Pegasus Enhancement Proposal (PEP)
PEP #: 174
Title: Recommended OpenPegasus 2.4 Build and Configuration Options for Selected Platforms
Version: 1.10
Created: 22 June 2004
Authors: Warren Otsuka, Denise Eckstein
Status: Approved (Ballot 77)
Abstract: This PEP defines a set of recommended options for building,
testing and running OpenPegasus 2.4 on a selected set of platforms. In this version of the PEP,
platform-specific configuration options have been documented for the following platforms:
HP-UX and Linux. Options for OpenVMS are included but not planned for 2.4.
Note 1: The recommendations defined in this PEP
are not intended to document the feature set included in any vendor's
OpenPegasus-based product. Rather, the purpose of this PEP is to provide
input to vendors when making product decisions.
Change Summary:
The intent of the following table is only to provide a function-level summary
of the changes in this revision of the PEP. Please refer to PEP 97 for the
OpenPegasus 2.4 Release definition.
- (Not) Included = By default, support for the feature is (not) included in the build.
- NC = Support for the feature is Not Configurable (NC). A "Configurable" feature is one that
has been designed to be easily added or removed from the build using a
environment variable and/or setting a define variable.
PEP |
Functionality |
Default Test (Nightly) Build Status |
68,84,86 |
Pluggable Provider Manager Support |
Included |
127 & 128 |
CIM Server Statistics Provider |
Included |
141 |
Resolver Cleanup |
Included (NC) |
72 |
Out-of-Process Provider Support |
Included |
102 |
CMPI Provider Support |
Included |
12 |
Association
Operations |
Included (NC) |
145 |
JMPI
Provider Support |
Not Included |
56, 58,
146, 161 |
Infrastructure
Support for Globalization |
Included (NC) |
Use of ICU for Localizing Messaging |
Not Included |
164 |
Binary Repository
Support |
Included (NC) |
30, 89 |
SLP
Support |
Not Included |
140 |
Client-side HTTP Chunking Support |
Included (NC) |
130 |
Remote CMPI Support |
Not Included |
129 |
Shared Repository |
Not Included |
139 |
Cross Namespace
Associations |
Included (NC) |
119 |
WQL Exec Query |
Included (NC) |
157 |
Client API Enhancements for
Developers |
Included (NC) |
Definition of the Problem
OpenPegasus supports a large number of build and runtime options. Determining
which options to use can be challenging. The purpose of this PEP is to simplify
the build, testing and administration of OpenPegasus 2.4 by providing
a recommended, tested set of options.
Proposed Solution
Build Prerequisites
Linux
- If PEGASUS_PAM_AUTHENTICATION is set, the pam-devel-0.77-184.i586.rpm needs
to be installed.
Environment Variable Settings for Building OpenPegasus 2.4
Definitions
PEGASUS_ENABLE_CMPI_PROVIDER_MANAGER
Description: If set, a version of OpenPegasus that supports
CMPI providers and their dependent components is built.
Default Value: Not Set
Recommended Value (Test Build): Set (Linux Platform Only)
Recommended Value (Release Build): Set (Linux Platform Only)
Required: No
Considerations: This feature is not available if the
PEGASUS_USE_23PROVIDER_MANAGER variable is set.
PEGASUS_ENABLE_JMPI_PROVIDER_MANAGER
Description: If set, a version of OpenPegasus that supports
JMPI providers and their dependent
components
is built.
Default Value: Not Set
Recommended Value (Test Build): Not Set
Recommended Value (Release Build): Not Set
Required: No
Considerations: This feature is not available if the
PEGASUS_USE_23PROVIDER_MANAGER variable is set.
PEGASUS_ENABLE_REMOTE_CMPI
Description: If set, a version of OpenPegasus that supports
Remote CMPI providers and their dependent
components
is built.
Default Value: Not Set
Recommended Value (Test Build): Not Set
Recommended Value (Release Build): Not Set
Required: No
Considerations: This feature is not available if the
PEGASUS_USE_23PROVIDER_MANAGER variable is set.
