ibm tivoli access manager for operating...

124
IBM Tivoli Access Manager for Operating Systems 5.1 SA30-1841-01

Upload: others

Post on 13-Oct-2020

8 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

IBM Tivoli Access Managerfor Operating Systems

�� ���

�� 5.1

SA30-1841-01

���

Page 2: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base
Page 3: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

IBM Tivoli Access Managerfor Operating Systems

�� ���

�� 5.1

SA30-1841-01

���

Page 4: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

�!

� ��� � ��� ���� ��� ���� ��, 105 ���� �� D ������� �����.

��(2003� 11�)

� ���� � ���� ��� ���� �� �, IBM Tivoli Access Manager for Operating Systems(�� �� 5698-PDO)

�� 5, ��� 1 � �� �� ���� ���� �����.

© Copyright International Business Machines Corporation 2000, 2003. All rights reserved.

Page 5: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

��

�� . . . . . . . . . . . . . . . . . v

� �� �� . . . . . . . . . . . . . v

� �� �� . . . . . . . . . . . . . . vi

�� . . . . . . . . . . . . . . . . . vii

IBM Tivoli Access Manager for Operating

Systems ����� . . . . . . . . . . vii

�� �� . . . . . . . . . . . . . . vii

�� �� . . . . . . . . . . . . . . vii

��� �� �� . . . . . . . . . . . viii

�� �� ��� . . . . . . . . . . viii

�� ��� �� . . . . . . . . . . . . ix

����� �� �� . . . . . . . . . . . ix

� �� ��� �� . . . . . . . . . . . ix

� 1 � �� . . . . . . . . . . . . . . 1

IBM Tivoli Access Manager for Operating

Systems �� . . . . . . . . . . . . . . 1

�� . . . . . . . . . . . . . . . . . 1

�� �� . . . . . . . . . . . . . . . 2

��� ��. . . . . . . . . . . . . . . 3

Tivoli Access Manager for Operating Systems

�� ��� CD �� . . . . . . . . . . 5

Tivoli Access Manager for Operating Systems

Framework CD� ��. . . . . . . . . . 6

�� �� �� ��� . . . . . . . . . . . 7

�� �� . . . . . . . . . . . . . . . 7

� 2 � �� �� . . . . . . . . . . . . 9

Tivoli Access Control Facility��� ������ 9

���� � ����� ���� . . . . . . . 9

�� �� ����� . . . . . . . . . . . 9

�� �� . . . . . . . . . . . . . . . 10

�� �� . . . . . . . . . . . . . . 10

Policy ��� . . . . . . . . . . . . 11

���� �� . . . . . . . . . . . . . 12

���� �� . . . . . . . . . . . . 12

�� � � �� . . . . . . . . . . 12

�� �� ����� � . . . . . . . . . 13

� 3 � �� . . . . . . . . . . . . . . 15

�� �� . . . . . . . . . . . . . . . 15

InstallShield Multiplatform� ��� �� ���

� ��. . . . . . . . . . . . . . . . 16

��� �� �� ��� � . . . . . . 17

InstallShield Multiplatform �� ��� � 19

InstallShield Multiplatform� ��� � ���

�� . . . . . . . . . . . . . . . . . 30

AIX. . . . . . . . . . . . . . . . 31

HP-UX . . . . . . . . . . . . . . 31

Solaris . . . . . . . . . . . . . . . 32

Linux on x86 . . . . . . . . . . . . 32

Linux on zSeries . . . . . . . . . . . 32

Linux on pSeries � iSeries . . . . . . . 33

�� ��� ��� AIX� ��. . . . . . . 33

SMIT� ��� AIX� �� . . . . . . . 33

���� AIX� �� . . . . . . . . . 34

�� ��� ��� HP-UX� �� . . . . . 35

swinstall� ��� HP-UX� �� . . . . . 35

���� HP-UX� �� . . . . . . . . 36

�� ��� ��� Solaris� �� . . . . . . 37

Admintool� ��� Solaris� �� . . . . 37

���� Solaris� �� . . . . . . . . 38

�� ��� ��� Linux� �� . . . . . . 39

Tivoli Management Framework Integration ���

�� . . . . . . . . . . . . . . . . . 40

Tivoli Access Manager for Operating Systems

�� ��� �� . . . . . . . . . . . 40

Tivoli Access Manager for Operating Systems

Enterprise Console Integration �� . . . . . 41

IBM Tivoli Access Manager for Operating

Systems �� ��� ����� . . . . . . 43

Tivoli Access Manager for Operating Systems

Enterprise Console Integration ����� . . 44

�� �� ����� � . . . . . . . . . 46

�� �� �� ��� . . . . . . . . . . 48

InstallShield Multiplatform� ��� �� �

�� . . . . . . . . . . . . . . . . 49

�� �� ���� Java �� . . . . . . . 49

Tivoli Access Manager for Operating Systems

Framework �� ��� �� �� �� ���

�� . . . . . . . . . . . . . . . . 51

��� �� �� . . . . . . . . . . . 52

��� ���� . . . . . . . . . . . . 53

��� �(�� ��) �� . . . . . . . . 54

�� �� ��� ��. . . . . . . . . . 54

© Copyright IBM Corp. 2000, 2003 iii

Page 6: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

� 4 � �� . . . . . . . . . . . . . . 55

�� �� . . . . . . . . . . . . . . . 55

�� �� � �� . . . . . . . . . . . 58

�� � . . . . . . . . . . . . . . . 60

���� �� . . . . . . . . . . . . . 68

�� ��� ��� �� . . . . . . . . . 68

�� �� �� . . . . . . . . . . . . 68

�� �� �� . . . . . . . . . . . . 69

�� ��� ��� �� � � . . . . 69

� 5 � pdostecd �� �� � �� �� . . . 71

pdostecd �� . . . . . . . . . . . . . 71

�� �� . . . . . . . . . . . . . . . 71

���� �� . . . . . . . . . . . . . 71

pdostecd �� �� . . . . . . . . . . . 72

���� �� �� . . . . . . . . . . . 72

� 6 � �� � �� . . . . . . . . . . . 73

Tivoli Access Manager for Operating Systems �

� . . . . . . . . . . . . . . . . . 73

�� . . . . . . . . . . . . . . . 73

� �� . . . . . . . . . . . . . . 73

��� � ��� �� . . . . . . . . . 73

Tivoli Access Manager for Operating Systems�

� �� � . . . . . . . . . . . . 74

Tivoli Access Manager for Operating Systems �

� . . . . . . . . . . . . . . . . . 74

PDOSTECD �� � �� . . . . . . . 75

� 7 � �� �� . . . . . . . . . . . . 77

Tivoli Access Manager for Operating Systems �

� �� �� . . . . . . . . . . . . . . 77

�� �� �� � . . . . . . . . . . . 77

�� �� � �� . . . . . . . . . . . 78

�� ��� ��� �� �� . . . . . . . 79

�� �� �� . . . . . . . . . . . . 79

�� �� �� . . . . . . . . . . . . 80

�� ��� ��� �� � � . . . . 80

��� �� �� ��. . . . . . . . . . . 80

�� �� �� ��� . . . . . . . . . . 81

� 8 � �� �� . . . . . . . . . . . . 83

InstallShield Multiplatform�� �� �� . . . . 84

AIX�� �� �� . . . . . . . . . . . . 84

SMIT� ��� AIX�� �� �� . . . . 84

��� ��� AIX�� �� �� . . . . 85

HP-UX�� �� ��. . . . . . . . . . . 85

swremove� ��� HP-UX�� �� �� . . 86

��� ��� HP-UX�� �� �� . . . 86

Solaris�� �� �� . . . . . . . . . . . 86

Admintool� ��� Solaris�� �� �� . . 86

��� ��� Solaris�� �� �� . . . 87

Linux�� �� �� . . . . . . . . . . . 88

�� �� ��� �� �� . . . . . . . . . 88

��� �� �� ��. . . . . . . . . . . 88

AIX. . . . . . . . . . . . . . . . 89

HP-UX . . . . . . . . . . . . . . 89

Solaris . . . . . . . . . . . . . . . 90

Linux . . . . . . . . . . . . . . . 90

Tivoli Management Framework Integration ���

�� �� . . . . . . . . . . . . . . . 90

�� A. �� �� . . . . . . . . . . . . 91

�� B. �� �� �� . . . . . . . . . . 99

�� C. Tivoli Access Control Facility���

������ . . . . . . . . . . . . . 101

se2pdos �� �� . . . . . . . . . . 101

���. . . . . . . . . . . . . . . 101

� . . . . . . . . . . . . . . . 101

�� . . . . . . . . . . . . . . . 102

�� D. ���� . . . . . . . . . . . . 105

�� . . . . . . . . . . . . . . . . 107

�� . . . . . . . . . . . . . . . . 109

iv IBM Tivoli Access Manager for Operating Systems: �� ���

Page 7: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

��

IBM® Tivoli® Access Manager for Operating Systems� �� � ���� ��

�� ��� �� policy � ��� ���� ������ ��������.

�: IBM Tivoli Access Manager for Operating Systems(Tivoli Access Manager

for Operating Systems��� )� ��� Tivoli SecureWay® Policy Director

for Operating Systems(�� 3.7) � Tivoli Policy Director for Operating

Systems(�� 3.8) ��� � �����. �� Tivoli SecureWay Policy Director

����� � ��� �� ��� �� ��� �� policy ��� ����

�.

IBM Tivoli Access Manager for Operating Systems �� ������ IBM Tivoli

Access Manager for Operating Systems� ��, ��, ����� � �� ����

��� �����.

� �� ���

� ���� �� ��� �� �� �� ��� �� �� �� ��� ��� �

� �� ���.

v UNIX® � ��

v �� ����(HTTP, TCP/IP, FTP, Telnet, SSL)

v �� ��

v �

v ��

v LDAP(Lightweight Directory Access Protocol) � ���� ���

v IBM Tivoli Access Manager

��� ���� ��� �� ��� �� ���.

v IBM Tivoli Management Environment® framework

v IBM Tivoli Distributed Monitoring

v IBM Tivoli Enterprise Console®

v IBM Tivoli Directory Server(LDAP)

v IBM Tivoli User Administration

© Copyright IBM Corp. 2000, 2003 v

Page 8: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

� �� ��

� ����� �� � ��� ����.

v 1 ���� � 1 � ����

Tivoli Access Manager for Operating Systems, � �� � ����� ��� �

����.

v 9 ���� � 2 � ��� ���

Tivoli Access Manager for Operating Systems �� � ��� �� � �� �

� ����� ��� �����.

v 15 ���� � 3 � ����

InstallShield Multiplatform �� �� �� ��� ��� Tivoli Access

Manager for Operating Systems ��� �� �� �����.

v 55 ���� � 4 � ����

Tivoli Access Manager for Operating Systems� �� ��� �����.

v 71 ���� � 5 � �pdostecd �� � �� ���

pdostecd �� � �� �� ��� �����.

v 73 ���� � 6 � ��� � ���

Tivoli Access Manager for Operating Systems� ���� ���� �� � �

�� � �� ���� ��� �����.

v 77 ���� � 7 � ��� ���

Tivoli Access Manager for Operating Systems� �� �� ��� �����.

v 83 ���� � 8 � ��� ���

InstallShield Multiplatform, �� �� �� � ��� ��� Tivoli Access

Manager for Operating Systems �� �� ��� �����.

v 91 ���� �� A ��� ��

�� �� ���� ��, �� � ���� �����.

v 99 ���� �� B ��� �� ��

�� �� �� ���� ��, �� � ���� �����.

v 101 ���� �� C �Tivoli Access Control Facility��� �������

Tivoli Access Control Facility�� Tivoli Access Manager for Operating Systems

� �������� ��� ��� �����.

vi IBM Tivoli Access Manager for Operating Systems: �� ���

Page 9: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

��

��� � � ��� �� ���� Tivoli Access Manager for Operating Systems

�����, �� ��� � �� � �� ��� ��� �����. ��� ��� �

�� �� �� �� ���� �� ����� ������.

IBM Tivoli Access Manager for Operating Systems �����

IBM Tivoli Access Manager for Operating Systems ������ ���� ��

���.

v IBM Tivoli Access Manager for Operating Systems �� ���, SA30-1840

Tivoli Access Manager for Operating Systems ��� �� �� � �� ��

���. �� Tivoli ���� �� ��� �� �� ��� ���� �

�, �� �� � IBM Tivoli Enterprise Console IBM Tivoli Risk Manager�

�� �� ��� �����.

v IBM Tivoli Access Manager for Operating Systems �� ���, SA30-1841

Tivoli Access Manager for Operating Systems ��, ��, ����� � ��

�� ��� �����.

v IBM Tivoli Access Manager for Operating Systems �� �� ���, SA30-1842

�� ��, ��� ��, �� ��, �� ��� �� ��� Tivoli Access

Manager for Operating Systems� �� �� ��� �����. �� �� ��

��� ����� �� ����.

v IBM Tivoli Access Manager for Operating Systems ���� ��, GA30-1843

Tivoli Access Manager for Operating Systems� �� �� ��� �����.

v IBM Tivoli Access Manager for Operating Systems Read This First Card,

GA30-1844

Tivoli Access Manager for Operating Systems� �� � ����� �� ��

� �����.

�� ��

� ���� ��� ���� ��� � ��� �� ���� ��� �� ���

�� � ����.

v IBM Tivoli Access Manager Base �� ���, SA30-2207

v IBM Tivoli Access Manager Base Administration Guide, GC23-1360

v IBM Tivoli Access Manager for e-business ���� ��, GA30-2206

�� ��

Tivoli Access Manager for Operating Systems� ��� ��� �� ���� �

� � ����.

�� vii

Page 10: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

v IBM Tivoli Access Manager for e-business Performance Tuning Guide, SC32-1351

IBM ���� ��� �� ������ ��� Tivoli Access Manager� ��

� ��� �� �� �� ��� �����.

v IBM Tivoli Access Manager for e-business Problem Determination Guide,

SC32-1352

Tivoli Access Manager �� �� ��� �� ��� �����.

v IBM Tivoli Access Manager Error Message Reference, SC32-1353

IBM Tivoli Access Manager, Tivoli Access Manager for Operating Systems �

Tivoli Access Manager ���� �� �� �� �� ��� ����� �

���.

v IBM Tivoli Access Manager for e-business Command Message Reference,

SC32-1354

Tivoli Access Manager �� � �� �� ��� �����.

v Tivoli Software Library��� ��, ����, �, �� � �� � �

� Tivoli ��� �����. �� � ����� Tivoli Software Library� �

������. http://www.ibm.com/software/tivoli/library/

v Tivoli Software Glossary�� Tivoli ������ ��� � ��� �� ��

� ����. Tivoli Software Glossary� Tivoli Software Library � ���

(http://www.ibm.com/software/tivoli/library)�� ��� �����.

��� �� ��

�� � ���� �� ��� � ��� � IBM Tivoli Access Manager for

Operating Systems ���� �� ��� ����.

��� �� ���

� ��� ��� PDF(Portable Document Format), HTML(Hypertext Markup

Language) �� � �� ��� Tivoli Software Library(http://www.ibm.com/

software/tivoli/library/)�� ���� ��� � ����.

������� �� ��� ���� ����� ���� ��� �� Product

manuals ��� ����. �� ��, Tivoli Software Information Center ���

�� �� ��� ����.

�� ���� ���� ��, �� ���, �� ���, �� ���, �� ��

��� � �� ���� �� ����.

�: PDF ��� ��� ����, Adobe Acrobat � (�� → ��� ��

�� ��)� ���� ��� ���� ������.

viii IBM Tivoli Access Manager for Operating Systems: �� ���

Page 11: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

�� ��� ��

�� ��� ��� ��� ����� �� �� � ��� �� �� ��

� ����� ��� ���� ��� � ��� �����. � ����� ��

��� �� ��� ��� �� ��� � ����. �� �� � � ��

���� ��� ��� �� ���� ��� � ����.

�� ��� IBM Tivoli Access Manager for Operating Systems �� ����

�� ��� �� ��� ������.

����� �� ��

��� ��� IBM Tivoli Software �� �� ���� �� �� � ����

Tivoli support ��� �� IBM Tivoli Software �� � ���� �����

�.

http://www.ibm.com/software/support/

��� ��� �� � ���� IBM Software �� � ���� �� ��� �

�� ����� �� �� ������.

http://techsupport.services.ibm.com/guides/handbook.html

� ���� �� ��� �����.

v �� � ���

v ��� �� ��� ����

v �� �� �� ���� �� ��� � �� �� �� �� ��� ��

� ��� �� �� ����� IBM Tivoli Access Manager for Operating Systems

�� �� ���� ����.

� �� ��� ��

� ���� �� ��� ��, � �� � �� ��� �� � ��� ��

���.

��� �� ��� �����.

�� ��� �� �� � �� � ��� �� ��, �� � � �

�� �� � �� �����.

� �� � �� � ��� ��� � � �� ����

��� �� � �� �����.

���� ��, ���� �� � � �, ���� � �� � �����

�����.

�� ix

Page 12: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

������ ��� �� �� � ��, �� � � � �, �� ��, �

� ��� ���� �� � ������� �����.

��� �� �� � �� � ���� ��, ���� �� ���

��, Java ��� � � � ��, HTML � XML ��� ��

� ������� �����.

x IBM Tivoli Access Manager for Operating Systems: �� ���

Page 13: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

� 1 � ��

� �� �� ��� �� ��� � � IBM Tivoli Access Manager for Operating

Systems� �� ��� �����.

v Tivoli Access Manager for Operating Systems ��

v ��

v �� ��

v Tivoli Access Manager for Operating Systems ��� ��

� ��� �� ��� �� � �� ��� ����.

� ���� IBM Tivoli Access Manager for Operating Systems �� ���, ��

5.1� �� � Tivoli Access Manager for Operating Systems� ������.

IBM Tivoli Access Manager for Operating Systems ��

IBM Tivoli Access Manager for Operating Systems� UNIX � ��� ���

� �� �� ��� �� policy �� ��� �����. ��� �� ��� �

� �� ���� ����� ���� �� ��� ��� ��� �� �� policy

� �����. ����� �� ��, � ���, �� ��, �� �� �� �

����� ������� �� ����. ��� �� �� �, �� ���

� ��� � �� ����� �� ���� ��� � ����. ��� �����

��� �� �� �� ���� �� ���� �� ��� ��� � ��

��. �� policy �� �� Tivoli Access Manager for Operating Systems� ��

� policy� �� �� ��� ��� � �� ���� �����.

��

IBM Tivoli Access Manager for Operating Systems� �� ���� Tivoli Access

Manager� �� ��� �� UNIX ��� ������.

v ���� ���� �� �� ��� ��� �����.

v �� � ��� �� �� ��� ��� �����.

v �� ���� �� �� ��� ��� �����.

v �� ��� ��� ���� ��� �����.

v ��� �� policy ��� �� ���� ���.

© Copyright IBM Corp. 2000, 2003 1

Page 14: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

�� Tivoli Access Manager for Operating Systems� �� � ��� �� � �

� ���� �� ����(�� �� � ��� ��� ���� IBM Tivoli Access

Manager for Operating Systems, �� 5.1, ���� ��� ������).

�� ��

Tivoli Access Manager for Operating Systems� UNIX � � ��� ���

� ��� �� � � �� �� �� ��� ���� � �����. ���

� �� � ���� � � �� Tivoli Access Manager for Operating Systems

� ��� �����. �� � �� ����� �� ��� ���� ��� ��

��, Tivoli Access Manager for Operating Systems� ����� ��� policy �

�� ���� ��� ��� ��� ���� ��� �� �����. ��

�� �� �� ���� ��� ��� ��� �� Tivoli Access Manager policy

����� ��� ��� � � policy� �����.

3 ���� �� 1��� �� ��� �� � Tivoli Access Manager for Operating

Systems, Tivoli Access Manager � IBM Directory Directory Server(����

�� LDAP ��) ��� ����� � ��� ����.

2 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 15: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

��� ��

IBM Tivoli Access Manager for Operating Systems ���� �� CD� ����

�.

v IBM Tivoli Access Manager for Operating Systems for AIX, Version 5.1

v IBM Tivoli Access Manager for Operating Systems for Solaris, Version 5.1

v IBM Tivoli Access Manager for Operating Systems for HP-UX, Version 5.1

v IBM Tivoli Access Manager for Operating Systems for Linux on xSeries, Version

5.1

v IBM Tivoli Access Manager for Operating Systems for Linux on zSeries®, Version

5.1

v IBM Tivoli Access Manager for Operating Systems for Linux on pSeries and

iSeries, Version 5.1

v IBM Tivoli Access Manager for Operating Systems Framework Support, Version

5.1

v IBM Tivoli Access Manager for Operating Systems Language Support, Version

5.1

v IBM Tivoli Access Manager Base for AIX, Version 5.1

v IBM Tivoli Access Manager Base for Solaris, Version 5.1

v IBM Tivoli Access Manager Base for HP-UX, Version 5.1

v IBM Tivoli Access Manager Base for Linux on xSeries, Version 5.1

v IBM Tivoli Access Manager Base for Linux on zSeries, Version 5.1

v IBM Tivoli Access Manager Base for Linux for pSeries and iSeries, Version

5.1

v IBM Tivoli Access Manager Base for Windows NT, Windows XP, Windows

2000, and Windows 2003, Version 5.1

v IBM Tivoli Access Manager Directory Server for AIX, Version 5.1

v IBM Tivoli Access Manager Directory Server 1 of 2 for Solaris , Version 5.1

v IBM Tivoli Access Manager Directory Server 2 of 2 for Solaris , Version 5.1

v IBM Tivoli Access Manager Directory Server for HP-UX , Version 5.1

v IBM Tivoli Access Manager Directory Server for Linux on xSeries, Version 5.1

v IBM Tivoli Access Manager Directory Server for Linux on zSeries, Version 5.1

�� 1. Tivoli Access Manager for Operating Systems ��

� 1 � �� 3

Page 16: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

v IBM Tivoli Access Manager Directory Server for Linux for pSeries and iSeries,

Version 5.1

v IBM Tivoli Access Manager Directory Server for Windows 2000 and Windows

2003, Version 5.1

v IBM Tivoli Access Manager Web Administration Interfaces for AIX, Version

5.1

v IBM Tivoli Access Manager Web Administration Interfaces for Solaris, Version

5.1

v IBM Tivoli Access Manager Web Administration Interfaces for HP-UX, Version

5.1

v IBM Tivoli Access Manager Web Administration Interfaces for Linux on xSeries,

Version 5.1

v IBM Tivoli Access Manager Web Administration Interfaces for Linux on zSeries,

Version 5.1

v IBM Tivoli Access Manager Web Administration Interfaces for Linux on pSeries

and iSeries, Version 5.1

v IBM Tivoli Access Manager Web Administration Interfaces for Windows 2000,

Version 5.1

v IBM Tivoli Access Manager Web Administration Interfaces for Windows 2003,

Version 5.1

v IBM Tivoli Access Manager WebSphere Fix Pack for AIX, Version 5.1

v IBM Tivoli Access Manager WebSphere Fix Pack for Solaris, Version 5.1

v IBM Tivoli Access Manager WebSphere Fix Pack for HP-UX, Version 5.1

v IBM Tivoli Access Manager WebSphere Fix Pack for Linux on xSeries, Version

5.1

v IBM Tivoli Access Manager WebSphere Fix Pack for Windows 2000, Version

5.1

v IBM Tivoli Access Manager Language Support for AIX, Version 5.1

v IBM Tivoli Access Manager Language Support for Solaris, Version 5.1

v IBM Tivoli Access Manager Language Support for HP-UX, Version 5.1

v IBM Tivoli Access Manager Language Support for Linux on xSeries, Version

5.1

v IBM Tivoli Access Manager Language Support for Linux on zSeries, Version

5.1

v IBM Tivoli Access Manager Language Support for Linux on pSeries and iSeries,

Version 5.1

4 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 17: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

v IBM Tivoli Access Manager Language Support for Windows NT, Windows XP,

Windows 2000, Windows 2003, Version 5.1

Tivoli Access Manager for Operating Systems �� ��� CD ��

IBM Tivoli Access Manager for Operating Systems� ���� �� �� CD �

�� �� ���.

