\Program Files\Apache Group\Apache2\cgi-bin\3par-policy\config.tcl C:\Program Files\Apache Group\Apache2\cgi-bin\3par-rpts\config.tcl Similarly, if configured to generate email alerts with an SMTP user and password, the following file contains the SMTP user name and password: C:\Program Files\3par\System Reporter\sampleloop_config.tcl The SMTP location for sending email for scheduled reports is in: C:\Program Files\Apache Group\Apache2\cgi-bin\3par-rpts\config.tcl For Linux Systems If System Reporter has been configured to use MySQL, Microsoft SQL or Oracle, you can access the following files (shown in their default locations) that contain password information you may wish to protect: ls -ltra /var/www/cgi-bin/3par-rpts -r--r--r-- 1 apache apache 1148 Sep 22 2010 config.tcl drwxr-xr-x 2 apache apache 4096 Jan 21 17:33 . -rwxr-xr-x 1 apache apache 6717686 Jan 21 23:49 inserv_perf.exe -rwxr-xr-x 1 apache apache 1211700 Jan 21 23:49 chart.exe ls -ltra /var/www/cgi-bin/3par-policy -r--r--r-- 1 apache apache 1208 Sep 22 2010 config.tcl drwxr-xr-x 3 apache apache 4096 Jan 21 17:31 . -rwxr-xr-x 1 apache apache 6683099 Jan 21 23:49 inserv_policy.exe You must make sure that the files are owned by Apache. If necessary, you can use the chown command to change permissions for the files. The SMTP location for sending email for scheduled reports is in: /var/www/cgi-bin/3par-rpts/config.tcl Modifying the Apache HTTP Server Configuration Files You must modify the Apache HTTP Server config.tcl files located in the 3par-policy and 3par-rpts subdirectories whenever you change MySQL user names and passwords. 1. Go to the Apache HTTP server cgi-bin directory and locate the 3par-policysubdirectory (for example: C:\Program Files\ApacheGroup\Apache2\cgi-bin\3par-policy). About File Permissions 125

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231

NOTE:
For complete details on how to configure and use Adaptive Optimization, see
“Using
Adaptive Optimization” (page 180)
.
About File Permissions
The files installed or created by the HP 3PAR System Reporter installer have default permissions
that allow any user to read file contents. Use the appropriate Windows or Linux security mechanisms
to limit file access as desired. The minimum level for correct operation is READ access by the
SYSTEM account (the Apache HTTP Server and HP 3PAR System Reporter services run as the
SYSTEM account).
For Windows Systems
If System Reporter has been configured to use MySQL, Microsoft SQL or Oracle, the following files
(shown in their default locations) contain password information that you may wish to protect:
C:\Program Files\3par\System Reporter\dbpwfile
C:\Program Files\Apache Group\Apache2\cgi-bin\3par-policy\config.tcl
C:\Program Files\Apache Group\Apache2\cgi-bin\3par-rpts\config.tcl
Similarly, if configured to generate email alerts with an SMTP user and password, the following
file contains the SMTP user name and password:
C:\Program Files\3par\System Reporter\sampleloop_config.tcl
The SMTP location for sending email for scheduled reports is in:
C:\Program Files\Apache Group\Apache2\cgi-bin\3par-rpts\config.tcl
For Linux Systems
If System Reporter has been configured to use MySQL, Microsoft SQL or Oracle, you can access
the following files (shown in their default locations) that contain password information you may
wish to protect:
ls -ltra /var/www/cgi-bin/3par-rpts
-r--r--r-- 1 apache apache 1148 Sep 22 2010 config.tcl
drwxr-xr-x 2 apache apache 4096 Jan 21 17:33 .
-rwxr-xr-x 1 apache apache 6717686 Jan 21 23:49 inserv_perf.exe
-rwxr-xr-x 1 apache apache 1211700 Jan 21 23:49 chart.exe
ls -ltra /var/www/cgi-bin/3par-policy
-r--r--r-- 1 apache apache 1208 Sep 22 2010 config.tcl
drwxr-xr-x 3 apache apache 4096 Jan 21 17:31 .
-rwxr-xr-x 1 apache apache 6683099 Jan 21 23:49 inserv_policy.exe
You must make sure that the files are owned by Apache. If necessary, you can use the
chown
command to change permissions for the files.
The SMTP location for sending email for scheduled reports is in:
/var/www/cgi-bin/3par-rpts/config.tcl
Modifying the Apache HTTP Server Configuration Files
You must modify the Apache HTTP Server
config.tcl
files located in the
3par-policy
and
3par-rpts
subdirectories whenever you change MySQL user names and passwords.
1.
Go to the Apache HTTP server
cgi-bin
directory and locate the
3par-policy
subdirectory
(for example:
C:\Program Files\ApacheGroup\Apache2\cgi-bin\3par-policy
).
About File Permissions
125