ICU_INSTALL
Description: When set, points to the directory
containing the
ICU (International Components for Unicode) libraries.
Note that the 'lib' sub-directory is appended to this
variable. This is used during build to link to ICU.
Default Value: Not Set
Recommended Value (Test Build): Not Set
Recommended Value (Release Build): Not Set
Required: No
Considerations: This environment variable is
only used if PEGASUS_HAS_MESSAGES is set. Refer to
PEGASUS_HAS_MESSAGES for additional details.
ICU_ROOT
Description: When set, points to the root directory
of the
ICU (International Components for Unicode) source tree (ie.
the directory before the source directory in the ICU distribution).
This is used during build
to compile against the ICU header files.
Default Value: Not Set
Recommended Value (Test Build): Not Set
Recommended Value (Release Build): Not Set
Required: No
Considerations: This environment variable is
only used if PEGASUS_HAS_MESSAGES is set. Refer to
PEGASUS_HAS_MESSAGES for additional details.
OPENSSL_HOME
Description: Specifies the location of the OpenSSL
SDK directory. This directory must contain the OpenSSL include
directory, $(OPENSSL_HOME)/include, the OpenSSL library directory,
$(OPENSSL_HOME)/lib, and the OpenSSL binary directory,
$(OPENSSL_HOME)/bin.
Default Value: Not Set
Recommended Value (Test Build): No Specific Recommendation
Recommended Value (Release Build): No Specific Recommendation
Required: Yes, if PEGASUS_HAS_SSL is set.
PEGASUS_DEBUG
Description: Builds a debug version of OpenPegasus.
Default Value: Not Set
Recommended Value (Test Build): Set
Recommended Value (Release Build): Not Set
Required: No
PEGASUS_ENABLE_USERGROUP_AUTHORIZATION
Description: Builds a version of OpenPegasus that allows an
administrator to restrict access to CIM operations to members of a designed
set of groups. Refer to the
authorizedUserGroups configuration option for additional details.
Default Value: Set
Recommended Value (Test Build): Set
Recommended Value (Release Build): Set
Required: No
PEGASUS_HAS_MESSAGES
Description: When set (to anything) during the build,
OpenPegasus compiles with localization support. The
ICU (International Components for Unicode) variables,
ICU_ROOT and ICU_INSTALL, indicate that the
localization support is based on ICU. Only ICU is supported
at this time.
Default Value: Not Set
Recommended Value (Test Build): Not Set
Recommended Value (Release Build): Not Set
Required: No
Considerations: If the PEGASUS_HAS_MESSAGES is not
set, OpenPegasus is built without localization support. This means that
all messages sent by the CIM Server and the CLIs are in English.
ICU is an open source project at
http://oss.software.ibm.com/icu.
Only English tran/slations are included with the OpenPegasus distribution.
The OpenPegasus distribution does not provide translated messages. But,
enabling for ICU would allow vendor to provide the translations. Refer
to the OpenPegasus Release README for additional information regarding
the use of ICU.
Although, in OpenPegasus 2.3.2, experience with localization support
has been limited to a select set of platforms, wider platform adoption
of this technology is planned for 2.4.
PEGASUS_HAS_PERFINST
Description: Builds a version of OpenPegasus that enables
support for gathering performance data.
Default Value: Set
Recommended Value (Test Build): Set
Recommended Value (Release Build): Set
Required: No
Considerations: The CIM_ObjectManager.GatherStatisticalData
property is used to control statistic gathering.
PEGASUS_HAS_SSL
Description: If set, a version of OpenPegasus that supports
SSL (i.e., https) is built.
Default Value: Not Set
Recommended Value (Test Build): Set
Recommended Value (Release Build): Set
Required: No
Considerations: Support for SSL in OpenPegasus is dependent on
the OpenSSL software developed by the
OpenSSL Project (http://www.openssl.org/).
If the PEGASUS_HAS_SSL variable is set, the variable OPENSSL_HOME must also be defined.