� 1. �� �� CD� ��

���(����) ���� ���

AIX(/usr/sys/ inst.

images)

IBM Java Runtime Environment 1.3.1.5 Java131.rte

IBM AIX Certificate � SSL Base Runtime

ACME Toolkit 7.0.1.9

gskta.rte

IBM Directory Client 5.2.0.0 ldap.client

IBM Directory Client Runtime(SSL) 5.2.0.0 ldap.max_crypto_client

Tivoli Access Manager 5.1 Runtime

Environment

PD.RTE

Tivoli Access Manager for Operating Systems

5.1 Runtime Environment

PDOS.rte

HP-UX(/hp) Java 2 RTE 1.3 for HP-UX(700/800), PA1.1

+ PA2.0 Add On

B9789AA/Jre13

IBM Global Security Kit 7.0.1.9 gsk7bas

IBM Directory Server 5.2 Client LDAPClient

Tivoli Access Manager 5.1 Runtime

Environment

PDRTE

Tivoli Access Manager for Operating Systems

5.1 Runtime Environment

PDOSrte

Solaris(/solaris) JDK 1.3 Runtime Environment SUNWj3rt

IBM Global Security Kit 7.0.1.9 gsk7bas

IBM Directory Server 5.2 Client IBMldapc

Tivoli Access Manager 5.1 Runtime

Environment

PDRTE

Tivoli Access Manager for Operating Systems

5.1 Runtime Environment

PDOSrte

ezpkgadd

ldad-rsp

pddcfault

InstallShield Multiplatform

� ���� �� �� ��

Linux x86(/linux) IBM Java Runtime Environment 1.3.1-3.0 IBMJava2-JRE-1.3.1-3.0.

i386.rpm

IBM Global Security Kit 7.0.1.9 gsk7bas-7.0-1.9.i386.rpm

IBM SecureWay Directory Server 5.2 Client ldap-clientd-5.2-1.i386.rpm

Tivoli Access Manager 5.1 Runtime

Environment

PDRTE-PD-5.1.0-0.i386.

rpm

Tivoli Access Manager for Operating Systems

5.1 Runtime Environment

PDOSrte-PDOSruntime-5.

1.0-0.i386.rpm

� 1 � �� 5

Page 18: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

� 1. �� �� CD� �� (��)

���(����) ���� ���

Linux on zSeries(/

zSeries)

IBM Java Runtime Environment 1.3.1-3.0 IBMJava2-JRE-1.3.1-3.0.

s390.rpm

IBM Global Security Kit 7.0.1.9 gsk7bas-7.0-1.9.s390.rpm

IBM Directory Server 5.2 Client ldap-clientd-5.2-1.s390.rpm

Tivoli Access Manager 5.1 Runtime

Environment

PDRTE-PD-5.1.0-0.s390.

rpm

Tivoli Access Manager for Operating Systems

5.1 Runtime Environment

PDOSrte-PDOSruntime-5.

1.0-0.s390.rpm

Linux i/pSeries

(/pSeries)

IBM Java Runtime Environment 1.3.1-2.0 IBMJava2-JRE-1.3.1-3.0.

ppc.rpm

IBM Global Security Kit 7.0.1.9 gsk7bas-7.0-1.9.ppc32.rpm

IBM Directory Server 5.2 Client ldap-clientd-5.2-1.ppc.rpm

Tivoli Access Manager 5.1 Runtime

Environment

PDRTE-PD-5.1.0-0.ppc.

rpm

Tivoli Access Manager for Operating Systems

5.1 Runtime Environment

PDOSrte-PDOSruntime-5.

1.0-0.ppc.rpm

Tivoli Access Manager for Operating Systems Framework CD�

��

Tivoli Access Manager for Operating Systems Framework �� CD�� �� �

���� �� ����.

� 2. Tivoli Access Manager for Operating Systems Framework �� CD� ��

���� ���� ���

PDOS.cdrom IBM Tivoli Access Manager for Operating Systems

Management Tasks, Version 5.1

PDOSTASK.IND

IBM Tivoli Access Manager for Operating Systems

Enterprise Console Integration, Version 5.1

PDOSTEC.IND

PDOSU.cdrom IBM Tivoli Access Manager for Operating Systems

Management Tasks, Version 5.1� �����

PTASKU.IND

IBM Tivoli Access Manager for Operating Systems

Enterprise Console Integration, Version 5.1� ����

PDTECU.IND

�� �� CD�� InstallShield Multiplatform ���� ���� ���, ��

� ����� �� ����.

6 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 19: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

�� �� �� ���

Tivoli Access Manager for Operating Systems� �� � ��� �����.

v ��� �����

v ���

v � �

v ����

v ���

v �����

v ���

v ���

v ���

�� ��� �� � �� ��� ��� ������ ��, � �� �� ��

� ���� ���. �� ��� ���� ����� ����� ��� �����

�. ����� �� �� ��� ���� ���, ��� ��� �� �� � ��

�� ��� ��� � ����.

�� ��

Tivoli Access Manager for Operating Systems, ����� ��(��� � ), ��

�� � �� �� � ��� �� � ���� ������.

http://www.ibm.com/software/tivoli/products/access-mgr-operating-sys/

� 1 � �� 7

Page 20: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

8 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 21: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

� 2 � �� ��

� ���� IBM Tivoli Access Manager for Operating Systems� ���� �

�� �� � �� �� ������ �� �����.

Tivoli Access Control Facility��� ������

�� policy �� �� Tivoli Access Control Facility� �� �� ��, Tivoli

Security Manager �� �� � � �� �� � 101 ���� �� C �Tivoli

Access Control Facility��� �������� ��� ������.

���� � ����� ����

Tivoli Access Manager for Operating Systems� �� ���� � ����� �

���� � ���� IBM Tivoli Access Manager for Operating Systems ����

�� �� ����. �� �� �� � � �� ��� � ��� � �

�� �� ���� �����.

�� �� �����

IBM Tivoli Access Manager for Operating Systems� ����� ��� ���

��. Tivoli Access Manager for Operating Systems� �� � ���� �� �

�� �� ����� ��� �� � �� �� ���.

v IBM Tivoli Access Manager Runtime Environment, �� 5.1

v IBM Global Security Toolkit, �� 7.0.1.9

v IBM Directory Client, �� 5.2

� �� ��� ��� ����� ��, ��� �� �� ����� ���

� � �� ���� �����. �� ���� ��� ��� �� �� �

����� ��� � ����. ��, ����� �� �� ����� ���� �

��� ��� ����.

�� �� ������ �� � ��� InstallShield Multiplatform �� �����

��� �����. ����� ������ �� � ��� ��� ��� ���

��� �� ��� � ��� �����. ����� ��� �� �� �

�� ��� ��� �� � ���� ���.

Tivoli Access Manager for Operating Systems� �� � ���� ��, �� �

�� �� �� ��� ��� ��, �� ��� �� ��� ��� ���.

© Copyright IBM Corp. 2000, 2003 9

Page 22: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

v Tivoli Access Manager policy ��, �� 5.1� LDAP �� ������ �

���� �� � �� �� ���.

v SSL(Secure Sockets Layer)� ����� LDAP �� ������ �� ��

�� ���.

v Tivoli Access Manager policy ��� LDAP �� �� � ���� ���.

v LDAP �� ����� base64� ��� LDAP SSL CA(Certificate Authority)

� ��� ��� ��� ���.

v Tivoli Access Manager ������� base-64� ��� Tivoli Access Manager

� ��� ��� ��� ���(��� � � ����� �� � �� ��

��).

v LDAP �� ����� ���� ��� ���.

v �� � policy ���� ��� ��� ���.

v �� �� � ��(-admin_name � -admin_pwd)� ��� ���. �� ��

5.1��� ���� �� � Tivoli Access Manager �� ��� ��

(-sec_master_pwd)� �����.

SSL � �� ��� ��� Tivoli Access Manager policy �� � LDAP �

� ����� �� � ��� �� ��� IBM Tivoli Access Manager �� ��

���� ����. SSL �� �� � �� ��� ���� ��, ��� �

�� � � ��� ��� �� ��(�: 3650�)� ������. �� ��

�� ��� 365����.

�� ��

�� � ��� �� �� � �� �� ��� ���� ���.

�� ��

�� � �� �� � ��� IBM Tivoli Access Manager for Operating Systems

� ��� � ����.

InstallShield Multiplatform �� GUI ��

InstallShield Multiplatform ��� �� �� �� IBM Tivoli Access

Manager for Operating Systems� ��� �� ��� ������ ��

� �����. � �� �� ��� ��� ��� �����. �� �

�, ��� ��� ��� � ��� �����. ��� Tivoli Access

Manager for Operating Systems� �� � ���� �� ���� �� �

� �� ������ �� �� ��������.

InstallShield MultiPlatform �� �� ��

InstallShield MultiPlatform � ����� ���� ���� Tivoli Access

Manager for Operating Systems� ���� �� ���� ��� ����

10 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 23: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

�. ��� � � �� ��� ��� ���� ��� ��� �����.

�� ��� ��� ��� ��� �� � ��� �����. Tivoli

Access Manager for Operating Systems� ��� �� �� ����� �

� ��� �� �� �� ��������.

� ��

�� ��� Tivoli Access Manager for Operating Systems �� �� ��

��� ��� �� �� �� ��� ��� � ���, �� �� �

� �� �� ��� ���� �� �� ������ ����� ����

���, ��� ��� ���� �� � �� ���. �� �� ���

��� ���� ��� ����� ���� �����. ��� �� ��

���� ��� �, ���� �� ���� Tivoli Access Manager for

Operating Systems� ���� ���.

�� � ��� �� ���� �� ��� ������. �� � ����� ���

��� �� ��� �� ����. �� ��� 15 ���� ��� ��� � 13 �

��� ��� �� ����� ��� ������.

Policy ���

����� ��� ��� �� �, ����� ��� �� policy� ��� � �

��� ��� �� � ����. Tivoli Access Manager for Operating Systems�

��� policy ���� ���� �� �� ��� � ��� � ����.

��� policy ���� �� ���� ��� �� policy� �� ���� ���.

policy ���� /OSSEAL/policy-branch �� ��� Tivoli Access Manager policy

��� �� �, �� policy-branch� �� �� policy ��� �����. �

� ��, policy ���� ��� �� � ��� ���� ��, � � ���

��� �� �� �������� �����.

/OSSEAL/Servers/OSSEAL/Graphics/OSSEAL/ProdDev

Tivoli Access Manager policy ��� /OSSEAL ���� � ��, IBM Tivoli

Access Manager for Operating Systems ���� �� � ����. ���, ��

���� ��� ���� �� �� ���� ��� ���� ���(policy ��

����� �� ). ��� �� ���� ��� � policy ���(�:

/OSSEAL/Servers)� ��� ��, ��� policy ���� ��� �� ���� �

�� ���� �� � policy ���� �� �� ���� ���� ���.

policy ��� ��� � ���� ��� �, �� ���� � ��� ��� ��

� ��� � ����.

� 2 � �� �� 11

Page 24: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

���� ��

Tivoli Access Manager for Operating Systems� ����� ��� ��� ��

�.

v root ��� ��� ��� ���.

v /opt � /var �� ���� �� ��� ��� � �� �����.(�� �

���� ���� IBM Tivoli Access Manager for Operating Systems, �� 5.1,

���� ��� ������.)

�� ��� ��� �� ����� �����.

/opt/pdos

/var/pdos

Solaris� ���� InstallShield Multiplatform� ��� � �� �� �����

���� �� ����.

v ���� �� � �� �� �� LDAP ������ �� ������. ��

� Solaris � ��(Solaris��� )� ���� ���� ���� �� �

Sun LDAP �����, Sun ONE Directory Server ������ � ���.

v ��� � �� ��� �� � ��� ������. � ��� IBM Tivoli Access

Manager for Operating Systems ���� ��� ����.

v IBM Tivoli Access Manager for Operating Systems� �� ���� ����

�� ��, 13 ���� ��� �� ����� ��� ������.

���� ��

Tivoli Access Manager for Operating Systems� /var/pdos � � � ����

� �� policy ��, �� �� � �� ��� �����. /var� �� �� ��

�� �� �� policy � ��� ��� �� ��� �� �� /var/pdos�

��� �� ����� ���� � ������. �� /var/pdos/log �

/var/pdos/audit� ��� �� ����� �� � �����.

/var/pdos, /var/pdos/log � /var/pdos/audit ����� �� ���� ���

� �� ��� � ��� ��� �� � � ��� �����.

��� � �� ��

Tivoli Access Manager for Operating Systems� ���� ���� osseal ��

ID� osseal � ossaudit �� ���� ���. IBM Tivoli Access Manager

for Operating Systems� �� � �� osseal �� ossaudit � ��� ��

�� �� ��, �� �����. ����� osseal �� ID� ���� ��

�, �� �� �� �����. ��� osseal �� ID� osseal �� �� �

���.

12 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 25: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

NIS(Network Information Services) ���� osseal �� ID, osseal � ossaudit

�� ��� �� � NIS� ���� ��� ���. ��� NIS� ����� �

�� ���� ��� ��, Tivoli Access Manager for Operating Systems� ��

�� �� �� ���� /etc/passwd � /etc/group ��� + �� �� �

�� � � �� ID� ��� � ����. �� ���� �� ��� �� ��

� Tivoli Access Manager for Operating Systems� ��� �� � �� �

� ���� + �� ���� �� ���. ��� ���, NIS ��� �� ����

� Tivoli Access Manager for Operating Systems� ���� �� ���� osseal

�� ID� osseal � ossaudit �� ��� � ���.

�� �� ����� ��

Tivoli Access Manager for Operating Systems� �� ���� ������ ��,

� ��� ���� �� �� �� �����.

�: � �� Tivoli Access Manager for Operating Systems, �� 5.1�� ���

��� � ���. �� 3.8 � 4.1���� ������ �����. �� 3.7

���� ������ �� � ����.

1. ��� � �� ��� �� � ���� �� ��� �� � � ��� ��

�� �����. � ��� IBM Tivoli Access Manager for Operating Systems

���� ��� ����.

2. � �� � � �� � ��, �� � policy ��� �� ����

� �� Tivoli Access Manager for Operating Systems� ������. ��

� ���� ��� � �� ��� ������.

pdoscfg -autostart off -login_policy off

3. pdostecd � �����, �� ��� ��� � �� � ��� �� �

��.

pdosteccfg -autostart offrc.pdostecd stop

4. �� ��� ��� Tivoli Access Manager for Operating Systems� ���

����.

rc.osseal stop

5. ���� �� � �� ����. �� ��� ��� Tivoli Access Manager

for Operating Systems� �� � �� ��� ������.

pdosctl -s

�: ����� �� � � Tivoli Access Manager for Operating Systems�

�� � ���, � ��� �� � ���� �� ���� �� �� ��

�. �� � �� �� ������ ���� � � Tivoli Access

Manager for Operating Systems ����� UNIX ��� � � ��

� 2 � �� �� 13

Page 26: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

��� ��� ��� ��� ���. ��� � ��� ��� � �� ���

� ����� �� �� � �� ��, ���� �� �� ��� Tivoli

Access Manager for Operating Systems� ����� �� ��� ����

�.

6. �� ��� �� � Tivoli Access Manager policy ��� �� 5.1� �

����.

7. Tivoli Access Manager for Operating Systems� 15 ���� � 3 � ����

� ��� �� �� ������. �� ��� ��� �� � ��, ��

�� �� �� �� ������ � � ��� ����� ��������

����.

�� � 46 ���� ��� �� ����� ��� ������.

14 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 27: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

� 3 � ��

� ���� AIX, HP-UX, Solaris � Linux�� IBM Tivoli Access Manager for

Operating Systems� ���� ��� �� �����.

�� �

�� � �� �� � ��� Tivoli Access Manager for Operating Systems� �

�� � ����.

InstallShield Multiplatform �� GUI ��

�� ���� Tivoli Access Manager for Operating Systems, Version 5.1

CD�� install_amos_platform ��� �� Tivoli Access Manager

for Operating Systems � � ���� ��� �� �� �� ������

���� �� �����. �� �� � � �� �� ������ �� �

� � �� ��, ��� �� ��� � ���� � �����. �

� ��� 16 ���� �InstallShield Multiplatform� ��� �� ���

� ���� ������.

InstallShield Multiplatform ��� �� � �� � policy ���� �

�� Tivoli Access Manager for Operating Systems� �� ��� �

��� ���.

InstallShield Multiplatform �� �� ��

�� ���� Tivoli Access Manager for Operating Systems, Version 5.1

CD�� install_amos_platform ��� ��� �� ��� �� ���

��� Tivoli Access Manager for Operating Systems � � ���� �

�� �� �� �� ������ ��� ���� �� �����. ��

�� � � �� �� ������ �� �� � �� ��, ��� �

� ��� � ���� � �����.

� ��

�� ���� Tivoli Access Manager for Operating Systems, Version 5.1

CD�� � ��� � �� � �� ����� �� ��� ���

Tivoli Access Manager for Operating Systems� �����. � ���

��� �� �� ��� �� ��� �� �� ���� �����

� ��� �� ��� �����.

Tivoli Access Manager Runtime Environment� Tivoli Access Manager for

Operating Systems� ��� ��� ��� ���� �� � �� � �

�� ���.

© Copyright IBM Corp. 2000, 2003 15

Page 28: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

�� �� ��� ��� �� � ��� ����� � ��� �� ��

� � � Tivoli Access Manager for Operating Systems� �� �� �

� ������ ���� ���. �� ���� �� �� � ��� �

� �� ������ � �� ����� �� � �� � ����.

v 33 ���� ��� ��� ��� AIX� ���

v 35 ���� ��� ��� ��� HP-UX� ���

v 37 ���� ��� ��� ��� Solaris� ���

v 39 ���� ��� ��� ��� Linux� ���

Tivoli Access Manager for Operating Systems �� ��� ���� ��

���� ���. �� ��� 55 ���� � 4 � ����� ������.

�: Tivoli Access Manager for Operating Systems� Tivoli Access Manager policy

�� �� IBM Directory Server(LDAP)� ��� ���� ��� �� ���

�����. InstallShield Multiplatform(�� �� � ��)� ��� � �

�� �����, �� policy �� � IBM Directory Server� Tivoli Access

Manager for Operating Systems� ���� ��� ������� ���. �

� ��, InstallShield Multiplatform� ��� ��� � ����.

Tivoli Access Manager for Operating Systems� �� ��� �� � ���, �

���� �� 13 ���� ��� �� ����� ��� ��� �� ��� �

��. � �� �� ��� ��� Tivoli Access Manager for Operating Systems

� ������ �, ��� � �� ���� ���� 46 ���� ��� �� �

���� ��� ������.

InstallShield Multiplatform ���� �� ���� ��

InstallShield Multiplatform �� ���� ���� Tivoli Access Manager for

Operating Systems� ���� �� �����. ���� �� ��� �����

����, �� ���� ���� �� ����� �� ��, ��� ���� �

����.

InstallShield Multiplatform ���� ��� �� �� ���� ����� �

�� �� ��� �� � ����� ��� ���� �����. �� ����

�� ����� JRE(Java Runtime Environment)� �� ��� ���� ���.

JRE� �� ���, �� ���� �� ���� �� ��� JRE� ��� �, �

���� �����. �� �� JRE ��� �����, Java� �� ��� �

�� ������.

�: �� �� ���� ��, 55 ���� ��� ���� ������.

16 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 29: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

��� �� �� ���� ��

���� �� �� ���� ��� �����. �� ���� InstallShield

Multiplatform �� ���� �����.

AIX

1. IBM Tivoli Access Manager for Operating Systems for AIX, Version 5.1 CD

� � �����.

2. �� � ����� � � ��� ������. �� ��, �� ���.

cd /cdrom

3. DISPLAY �� ��� ��� �� � ��� �����. ��������

� � �� X Server� �� �� ���.

4. �� �� � ��� ������.

install_amos_aix

�� �� �� JRE ��� ����� ��, ��� ������.

java -cp install_amos_setup.jar run

HP-UX

1. IBM Tivoli Access Manager for Operating Systems for HP-UX, Version 5.1

CD� � �����.

2. �� � ����� � � ��� ������. �� ��, �� ���.

cd /cdrom

3. DISPLAY �� ��� ��� �� � ��� �����. ��������

� � �� X Server� �� �� ���.