The OPENSSL_HOME variable is used, by the OpenPegasus build, to determine the
location of the OpenSSL include files, libraries and binaries.
PEGASUS_HOME
Description: Specifies the location of the
OpenPegasus working directory. The OpenPegasus
build will use this directory as the default location
for files generated during the build (e.g., binaries,
libraries, objects).
Default Value: None
Recommended Value (Test Build): No Specific Recommendation
Recommended Value (Release Build): No Specific Recommendation
Required: Yes
Considerations: The error "PEGASUS_HOME environment
variable undefined" is returned if the PEGASUS_HOME
environment variable is not set. This variable is also
used during runtime. Refer to the section titled "Environment Variable
Settings for Running OpenPegasus 2.3.2 on Linux" for additional
details.
PEGASUS_LOCAL_DOMAIN_SOCKET
Description: Enables support for local (same-system)
connections over a Unix domain socket. When the Pegasus source is
compiled with the -DPEGASUS_LOCAL_DOMAIN_SOCKET option, the CIM
Server is built to allow connections to be established using a
domain socket rather than a TCP port.
Default Value: Not Set
Recommended Value (Test Build): Set
Recommended Value (Release Build): Set
Required: No
Considerations: In high-threat environments, a customer
may want to disable all ports. Support for this option, allows the
CIM Server to continue to receive and process requests from local
CIM Clients.
PEGASUS_ROOT
Description: Specifies the location of the directory
that corresponds to "pegasus" source directory defined in the
OpenPegasus CVS source tree. This environment variable is
used by the OpenPegasus build to locate the required build
and source files (e.g., $(PEGASUS_ROOT)/mak and
$(PEGASUS_ROOT)/src).
Default Value: None
Recommended Value (Test Build): No Specific Recommendation
Recommended Value (Release Build): No Specific Recommendation
Required: Yes
Considerations: The error "PEGASUS_ROOT environment
variable undefined" is returned if the PEGASUS_ROOT
environment variable is not set.
PEGASUS_NOASSERTS
Description: Defines the NDEBUG compilation macro, which
causes the preprocessor to remove PEGASUS_ASSERT() statements.
Default Value: Not Set
Recommended Value (Test Build): Not Set
Recommended Value (Release Build): Set
Required: No
PEGASUS_PAM_AUTHENTICATION
Description: Enables support for PAM-(Pluggable Authentication Modules)
based authentication.
Default Value: Not Set
Recommended Value (Test Build): Set
Recommended Value (Release Build): Set
Required: No
Considerations: Support for PAM in OpenPegasus is dependent on
platform support for PAM.
PEGASUS_PLATFORM
Description: Describes the target platform for the
build. The list of supported values for this variable
is defined in pegasus/mak/config.mak.
Default Value: None
Platform |
Recommended Value
Test Build |
Recommended Value
Release Build |
Linux IA32 |
LINUX_IX86_GNU |
LINUX_IX86_GNU |
Linux IA64 |
LINUX_IA64_GNU |
LINUX_IA64_GNU |
HP-UX PA-RISC |
HPUX_PARISC_ACC |
HPUX_PARISC_ACC |
HP-UX IPF |
HPUX_IA64_ACC |
HPUX_IA64_ACC |
OpenVMS Alpha |
VMS_ALPHA_DECCXX |
VMS_ALPHA_DECCXX |
Required: Yes
Considerations: The error "PEGASUS_PLATFORM
environment variable undefined." is returned if the PEGASUS_PLATFORM
environment variable is not set.
PEGASUS_USE_23PROVIDER_MANAGER (WILL BE REMOVED IN
2.5)
Description: Provider Manager 2 is now the default
implementation. This option switches back to the original Provider
Manger implementation.
Default Value: Not Set
Recommended Value (Test Build): Not Set
Recommended Value (Release Build): Not Set
PEGASUS_USE_AUTOMATIC_TRUSTSTORE_UPDATE (WILL BE REMOVED IN 2.5)
Description: Builds a version of OpenPegasus that supports the
enableSSLTrustStoreAutoUpdate configuration option. Refer to the
enableSSLTrustStoreAutoUpdate configuration option for additional details.