4. �� �� � ��� ������.

install_amos_hp

�� �� �� JRE ��� ����� ��, ��� ������.

java -cp install_amos_setup.jar run

Solaris

1. IBM Tivoli Access Manager for Operating Systems for Solaris, Version 5.1

CD� � �����.

2. �� � ����� � � ��� ������. �� ��, �� ���.

cd /cdrom

3. DISPLAY �� ��� ��� �� � ��� �����. ��������

� � �� X Server� �� �� ���.

4. �� �� � ��� ������.

� 3 � �� 17

Page 30: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

install_amos_solaris

�� �� �� JRE ��� ����� ��, ��� ������.

java -cp install_amos_setup.jar run

Linux on x86

1. IBM Tivoli Access Manager for Operating Systems for Linux on xSeries, Version

5.1 CD� � �����.

2. �� � ����� � � ��� ������. �� ��, �� ���.

cd /media/cdrom

3. DISPLAY �� ��� ��� �� � ��� �����. ��������

� � �� X Server� �� �� ���.

4. �� �� � ��� ������.

install_amos_Linux

�� �� �� JRE ��� ����� ��, ��� ������.

java -cp install_amos_setup.jar run

Linux on zSeries

1. IBM Tivoli Access Manager for Operating Systems for Linux on zSeries, Version

5.1 CD� � �����.

2. �� � ����� � � ��� ������. �� ��, �� ���.

cd /media/cdrom

3. DISPLAY �� ��� ��� �� � ��� �����. ��������

� � �� X Server� �� �� ���.

4. �� �� � ��� ������.

install_amos_zSeries

�� �� �� JRE ��� ����� ��, ��� ������.

java -cp install_amos_setup.jar run

Linux on pSeries � iSeries

1. IBM Tivoli Access Manager for Operating Systems for Linux on pSeries and

iSeries, Version 5.1 CD� � �����.

2. �� � ����� � � ��� ������. �� ��, �� ���.

cd /media/cdrom

3. DISPLAY �� ��� ��� �� � ��� �����. ��������

� � �� X Server� �� �� ���.

4. �� �� � ��� ������.

18 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 31: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

install_amos_pSeries

�� �� �� JRE ��� ����� ��, ��� ������.

java -cp install_amos_setup.jar run

InstallShield Multiplatform �� ���� ��

�� ���� �� � �� �� �� �����.

1. �� ���� ��� �����.

��� �� ��� ��� � ����(��� ����). ��� ��� ��

� �� ���. ���� � ��� ������ ��� ����.

�� ���� ��� � �� Tivoli Access Manager for Operating Systems

�� ��� �����.

�� 2. Tivoli Access Manager for Operating Systems �� ���� ��

� 3 � �� 19

Page 32: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

2. �� ��� �����. ��� �� �� � ��� �����. �� �

���.

�� 3. Tivoli Access Manager for Operating Systems �� ��

20 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 33: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

3. ����� ��� �� ��� �����. ��� �����. ��� ����

� ��� ���� ���. �� ����. (��� ��, ��� �� �

����.)

��� �� �, ��� ��� /var/pdos_ismp/license� �� ���.

�� 4. Tivoli Access Manager for Operating Systems ����� ��� �� ��

� 3 � �� 21

Page 34: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

4. Tivoli Common Directory �� ��� �����. ����, �� ��� ��

�� ����� ������.

�� 5. Tivoli Common Directory �� ��

22 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 35: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

5. Tivoli Access Manager Runtime Environment �� ��� �����. ���

�� ��� ������.

v Tivoli Access Manager ��� ��. �� �� � �� � ��� �� policy

��� �����.

v Tivoli Access Manager � ��. ���� 7135���.

v Tivoli Access Manager �� SSL � ��. policy �� CA �� ��

�� ��� ���� ���.(� � �� ��� ��� ���� ����

����.)

v Tivoli Access Manager �� �� ��

�� ����. ��� �� ���� �� ��, � � ��� �� �

��� ��� �����.

�� 6. Tivoli Access Manager Runtime Environment �� ��

� 3 � �� 23

Page 36: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

6. Tivoli Access Manager LDAP � ��� �����. ��� �� ��� �

�����.

v LDAP �� ��� ��. ��� � ���� ���.

v LDAP �� ��

�� 7. Tivoli Access Manager LDAP � ��

24 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 37: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

7. �� ���� ��� �����. Tivoli Access Manager for Operating Systems

� ����� ����� ������. �� ����.

��� /opt� ��� ��, Tivoli Access Manager for Operating Systems �

�� �� �� ����� ��� �� ��� �����. �� ��(�:

/bigdir)� ��� ��, Tivoli Access Manager for Operating Systems � �

� �� ������ �� � �����. �� ��� �� � �� �

�� ���.

v /bigdir/pdos

v /bigdir/PolicyDirector

v /bigdir/ldapc

v /bigdir/gskit

�� �� �� Solaris�� �� � ����. InstallShield Multiplatform �

�� /opt� �� ����� ���� , ��� ���� ����.

�� 8. Tivoli Access Manager for Operating Systems �� ���� ��

� 3 � �� 25

Page 38: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

� 3. �� ��

��� �� ��

�� �� ��� �� ��

AIX /opt/pdos /opt/PolicyDirector

/usr/ldap /usr/opt/ibm/gskta

/bigdir/pdos

/bigdir/PolicyDirectory

/bigdir/ldapc

/bigdir/gskit

HP-UX /opt/pdos

/opt/PolicyDirector

/usr/IBMldap

/opt/ibm/gsk7

/bigdir/pdos

/bigdir/PolicyDirectory

/bigdir/ldapc

/bigdir/gskit

Linux /opt/pdos /opt/PolicyDirector

/usr/ldap /usr/local/ibm/gsk7

/bigdir/pdos

/bigdir/PolicyDirectory

/bigdir/ldapc

/bigdir/gskit

�: �� �� ������ �� ��� �� � �� ��, �� � ����.

� ��� ��� �� ���� ���, Tivoli Access Manager for Operating

Systems � �� �� ������ ��� ��� � ���� � ����

� ��� � ����. �� � ��� /opt ���� ��� � ����. �

� ����.

8. Tivoli Access Manager for Operating Systems �� ��� �����.

26 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 39: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

��� �� ��� ���� ��� ��� ������.

v ��� �

v Tivoli Access Manager �� ��

v �� �� ID

v �� �� ��

v LDAP SSL � ��

v LDAP ���

�� 9. Tivoli Access Manager for Operating Systems �� ��

� 3 � �� 27

Page 40: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

v pdoscfg� ��� �� �� ��

�� ����.

9. Tivoli Access Manager for Operating Systems �� �� ��� �����.

� ����� �� ��� ����, ��� �� ��� � ��� �� ��

���� ��� �� � �� �� ���� �� ��� �����.

��� ��� �� ��, �� �� ��� �� ��� ��� �, ����

��. �� ����.

10. Tivoli Access Manager for Operating Systems �� �� ��� �����.

��� ������� � � �� �� ��� ��� �� �� ��� �

����.

�� 10. Tivoli Access Manager for Operating Systems �� �� ��

28 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 41: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

��� ����� �� ����� ��� ���� ��� �����.

� 4. ��� ���� ��

���� ��

/opt/pdos/bin Tivoli Access Manager for Operating Systems

���

/opt/pdos/lib Tivoli Access Manager for Operating Systems �

����

/opt/pdos/sbin Tivoli Access Manager for Operating Systems �

�� ��

/opt/pdos/etc Tivoli Access Manager for Operating Systems �

� �� � �� �� ��

/opt/pdos/kernel Tivoli Access Manager for Operating Systems

� �� � ����

/opt/pdos/nls Tivoli Access Manager for Operating Systems �

�� ����

/var/pdos Tivoli Access Manager for Operating Systems �

� �� � �� �� ��

/var/pdos_ismp ISMP �� �� � �� �� ���

/var/ibm/tivoli/common/AOS/logs Tivoli � �� ����(�� ��� ��)

/var/ibm/tivoli/common/AOS/ffdc Tivoli � ffdc �����(�� ��� ��)

/var/ibm/tivoli/common/AOS/scripts Tivoli � ��� ����(�� ��� ��)

/usr/bin/pdos* �� ������ Tivoli Access Manager for

Operating Systems ���� �� �� ��

�� 11. Tivoli Access Manager for Operating Systems �� �� ��

� 3 � �� 29

Page 42: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

� 4. ��� ���� �� (��)

���� ��

/usr/lib �� ������ Tivoli Access Manager for

Operating Systems ������ �� �� ��

InstallShield Multiplatform ���� �� ��� ��

Tivoli Access Manager for Operating Systems� InstallShield Multiplatform �

��� ��� ��� �� ����. � ��� InstallShield Multiplatform �

��� �����. ���� GUI �� � ��� � �� ��� �� �� �� �

���. � ��� � � �� �� �� � ��� �����. ��

� �� � �� �� �� ���. �� ��� �� �� �� �� � �

� �����.

�: �� � ��� ��� �� ��, � �� ���� �����.

-W AM_TCDPanel.useTcd="yes"-W AM_TCDPanel.tcdDir="/var/tcd/log"-W AMRTE_ServerOptionsUIPanel.hostName="amserver.company.com"-W AMRTE_ServerOptionsUIPanel.listeningPort="7135"-W AMRTE_ServerOptionsUIPanel.certFile=-W AMRTE_ServerOptionsUIPanel.localDomain="Default"-W AMRTE_LDAPOptionsUIPanel.ldapHost="ldapserver.company.com"-W AMRTE_LDAPOptionsUIPanel.ldapPort="389"-W AMOS_DestinationPanel.productInstallLocation="/opt"-W AMOS_ConfigOptions.localDomain="lab_domain"-W AMOS_ConfigOptions.policyBranch="lab_policy"-W AMOS_ConfigOptions.userAdmin="sec_master"-W AMOS_ConfigOptions.userPassword="root"-W AMOS_ConfigOptions.ldapSSLCertFile="/cert/amosintb/ldapcacert.b64"-W AMOS_ConfigOptions.ldapSuffix="ou=tivoli,o=ibm,c=us"-W AMOS_ConfigOptions.rspFile="/tmp/pdoscfg.rsp"

�� �� �����.

-W AMRTE_ServerOptionsUIPanel.hostName="amserver.company.com"-W AMRTE_ServerOptionsUIPanel.localDomain="Default"-W AMRTE_LDAPOptionsUIPanel.ldapHost="ldapserver.company.com"-W AMOS_DestinationPanel.productInstallLocation="/opt"-W AMOS_ConfigOptions.localDomain="lab_domain"-W AMOS_ConfigOptions.policyBranch="lab_policy"-W AMOS_ConfigOptions.userAdmin="sec_master"-W AMOS_ConfigOptions.userPassword="root"-W AMOS_ConfigOptions.ldapSSLCertFile="/cert/amosintb/ldapcacert.b64"-W AMOS_ConfigOptions.ldapSuffix="ou=tivoli,o=ibm,c=us"

�� � ��� �� �� ����� �����(���� � �� � ��).

-W AMRTE_ServerOptionsUIPanel.listeningPort="7135"-W AMRTE_LDAPOptionsUIPanel.certFile=-W AMRTE_ServerOptionsUIPanel.ldapPort="389"-W AMOS_ConfigOptions.rspFile=

30 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 43: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

��� � ��� ���� � � �� ��� ����. ���� ��� ��

� � ����� �� �� � ��� ������.

v install_amos_platform -options-template template_file

v java -cp install_amos_setup.jar run -options-template template_file

��� � ���, template_file ���� ### -W AMOS_

ConfigOptions.policyBranch=value� � �� � ���. value� �� �

� �� � ��� ��� ���� ���.

�: �� Java ��� ���� ��, Java ��� ������. �� ��� �

� �� �� Java� ���� �� ��� ��� � ����.

�� �� � ��� �� ��� ��� ��� ����� �� �� � ��� �

�����.

v install_amos_platform -options-record record_file

v java -cp install_amos_setup.jar run -options-record record_file

��� ����� � record_file� �� � ��� �� �� � ���. �

� ��, � ��� �� ��� ��� � ����.

� ��� �����, � ��� �� �� �����.

�: � ��� �� ��� ��� ��� �����.

AIX

1. Tivoli Access Manager for Operating Systems for AIX, Version 5.1 CD� �

�����.

2. �� � ����� � � ��� ������. �� ��, �� ���.

cd /cdrom

3. �� �� � ��� ������.

install_amos_aix -silent -options option_file

��

java -cp install_amos_setup.jar run -silent -options option_file

HP-UX

1. Tivoli Access Manager for Operating Systems for HP-UX, Version 5.1 CD�

� �����.

2. �� � ����� � � ��� ������. �� ��, �� ���.

cd /cdrom

3. �� �� � ��� ������.

� 3 � �� 31

Page 44: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

install_amos_hp -silent -options option_file

��

java -cp install_amos_setup.jar run -silent -options option_file

Solaris

1. Tivoli Access Manager for Operating Systems for Solaris, Version 5.1 CD�

� �����.

2. �� � ����� � � ��� ������. �� ��, �� ���.

cd /cdrom

3. �� �� � ��� ������.

install_amos_solaris -silent -options option_file

��

java -cp install_amos_setup.jar run -silent -options option_file

Linux on x86

1. IBM Tivoli Access Manager for Operating Systems for Linux on xSeries, Version

5.1 CD� � �����.

2. �� � ����� � � ��� ������. �� ��, �� ���.

cd /media/cdrom

3. �� �� � ��� ������.

install_amos_Linux -silent -options option_file

��

java -cp install_amos_setup.jar run -silent -options option_file

Linux on zSeries

1. IBM Tivoli Access Manager for Operating Systems for Linux on zSeries, Version

5.1 CD� � �����.

2. �� � ����� � � ��� ������. �� ��, �� ���.

cd /media/cdrom

3. �� �� � ��� ������.

install_amos_zSeries -silent -options option_file

��

java -cp install_amos_setup.jar run -silent -options option_file

32 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 45: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

Linux on pSeries � iSeries

1. IBM Tivoli Access Manager for Operating Systems for Linux on pSeries and

iSeries, Version 5.1 CD� � �����.

2. �� � ����� � � ��� ������. �� ��, �� ���.

cd /media/cdrom

3. �� �� � ��� ������.

install_amos_pSeries -silent -options option_file

��

java -cp install_amos_setup.jar run -silent -options option_file

��� �� �, InstallShield Multiplatform GUI ��� ��� ���� ��� �

�� ���.

�: � ��� �� ��� ��� ��� �����.

� ��� ���� AIX� ��

AIX� Tivoli Access Manager for Operating Systems� ����� SMIT(System

Management Interface Tool) � ��� ��� ��� � ����.

Tivoli Access Manager for Operating Systems� ���� �� IBM Tivoli Access

Manager for Operating Systems for AIX CD� �� ��� �� �� �����

��� ���� ���� ���.

v IBM Global Security Kit(GSkit)

v IBM Directory Server(LDAP) Client

v IBM Directory Secure Max Crypto Client

v Tivoli Access Manager Runtime Environment

��� ��, �� �� � �� ��� 5 ���� � 1� ������. ��� ��

��� �� ��� �� URL� �� Tivoli Information Center�� �� � ��

��.

http://publib.boulder.ibm.com/tividd/td/tdprodlist.html

��� ��� ��, �� �� ����� ��� Tivoli Access Manager for

Operating Systems �� ����� ��� ��� � ����.

SMIT� ���� AIX� ��

SMIT� ��� AIX� Tivoli Access Manager for Operating Systems� ���

�� ��� �����.

� 3 � �� 33

Page 46: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

1. IBM Tivoli Access Manager for Operating Systems for AIX CD� CD-ROM

����� ����.

2. root� ������.

3. ��� �� ��� ������.

smit

��� �� ���� �� ��� �����.

4. ��� �� ���� ����� �� � ���� ����.

5. ����� �� � ���� ���� ����� �� � ��� ����.

6. ����� �� � �� ���� �� ��� ������� �� � ���

����.

7. Tivoli Access Manager for Operating Systems ���� ��� ���� ��

(/dev/cd0)� ��� ������ �� �� ���/����� �����

�. ��� ����.

8. �� ��� ������� �� � �� ��� �����.

9. ����� ����� ����� �� �� ���� ����. �� �� �

� ��� �����. 5.1 IBM Tivoli Access Manager for Operating Systems

Runtime� ��������. ��� ����.

10. �� ��� ������� �� � �� ��� �� �����. ��� �

���.

11. �� ����� �����. ��� ����.

���� �� �� ��� ������� �� � �� ��� �� �� �

�� �� � ��� ���� �� �����.

12. ��� �� � ��� ����.

13. �� ��� �� ��� ������� �� � �� ��� �����. ��

� �� ���� �� ��� �����.

14. CD-ROM ������ CD� �����.

Tivoli Access Manager for Operating Systems �� ��� ���� �� ���

� ���. �� ��� 55 ���� � 4 � ����� ������.

���� AIX� ��

���� AIX� Tivoli Access Manager for Operating Systems� ����� �

� �� ������.

1. IBM Tivoli Access Manager for Operating Systems for AIX CD� CD-ROM

����� ����.

2. root� ������.

34 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 47: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

3. ��� �� ��� ������. �� /dev/cd0� Tivoli Access Manager for

Operating Systems ���� ��� CD-ROM ����� � � ��� �

���.

installp -c -a -g -X -d /dev/cd0/usr/sys/inst.images PDOS.rte

4. CD-ROM ������ CD� �����.

Tivoli Access Manager for Operating Systems �� ��� ���� �� ���

� ���. �� ��� 55 ���� � 4 � ����� ������.

�: AIX, �� 5.1 � 5.2�� installp ��� ����, ″1969�, 12� 31�″� �

� �� �� �� ����� �����. �� �� �����. �� �

� Tivoli Access Manager for Operating Systems� ��� ��� ��� �

���.

� ��� ���� HP-UX� ��

Tivoli Access Manager for Operating Systems� swinstall� ��� HP-UX�

����� ���� ��� � ����. ��� /opt/pdos � /var/pdos ���

�� ���� ���. /�� ��� ���� ����.

Tivoli Access Manager for Operating Systems� ���� ��, �� CD� ��

�� � �� �� ����� ��� ���� ���� ���.

v IBM Global Security Kit

v IBM Directory Server Client

v IBM Tivoli Access Manager Runtime Environment

��� ��, �� �� � �� ��� 5 ���� � 1� ������. ��� ��

��� �� ��� �� URL� �� Tivoli Information Center� ����.

http://publib.boulder.ibm.com/tividd/td/tdprodlist.html

swinstall� ���� HP-UX� ��

swinstall� ��� HP-UX� Tivoli Access Manager for Operating Systems� �

���� ��� �����.

1. IBM Tivoli Access Manager for Operating Systems for HP-UX CD� �

���.

2. root� �������.

3. � ��� �� ��, pfs_mountd� ��� � pfsd� ������. pfs_mount

���� CD� � �����. �� ��, ��� �� ��� ������.

pfs_mount /dev/dsk/c0t0d0 /cd-rom

� 3 � �� 35

Page 48: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

��, /dev/dsk/c0t0d0� CD-ROM ����� /cd-rom� � � ��

���.

4. ��� ��� ������.

swinstall

Enter� ����.

5. SD Install - Software Selection �� � Specify Source ��� �����. �

� ��� �� ���� Local CDROM� ������. �� ��� ���

/cd-rom/hp� ������. �� cd-rom� CD� � � �����. OK

� ����.

6. SD Install - Software Selection �� Tivoli Access Manager for Operating

Systems ��� PDOSrte� ��� ����� ������ ������.

Actions ��� �� Mark for Install� ������.

7. Actions ��� �� Install (analysis)� ������. �� � ��� �

����. ��� Ready��, OK� ����. � ��� �����. Yes�

����.

8. �� ��� �� ����� ��� �����. ��� ‘Completed’��, Done

� ����.

9. SD Install - Software Selection � �����.

10. � � �� � CD-ROM ������ CD� �����.

Tivoli Access Manager for Operating Systems �� ��� ���� �� ���

� ���. �� ��� 55 ���� � 4 � ����� ������.

���� HP-UX� ��

���� Tivoli Access Manager for Operating Systems� HP-UX� �����

�� �� �����.

1. IBM Tivoli Access Manager for Operating Systems for HP-UX CD� ��

��.

2. root� �������.

3. � ��� �� ��, pfs_mountd� ��� � pfsd� ������. pfs_mount

���� CD� � �����. �� ��, ��� ��� ������.

pfs_mount /dev/dsk/c0t0d0 /cd-rom

�� /dev/dsk/c0t0d0� CD-ROM ����� /cd-rom� � � ���

��. Enter� ����.

4. ��� ��� ������.

swinstall -s /cd-rom/hp PDOSrte

36 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 49: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

�� /cd-rom/hp� �������.

5. � � �� � CD-ROM ������ CD� �����.

Tivoli Access Manager for Operating Systems �� ��� ���� �� ���

� ���. �� ��� 55 ���� � 4 � ����� ������.

� ��� ���� Solaris� ��

Admintool� ��� Solaris� Tivoli Access Manager for Operating Systems�

����� ���� ��� � ����.

IBM Tivoli Access Manager for Operating Systems� ���� ��, �� CD�

�� �� �� �� ����� ��� ���� ���� ���.

v IBM Global Security Kit

v IBM Directory Server Client

v Tivoli Access Manager Runtime Environment

��� ��, �� �� � �� ��� 5 ���� � 1� ������. ��� ��

��� �� ��� �� URL� �� Tivoli Information Center� ����.

http://publib.boulder.ibm.com/tividd/td/tdprodlist.html

Admintool� ���� Solaris� ��

Admintool� ��� Solaris� Tivoli Access Manager for Operating Systems�

����� ��� �����.

1. IBM Tivoli Access Manager for Operating Systems for Solaris CD� ��

��.

2. root� �������.

3. ��� ��� ������.

admintool

Admintool: Users ��� �����.

4. Admintool: Users Browse ���� Software� ������. Admintool:

Software ��� �����.

5. Edit� �� Add� ������. Admintool: Set Source Media � ��

���.

6. ����� �� ���� �� ��� �� CD� ���� CD �� ���

/cdrom/cdrom0/solaris� ������. ��� ����. Admintool: Add

Software ��� �����.

� 3 � �� 37

Page 50: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

7. Admintool: Add Software ���� IBM Tivoli Access Manager for Operating

Systems ���� ������. Add� ����.

8. ���� �� � �� � ���� �����. �� � ��� ���� �

�� ��� �� �����. � ��� ″Do you want to install this

package?″� � ���� �����. � ���� �� � Yes� ������.

Return� ����.

9. � ��� ″Do you want to continue with installation?″� ��� � ���

��� �� �����. � ���� �� � Yes� ������. Return�

����.

10. � ��� ″Do you want to install these conflicting files?″� ��� � �

�� ��� �� ��� ��� � ��� ��� �����. � ���� �

� � Yes� ������. Return� ����.

11. ″he following files are being installed with setuid and/or setgid permissions″

� ��� � �� ��� �� �� � ″Do you want to install these as

setuid/setgid files?″ �� � ��� ���� �� �����. Yes� ��

����. Return� ����.

12. ��� ���� �� �� � ��� ″This package contains scripts which

will be executed with super-user permission during the process of installing

this package. Do you want to continue with installation of package name?″

� �����. Yes� ������. Return� ����.

13. ��� �� � Return� ����. Admintool: Software ��� �����.

14. CD-ROM ������ CD� �����.

Tivoli Access Manager for Operating Systems �� ��� ���� �� ���

� ���. �� ��� 55 ���� � 4 � ����� ������.

���� Solaris� ��

���� Solaris� Tivoli Access Manager for Operating Systems� �����

�� �� ������.

1. IBM Tivoli Access Manager for Operating Systems for Solaris CD� ��

��.

2. root� �������.

3. ��� ��� ������.

pkgadd -d /cdrom/cdrom0/solaris -a /cdrom/cdrom0/solaris/pddefault PDOSrte

�� /cdrom/cdrom0/solaris� ������, /cdrom/cdrom0/solaris/

pddefault� ��� ���� ��� ����� �� ������.

4. ��� ��� ��� CD-ROM ������ CD� �����.

38 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 51: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

eject

Tivoli Access Manager for Operating Systems �� ��� ���� �� ���

� ���. �� ��� 55 ���� � 4 � ����� ������.

� ��� ���� Linux� ��

Tivoli Access Manager for Operating Systems� Linux �� �� ��� ��

� Linux x86, Linux for zSeries �� Linux for i/pSeries�� ��� � ���

�.

Tivoli Access Manager for Operating Systems� ���� �� Tivoli Access

Manager for Operating Systems ��� �� CD� �� �� �� �� ����

� ��� ���� ���� ���.

v IBM Global Security Kit

v IBM Directory Server Client

v Tivoli Access Manager Runtime Environment

��� ��, �� �� � �� ��� 5 ���� � 1� ������. ��� ��

��� �� ��� �� URL� �� Tivoli Information Center�� �� � ��

��.

http://publib.boulder.ibm.com/tividd/td/tdprodlist.html

���� Linux� Tivoli Access Manager for Operating Systems� ����� �

� �� �����.

1. � IBM Tivoli Access Manager for Operating Systems for Linux CD(Linux

for xSeries, Linux for zSeries �� Linux for i/pSeries)� ����.

2. root� �������.

3. �� � ��� ��� ���� CD-ROM ����� � �����.

mount /media/cdrom/

4. Linux ���(Linux for xSeries, Linux for zSeries �� Linux for i/pSeries)�

�� �� ��� ������.

v Linux for xSeries� ��:

rpm -i /media/cdrom/linux/PDOSrte-PDOSruntime-5.1.0-0.i386.rpm

v Linux for zSeries� ��

rpm -i /media/cdrom/zSeries/PDOSrte-PDOSruntime-5.1.0-0.s390.rpm

v Linux for i/pSeries� ��:

rpm -i /media/cdrom/pSeries/PDOSrte-PDOSruntime-5.1.0-0.ppc.rpm

� 3 � �� 39

Page 52: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

Tivoli Access Manager for Operating Systems �� ��� ���� �� ���

� ���. �� ��� 55 ���� � 4 � ����� ������.

Tivoli Management Framework Integration ��� ��

Tivoli ���� Tivoli Access Manager for Operating Systems� ����� �

� ��� ���� ���.

IBM Tivoli Access Manager for Operating Systems �� ���, �� 5.1

� ��� TMR(Tivoli Management Region) ��� ���� ���. � �

���� Tivoli ���� UNIX ���� � �� �� �� Tivoli

Access Manager for Operating Systems ���� ��� � ��� ���

PDOS ��� ��� �����(��� ��� � �� ��� ��� ��

�� � ���)� �����.

Tivoli Access Manager for Operating Systems�� IBM Tivoli Enterprise Console

�� IBM Tivoli Risk Manager� ����� �� ��� ���� ���.

IBM Tivoli Access Manager for Operating Systems Enterprise Console

Integration, �� 5.1

� ��� TMR(Tivoli Management Region) ��, Tivoli Enterprise Console

�� � Tivoli Access Manager for Operating Systems ����� ��

�� ������ ���� ���. � ����� Tivoli Enterprise Console

� ��� �� ���� ���. � ����� Tivoli Enterprise Console �

� �� ���� ��� �� ���� ��� �� ���� ����.

���� ���� ���� Tivoli Enterprise Console �� Tivoli Risk

Manager� �����. �� � ���� �� � � ��� �� ��� �

����(� � ��).

Tivoli Access Manager for Operating Systems �� ��� ��

Tivoli ���� Tivoli Access Manager for Operating Systems ��� ���

���� TMR(Tivoli Management Region) ��� AMOS �� ���� ����

���.

�: Tivoli Access Manager for Operating Systems �� ���� �� ���� �

������ ��, 43 ���� �IBM Tivoli Access Manager for Operating

Systems �� ��� ������� ������.

����

AMOS �� ���� ����� �� �� �����.

1. ���� ���� �� → �� �� �� ��� �� �� ��� ����

��.

40 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 53: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

2. ��� �� �� ��� ���� Tivoli Access Manager for Operating Systems

Management Tasks, Version 5.1� ������.

3. ��� ��� �� �� � ��� ������. ��� TMR(Tivoli

Management Region) ��� � �� ���. �� ���� ��� ����

� ��� ��� �����.

4. �� �� �� �� ��� ������. �� ����� �� �� ��� �

������.

� ��� �� ���� �� ���� �� ��� �����. ��� ����

�� ���� �� ��� ���� �����.

5. �� �� �� �� �� ����� ���� �� �� �� ��� ����

��. �� �� �� ��� �� � �� �� ��� �����.

��� �� � �� �� ��� �� ���� �����.

6. �� �� �� ��� �����.

��

�� �� ��� AMOS �� ���� �����. winstall ��� �� �� �

�� Tivoli Management Framework ���� ������.

winstall -c /cdrom -s colby -i PDOSTASK.IND

��

-c /cdrom �� CD� �� ��� �����.

-s colby ��� �� ��� ��� Tivoli region� �� ��� �����.

����, ��� ��� TMR(Tivoli Management Region) ��

�� �� �� �����. � ���� �� ��� colby���.

-i PDOSTASK.IND

� ��� �� � � ��� �����.

Tivoli Access Manager for Operating Systems EnterpriseConsole Integration ��

Tivoli Access Manager for Operating Systems Enterprise Console Integration, �

� 5.1, ����� Tivoli Access Manager for Operating Systems ���� Tivoli

Enterprise Console� � � �� ��� �� �� ��� ���� �����.

�: Tivoli Enterprise Console� ��� �� �� �� �� � �� ����

� �����, Tivoli Enterprise Console ��� ������. Tivoli Access

Manager for Operating Systems Enterprise Console Integration ����� �

� � �� Tivoli Enterprise Console ���� ��� � ����

� 3 � �� 41

Page 54: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

Tivoli Access Manager for Operating Systems Enterprise Console Integration

����� �� ���� ������� ��, 44 ���� �Tivoli Access

Manager for Operating Systems Enterprise Console Integration �������

������.

� ����� �����, Tivoli Access Manager for Operating Systems Enterprise

Console Integration� ���� �� Tivoli Enterprise Console� ���� ���.

Tivoli Enterprise Console� ��� ��� ��, Tivoli Access Manager for Operating

Systems Enterprise Console Integration� �� ���� ���.

Tivoli Access Manager for Operating Systems Enterprise Console Integration �

��� Tivoli Access Manager for Operating Systems ����� �� ����

� �� �� � ��� TMR(Tivoli Management Region) �� � Tivoli

Enterprise Console ��� ���� �� �� ���.

TMR(Tivoli Management Region) ��� Tivoli Enterprise Console ��� ���

��� � ��� ��� ���� �����. ������ Tivoli Access Manager

for Operating Systems ����� �� ��� �����.

Tivoli Enterprise Console ��� ���� Tivoli Enterprise Console� Tivoli Access

Manager for Operating Systems ���� ��� ��� � ��� ���� �

�� ��� �����. ��� �� ���� PDOS-ACPROF ��

PDOS-RISKMGR-ACPROF� ���� ���� �� � tecad_logfile_pdos ��

tecad_logfile_pdos_riskmgr ���� � ����� �� � ����� ��

�� ���� �����. Tivoli Enterprise Console ��� �� �� � ��� �

� �� ��� �� �� ��� Tivoli Enterprise Console �� ���� ��

����.

�: ���� �� Tivoli Enterprise Console �� �� ���� ���� ���.

�� ��� IBM Tivoli Access Manager for Operating Systems �� ��

�� ������.

����

Tivoli Access Manager for Operating Systems Enterprise Console Integration, �

� 5.1� ����� TMR(Tivoli Management Region) ��, Tivoli Enterprise Console

��� �� � ������� �� �� �����.

1. ���� ���� �� → �� �� �� ��� �� �� ��� ����

��.

2. ��� �� �� ��� ���� Tivoli Access Manager for Operating Systems

Console Integration, Version 5.1� ������.

42 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 55: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

3. ��� ��� �� �� � ��� ������. � ���� TMR(Tivoli

Management Region) ��, Tivoli Enterprise Console ��� �� � Tivoli

Access Manager for Operating Systems ����� �� ����� ��� �

� �� �� ��� � �� ���. �� ���� ��� ����� ���

��� �����.

4. �� �� �� �� ��� ������. �� ����� �� �� ��� �

������.

� ��� �� ���� �� ���� �� ��� �����. ��� ����

�� ���� �� ��� ���� �����.

5. �� �� �� �� �� ����� ���� �� �� �� ��� ����

��. �� �� �� ��� �� � �� �� ��� �����.

��� �� � �� �� ��� �� ���� �����.

6. �� �� �� ��� �����.

��

�� ��� ��� Tivoli Access Manager for Operating Systems Enterprise

Console Integration, �� 5.1� ������.

winstall -c /cdrom -s monterey -i PDOSTEC.IND

��

-c /cdrom �� CD� �� ��� �����.

-s monterey ����� ��� �� ��� �����. � ���� �� ���

monterey���.

-i PDOSTEC.IND

� ��� �� � � ��� �����.

�: pdostecd � ���� ��� �� ��� IBM Tivoli Access Manager for

Operating Systems �� ���� ������.

IBM Tivoli Access Manager for Operating Systems �� ��� �

���

�� Tivoli ���� Tivoli Access Manager for Operating Systems� ���

� �� ��, TMR(Tivoli Management Region) ���� Tivoli Access Manager

for Operating Systems �� ���� ������� ���.

����

AMOS �� ���� �������� �� �� �����.

1. ���� ���� �� → �� �� �� ��� �� �� ��� ����

��.

� 3 � �� 43

Page 56: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

2. ��� �� �� ��� ���� Tivoli Access Manager for Operating Systems

Management Tasks, Version 5.1� ������ ������.

3. ��� ��� �� �� � ��� ������. ��� TMR(Tivoli

Management Region) ��� � �� ���. �� ���� ��� ����

� ��� ��� �����.

4. �� �� �� �� ��� ������. �� ����� �� �� ��� �

������.

� �� �� �� ���� �� ���� �� ��� �����. ��� �

��� �� ���� �� ��� ���� �����.

5. �� �� �� �� �� ����� ���� �� �� �� ��� ����

��. �� �� �� ��� �� � �� �� ��� �����.

��� �� � �� �� ��� �� ���� �����.

6. �� �� �� ��� �����.

��

�� �� ��� Tivoli Access Manager for Operating Systems �� ���� �

�������. wpatch ��� �� �� ��� Tivoli Management Framework

���� �����.

wpatch -c /cdrom -s colby -i PTASKU.IND

��

-c /cdrom �� CD� �� ��� �����.

-s colby ��� �� ��� ��� Tivoli region� �� ��� �����.

����, ��� ��� TMR(Tivoli Management Region) ��

�� �� �� �����. � ���� �� ��� colby���.

-i PTASKU.IND

� ��� �� � � ��� �����.

Tivoli Access Manager for Operating Systems EnterpriseConsole Integration ����

Tivoli Access Manager for Operating Systems Enterprise Console Integration, Version

5.1, ����� Tivoli Access Manager for Operating Systems ���� Tivoli

Enterprise Console� � � �� ��� �� �� ��� ���� �����.

�: Tivoli Enterprise Console� ��� �� �� �� �� � �� ����

� �����, Tivoli Enterprise Console ��� ������. Tivoli Access

Manager for Operating Systems Enterprise Console Integration ����� �

� � �� Tivoli Enterprise Console ���� ��� � ����.

44 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 57: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

Tivoli Access Manager for Operating Systems Enterprise Console Integration �

��� Tivoli Access Manager for Operating Systems ����� �� ����

� �� �� � ��� TMR(Tivoli Management Region) �� � Tivoli Enterprise

Console ��� ��� �� �� ���.

����

Tivoli Access Manager for Operating Systems Enterprise Console Integration� �

������� �� �� �����.

1. ���� ���� �� → �� �� �� ��� �� �� ��� ����

��.

2. ��� �� �� ��� ���� �� �� Tivoli Access Manager for

Operating Systems Console Integration, Upgrade to Version 5.1� ���

���.

3. ��� ��� �� �� � ��� ������. � ���� TMR(Tivoli

Management Region) ��, Tivoli Enterprise Console ��� �� � Tivoli

Access Manager for Operating Systems ����� �� ����� ��� �

� �� �� ��� � �� ���. �� ���� ��� ����� ���

��� �����.

4. �� �� �� �� ��� ������. �� ����� �� �� ��� �

������.

� �� �� �� ���� �� ���� �� ��� �����. ��� �

��� �� ���� �� ��� ���� �����.

5. �� �� �� �� �� ����� ���� �� �� �� ��� ����

��. �� �� ��� �� � �� �� ��� �����.

��� �� � �� �� ��� �� ���� �����.

6. �� �� �� ��� �����.

�: PDOSTECD � ���� ��� �� ��� IBM Tivoli Access Manager

for Operating Systems �� ���� ������.

��

�� ��� ��� Tivoli Access Manager for Operating Systems Enterprise

Console Integration� ���������.

wpatch -c /cdrom -s monterey -i PDTECU.IND

��

-c /cdrom �� CD� �� ��� �����.

-s monterey ����� ��� �� ��� �����. � ���� �� ���

monterey���.

� 3 � �� 45

Page 58: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

-i PDTECU.IND

� ��� �� � � ��� �����.

Tivoli Access Manager for Operating Systems Event Console Integration, Version

5.1� � ��� ���� � �� �� � BAROC ��� �����. Tivoli

Access Manager for Operating Systems Event Console Integration, Version 5.1

� ������ ��, �� �� �� �� 5.1�� � ���� ���� ��

�� ���� ���.

1. Setup TEC Event Server for PDOS ���� �� Tivoli Enterprise

Console ��� ��� �� � � ��� ������. �� � ��� �

�� ���� � � ��� �����, �� wrb -delrb rule_base_name �

�� ��� � ��� ����, �� �� ����� �� � �� �

���� ������. �� �����, � � ��� � ���� �����

�.

2. PDOS-ACPROF �� PDOS-RISKMGR-ACPROF� Tivoli Access Manager for

Operating Systems ����� �� �����.

�� �� ����� ��

Tivoli Access Manager for Operating Systems� �� ��� ������ ��, �

� �� �����.

1. ������� �� Tivoli Access Manager for Operating Systems �

� �� � �� � policy ��� �� ����� � ��, root� ���

� �� ��� ��� �� �� ���� ����.

pdoscfg -autostart on -login_policy on

2. pdostecd � ��� Tivoli Enterprise Console� ���� ��� ���

������� �� � � ���� ��� ��, �� ��� ��� �

� �� �� ���� ����.

pdosteccfg -autostart on

����� �� Tivoli Access Manager for Operating Systems policy� ���

�. �� Tivoli Access Manager for Operating Systems ���� ��� �� �

��� � policy ���� �� ���� ��� � ����� �� � policy�

��.

�� 3.8�� ������ ��, �� �� ����� Tivoli Access Manager for

Operating Systems, �� 4.1� �� ���� ������.

��� ����� Tivoli Access Manager for Operating Systems� ����� �

� ��� �� � ����. ����� ��� � �� ��� ���� ���.

46 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 59: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

�� 4.1�� �� 5.1� ������ ��, policy ����� �� �� � �� �

�� �����. � ���� policy ������ �� ��� ��� ��� Tivoli

Access Manager pdadmin �� ��� �� ����. ��� �� ���.

osseal.once-only.u5100

� Tivoli Access Manager policy �� ��� �� � � ���� �

� policy ����� �� ����.

osseal.per-policy.u5100

� policy ���� �� ���� �� policy ����� �� ����.

1. � �� ��� ��� ����� osseal.once-only.u5100,

osseal.per-policy.u5100 � /opt/pdos/etc ����� ��� ������.

Tivoli Access Manager for Operating Systems� �� ��� �� policy� �

��� ��� ����� ���� �� ��� �������. ��� �� policy

� ���� ��� ���.

�: Tivoli Security Manager� ��� Tivoli Access Manager for Operating

Systems �� policy� ���� Tivoli Access Manager for Operating

Systems, �� 4.1� �� � ��� � ��� ��� policy � �� ��

� ��� ��, ��� policy ������ ��� �� ����� � �

���� ���.

2. Tivoli Access Manager for Operating Systems �� 5.1� �� � ��� ��

��� pdos_defpolicy_update ���� �� Tivoli Access Manager policy

�� region� ��� �� ����� �� policy� ������.

pdos_defpolicy_update -f /opt/pdos/etc/osseal.once-only.u5100

Tivoli Access Manager �� ��� ��� ����� ����� �����.

3. pdos_defpolicy_update ���� �� � policy ���� ��� �� �

���� �� policy� ������.

pdos_defpolicy_update -f /opt/pdos/etc/osseal.per-policy.u5100 -branchbranch-name

�� branch-name� policy ���� �����. policy ���� �����

�� � ����� ���� ��� ��, -branch �� ��� ���

���. Tivoli Access Manager �� ��� ��� ����� ����� ��

���.

4. � Tivoli Access Manager policy �� region, �� policy ���� policy �

��� �� ����� �� policy� ��� �, �� ��� ��� Tivoli

Access Manager for Operating Systems� �� ������.

rc.osseal start

� 3 � �� 47

Page 60: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

�: ��� �� ��, �� Tivoli Access Manager for Operating Systems ��

� �� �� � ���, � ��� ���� �� ���� �� �� ���.

�� � �� �� ������ ���� � � Tivoli Access Manager for

Operating Systems ����� UNIX ��� � � ����� ��� �

�� ��� ���. ��� � ��� ��� � � ����� �� ���

�� �� � �� ��, ���� �� �� ��� Tivoli Access Manager for

Operating Systems� ����� �� ��� �����.

�� �� �� ���

IBM Tivoli Access Manager for Operating Systems� �� ��� �����.

v ��� �����

v ���

v � �

v ����

v ���

v �����

v ���

v ���

v ���

�� ��� Tivoli Access Manager for Operating Systems Language Support CD�

�� ����� �����. Tivoli Access Manager for Operating Systems� ��

�� ��� �����, �� �� ���� ���� ���. �� �� ���� �

��� ���, ��� ��� �� ���� ��� �����.

�� ��� �� � �� ��� ��� ������ ��, � �� �� ��

� ���� ���. ����� �� �� ��� ���� ���, ��� ��� �

� �� � ���� ��� ��� � ����.

Tivoli Access Manager for Operating Systems Framework �� ���� ���

��� �����, IBM Tivoli Access Manager for Operating Systems [xxxxxx] CD

��� � �� �� �� ������. �� �� ���� 40 ���� �Tivoli

Management Framework Integration ��� ���� ������. �� ��� �

� �� �� ��� �� �� � ��� ������.

48 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 61: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

InstallShield Multiplatform� ���� �� � ��

IBM Tivoli Access Manager for Operating Systems Language Support CD�� Tivoli

Access Manager for Operating Systems� �� � � ��� �� ��� ��

��� �� ����. �� �� ��� �� �� ��� InstallShield

Multiplatform�� ����.

1. IBM Tivoli Access Manager for Operating Systems Language Support CD�

� �����.

2. �� � ����� � � ��� ������. �� ��, �� ���.

cd /cdrom

3. �� � ����� AMOSNLS ����� ������.

cd AMOSNLS

4. �� ��� ������.

install_amos_lp

�� ���� � ��� Java(�� 1.3.1)� �� ��� �����. ��

��, �� ���� �����. ��� ���, � � ″�� �� ���� Java

��″� �� ����� �����.

�� �� ���� Java ��

�: �� �� ���� Tivoli Access Manager for Operating Systems � �

��� �� �� ��� � ����.

JRE � �� �� ���� ����� �� �� ������.

1. ��� �� ���� �� JRE� ������.

v AIX ����� �� �� �����.

a. ���� root� �������.

b. Tivoli Access Manager for Operating Systems Language Support CD�

� �����.

c. �� � ����� ���� ������.

/cdrom/usr/sys/inst.images

d. �� ����� �� ��� ������.

installp -c -a -g -X -d /dev/cd0 Java131.rte

v HP-UX ������ �� �� �����.

a. ���� root� �������.

b. Tivoli Access Manager for Operating Systems Language Support CD�

� �����.

c. �� � ����� ���� ������.