Default Value: Not Set
Recommended Value (Test Build): Not Set
Recommended Value (Release Build): Not Set
Required: No
Considerations: This feature will be removed in 2.5 in favor of
a better certificate management handler.
PEGASUS_USE_PAM_STANDALONE_PROC
Description: Moves the processing of PAM requests from
the CIM Server process to a separate process managed by the
CIM Server.
Default Value: Not Set
Recommended Value (Test Build): Set
Recommended Value (Release Build): Set
Required: No
Considerations: If PAM Authentication is enabled, the PAM
API is used, during the processing of each request, to authenticate
the client. This level of use makes the CIM Server extremely
sensitive to memory leaks in the PAM library. In addition,
certain PAM modules are not thread-safe. If your platform
is experiencing problems with PAM Authentication, use of option
may provide a work-around. PEGASUS_USE_PAM_STANDALONE_PROC requires
PEGASUS_PAM_AUTHENTICATION to be set.
PEGASUS_USE_RELEASE_CONFIG_OPTIONS
Description:
If set, OpenPegasus is built using the "Release Build"
configuration options. By default, OpenPegasus is built
using the "Test Build" configuration options.
Default Value: Not Set
Recommended Value (Test Build): Not Set
Recommended Value (Release Build): Set
Required: No
Considerations:
The PEGASUS_USE_RELEASE_CONFIG_OPTIONS variable allows
a platform vendor to easily toggle between two sets
of configurations options, a set of options tuned for
the development/debug ("Test Build") environment and a set
of options tuned for the production environment
("Release Build"). Refer the section titled "Configuration
Properties" for additional detail.
PEGASUS_USE_RELEASE_DIRS
Description: If set, OpenPegasus is built using
the "Release Build" directory definitions. By default,
OpenPegasus is built using the "Test Build" directory
definitions.
Default Value: Not Set
Recommended Value (Test Build): Not Set
Recommended Value (Release Build): Set
Required: No
Considerations:
The PEGASUS_USE_RELEASE_DIRS variable allows
a platform vendor to easily toggle between two sets
of directory definitions, a set tuned for the
development/debug ("Test Build") environment and a set
tuned for the production environment
("Release Build"). Refer the section titled "Configuration
Properties" for additional detail.
PEGASUS_USE_SYSLOGS
Description: If set, OpenPegasus will be built
to send log messages to the system logger (syslog).
Otherwise, log messages will be sent to OpenPegasus
specific log files.
IA32 Default Value: Not Set
IA64 Default Value: Set
Recommended Value (Test Build): Set
Recommended Value (Release Build): Set
Required: No
Considerations: This variable is currently
not implemented as an environment variable. To use
the option -DPEGASUS_USE_SYSLOGS must
be explicitly included in the appropriate platform
makefile (pegasus/mak/platform_*.mak).