� 3 � �� 49

Page 62: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

/cdrom/hp

d. ��� ���� � ��� �� ��, pfs_mountd� pfsd� ��� �

�� �� ��� ��, pfs_mount ���� CD� � �����.

e. �� ��� ������.

swinstall -s /cd-rom/hp rte_13_13108_1100.depot B9789AA

�� /cd-rom/hp� �������.

v Linux on x86 ������ �� �� �����.

a. ���� root� �������.

b. IBM Tivoli Access Manager for Operating Systems Language Support

CD� � �����.

c. �� � ����� /cdrom/xSeries� ������.

d. �� ��� ������.

rpm -i IBMJava2-JRE-1.3.1-3.0.i386.rpm

v Linux for zSeries ������ �� �� �����.

a. ���� root� �������.

b. IBM Tivoli Access Manager for Operating Systems Language Support

CD� � �����.

c. �� � ����� /cdrom/zSeries� ������.

d. �� ��� ������.

rpm -i IBMJava2-JRE-1.3.1-3.0.s390.rpm

v Linux for i/pSeries ������ �� �� �����.

a. ���� root� �������.

b. IBM Tivoli Access Manager for Operating Systems Language Support

CD� � �����.

c. �� � ����� /cdrom/pSeries� ������.

d. �� ��� ������.

rpm -i IBMJava2-JRE-1.3.1-3.0.ppc.rpm

v Solaris ������ �� �� �����.

a. ���� root� �������.

b. IBM Tivoli Access Manager for Operating Systems Language Support

CD� � �����.

c. �� � ����� /cdrom/solaris� ������.

d. �� ��� ������.

pkgadd -d.SUNWj3rt

50 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 63: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

2. �� �� ��� ������. ����� ��� �� �� �� ����

�.

3. ��� ��� ����� ��� ��� ��� ������ ��� � ��

����. �� ��� ��� ��� �� �� �����.

4. ����� �� ���� ���� �� ����. ��� �� ���� ��

� ��� ��� �� �� �����.

5. ��� �� ���� ����� �� ����. ��� �� ���� ���

��.

6. ��� �� �� ���� �����.

Tivoli Access Manager for Operating Systems Framework �� �

�� �� �� �� ��� ��

Tivoli Access Manager for Operating Systems Framework �� ���� �� �

�� ����� Tivoli Access Manager for Operating Systems Language Support

CD��� � �� �� �� ������.

����

Tivoli Access Manager for Operating Systems Framework �� ��� �����

Tivoli Access Manager for Operating Systems �� �� CD��� � �� �

� �� ������.

1. �� ���� �� → �� �� �� ��� �� �� ��� ����

��.

2. ��� �� � ���� ��� �� �� Tivoli Access Manager for

Operating Systems Framework Support, Version 5.1� ������.

3. ��� ��� �� �� � ��� ������. ��� TMR(Tivoli

Management Region) ��� � �� ���. �� ���� ��� ����

� ��� �����.

4. ��� �� �� ��� ������. �� ����� �� �� ��� ���

����. � ��� �� ���� �� ���� �� ��� �����. ��

� ���� �� ���� �� ��� ���� �����.

5. �� ��� �� �� ����� ���� �� �� �� ��� ������.

�� �� �� ��� �� � �� �� ��� �����. ��� ��

� �� �� ��� �� ���� �����.

6. ��� �� ��� �����.

��

Tivoli Access Manager for Operating Systems Framework �� �� �� �� �

���� �� ��� ������.

� 3 � �� 51

Page 64: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

1. CD� ����.

2. �� � ����� ���� ������.

cd TASKNLS

3. ��� ������.

winstall -c /cdrom/TASKNLS -s monterey -i LANGPACK.IND

��

v -c /cdrom/TASKNLS� �� CD � ����� �� ��� �����.

v -s monterey� ����� �� � �� ��� �����. � ���� �

� ��� monterey���.

v -i LANGPACK.IND� � ��� �� � � ��� �����.

LANGPACK.IND �� ���� �� �� ������.

� 5. LANGPACK.IND �

�� LANGPACK.IND

��� AMOS_DE.IND

��� AMOS_ES.IND

���� AMOS_FR.IND

����� AMOS_IT.IND

��� AMOS_JA.IND

��� AMOS_KO.IND

��� ����� AMOS_PTB.IND

��� AMOS_ZHC.IND

� � AMOS_ZHT.IND

��� �� ��

�� � �� � ����� ��� ���� ��� ���� ��� ��� �

��. Tivoli Access Manager for Operating Systems ������ ��, LANG �

� ��� POSIX, X/Open �� �� �� ��� ��� ��� ��� ��� ��

�� �����.

�� ��� ��� ��� ��, �� �� ��� �� �� �� ��� ��� �

� LANG� �����. ��� ���� ��� � ���.

v LC_CTYPE

v LC_TIME

v LC_NUMERIC

v LC_MONETARY

v LC_COLLATE

v LC_MESSAGES

52 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 65: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

v LC_ALL

�� ��� �� � �� ��, ��� �� ���� LANG ��� �� ���

���� ���.

LANG ��

�� � UNIX ���� LANG ��� ��� ��� ���� �����. ��

� �� UNIX � ��� ��� �� ��� �� �� ��� ��� �����.

�� � � ��� ���� LANG� �� �� ���� ���.

�� ��� �� ��� ��� �� � ����.

locale -a

��� �� ��

Tivoli Access Manager for Operating Systems ������ �� � ��� ��

��� ��� �� ������, ��� ��� ��� ��� � ��, Tivoli

Access Manager for Operating Systems� � �� ��� ����. �� ��,

Tivoli Access Manager for Operating Systems� ����� �� ��� ��� �

��� , �� ��� ��� ��� � ��� ����.

v fr� �� ����� �� ��� �����.

v fr_FR� ���� ����� �� ��� �����.

v fr_CA� ���� ����� �� ��� �����.

v fr_CH� ���� ����� �� ��� �����.

��� ����

��� ����� ���� ��� �� /msg ����� �� � �� ��� �

��� ��� �� � �� �� ������ � � �����.

/opt/pdos/nls/msg/locale

Tivoli Access Manager for Operating Systems� ��� ���� ��� ���

� ��� �� � ��� ����� �� � ����.

NLSPATH ��� �� ��� ��� ��� �� � ��� ���� �����

�� �����. �� ��, ��� ����� /opt/pdos/nls/msg� �� ��,

NLSPATH ��� �� � �����.

/opt/pdos/nls/msg/%L/%N.cat

%L ���� �� �� �� ����� �� ��� ���� ��� ���� �

���� �� � %N.cat� ��� ��� ����� �����.

��� ��� �� ��� ����� �� � � ��, �� C ��� �����

�����.

� 3 � �� 53

Page 66: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

�� ��, ���� ���� �� AIX ���� ����� ��� ����.

LANG=De_CH.IBM-850

%L ���� ��� ���� �� �� �� ��� �����.

1. de_CH

2. de

3. C

Tivoli Access Manager for Operating Systems� ���� ��� �� ���� �

��� ����, de_CH� �� � ���. Tivoli Access Manager for Operating

Systems ��� �� ���� ��� ��, de� �����. ��� �� ��, ��

��� C� �� �, ���� ��� �����.

��� ���(�� ��) ��

�� � ��� ���� �� ���� ����. �� ��, PC � �

�� ��� ���� �� SJIS(�� ��� 932)� ���� , UXIX � ���

eucJP� �����.

�� �� ���� ��� ��� �� �� ��� ���� ��� ��� �� �

� �� �� ��� ��� � ����. �� ���� ����� �����, ��

�� ��� �� ��� ��� � ��� ��� � ����.

Tivoli Access Manager for Operating Systems� ���� � UTF-8(����� �

� �� ��)� ���� �� �� �� ���� ��� ��� ��� ��

���.

��� ����� UTF-8� ��� � �, ���� ���� �� � ��

��� ��� �����. ��� ����, ��� ���� ��� ���� �

�� �� Latin 1 �� ��(�: ISO8859-1, Microsoft 1252, IBM PC 850 �

IBM MVS™ 1047) ��� ��� � ����.

�� �� ��� �

�� ��� � �� ��� UTF-8 �� � �� � �� ��� �� ��

�� �� � �� �� ��� �� �����. ��� ��� base_dir/opt/

PolicyDirector/nls/TIS ������� �����.

54 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 67: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

� 4 � ��

� ���� AIX, HP-UX, Solaris � Linux�� IBM Tivoli Access Manager for

Operating Systems� ���� ��� �� �����.

�� ��� ��� ��� ��, ��� �� � �� ��� �� Tivoli Access

Manager for Operating Systems� ���� ���. InstallShield Multiplatform�

�� � ��� ��� ��� ��, Tivoli Access Manager for Operating Systems�

��� �� � �� , �� ��� ��� �� ��� ��� ���� ���.

�� ��� pdoscfg���. �� �� �� ����, ���� ������. � �

�� �� ����� �� Tivoli Access Manager for Operating Systems� ��

���� �� �� �� �� �� ��� ���� �����.

�� � ��� � ����.

v Tivoli Access Manager for Operating Systems �� ��

v Tivoli Access Manager for Operating Systems �� �� � ��

v �� �

v ���� ��

v �� ��� ��� ��

�� ��

����� Tivoli Access Manager for Operating Systems� ���� ��� �

�, �� policy� ���� �� �� policy ��� �� � ��� � ���

�� �� �� ��� �� ��� ���� ���. �� policy� ��� �

�� ����, �� �� �� ��� Tivoli Access Manager �� ��

��� �� ���� � � ��� ���� ���. �� ��� Tivoli Access

Manager for Operating Systems �� ���� ������.

Tivoli Access Manager for Operating Systems� ���� ��, �� ��� �

� ��� ��� �� ���� �� �� ��� ��� ��� ���.

v Tivoli Access Manager policy ��, �� 5.1� LDAP �� ������ �

���� �� � ��� ���.

v Tivoli Access Manager policy �� � LDAP �� ������ � ���

� ���.

© Copyright IBM Corp. 2000, 2003 55

Page 68: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

v Tivoli Access Manager Runtime Environment� Tivoli Access Manager for

Operating Systems� ��� ��� ��� ���� �� � �� � ��� �

��.

v LDAP �� ����� base64� ��� LDAP SSL CA � ��� ���

��� ���.

�: install_ldaps ���� ��� LDAP ��� ���� ����� Tivoli

Access Manager� ���� �� LDAP SSL CA � ��� ����� �

�� ��, LDAP ����� /etc/gsk/pd_ldapcert.arm ��� ���

Tivoli Access Manager for Operating Systems �� �� � ��� ���

� ���.

v LDAP �� ����� ���� ��� ���.

v �� � policy ���� ��� ��� ���.

v �� � ��� ��� ��� ���.

v �� � ��� �� �� � �� ��� ��� ���. � ID � ��

� Tivoli Access Manager �� ��� ID � ��� ���.

�� �� �� � ��� � �� �� ��� ��� �� ��� ��

�� ��� �� �� ���� ���� ���.

�� �� �� ���� ���� ���. ��� �� �� �� �� ��

�.

v branch

v suffix

v ldap_ssl_cacert

v local_domain

v admin_name

v admin_pwd

�: ��� sec_master ��� ID� ���� ��� � ����, � ID�

svrsslcfg� ��� ��� ����, osseal.once-only, osseal.per-policy,

osseal.per-machine policy ����� ��� policy� ���� �� �

� Tivoli Access Manager �� ��� ��� ��� ��� ���. �� �

��� �� Tivoli Access Manager �� ��� ���� �� ��� ����

�. �� �� ACL� ��� �� �� � ��, ��� � ACL� ��

�� ���. ��� ��� �� ��� ��� Tivoli Access Manager for

Operating Systems �� � �� ��� ��� � ����. �� ��, �� �

� ��� svrsslcfg� ��� ��� � � �� policy ���� policy� �

��� �� ��� � ��� �����. �� ��� ��� svrsslcfg� �

56 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 69: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

��, osseal.per-policy � osseal.per-machine policy ���� policy

� ��� ���. � ��� ��� svrsslcfg � osseal.per-machinee policy

��� ��� �� �� � ��� ���. ���� Tivoli Access Manager

for Operating Systems� ���� �� ��� �� � �� , �� ����

�� ��� ��� ����.

��� �� Tivoli Access Manager ��� ACL� ��� ��� �� � �

���. ��� ���� ��, ��� ACL � ��� ��� �� ��� ���

��. ��� Tivoli Access Manager for Operating Systems � �����

��� ��, ��� ���� � �����. Tivoli Access Manager for

Operating Systems, �� 5.1� �� ��� ���� ��� � �� ID� �

�� � ���� �� ��� ��� ���.

� 6. ��� ACL ��

���� �� �� ACL

��

/ ���� ��� � � ��-�� Tam

/Management pdoscfg� ��� �� ����� �� �

��� ����� �� , �� �����

���� ACL� �� ����.

�� ��

/Management/ACL ACL ��� �����. �����, ��-

�� ACL��� �����.

��-�� Tamv

/Management/Action �� ��� �����. �����, ��-

�� ACL��� �����.

��-�� Tcv

/Management/Config ����� ����� svrsslcfg� ���

�� ��� �����. �� ACL� ��

��.

��-�� Tacmv

/Management/Groups �� ��, �� � ��� �� ��� �

����. �����, ��-�� ACL���

�����.

��-�� TdmnVa

/Management/POP POP�� ��� �� ��� �����. �

����, ��-�� ACL��� �����.

��-�� TadmvB

/Management/Policy policy ��� ���� ���� �� ��

�� �����. ��-policy ACL�� �

�� ���� ����.

/Management/Replica ��� ����� �� ��� � ��

���� �� ��� �����. ��-��

� ACL�� ��� ���� ����.

/Management/Server pdadmin �� ��� �� ���� ���

��. ��-����� �����. �� �

�� ���� ����.

/Management/Users �� ����� ���� �� ��� �

����. ��-����� �����.

��-�� TdmNvW

�� ��� ��-�� ACL ����. ��� ��� �� � ����� �� �����.

� 4 � �� 57

Page 70: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

Tivoli Access Manager �� �� � ��� ����� ����� �����.

Tivoli Access Manager for Operating Systems� ��� �� �� ���� ��

�. �� �� ��� 73 ���� � 6 � ��� � ���� ������.

�� �� �� ��

Tivoli Access Manager for Operating Systems �� �� �� pdoscfg �� �

� � �����.

-branch, -suffix, -local_domain, -admin_name � -admin_pwd �� �� �

����, �� Tivoli Access Manager for Operating Systems� �� ��� � �

� ��� �� ��� ���. -ssl_listening_port � -ldap_ssl_cacert �� �

� �����, �� ��� ��� �� Tivoli Access Manager for Operating

Systems� ����� ���.

58 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 71: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

pdoscfg| [-admin_cred_refresh number_of_minutes]| [-admin_name user_admin_name]| [-admin_pwd user_admin_password]| [-audit_deny_actions (osseal action_group | osseal action bits)]| [-audit_level (all | none | permit | deny | loginpermit || logindeny | admin | verbose | info || trace_exec | trace_file | trace_exec_l | trace_exec_root)]| [-audit_logflush number_of_seconds]| [-audit_log_size number_of_bytes]| [-audit_permit_actions (osseal action_group | osseal action bits)]| [-autostart (on | off)]| -branch policy_branch_name| [-cred_hold number_of_minutes]| [-cred_response_wait number_of_minutes]| [-critical_cred_group critical_cred_group_name]| [-critical_cred_refresh number_of_minutes]| [-delete (comma_delimited_list_of_options)]| [-dns (on | off)]| [-ffdc_capture (on | off)]| [-help]

| [-hostname hostname]| [-kmsg_hnd_threads number_of_threads]| -ldap_ssl_cacert ldap_certificate_file_name| [-local_domain domain-name]| [-lrd_config (on | off)| [-lrd_admin_name user_admin_name]| [-lrd_admin_pwd user_admin_password]| [-lrd_local_domain domain_name]| [-login_policy (on | off)]| [-net_ACL_limited (on | off)| [-operations]

| [-pdosauditd_log_entries number_of_log_entries| [-pdosauditd_logs number_of_logs| [-pdosd_init_wait time_in_minutes]| [-pdosd_log_entries number_of_log_entries]| [-pdosd_logs number_of_logs]| [-pdoslrd_log_entries number_of_log_entries| [-pdoslrd_logs number_of_logs| [-pdoswdd_log_entries number_of_log_entries]| [-pdoswdd_logs number_of_logs]| [-refresh_interval number_of_minutes]| [-rspfile file_name]| [-ssl_listening_port port_to_listen_for_notification]| -suffix policy_director_suffix| [-tcb_ignore_ctime (on | off)]| [-tcb_interval number_of_seconds]| [-tcb_max_file_size number_of_megabytes]| [-tcb_monitor_threads number_of_threads]| [-tcb_nocrc_on_exec (on | off)]| [-uid (on | off)]| [-usage]

| [-user_cred_refresh number_of_minutes]| [-version]

| [-warning (on | off)]| [-?]

�� 12. pdoscfg ��

� 4 � �� 59

Page 72: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

�� ��

� ��� �� ��� �� �� �����. � �� �� � ���� ���

��(�� ��� ��). ��� � ���� �� ��� 91 ���� �� A ���

��� ����.

-admin_cred_refresh

��� �� �� ��( )� �� �����.

��: 360

-admin_name

Tivoli Access Manager �� ��

��: sec_master

-admin_pwd

Tivoli Access Manager �� ��. -admin_name ���

-sec_master_pwd �� ���.

-audit_deny_actions

��� osseal �� �� ��� �� �� osseal �� � [OSSEAL]. �

� osseal ��� DKNRUdloprwxCGL���.

��: none

-audit_level

�� ��� ��� �� � ���. ��� all, none, permit, deny,

loginpermit, logindeny, admin, verbose, info, trace_exec, trace_exec_l,

trace_exec_root �� trace_file���.

��: none

-audit_logflush

pdosauditd � � �� ��� �� ���� ����� ��(�)

��: 5

-audit_log_size

pdosauditd� � � �� ��� ���� �� ����� ��� � �

� ��� ��� � �� �� ��(��)

��: 1000000

-audit_permit_actions

��� osseal �� �� ��� �� �� osseal �� � [OSSEAL]. �

� osseal ��� DKNRUdloprwxCGL���.

��: none

60 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 73: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

-autostart

��� �� � Tivoli Access Manager for Operating Systems� ���

�����.

��: on

-branch

� ���� ��� policy ��� ��

-cred_hold

��� �� ��� ��� � �� � �� ��( ).

-admin_cred_refresh � � -user_cred_refresh ��� ��� �� �

��.

��: 10080

-cred_response_wait

� ��� ���� �� �� �� ��� �� ��� ���� �� ��

��: 2

-critical_cred_group

���� �� ��� �� �� ���� �� �� ���� �� ��� �

�� ���� � � Tivoli Access Manager �� ��

-critical_cred_refresh

-critical_cred_group �� ��� �� �� ��( )

��: 720

-delete

�� ���� ��� �� ��� �� � ���. �� � �� �

� ���.

v admin_cred_refresh

v audit_level

v audit_log_entries

v audit_logs

v audit_logflush

v audit_log_size

v audit_deny_actions

v audit_permit_actions

v cred_hold

v cred_response_wait

v critical_cred_group

v critical_cred_refresh

� 4 � �� 61

Page 74: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

v dns

v ffdc_capture

v kmsg_hnd_threads

v pdosd_log_entries

v pdosd_logs

v pdoswdd_log_entries

v pdoswdd_logs

v refresh_interval

v tcb_ignore_ctime

v tcb_interval

v tcb_max_file_size

v tcb_monitor_threads

v tcb_nocrc_on_exec

v uid

v user_cred_refresh

v warning

-dns Tivoli Access Manager for Operating Systems� IP ��� �� �� �

��� ��� � ��� ���.

��: on

-ffdc_capture

�� Tivoli Access Manager for Operating Systems � ��� � �

�� �� ��� �� �� ���� ���.

��: on

-help �� �� �� ���� �����. � �� �� ���� �����

-help -option� ������.

-hostname

� ���� ��� �� Tivoli Access Manager ��� ��� ��� �

�. �� �� � �� ��, ���� � ��� ��� �� ��� �

����.

-kmsg_hnd_threads

�� ��� ���� �� � ��� �. � ��� ���.

����� 9� ��� ����� ����� � �� ����� �� �

�� �� � ��� ��� ��� ���� � ����. ���� ���

� �� � � �� 8 ��� � �� ������. �� �� � �� �

�� �� 24���.

62 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 75: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

��: 8

-ldap_ssl_cacert

Tivoli Access Manager �� ������ � �� LDAP ��� CA

��. � ��� Tivoli Access Manager for Operating Systems� LDAP

�� ��� ���� �� �� �����.

install_ldaps ���� ��� LDAP ��� ���� ����� Tivoli

Access Manager ����� /etc/gsk/pd_ldapcert.arm ��� ���

Tivoli Access Manager for Operating Systems �� �� � ��� ��

�� ���.

-local_domain

pdosd � ��� Tivoli Access Manager �� ��. � �� ��

� ���, �� ��� Tivoli Access Manager ��� ��� ����

�� ���� ���� ���.(Tivoli Access Manager ���� ��� �

��� �� � ���, �� ��� ��(��) ���� ���� �

��.)

Tivoli Access Manager �� ��� ���� �� -admin_name �

-admin_pwd � � ��� �� �� � ��� � ��� �� �

��� ���.

-login_policy

��� �� � �� ����� �� ���� ���.

�� policy� �� ���� � �, � ���� ���� ��� ��

�� � policy� ��� ���� � � � � �� ���(�:

dtlogin)� �� ���� ���. � � �� ���� �� ��� �

�� � policy� �� �����.

��: on

-lrd_admin_name

pdoslrd � Tivoli Access Manager policy ���� ��� � ���

Tivoli Access Manager �� ��� �����.

-lrd_admin_pwd

pdoslrd � Tivoli Access Manager policy ���� ��� � ���

Tivoli Access Manager �� ��� �����.

-lrd_config

pdoslrd � �� �� �� �����.

��: off

-lrd_local_domain

pdoslrd � ����� ��� Tivoli Access Manager �� ��.

� 4 � �� 63

Page 76: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

pdoslrd � �� ��� ���� Tivoli Access Manager �� ��

(pdacld)� �� ��� ��� �����, pdoslrd � pdacld

� ����� �� � ��� �� ���� �� �� ���.

Tivoli Access Manager policy ��� �� �� ��� ���� ���

�, �� pdoslrd � pdosd �� �� ���� �� �� �

�� � ��� � ����. � �� �� � ���, �� ���

pdosd ��� ���� �� ���� ���� ���.

� Tivoli Access Manager �� ��� ���� �� -lrd_admin_name

� -lrd_admin_pwd � � ��� �� �� � ��� � ���

�� ���� ���.

-net_ACL_limited

���� ��� ��� policy �� ��� /OSSEAL/branch/NetIncoming

� /OSSEAL/branch/NetOutgoing ��� �� � ��� ��� ACL�

���� �� �����. policy �� ��� ��� ���� policy� �

�� ��� � ��, ACL ��� ���� ���� ��� ��� ��

� �����.

��: off

-operations

�� � �� �����.

-pdosauditd_log_entries

pdosauditd �� ��� ���� �� ��� pdosauditd �� �� �.

0� ���� ��� ��� �� �� � �� pdosauditd �� ��� �

��� � ���� � �����. -pdosauditd_log_entries� 0� ��

� -pdosauditd_logs� 0� �� ��, pdosauditd �� ��� � ���

�� �� -pdosauditd_log_entries� ��� �� �� ��� � ��

pdosauditd � �� ��� � �������. -pdosauditd_log_entries

� 0� ��� -pdosauditd_logs� 0 ��, pdosauditd �� ��� � �

�� �� �� -pdosauditd_log_entries� ��� �� �� ��� � �

� pdosauditd � �� ��� � ������.

��: 0

-pdosauditd_logs

pdosaditd � �� ��� ����� �� ��� pdosauditd � ��

�� �. pdosauditd ���� �� ��� �� 0� �� ��� ����

-pdosauditd_log_entries� 0� �� ��� ��� ����. pdosauditd

�� ��� � ��� �� �� -pdosauditd_log_entries� ��� �� �

� ��� � �� pdosauditd � �� ��� � �������. 0�

���� pdosauditd �� ��� ������ ���� � �����.

64 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 77: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

��: 0

-pdosd_init_wait

���� ���� policy ��� �� ���� �� �� ��� � pdosd

� �� � ��� �� ��( )

��: 5

-pdosd_log_entries

pdosd �� ��� ���� �� ��� pdosd �� �� �. 0� ���

� ��� ��� �� �� � �� pdosd �� ��� ���� � ��

�� � �����. -pdosd_log_entries� 0� ��� -pdosd_logs� 0�

�� ��, pdosd �� ��� � ��� �� �� -pdosd_log_entries� �

�� �� �� ��� � �� pdosd � �� ��� � ������

�. -pdosd_log_entries� 0� ��� -pdosd_logs� 0 ��, pdosd ��

��� � ��� �� �� -pdosd_log_entries� ��� �� �� ���

� �� pdosd � �� ��� � ������.

��: 0

-pdosd_logs

pdosd � �� ��� ����� �� ��� pdoswdd � �� ��

�. pdosd ���� �� ��� �� 0� �� ��� ����

-pdosd_log_entries� 0� �� ��� ��� ����. pdosd �� ��

� � ��� �� �� -pdosd_log_entries� ��� �� �� ��� �

�� pdosd � �� ��� � �������. 0� ���� pdosd �

� ��� ������ ���� � �����.

��: 0

-pdoslrd_log_entries

pdoslrd �� ��� ���� �� ��� pdoslrd �� �� �. 0� �

��� ��� ��� �� �� � �� pdoslrd �� ��� ���� �

���� � �����. -pdoslrd_log_entries� 0� ��� -pdoslrd_logs

� 0� �� ��, pdoslrd �� ��� � ��� �� ��

-pdoslrd_log_entries� ��� �� �� ��� � �� pdoslrd � �

� ��� � �������. -pdoslrd_log_entries� 0� ���

-pdoslrd_logs� 0 ��, pdoslrd �� ��� � ��� �� ��

-pdoslrd_log_entries� ��� �� �� ��� � �� pdoslrd � �

� ��� � ������.

��: 0

-pdoslrd_logs

pdoslrd � �� ��� ����� �� ��� pdoslrd � �� ��

�. pdoslrd ���� �� ��� �� 0� �� ��� ����

� 4 � �� 65

Page 78: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

-pdoslrd_log_entries� 0� �� ��� ��� ����. pdoslrd �� �

�� � ��� �� �� -pdoslrd_log_entries� ��� �� �� ���

� �� pdoslrd � �� ��� � �������. 0� ���� pdoslrd

�� ��� ������ ���� � �����.

��: 0

-pdoswdd_log_entries

pdoswdd �� ��� ���� �� ��� pdoswdd �� �� �. 0�

���� ��� ��� �� �� � �� pdoswdd �� ��� ����

� ���� � �����. -pdoswdd_log_entries� 0� ���

-pdoswdd_logs� 0� �� ��, pdoswdd �� ��� � ��� �� �

� -pdoswdd_log_entries� ��� �� �� ��� � �� pdoswdd

� �� ��� � �������. -pdoswdd_log_entries� 0� ���

-pdoswdd_logs� 0 ��, pdoswdd �� ��� � ��� �� ��

-pdoswdd_log_entries� ��� �� �� ��� � �� pdoswdd �

�� ��� � ������.

��: 0

-pdoswdd_logs

pdoswdd � �� ��� ����� �� ��� pdoswdd � �� �

� �. pdoswdd ���� �� ��� �� 0� �� ��� ����

-pdoswdd_log_entries� 0� �� ��� ��� ����. pdoswdd �

� ��� � ��� �� �� -pdoswdd_log_entries� ��� �� �� �

�� � �� pdoswdd � �� ��� � �������. 0� ����

pdoswdd �� ��� ������ ���� � �����.

��: 0

-refresh_interval

Tivoli Access Manager policy ��� �� �� ��� ����� ���

� ��� ��, policy ����� �� �� � ��( ). � 0� policy

� � � � � � � � � � � � � � � � � � � � � � � � � .

-ssl_listening_port� �� ����.

��: 0

-rspfile

��� �� � �� � �� ��� ��

-ssl_listening_port

policy ���� �� �� �� �� ��. � 0� policy ��

�� ����� �� �� �� � ��� �����. -refresh_interval

�� ����.

��: 7134

66 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 79: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

-suffix �� �� Tivoli Access Manager for Operating Systems� ��� Tivoli

Access Manager �� � �� �� �� ���� �� LDAP ���.

�� ��, ���� ou=austin,o=ibm,c=us���. ���� ��� �� ��,

���(″″)� �����.

-tcb_ignore_ctime

TCB(Trusted Computing Base) �� �� �� � ctime� ����.

� �� ����, ctime� �� �� TCB �� �� ��� � ��

�.

��: off

-tcb_interval

�� TCB ��� �� ����� �� � � ��� ��(�). ����

� � ��� �� ����(�����) ����.

��: 1800

-tcb_max_file_size

���� �� �� ���� �� � ��� �� MB �. � � �

�� �� ����� ����.

��: 10

-tcb_monitor_threads

����� �� TCB ��� ����� �� � ��� �. � �� 1

�� �� ���� ����� ����� �����. � ��� �

��.

��: 1

-tcb_nocrc_on_exec

TCB� ��� � �� � ��� �� �� ���� ����� �

��� CRC(Cyclec Redundancy Check) �� ����� ���� �

��. � �� ���� ��� � 2 ��� �� CRC �� � �

�� ���.

��: off

-uid UID/GID� ��/� �� � ��� ��� � �� ���.

��: off

-usage �� ���� �� ���� �����.

-user_cred_refresh

��� �� �� ��( )� �� �����.

��: 720

� 4 � �� 67

Page 80: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

-version

pdoscfg �� ��� �����.

-warning

��� �� �� ��� �� ���� ���.

��: off

-? �� ���� �� ���� �����.

����� ��

���� Tivoli Access Manager for Operating Systems� �� ��� ��, �

� ��� ������.

pdoscfg -ldap_ssl_cacert /tmp/ldapcacert.b64 \-branch policy_branch_name \-suffix o=tivoli \-local_domain \-admin-name admin\-admin-pwd admin-pwd

�� � ���� ��

Tivoli Access Manager for Operating Systems� �� ��� ��� ��� �

����. �� ���� � ���� ���� ��� �� ����. �� ��

� ���� ���� ��� ��� ��� ���� �� ����� ��� �

����. ����� �� ����� ��, ��� � �� �� �� ��

��� � �� � �� ��� ��� � ����. �� ��, ��� �� �

��� ��� � ����. ��� ��� �� �� ��� ��� �� ��

���.

�� ��� � ��� �� � ��� �� ����. �� ���� ���� �

�� �� �� ����� �����.

� �� ��

�� �� ��� �� �� �� ���. �� ���� ��=� ��� � ��

� ����. ��� ���� � �� �� ��� � �� ��� ���

��� �� ���� � �� ��� �� ���� ��� �, �� ��

�� ��� � ����. � ���� 0� ��� ��=� �� ����. ��

��� �� ���� � � �� �� � ���. ��� �� # �� ���

�� ��� ��� � ����.

��� �� ��� �����.

68 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 81: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

[policy]#Information about the policy.branch=policy_name[ldap]ssl-certificate=/tmp/ldapcacert.b64[credentials]admin-cred-refresh=30[pdoscfg]sec-master-pwd=cGo0sutbnielrsuffix=o=tivoli[ssl]ssl-listening-port=888

���� �� �� �� [policy], [ldap], [credentials], [pdoscfg] �

[ssl]���. policy ���� ��=� � branch=policy_name� ����. ldap

���� ��=� � ssl-certificate=/tmp/ldapcacert.b64� ����.

credentials ���� ��=� � admin-cred-refresh=30� ����. pdoscfg

���� ��=� � sec-master-pwd=cGo0sutbnielr � suffix=o=tivoli�

����. ssl ���� ��=� � ssl-listening-port=888� ����. ��

�� ���� �� � ��� ��� ����.

#Information about the policy.

�� ��� �� ��� ��� ��� ��� ��� �� ����. ���� �

� ��� /opt/pdos/etc ����� ��� osseal.conf , pdosd.conf,

pdosauditd.conf � pdoswdd.conf� � ���.

� �� ��

�� ��� ��� IBM Tivoli Access Manager for Operating Systems� ��

���, pdoscfg �� -rspfile � �� ��� �� �� ��� ������.

�� ��, �� ���.

pdoscfg -rspfile /opt/pdos/etc/config.rsp

�� ��� ��� ����� �� ��� �� ��� �����, pdoscfg ��

-rspfile � �� ��� �� ��� ���� ����� ��� ����� �

��� �� �� ������. �� ��, �� ���.

pdoscfg -rspfile /opt/pdos/etc/config.rsp \-uid off \-audit_level all

� ��� ��� �� �� ��

�� ���� ��=� � ��� � �� ��� ����. �� � ��� �

� �� ��� �� �� �� ����.

� 4 � �� 69

Page 82: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

� 7. pdoscfg �� � � ��

�� �� ��

[audit] level -audit_level

[authorization] warning -warning

[cache] dns -dns

uid -uid

[credentials] admin-cred-refresh -admin_cred_refresh

cred-hold -cred_hold

user-cred-refresh -user_cred_refresh

cred-response-wait -cred_response_wait

critical-cred-group -critical_cred_group

critical-cred-refresh -critical_cred_refresh

[ldap] ssl-certificate -ldap_ssl_cacert

[pdosauditd] log-entries -pdosauditd_log_entries

audit-logflush -audit_logflush

logs -pdosauditd_logs

audit-logsize -audit_log_size

[pdoscfg] sec-master-pwd -sec_master_pwd

delete -delete

suffix -suffix

autostart -autostart

login-policy -login_policy

net-ACL-limited -net_ACL_limited

[pdosd] kmsg-handler-threads -kmsg_hnd_threads

log-entries -pdosd_log_entries

logs -pdosd_logs

init-wait-minutes -pdosd_init_wait

[pdoslrd] log-entries -pdoslrd_log_entries

logs -pdoslrd_logs

[pdoswdd] log-entries -pdoswdd_log_entries

logs -pdoswdd_logs

[policy] branch -branch

refresh-interval -refresh_interval

[ssl] ssl-listening-port -ssl_listening_port

[tcb] ignore-ctime -tcb_ignore_ctime

interval -tcb_interval

max-checksum-file-size -tcb_max_file_size

monitor-threads -tcb_monitor_threads

nocrc-on-exec -tcb_nocrc_on_exec

[ffdc] capture -ffdc_capture

70 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 83: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

� 5 � pdostecd �� �� � �� ��

� ���� AIX, HP-UX, Solaris � Linux�� pdostecd � ���� �� �

��� ��� �� �� �����.

pdostecd ��

Tivoli Access Manager for Operating Systems� Enterprise Console Integration �

���� ���� � ��� pdostecd � ������.

�� � ��� �� �� � ��� ��� �� pdostecd � ���� ���.

v Tivoli ���� Tivoli Access Manager for Operating Systems Enterprise

Console Integration ����� ��� ��

v � ���� ���� Tivoli Access Manager for Operating Systems� ��� �

�, �� 3.7-SEC-0003 ��� ��� ��� �� ���� ������ �� �

pdostecd �� ��� pdosteccfg���.

pdostecd , pdosteccfg ��� �� �� � IBM Tivoli Access Manager for

Operating Systems� Tivoli Enterprise Console � Tivoli Risk Manager� ��

�� ����� IBM Tivoli Access Manager for Operating Systems �� ���

� ������.

�� ��

pdostecd � �� ��� ��� Tivoli Enterprise Console �� Tivoli Risk

Manager�� �� �� � �� � Tivoli Access Manager ACL ���

�� �� policy� �����.

pdostecd � ��� ���� ��� ����� Tivoli Access Manager ��

��� ��� ���. �� ��� off� ��� � � �� ��� ����

���.

����� ��

pdostecd � ��� �� � ��� �����, root� ���� �� ��

� ���� ���.

pdosteccfg -autostart off -admin_name admin_name -admin_pwd admin_password

© Copyright IBM Corp. 2000, 2003 71

Page 84: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

�: �����, pdostecd� Tivoli Access Manager for Operating Systems� ��

� � autostart� off� �� � �����.

pdostecd �� ��

pdostecd �� �� ��� pdostecucfg���. Tivoli Access Manager for

Operating Systems� �� ���� �� pdostecd � �� ���� ���.

pdostecucfg ��, pdostecd � IBM Tivoli Access Manager for Operating

Systems� Tivoli Enterprise Console � Tivoli Risk Manager� �� �� �

� ��� IBM Tivoli Access Manager for Operating Systems �� ���� ��

����.

����� �� ��

pdostecd � �� �� policy� �� ���� �� �� ���� � �

��� ����� pdostecd � �� ����� �� ��� ������.

pdostecucfg -admin_name admin_name -admin_pwd admin_password

� ����� pdostecd � �� ���� Tivoli Access Manager ACL ��

��� ��� pdostecd � �� �� �� policy� ����� �� ���

������.

pdostecucfg -remove_per_policy on -admin_name admin_name -admin_pwd admin_password

72 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 85: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

� 6 � �� � ��

� ���� Tivoli Access Manager for Operating Systems� ���� �����

��� �� �����.

�: Tivoli Access Manager for Operating Systems ��� �� � � ��� �

� ��� ��� �� � ����.

Tivoli Access Manager for Operating Systems ��

���� ���� Tivoli Access Manager for Operating Systems� �����

� ��� ��� � ����.

��

Tivoli Access Manager for Operating Systems� ����� ��� �� ���

������.

rc.osseal start

�: ��� �� �� Tivoli Access Manager for Operating Systems� �� �

�� ��, ��� root�� � �� ���.

�� ��

�� ���� � ��� �� ����� ���, Tivoli Access Manager for

Operating Systems� ��� �� � � ���� ���� ���.

��� �� � Tivoli Access Manager for Operating Systems� ��� ��

� � ������ �� ��� ������. ���� �� ��, Tivoli Access

Manager for Operating Systems� ��� �� � ����.

pdoscfg -autostart off

� ��� �� ����� ���, ��� � ��� �� ���� �� ��

��� �� � ��� �� ��, root� ���� �� ��� ��� � Tivoli

Access Manager for Operating Systems� �� ��� � ����.

rc.osseal start

��� � ��� ��

Tivoli Access Manager for Operating Systems� ��� �� ���� � ��

��� ����� ��, ��� �� ��� ���� ���� � �� � ��

� ���.

© Copyright IBM Corp. 2000, 2003 73

Page 86: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

�� ��� ���

� ���� �� Tivoli Access Manager for Operating Systems� ���

� ��� ���� ���. � ��� �� ��� �� � ��� Tivoli Access

Manager for Operating Systems� /opt/pdos/etc/kosseal_starting___load�

� �� ��� �����.(�� ��� ��� � � ��� � �� �� ��

����.) � ��� ��� ��� � ��� �����.

��� �� ��� ��� Tivoli Access Manager for Operating Systems �

�� � ����. � ��� Tivoli Access Manager for Operating Systems�

��� ����� �� � ��� � �� ��� ���� �� ��� ����

��� ���� � �� � ����.

� ��� �� ��� ���� IBM Tivoli Software ��� ��� ��

� ��, ��� �� ��� ���� �� Tivoli Access Manager for Operating

Systems� ��� � ����.

��� � ��� � �

Tivoli Access Manager for Operating Systems� ���� ���� osseal ��

ID, osseal � � ossaudit �� �� ���� ���. ��� ��� �

��, �� � ����.

NIS(Network Information Services) ���� osseal �� ID� osseal �

ossaudit �� ��� �� � NIS� ���� ��� ���. ��� NIS� �

���� ��� ���� ��� ��, Tivoli Access Manager for Operating Systems

� ���� �� �� ���� /etc/passwd � /etc/group ��� + �� �

� ��� � � �� ID� ��� � ����. �� ���� �� ��� ��

��� Tivoli Access Manager for Operating Systems� ��� �� � �

� �� ���� + �� ���� �� ���. ��� ���, NIS ��� �� �

���� Tivoli Access Manager for Operating Systems� ���� �� ����

osseal �� ID� osseal � ossaudit �� ��� � ���.

Tivoli Access Manager for Operating Systems� �� ��� ��

Tivoli Access Manager for Operating Systems� � �� ���� �� �

�� ������.

pdosctl -s

Tivoli Access Manager for Operating Systems ��

Tivoli Access Manager for Operating Systems� ������ �� ��� ���

���.

rc.osseal stop

74 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 87: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

PDOSTECD �� �� � ��

Tivoli Access Manager for Operating Systems� Tivoli Enterprise Console ��

Tivoli Risk Manager�� �� ���� �� ���� pdostecd � ���

��. � �� IBM Tivoli Access Manager for Operating Systems �� ����

� �� � ���, � ��� � � �� ����.

pdostecd � ������, �� ��� ���� Enter� ����.

rc.pdostecd stop

� 6 � �� � �� 75

Page 88: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

76 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 89: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

� 7 � �� ��

� ���� AIX, HP-UX, Solaris � Linux�� Tivoli Access Manager for Operating

Systems� �� ���� ��� �� �����.

Tivoli Access Manager for Operating Systems �� �� ��� pdosucfg���.

� ��� Tivoli Access Manager for Operating Systems �� ��� ����,

� �� � ��� �� ����� ��, Tivoli Access Manager�� Tivoli

Access Manager for Operating Systems� �� �����.

�� � ��� � ����.

v Tivoli Access Manager �� �� ��

v �� �� �� � ��

v �� �� � ��

v �� ��� ��� �� ��

v InstallShield Multiplatform� ��� ��� �� �� ��

Tivoli Access Manager for Operating Systems �� �� ��

Tivoli Access Manager for Operating Systems� �� ���� ��, �� ��

� �� ��� ��� �� ���� �� ��� ��� ��� ���.

v Tivoli Access Manager policy ��� LDAP �� � � ���� ���.

v Tivoli Access Manager Runtime Environment� Tivoli Access Manager for

Operating Systems� ��� ��� ��� ���� �� � �� � ��� �

��.

v Tivoli Access Manager �� �� � �� ��� ��� ���.

v Tivoli Access Manager for Operating Systems� �������. �� ���

��� �� ��� 73 ���� � 6 � ��� � ���� ������.

v pdostecd � ��� ��, �� �� ������. 72 ���� �pdostecd �

� ���� ������

�� �� �� ��

Tivoli Access Manager for Operating Systems �� �� �� pdosucfg �� �

� �� � �����.

© Copyright IBM Corp. 2000, 2003 77

Page 90: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

�� �� �� ��

� ��� �� �� ��� �� �� �����. � �� �� � ����

�����(�� ��� ��). �� �� ��� �� �� �� ��� 99 ���

� �� B ��� �� ��� ����.

-admin_name

Tivoli Access Manager �� ��

��:

sec_master

-admin_pwd

Tivoli Access Manager �� ��. -admin_name ���

-sec_master_pwd �� ���.

-help �� �� �� ���� �����. � �� �� ���� �����

-help -option� ������.

-lrd_admin_name

pdoslrd� �� ��� � ��� Tivoli Access Manager �� ��

-lrd_admin_pwd

pdoslrd� �� ��� � ��� Tivoli Access Manager �� ��

-operations

�� � �� �����.

-remove_once_only

Tivoli Access Manager for Operating Systems �� policy� �� ���

��.

pdosucfg| [-admin_name user_admin_name]| [-admin_pwd user_admin_password]| [-help]| [-lrd_admin_name user_admin_name]| [-lrd_admin_pwd user_admin_password]| [-operations]| [-remove_once_only (on | off) ]| [-remove_per_policy (on | off) ]| [-rspfile file_name ]| [-usage]| [-version]| [-?]

�� 13. pdosucfg ��

78 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 91: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

�: �� Tivoli Access Manager for Operating Systems ���� � Tivoli

Access Manager policy ��� �� ��� ��, � �� ���� ��

��. �� ���� ���� �� � ����.

�� policy� ��� ��, ���� ���� � �� ����.

��: off

-remove_per_policy

� ���� ����� ��� policy ���� ��� Tivoli Access Manager

for Operating Systems ��� �� �����.

�: �� Tivoli Access Manager for Operating Systems ���� �

policy ��� � � ��� ��, � �� ���� ����. �� ���

� �� � �� � ����.

�� policy� policy branch � � ��� ��, ���� ���� � ��

����.

��: off

-rspfile

�� ��� �� � �� � �� ��� �����.

-usage �� ���� �� ���� �����.

-version

��� �����.

-? �� ���� �� ���� �����.

�� � ���� �� ��

Tivoli Access Manager for Operating Systems� �� ��� ��� �� ��

� � ����.

� �� ��

�� �� �� ��� ��� �� �� ��� �� �����.

Tivoli Access Manager for Operating Systems �� ��� �� �� ��� ��

� �� ��� �����.

[pdoscfg]admin_name=admin_user_1admin_pwd=cGo0sutbnielr

��

[pdoscfg]

� �� ����

� 7 � �� �� 79

Page 92: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

admin_name=admin_user_1admin_pwd=cGo0sutbnielr

� ��=� ����.

� �� ��

�� ��� ��� Tivoli Access Manager for Operating Systems� �� ��

���, pdosucfg �� -rspfile � �� ��� �� �� ��� �����

�. �� ��, �� ���.

pdosucfg -rspfile /opt/pdos/etc/unconfig.rsp

��

/opt/pdos/etc/unconfig.rsp

� �� �� �����.

�� ��� ��� ����� �� �� ��� �� ��� ����� pdosucfg

�� -rspfile � �� ��� �� �� ��� ���� ����� �����

� ��� �� �� ������. �� ��, �� ���.

pdosucfg -rspfile /opt/pdos/etc/unconfig.rsp -remove_per_policy off

� ��� ��� �� �� ��

�� ���� ��=� � ��� � �� ��� ����. �� � ��� �

� �� ��� �� �� �� ����.

� 8. pdosucfg �� � � ��

�� �� ��

[pdoscfg] remove-once-only -remove_once_only

remove-per-policy -remove_per_policy

��� �� �� ��

InstallShield Multiplatform� ��� ��� ��, �� ��� IBM Tivoli Access

Manager for Operating Systems� � �� � ����.

v IBM Global Security Toolkit

v IBM Directory Server

v Tivoli Access Manager Runtime Environment

�� �� � �� �� ���� �� ��� Tivoli Access Manager Runtime

Environment���.

80 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 93: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

�: ����� �� ��� �� �� ��, Tivoli Access Manager Runtime

Environment� �� ���� ����.

Tivoli Access Manager Runtime Environment� �� ���� �� �� �

��.

1. root� �������.

2. �� ��� ���� Enter� ����.

pdconfig

3. Tivoli Access Manager� �� ����� � 2� ������.

4. �� � �� ���� ��� �����. ��� �� �� ��� ��

��� ����� �� ��� ��� ���� ��� �� ������. ��

��, Tivoli Access Manager ��� �� � , �� ����� �� � �

�� ��, ���� ���� �� ���� ���.

�� �� �� ����

� � ��� pdosucfg_local� �� ����� Tivoli Access Manager for

Operating Systems� ���� �� ��� ��� ����� ����� �� �

���. ����� ����� �� �� ������.

1. Tivoli Access Manager for Operating Systems� ��, �� � � � ��

�� ��� �� ����� ��� �� �� ��� �� ��� /new� �

�� �� ��� ����� ��� � ����. �� ��, /� /new� ��

���.

2. �� /new � � ��� �� ���� ��� � �� ��� � ����

���� �� ����. ��� ���� ��� ����� /new� �� ��

� ��� ����� ���. Tivoli Access Manager for Operating Systems�

��, �� ��� �� � ���� ��� � Tivoli Access Manager for

Operating Systems� �� �� �� � �� pdoscfg ��� ��� ��

� � ��� ��� �� ��� ��� ���� ���.

3. � ���� � �� ����(���� �� ��)� �����. �� ��,

pdosucfg_local /new���. � ��� /new � �� �� �� ����.

a. � �� ��� ���� ��� ��� �� ��� ����.

b. �� policy ��� ���� ���� ��� �� ��� ����.

c. �� �� ��� .conf ��� �����.

d. �� �� svrsslcfg� �� ��� .kdb ��� �����.

e. /var/pdos � �� Tivoli Access Manager for Operating Systems� ��

� �� �� � �� � ����� �����.

� 7 � �� �� 81

Page 94: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

82 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 95: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

� 8 � �� ��

� ���� ��� InstallSheild Multiplatform �� �� �� ��� ���

�� ����� �� � AIX, HP-UX, Solaris � Linux�� Tivoli Access Manager

for Operating Systems� �� ���� ��� �� �����. Tivoli Access

Manager for Operating Systems� InstallShield Multiplatform�� ��� ��, �

��� �� ���� ���. �� �� ��� ��� ��, Tivoli Access

Manager for Operating Systems� ��� ���� �� �� �� � �� �� �

�� ��� ���.

InstallShield Multiplatform� Tivoli Access Manager for Operating Systems�

� ��� �� ��� ��� ��� �� ���� ���.

Tivoli Access Manager for Operating Systems� �� ����� ��� ���

���.

v root ��� ��� ��� ���.

v pdostecd � �� �� ��, 72 ���� �pdostecd �� ����� ���

�� �� �� ������.

v 77 ���� � 7 � ��� ����� ��� �� Tivoli Access Manager for

Operating Systems� �� ������.

v � ��� �� ��� �� �� Tivoli Access Manager for Operating Systems

� �� ������.

v � ��� ����� Tivoli Access Manager for Operating Systems� �� �

�� �� ���� �� ����.

v InstallShield Multiplatform� ��� Tivoli Access Manager for Operating

Systems, �� 5.1� ��� ��, �� �� ��� �� InstallShield Multiplatform

� ���� � ����. ��� �� InstallShield Multiplatform �� ���

��� ���� ��� ��� ��� ����.

���� �� osseal � ��, ossaudit � �� �� osseal �� ID� ��

� ��, Tivoli Access Manager for Operating Systems� �� ��� � ����

�.

© Copyright IBM Corp. 2000, 2003 83

Page 96: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

InstallShield Multiplatform�� �� ��

InstallShield Multiplatform� ��� Tivoli Access Manager for Operating Systems

� ��� ��, �� �� ��� ��� �� ���� ���. �� ���� �

� �� ������ ��� ���, �� �� ���� �� �����.

InstallShield Multiplatform� ��� ��� �� ����, Tivoli Access Manager

for Operating Systems, �� 5.1 �� �����. �� �� ����� ��(GSKit,

LDAP � Tivoli Access Manager ���)� �� �� � ����.

�: �� �� ����� ���� ��, �� �� ����� � ��� ��� �

��� ���. InstallShield Multiplatform ���� �� ��� ����.

� ��� �� �� �� ��� ��� �� �� ������ �� �

��� ���.

Tivoli Access Manager for Operating Systems� �� ����� �� �� �

����.

1. Tivoli Access Manager for Operating Systems� � � �� �� ��� �

����. Tivoli Access Manager for Operating Systems� � � �� ��

�� ��� �� �� ��� � 8 � ″�� ��″� ������.

2. �� ��� ������.

java -cp /var/pdos_ismp/_uninstall/uninstall.jar run

��

java -cp /var/pdos_ismp/_uninstall/uninstall.jar run -silent

��

/var/pdos_ismp/_uninstall/uninstaller.bin

AIX�� �� ��

Tivoli Access Manager for Operating Systems� SMIT� ��� AIX�� ��

�����, ���� �� ��� � ����.

SMIT� ���� AIX�� �� ��

SMIT� ��� AIX�� Tivoli Access Manager for Operating Systems� ��

����� �� �� �����.

1. root� �������.

2. �� ��� ������.

smit

��� �� ���� �� ��� �����.

84 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 97: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

3. ��� �� ���� ����� �� � ���� ����.

4. ����� �� � ���� ���� ����� ��� � ���� �

���.

5. ����� ���� � �� ���� ��� ����� ��� ����.

��� ����� �� �� ��� �����.

6. ����� ��� �� �� ��� �� PDOS.rte� ������.

7. ��� ������ �� ���� ��, � ������ �� �� ����

� SMIT� �����. ������ �� ���� ���. ��� � �, �

�� ��� ����.

���� ��, � ����� �� �� �� �� �� ����� ��

� ��� ����.

8. ����� �� �, ��� ����.

9. ��� ����� �� � �����. ������� ���� ������.

��� ����.

10. � �� ��� ����.

11. �� �� ��, � ����� �� �� �� �� ��� �� � ��

� ����.

12. �� ��� �� �, ��� ����� �� ��� �����. ��� ��

��.

13. ��� ����� �� ��� �����.

14. ����� ���� ���� �� ��� �����.

15. �� ��� �� � �� ����.

��� ���� AIX�� �� ��

��� � AIX�� Tivoli Access Manager for Operating Systems� �� �

���� �� �� �����.

1. root� �������.

2. ��� ��� ������.

installp -u -g PDOS.rte

3. �� �� ����� �� � �� ����.

HP-UX�� �� ��

Tivoli Access Manager for Operating Systems� swremove� ��� HP-UX�

� �� �����, ���� �� ��� � ����.

� 8 � �� �� 85

Page 98: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

swremove� ���� HP-UX�� �� ��

swremove� ��� HP-UX�� Tivoli Access Manager for Operating Systems

� �� ����� �� �� ������.

1. root� �������.

2. ��� ��� ������.

swremove

SD Remove-Software Selection ��� �����.

3. �� ��� �� Tivoli Access Manager for Operating Systems ���� ��

����.

4. Action ���� Mark for Remove� ������.

5. Action ���� Remove (analysis)� ������. Remove (analysis) ���

�����. ��� Ready��, OK� ����.

6. � �� ���� Yes� ����. Remove ��� �����.

7. ��� ‘Completed’��, Done� ����.

8. SD Remove-Software Selection ��� �����.

9. �� �� ����� �� � �� ����.

��� ���� HP-UX�� �� ��

��� � HP-UX�� Tivoli Access Manager for Operating Systems� ��

����� �� �� ������.

1. root� �������.

2. ��� ��� ������.

swremove PDOSrte

3. �� �� ����� �� � �� ����.

Solaris�� �� ��

Tivoli Access Manager for Operating Systems� Admintool� ��� Solaris�

� �� �����, ���� �� ��� � ����.

Admintool� ���� Solaris�� �� ��

Admintool� ��� Solaris�� Tivoli Access Manager for Operating Systems

� �� ����� �� �� ������.

1. root� �������.

2. ��� ��� ������.

admintool

86 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 99: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

Return� ����. Admintool: Users ��� �����.

3. Admintool: Users Browse ���� Software� ��������. Admintool:

Software ��� �����.

4. Admintool: Software ��� �� ���� ��� ��, �� ��� ���

(IBM Tivoli Access Manager for Operating Systems Runtime)� �� �

�������.

5. Edit ���� Delete� ������.

6. Admintool: Warning ��� �����. Delete� ����. Admintool: Delete

Software ��� �����.

7. ���� �� � �� � ���� �����. �� � ��� ���� �

� � ��� �� �����. � ��� ″Do you want to remove this

package?″� � ���� �����. � ���� �� � Yes� ������.

Return� ����.

8. ��� ���� �� ″This package contains scripts which will be executed

with super-user permission during the process of removing this package. Do

you want to continue with removal of this package?″ � ���� ���

��. Yes� ������. Return� ����.

9. �� � Return� ����.

10. Admintool: Software ��� �����.

11. �� ��� �� � �� ����.

��� ���� Solaris�� �� ��

��� � Solaris�� Tivoli Access Manager for Operating Systems� �� �

���� �� �� ������.

1. root� �������.

2. ��� ��� ������.

pkgrm PDOSrte

3. ���� �� � �� � ���� �����. �� � ��� ���� ��

� ��� �� �����. � ��� ″Do you want to remove this

package?″� � ���� �����. � ���� �� � Yes� ������.

Return� ����.

4. ��� ���� �� ″This package contains scripts which will be executed

with super-user permission during the process of removing this package. Do

you want to continue with removal of this package?″ � ���� ����

�. Yes� ������. Return� ����.

5. � ���� �� �� �� ����� �� �, ″Removal of package was

successful.″�� ���� �����.

� 8 � �� �� 87

Page 100: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

6. �� �� ����� �� � �� ����.

Linux�� �� ��

Tivoli Access Manager for Operating Systems� Linux�� �� � ���

� �� ��� � ����.

1. root� �������.

2. ��� �� ��� ������.

rpm -e PDOSrte-PDOSruntime

3. �� �� ����� �� � �� ����.

�� �� ��� �� ��

�� �� ���� �� ����� ��� �����.

1. ����� uninstall.jar ��� �� ��� ������. ��� ������.

cd /opt/location

�� location� �� ���.

PDOssLP/osslp_uninst

Tivoli Access Manager for Operating Systems� �� �� ���� �

�� �����.

2. �� �� ���� �� ����� �� � uninstall.jar ��� ����

�.

java -cp /opt/PDOssi_P/osrtelp_uninst/uninstall.jar run

�� jre_path� Java � ��� ��� �����. Java � ��� ���

�� ��, jre_path� ���� ��� ���.

��� �� �� ��

InstallShield Multiplatform� ��� Tivoli Access Manager for Operating

Systems� ��� ��, � �� �� � �� �� ��� �� ���� ���.

�� ��� �� ���.

v Tivoli Access Manager Runtime Environment

v IBM Directory Server

v IBM Global Security Toolkit

��� ��� ��� �� �����, � � �� ���� �� ��� ��

�����.

88 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 101: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

�: �� ���� �� ���� �� ��� ��� ��� ���� ��� ��

���.

AIX

AIX�� ��� ��� ��� �� ����� ��� �����.

1. root� �������.

2. ��� ��� ������.

smitty maint

3. ��� ����� �� �� ������.

4. ����� �� ������ F4� �� ��� ��� ������. ��� �

����� F7� �� �� ���� ������.

v PD.RTE

v ldap.client.adt

v ldap.client.rte

v ldap.max_crypto_client.adt

v ldap.max_crypto_client.rte

v gskta.rte

�� ���� ��� �, Enter� ����.

5. �����(�� ��� ��� �) ������ Tab �� �� �� ���

� ������.

6. ��� ����� ����� Enter� ����.

�� installp ��� ��� �� ����.

installp -u -g PD.RTE ldap.client.adt ldap.client.rte \ldap.max_crypto_client.adt ldap.max_crypto_client.rte \gskta.rte

HP-UX

HP-UX�� Tivoli Access Manager Runtime Environment, IBM Global Security

Toolkit � IBM SecureWay Directory Client� �� ����� ��� ����

�.

1. root� �������.

2. ��� ��� ������.

swremove PDRTE LDAPClient gsk7bas

� 8 � �� �� 89

Page 102: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

Solaris

Solaris�� ��� ��� �� ����� ��� �����.

1. root� �������.

2. ��� ��� ������.

pkgrm PDRTE IBMldapc gsk7bas

3. pkgrm ��� � � ����� � ����. ���� Y� ����.

Linux

Linux�� ��� ��� �� ����� ��� �����.

1. root� �������.

2. �� ��� �� ����� ������.

rpm -e PDRTE-PD ldap-clientd gsk7bas

� ��� x86, zSeries, pSeries � iSeries� Linux� �����.

Tivoli Management Framework Integration ��� �� ��

Tivoli Access Manager for Operating Systems �� ���� �� ����� �

� ��� ������.

wuninst PDOSTASK machine -rmfiles

�� machine� ��� �� ��� �� � Tivoli region� �� �� ��� �

����.

Tivoli Access Manager for Operating Systems Enterprise Console Integration� �

� ����� �� ��� ������.

wuninst PDOSTEC machine -rmfiles

�� machine� ����� �� ��� �� ��� �����.

90 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 103: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

�� A. �� ��

Tivoli Access Manager for Operating Systems �� �� pdoscfg� ��� � �

� �� �� ���.

� 9. �� �

�� ��

-admin_cred_refresh ��� �� �� ��( )� �� �����. ��: 1

��: maxint

��: 360(6 �

�)

-admin_name �� �� ��. admin_pwd� ���

sec_master_pwd �� ���.

-admin_pwd �� �� ��

-audit_level �� � ��� �� ��� ��� ��� �

����. �� ��� �� � � ��� �

����. ���� all, none, permit, deny,

loginpermit, logindeny, admin, verbose, info,

trace_exec, trace_exec_l, trace_exec_root �

� trace_file���.

��: None

-audit_logflush pdosauditd � � �� ��� �� �

��� ����� ��(�)

��: 5

��: 9999

��: 5

-audit_log_size pdosauditd� � � �� ��� ���� �

� ����� ��� � �� ��� ���

� �� �� ��(��)

��: 1000000

��: 100000000

��: 1000000

-autostart ��� �� � Tivoli Access Manager for

Operating Systems� ��� �����.

on | off

��: on

-branch � ���� ��� policy ��� ��

-cred_hold ��� �� ��� ��� � �� � �

� ��( ). � �� admin_cred_refresh �

� user_cred_refresh ��� ��� �� �

��.

��: 1

��: maxint

��: 10080(1

��)

-cred_response_wait � ��� ���� �� �� �� ��� �

� ��� ���� �� ��( )��: 2

-critical_cred_group ���� ��� ��� ���� � � �

��� �� ��� �� �� ���� �� �

� ���� �� Tivoli Access Manager �

� ��

-critical_cred_refresh critical_creds ��� �� ��� �� ��

��( )��: 720

© Copyright IBM Corp. 2000, 2003 91

Page 104: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

� 9. �� � (��)

�� ��

-delete �� ���� ��� �� �� � � �

admin_cred_refresh,

audit_level, audit_log_entries,

audit_logflush, audit_logs,

audit_log_size, cred_hold,

dns, kmsg_hnd_threads,

pdosd_log_entries,

pdosd_logs,

pdoswdd_log_entries,

pdoswdd_logs,

refresh_interval, tcb_interval,

tcb_max_file_size,

tcb_monitor_threads, uid,

user_cred_refresh, warning

-dns Tivoli Access Manager for Operating

Systems� IP ��� �� �� � ��� �

�� � ��� ���.

on | off

��: on

-ffdc_capture �� Tivoli Access Manager for Operating

Systems � ��� �� �� �� �

�� �� �� ���� ���.

��: on

-help �� �� �� ���� �����. �

�� �� ���� ����� -help -<option>

� ������.

-hostname � ���� ��� �� Tivoli Access

Manager ��� ��� ��� ��. �� �

� � �� ��, ���� � ��� ���

�� ��� �����.

-kmsg_hnd_threads ���� �� ��� ���� �� �

��� �. � ��� ���.

����� 9� ��� ����� �����

� �� ����� �� ��� �� � ��

� ��� ��� ���� � ����. 9� �

�� ����� � ������ � �� �

��� �� ���� �� ������. ��

� ���, ���� ��� ������. ��

�� � �� ��� �� 24���.

��: 1

��: maxint

��: 8

92 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 105: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

� 9. �� � (��)

�� ��

-ldap_ssl_cacert Tivoli Access Manager �� ������ �

�� LDAP ��� CA ��. � ���

Tivoli Access Manager for Operating

Systems� LDAP �� ��� ���� ��

�� �����.

ezinstall_ldap_server ���� ���

LDAP ��� ���� ����� Tivoli

Access Manager� ���� �� LDAP SSL

CA � ��� ����� ��� ��,

LDAP ����� /etc/gsk/pd_ldapcert.

arm ��� ��� IBM Tivoli Access

Manager for Operating Systems �� �� �

��� ���� ���.

��� ���� ���.

-local_domain �� ��� ��� Tivoli Access Manager �

�� �����.

-login_policy ��� �� � �� ����� �� ���

� ���.

on | off

��: on

-lrd_admin_name pdoslrd� ��� � ��� Tivoli Access

Manager �� ��� �����.

-lrd_admin_pwd pdoslrd� ��� � ��� Tivoli Access

Manager �� ��� �����.

-lrd_config pdoslrd � �� �� �� �����.

-lrd_local_domain pdoslrd � ����� ��� Tivoli

Access Manager �� ��. pdoslrd �

�� ��� ���� Tivoli Access Manager

�� ��(pdacld)� �� ��� ���

�����, pdoslrd � pdacld � �

���� �� � ��� �� ���

� �� �� ���. Tivoli Access Manager

policy ��� �� �� ��� ���� �

���, �� pdoslrd � pdosd �

� �� ���� �� �� ��� � �

�� � ����. � �� �� � ���,

�� ��� pdosd ��� ���� �� �

��� ���� ���.

Tivoli Access Manager �� ��� ���

� �� -lrd_admin_name � -lrd_admin_pwd

� � ��� �� �� � ��� �

��� �� ���� ���.

�� A. �� � 93

Page 106: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

� 9. �� � (��)

�� ��

-net_ACL_limited ���� ��� ��� policy �� ���

/OSSEAL/branch/NetIncoming �

/OSSEAL/branch/NetOutgoing ��� ��

� ��� ��� ACL� ���� �� �

����. policy �� ��� ��� ����

policy� ��� ��� � ��, ACL ��

� ���� ���� ��� ��� ��� �

����.

-operations �� � �� �����.

-pdosauditd_log

_entries

pdosauditd �� ��� ������ �� �

�� pdosauditd �� �� �. 0� ����

��� ��� �� �� � �� pdosauditd

�� ��� ���� � ���� � ��

���. -pdosauditd_log_entries� 0� ���

-pdosauditd_logs� 0� �� ��,

pdosauditd �� ��� � ��� �� ��

-pdosauditd_log_entries� ��� �� ��

��� � �� pdosauditd � �� ��

� � �������. -pdosauditd_log_entries

� 0� ��� -pdosauditd_logs� 0 ��,

pdosauditd �� ��� � ��� �� ��

-pdosauditd_log_entries� ��� �� ��

��� � �� pdosauditd � �� ��

� � ������.

��: 0

��: Maxint

��: 0

-pdosauditd_logs pdosauditd ���� �� ��� �����

�� ��� pdosauditd ���� �� ��

�. pdosauditd ���� �� ��� �� 0

� �� ��� ���� -pdoslrd_log_entries

� 0� �� ��� ��� ����.

pdosauditd �� ��� �� ��

-pdoslrd_log_entries� ��� �� �� ��

� � �� pdosauditd � �� ��� �

�������. 0� ���� pdosauditd �

� ��� ������ ���� � ���

��.

��: 0

��: 99

��: 0

-pdosd_init_wait pdosd� ���(� policy ��� ��)� ��

�� �� ��� ��( ). � � policy� �

��� ���� �� ��� �����.

��: 1

��: 20

��: 5

94 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 107: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

� 9. �� � (��)

�� ��

-pdosd_log_entries pdosd �� ��� ������ �� ���

pdosd �� �� �. 0� ���� ��� �

�� �� �� � �� pdosd �� ��� �

��� � ���� � �����.

-pdosd_log_entries� 0� ��� -pdosd_logs�

0� �� ��, pdosd �� ��� � �� �

� -pdosd_log_entries� ��� �� �� �

�� � �� pdosd � �� ��� � �

������. -pdosd_log_entries� 0� ���

-pdosd_logs� 0� ��, pdosd �� ��� �

� �� -pdosd_log_entries� ��� �� �

�� � �� pdosd � �� ��� � �

�����.

��: 1

��: 20

��: 5

-pdosd_logs pdosd ���� �� ��� ����� ��

��� pdosd ���� �� �� �. pdosd

���� �� ��� �� 0� �� ��� �

��� -pdosd_log_entries� 0� �� ���

��� ����. pdosd �� ��� ��

�� -pdosd_log_entries� ��� �� �� �

�� � �� pdosd � �� ��� � �

������. 0� ���� pdosd �� ��

� ������ ���� � �����.

��: 0

��: 99

��: 0

-pdoslrd_log_entries pdoslrd �� ��� ������ �� ��

� pdoslrd �� �� �. 0� ���� ��

� ��� �� �� � �� pdoslrd �� �

�� ���� � ���� � �����.

-pdoslrd_log_entries� 0� ���

-pdoslrd_logs� 0� �� ��, pdoslrd ��

��� � �� �� -pdoslrd_log_entries� �

�� �� �� ��� � �� pdoslrd

� �� ��� � �������.

-pdoslrd_log_entries� 0� ���

-pdoslrd_logs� 0� ��, pdoslrd �� ��

� �� �� -pdoslrd_log_entries� ��� �

� ��� � �� pdoslrd � �� ��

� � ������.

��: 0

��: maxint

��: 0

-pdoslrd_logs pdoslrd ���� �� ��� ����� �

� ��� pdoslrd ���� �� �� �.

pdoslrd ���� �� ��� �� 0� ��

��� ���� -pdoslrd_log_entries� 0� �

� ��� ��� ����. pdoslrd �� �

�� � ��� �� �� -pdoslrd_log_entries

� ��� �� �� ��� � �� pdoslrd

� �� ��� � �������. 0� �

��� pdoslrd �� ��� ������ �

��� � �����.

��: 0

��: 99

��: 0

�� A. �� � 95

Page 108: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

� 9. �� � (��)

�� ��

-pdoswdd_log _entries pdoswdd �� ��� ������ �� ��

� pdoswdd �� �� �. 0� ���� ��

� ��� �� �� � �� pdoswdd ��

��� ���� � ���� � �����.

-pdoswdd_log_entries� 0� ���

-pdoswdd_logs� 0� �� ��, pdoswdd �

� ��� � �� �� -pdoswdd_log_entries

� ��� �� �� ��� � �� pdoswdd

� �� ��� � �������.

-pdoswdd_log_entries� 0� ���

-pdoswdd_logs� 0 ��, pdoswdd �� �

�� � ��� �� ��

-pdoswdd_log_entries� ��� �� �� �

�� � �� pdoswdd � �� ��� �

������.

��: 0

��: maxint

��: 0

-pdoswdd_logs pdoswdd ���� �� ��� ����� �

� ��� pdoswdd ���� �� �� �.

pdoswdd ���� �� ��� �� 0� ��

��� ���� -pdoswdd_log_entries� 0�

�� ��� ��� ����. pdoswdd �

� ��� �� �� -pdoswdd_log_entries�

��� �� �� ��� � �� pdoswdd

� �� ��� � �������. 0� ��

�� pdoswdd �� ��� ������ ��

�� � �����.

��: 0

��: 99

��: 0

-refresh_interval Tivoli Access Manager �� ��� �� �

� ��� ����� ���� ��� ��,

policy ����� �� �� ��� �� �

��( ). � 0� policy ���� ����

� ��� �� �� � ��� �����.

-ssl_listening_port� �� ����.

��: 0

��: maxint/60

��: 0

-rspfile ��� �� � �� � �� ��� ��

-ssl_listening_port policy ���� �� �� �� ��

��. � 0� policy ���� �����

�� �� �� � ��� ����� .

-refresh_interval �� ����.

��: 0

��: 65535

��: 7134

-suffix �� �� Tivoli Access Manager for

Operating Systems �� � �� ����

�� LDAP ���

-tcb_ignore_ctime TCB(Trusted Computing Base) �� �� �

� � ctime� ����. � �� ���

�, ctime� �� �� TCB �� �� ��

� � ���.

on | off

��: off

-tcb_interval �� TCB ��� �� ����� �� �

� ��� ��(�). ����� �� � ��

�� ���� ����.

��: 1

��: maxint

��: 1800

96 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 109: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

� 9. �� � (��)

�� ��

-tcb_max_file_size ���� �� �� ���� �� � ��

� �� MB �. � � ��� �� ��

��� ����.

��: 1

��: (2^44) -

1

��: 10

-tcb_monitor_threads ����� �� TCB ��� ����� �

� � ��� �. � �� 1�� �� ���

� ����� ����� �����. �

��� ���.

��: 1

��: maxint

��: 1

-tcb_nocrc_on_exec TCB� ��� � �� � ��� ��

�� ���� ����� ���� CRC

(Cyclec Redundancy Check) �� ����

� ���� ���. � �� ���� �

�� � 2 ��� �� CRC �� �

� �� ���.

on | off

��: off

-uid UID/GID� ��/� �� � ��� �

�� � �� ���.

on | off

��: off

-usage �� ���� �� ���� �����.

-user_cred_refresh ��� �� �� ��( )� �� �����. ��: 1

��: maxint

��: 720

-version pdoscfg �� ��� �����.

-warning ��� �� �� ��� �� ���� ���. on | off

��: on

-? �� ���� �� ���� �����.

�� A. �� � 97

Page 110: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

98 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 111: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

�� B. �� �� ��

Tivoli Access Manager for Operating Systems �� �� �� pdosucfg� ���

� �� �� �� ���.

� 10. �� �� �

�� ��

-admin_name �� �� ��. admin_pwd� ���

sec_master_pwd �� ���.

-admin_pwd �� �� ��

-help �� �� �� ���� �����. � ��

�� ���� ����� -help -<option>� �

�����.

-lrd_admin_name PDOSLRD� ��� � ��� �� Tivoli

Access Manager �� ��� �����.

-lrd_admin_pwd PDOSLRD� ��� � ��� �� Tivoli

Access Manager ��� �����.

-operations �� � �� �����.

-remove_only_once Tivoli Access Manager for Operating Systems

�� policy� �� �����. �� Tivoli

Access Manager for Operating Systems ���

� � Tivoli Access Manager policy ��� �

� ��� ��, ���� ����. �� ���

� ���� �� � ����. �� policy� �

�� ��, ���� ���� � �� ����.

on | off

��: off

-remove_per_policy � ���� ����� ��� policy ���� �

�� Tivoli Access Manager for Operating

Systems ��� �� �����. �� Tivoli

Access Manager for Operating Systems ���

� � policy ��� � � ��� ��, ��

�� ����. �� ���� �� � �� � �

���. � �� policy� policy ��� � �

��� ��, ���� ���� � �� ����.

on | off

��: off

-rspfile file_name �� �� ����� �� � �� �� ���

�.

��� ���� ��

�.

-usage �� ���� �� ���� �����.

-version pdosucfg �� ��� �����.

-? �� ���� �� ���� �����.

© Copyright IBM Corp. 2000, 2003 99

Page 112: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

100 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 113: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

�� C. Tivoli Access Control Facility��� ������

Tivoli Access Manager for Operating Systems�� UNIX� eTrust Access Control

� �� policy� �������� ��� �� ��� �� ����. ��� �

�� eTrust Access Control, �� 5.0, sedb2scr ���� ��� ���� eTrust

������ � ��� ��� ��, � ���� selang ��� ��� �

��� ��� � ����.

������ ����� Tivoli Access Manager for Operating Systems� �� �

�� �� , �� � �� �����. ������ ������ �� �� �

� UNIX� eTrust Access Control ����� ��� Tivoli Access Manager

��� ��� �, eTrust ��� Tivoli Access Manager for Operating Systems

�� �� ��, ACL(Access Control List) � POP(Protected Object Policy)� �

� �� ���� ���. ������ ����� eTrust ��� Tivoli Access

Manager for Operating Systems ���� ��� eTrust ���� Tivoli Access

Manager pdadmin ���� ���� �� � ����.

se2pdos �� ���

� ��� se2pdos �� ��� �� �����. �� � �� �����

������. �� �� �� �� � ���� ���� ���� ���. �

� ��� ���� ���, stdin�� �����.

���

se2pdos [-f input file] [-o output file] [-e error file] [-na] [-nc] [-nr] [-s][-w {012}] [-i] [-1][-p branch] [-g "suffix"] [-u "suffix"] [-?] [-h] [-V] [-no][-nO]

��

� 11. se2pdos �� �� �

�� �� ��

-f input file �� �� stdin

-o output file � �� stdout

-e error file ��/�� �� �� �� ��

-nc editres �� editfile ���� �

�� �� �� ���� � �

���� ���� ��

editres �� editfile� �� ��

�� � ���� ��

-nr ����� ��(�)� ����

��

� �� ��

© Copyright IBM Corp. 2000, 2003 101

Page 114: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

� 11. se2pdos �� �� � (��)

�� �� ��

-na ����� ��(���)� ���

� ��

� �� ��

-p branch IBM Tivoli Access Manager for

Operating Systems policy ���

��

osseal.conf� �; ���� ��

�� ″default″

-s � �� ��� ����� �

�� � � (-na �� -nr� �

� ��)

-w # �� ��

0 = �� �� ��

1 = ��� �� �� ��

2 = ��� � � �� �

�� �� 1

-i � ��� �� ��� ��

-1 � �� ���� �� �� ���� �� � ��

-g suffix �� ���(-na �� -u� ��

�� �� �� ��)

-u �(��� ��; ��� ���,

��� �)

-u suffix ��� ���(-na �� -g� �

��� �� �� ��)

-g �(��� ��; ��� ���,

��� �)

-? ��� n/a

-V �� n/a

-no nobody� �� �� �� � -no� -nO� �� ����, -no

� �� ��� ����.

-nO �� owner �� �

��

� �� �� ��� ���� ��� �� �� ��� ����. ���� Tivoli

Access Control Facility ��� �� sedb2scr.out��� ��� �����. �

� � LDAP ���� �� ����.

Tivoli Access Manager ���� ��

Tivoli Access Control Facility �� � ��� Tivoli Access Manager ���

��� ��� ��� ��� ��� ����� ��� �� ��� ������.

se2pdos -nr -s -u "ou=users, o=IBM, c=US" -g "ou=groups, o=IBM, c=US" \-f sedb2scr.out -o se2pdos.out

pdadmin -a sec_master -p password <se2pdos.out

-s �� � �� ��� �� ��� �� �� �� �����.

� ���� ���� ��� �� ���� ��� ��, � DN� ″group″�

�����. �� ��, �� ���.

102 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 115: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

editgrp ("mygroup") name(’My group’) owner(’root’)

se2pdos -u"o=tivoli,c=us" -f mygroup.se

� ��� �����.

group create mygroup "cn=mygroup group, o=IBM,c=US" "mygroup"group modify mygroup description "My group"

� DN� ��� ��� ��� ��� � ��� �� ��� �� �� ��

���.

Tivoli Access Manager policy �� ��

Tivoli Policy Director policy ��� �� ��� ��� ����� ��� ��

��� ������.

se2pdos -na -i -f sedb2scr.out -o se2pdos.outpdadmin -a sec_master -p password <se2pdos.out

-i �� se2pdos �� � ���� Tivoli Access Control Facility� IBM Tivoli

Access Manager for Operating Systems� �����, ��� �� pdadmin� �

��� �� �� ���� ��� � ����.

Tivoli Access Control Facility � ���� �����

kevinc.se�� Tivoli Access Control Facility � ���� � �� Tivoli Access

Manager for Operating Systems� ����� ��� ��� ������.

se2pdos -1 -f kevinc.se -o kevinc.pdos -u "ou=users, o=IBM, c=us"

�� kevinc.se ���� ��� ���� /home/kevinc/filea�� ����

� ��� �� policy� ���� �����. -1 �� � ���� ��

� � �����. kevinc.se ���� ���� ��� � ����.

editusr ("kevinc") restrictions (days(AnyDay) time(AnyTime)) name(’Kevin Cee’) \grace(1) audit(FAILURE LOGINFAILURE)chusr ("kevinc") owner(’root’)join ("kevinc") group(’staff’)newres FILE ("/home/kevinc/filea") audit(FAILURE) defaccess(NONE) uid(’kevinc’)authorize FILE ("/home/kevinc/filea") audit(FAILURE) access(ALL) uid(’kevinc’)authorize FILE ("/home/kevinc/filea") audit(FAILURE) access(ALL) uid(’root’)

�� C. Tivoli Access Control Facility��� ������ 103

Page 116: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

104 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 117: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

�� D. ����

� ��� ���� �� � �� � ������ ��� ���. IBM� �� �

���� � �� �� ��, ��� �� ��� ���� �� �� ����. �

� ��� � �� �� � ���� �� ��� �� IBM � �� �����

�. � ��� IBM ��, ��� �� ���� � �� � � IBM ��, �

�� �� ��� � ��� � ��� � ����� ����. IBM� �� �

�� ���� �� �, ��� ��� ��, ��� �� ���� �� ��� �

� ����. ��� �IBM ��, ��� �� ���� �� �� �� � ��

� ��� �����.

IBM� � ��� ��� �� �� ��� �� ��� ���� ��� �� ��

� �� � ����. � �� ����� �� ��� �� �� ��� ���

� ����. �� �� �� ����� ���� ������.

135-270

����� ��� ��� 467-12, ��� ��

�� ��.�.� �� �

�� � �

����: 080-023-8080

2��(DBCS) ��� �� �� � ��� �� IBM �� � �� �����

�� ��� �� ����� ��.

IBM World Trade Asia Corporation

Licensing

2-31 Roppongi 3-chome, Minato-ku

Tokyo 106, Japan

� ��� ���� ���� ��� � ����� ��� ����. IBM�

�� �� ���, ��� � �� ���� ���� �� ��� ��� � �

(, �� ��� ��) ����� ����� ��� �� �� � � �� ��

��� �����. �� ����� �� � �� ��� �� ��� ��� ���

�� ���� ����, � ��� �� � �� �� ����.

� ���� ���� ���� ���� ��� ��� �� � ����. � �

�� ����� �� �, ��� ��� ���� ����. IBM� � ��� �

�� �� �(��) ���� �� � � ���� �� �(��) ��� � ��

��.

© Copyright IBM Corp. 2000, 2003 105

Page 118: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

� ���� � � �IBM� � ���� � ��� ��� ��, �� ���

�� �� � ���� ���� �� � ����. � � ���� �� �

IBM �� �� ��� ���� � � ��� ���� � ��� �� �

� ���� ���.

IBM� ��� ��� ���� �� �� ��� � ��� ���� ���� ��

� ��� ��� ����� ��� � ����.

(1) ���� ��� ��� �� ���(� ��� � ) �� �� � (2)

�� ��� �� ��� ���� ��� ��� ��� �� � ��� ��

��� ������.

135-270

����� ��� ��� 467-12, ��� ��

�� ��.�.� �� �

�� � �

��� ��� � �� � ��(�� ��, ��� �� �)� �� ��� � ��

��.

� �� �� �� �� �� ��� � � ���� �� �� ��� ��

�� �� �� �� IBM� IBM ����, IBM ��� �� � ��(IPLA)

�� �� ��� ��� �� ��� ���.

� ��� � � �� �� ��� ��� ���� � ���. ��� ��

� ���� �� �� � � �� � ����. �� ��� �� �� ���

����� �� �� � ���� ��� ���� ���� �� � �� ���

��� ���� ��� ���� ��� � ���. �� �� ��� ���� �

� ���� �� �� �� � ����. � ��� ��� � ��� ��

� �� ���� ���� ���.

�IBM ��� �� ��� � ��� � ��, �� � �� �� �� ���

�� �� ���. IBM��� ��� �IBM ��� ����� �����, ��

�� ��� ��� ���, ��� �� �� ��� ���� ��� � ���.

�IBM ��� ��� �� ����� � ��� � ��� ������.

IBM� �� �� �� ��� �� �� � � ��� � � ��� � ���

�.

� ��� ����� ��� � ��, � � ��� ���� �� � ����.

106 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 119: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

�� ��� �� �� �� ���� �� � IBM Corporation� �����.

AIX

DB2

IBM

IBM ��

OS/390

SecureWay

Tivoli

Tivoli ��

Tivoli Management Environment

Tivoli Enterprise Console

zSeries

Lotus� �� �� �� ���� �� � IBM Corporation � Lotus Development

Corporation� �����.

Microsoft, Windows, Windows NT � Windows ��� �� �� �� ����

�� � Microsoft Corporation� �������.

Java � �� Java � ��� ��� �� �� �� ���� �� � Sun

Microsystems, Inc.� �� �� �������.

UNIX� �� �� �� ���� �� � Open Group� �������.

�� �, �� � ��� ��� � �� �� �� �������.

�� D. ���� 107

Page 120: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

108 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 121: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

��

����� ��

URL 7

�� ��

AIX 33

HP-UX 35

Linux 39

Solaris 37

�� ���

�� �� 40

�� ����� �� 43

�� �� 41

�� ����� �� 44

� URL 7

��, �� �� 101

�� 55

�� 68

��� � 69

�� �� 68

�� �� �� 69

�� �� �� 68

�� �� 55

�� �� � 58

�� � 60, 91

�� �� 77

�� �� �� 79

�� �� �� 80

�� �� � 99

����� �� 3

�� URL 7

���

pdostecd �� 71

����� �� �� ��� 81

��� �� �� 52

��������� 13, 46, 101

se2pdos 101

Tivoli Access Control Facility 101

���

�� vii

��� vii

��� ���� 53

��

pdoscfg 55, 58

pdosteccfg 71

pdosucfg 77

�� ��

AIX 34

HP-UX 36

Linux 39

Solaris 38

�� � � 69, 80

����� ��

�� 101

������ 101

��� 101

�� 102

� 101

������

�� �� 101

�� �� ����� � 13

��

�� vii

��� vii

��

�� ����� 81

�� ���� 12

�� � � �� 12

�� �� 9

�� �� 26

�� �� 10

�� �� (��)

�� 11, 15

InstallShield Multiplatform GUI 10, 15

InstallShield MultiPlatform � ��

10, 15

�� �� 83

�� �� ��� 88

��� �� 88

AIX 84

HP-UX 85

InstallShield Multiplatform 84

Linux 88

Solaris 86

Tivoli Management Framework 90

�� ��� CD �� 5

��� ���� �� 29

����� ���� 9

����� ���� 9

����� �� ix

��

�� �� 69, 80

� � � 74

����� ��

�� 7, 48

�� �� �� ��� 7, 48

�� �� ���

�� �� 88

Java �� 49

Tivoli Management Framework �� 51

�� �

�� 49

�� � �� 49

�����

�� �� � 13

�� �� � 46

��� ��

�� �� 80

�� �� 88

��� �� �� �� 80

HP-UX�� 89

Linux�� 90

© Copyright IBM Corp. 2000, 2003 109

Page 122: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

��� �� �� �� (��)

Solaris�� 90

��, �� �� 102

�� �� viii

�� 60

�� �� 101

se2pdos 101

� �� �� viii

�� �� 68, 69

�� �� 79

�� 69

��� � � 80

�� 68

�� �� ��

�� 69

�� �� ��

�� 68

���� �� 30

��

�� 1

���� 2

������ � �� �� 73

����� �(�� ��) �� 54

������ �� �� viii

������� ���� 9

AACL �� 57

Admintool

Solaris 37

AIX

�� �� 33

�� �� 34

�� �� 84

SMIT 33

autostart 73

CCD �� 3

FFramework CD �� 6

HHP-UX

�� �� 35

�� �� 36

�� �� 85

swinstall 35

IInstallShield Multiplatform 16

� � 19

��� �� 17

JJava 49

Java ��

�� �� ��� 49

LLANGPACK.IND � 52

Linux

�� �� 39

�� �� 39

�� �� 88

Ppdoscfg 55, 58, 91

� 69

pdoscfg� � � �� 69

pdosteccfg 71

�� 71

�� �� 72

pdostecd

�� 75

�� 75

pdosucfg 77, 80, 99

� 77

pdosucfg� � � �� 80

policy branch 11

Sse2pdos

������ 101

� 101

SMIT 84

AIX� �� 33

Solaris

�� �� 37

�� �� 38

�� �� 86

Admintool 37

svrsslcfg 56

swinstall

HP-UX� �� 35

TTivoli Access Control Facility 101

��� ������ 9

Tivoli Access Control Facility��� ���

��� 9

Tivoli Access Manager for Operating

Systems �� 73

Tivoli Access Manager for Operating

Systems �� 74

Tivoli Enterprise Console Integration

�� �� 42

�� ����� �� 45

�� �� 43

�� ����� �� 45

Tivoli Management Framework 40, 51

�� �� 90

Tivoli Management Framework ��

�� �� ��� 51

Tivoli �� 40

110 IBM Tivoli Access Manager for Operating Systems: �� ���

Page 123: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base
Page 124: IBM Tivoli Access Manager for Operating Systems:publib.boulder.ibm.com/tividd/td/ITAMOS/SC23-4829... · IBM Java Runtime Environment 1.3.1.5 Java131.rte IBM AIX Certificate SSL Base

���

Printed in Denmark by IBM Danmark A/S

SA30-1841-01