Examples Building a Linux IA32 (#IA64) Development/Debug Version
export PEGASUS_ROOT=/home/pegasusbld/pegasus
export PEGASUS_HOME=/home/pegasusbld/pegasus/build
export PEGASUS_PLATFORM=LINUX_IX86_GNU
#export PEGASUS_PLATFORM=LINUX_IA64_GNU
export PEGASUS_LOCAL_DOMAIN_SOCKET=true
export PEGASUS_PAM_AUTHENTICATION=true
export PEGASUS_USE_PAM_STANDALONE_PROC=true
export PEGASUS_HAS_SSL=yes
export OPENSSL_HOME=/usr/include/openssl
export PEGASUS_DEBUG=TRUEexport ENABLE_CMPI_PROVIDER_MANAGER=true
export PEGASUS_ENABLE_USERGROUP_AUTHORIZATION=true
export PEGASUS_HAS_PERFSTATS=true
export PEGASUS_USE_SYSLOGS=true
export CVSROOT=:pserver:anon@cvs.opengroup.org:/cvs/MSB
export PATH=/home/pegasusbld:/home/pegasusbld/pegasus/build/bin:/usr/local/bin:$PATH
Building a Linux IA32 (#IA64) Production Release Version
export PEGASUS_ROOT=/home/pegasusbld/pegasus
export PEGASUS_HOME=/home/pegasusbld/pegasus/build
export PEGASUS_PLATFORM=LINUX_IX86_GNU
#export PEGASUS_PLATFORM=LINUX_IA64_GNU
export PEGASUS_LOCAL_DOMAIN_SOCKET=true
export PEGASUS_PAM_AUTHENTICATION=true
export PEGASUS_USE_PAM_STANDALONE_PROC=true
export PEGASUS_HAS_SSL=yes
export OPENSSL_HOME=/usr/include/openssl
export PEGASUS_USE_RELEASE_CONFIG_OPTIONS=true
export PEGASUS_USE_RELEASE_DIRS=true
export PEGASUS_NOASSERTS=true
export ENABLE_CMPI_PROVIDER_MANAGER=true
export PEGASUS_ENABLE_USERGROUP_AUTHORIZATION=true
export PEGASUS_HAS_PERFSTATS=true
export PEGASUS_USE_SYSLOGS=true
export PATH=/home/pegasusbld:/home/pegasusbld/pegasus/build/bin:/usr/local/bin:$PATH
Environment Variable Settings for Running OpenPegasus 2.4
Definitions
PEGASUS_HOME
Description: There are multiple options for
configuring the location of OpenPegasus runtime
files (e.g., configuration files, libraries,
repository, executables). If no other option is
specified, OpenPegasus will attempt to use the value
PEGASUS_HOME.
Default Value: "."
Recommended Value (Test Build): The same value defined at build time.
Recommended Value (Release Build): Not Set
Required: No
Considerations: Although this variable can be useful in a
development environment use of this environment variable is not
recommended in a production environment. Instead, the use of
configuration properties to explicitly set the location of
runtime files and directories is recommended.
PEGASUS_MSG_HOME
Description: This value is not used by the CIM Server.
The CIM Server uses the messageDir configuration parameter to locate the directory
where the ICU resource bundles. However, CIM Client applications must rely on
an alternative mechanism to locate this directory.
Default Value: if $PEGASUS_HOME is set then "$PEGASUS_HOME/msg"
else "."
Recommended Value (Test Build): $PEGASUS_HOME/msg
Recommended Value (Release Build): Not Set
Required: No
Considerations: Use of the PEGASUS_MSG_HOME environment is not
recommended in a production environment, CIM Client application developers
are encouraged to use MessageLoader::setPegasusMsgHome(String home) to
explicitly set the directory where the ICU resource bundles are located.
Configuration Properties
Notation
This section describes the notation used to define the
configuration properties.
Default Value
The value of Default Value is the OpenPegasus
default setting for this configuration option. This
value is used if a platform-specific setting is not
defined.
Recommended Default Value
The PEGASUS_USE_RELEASE_CONFIG_OPTIONS variable allows
a platform vendor to easily toggle between two sets
of configurations options, a set of options tuned for
the development/debug ("Test Build") environment and a set
of options tuned for the production environment
("Release Build"). The value of
Recommended Value (Test Build)
is the recommended default value for use in a development/
debug environment. The value of
Recommended Value (Release Build) is the recommended
default value for use in a production environment.
Recommend To Be Fixed/Hidden
Configuration options can be defined as fixed or
hidden. A "fix" configuration option is set at build time
and cannot be changed without rebuilding. "Fixed" configuration
options are not displayed using the cimconfig command. This
feature can be used by vendors to limit OpenPegasus
functionality and configurability.
A "hidden" configuration option is an option that is
configurable (i.e., "not fixed"), but not externally
advertised using the cimconfig command. The "hidden"
feature can be used to define "internal use only"
configuration options.
Dynamic?
If yes, the value of the configuration option can be
changed without stopping and restarting the CIM Server.
Directory Specifications
Note that the variables included in the following table
(e.g., $LOGDIR) are for documentation purposes only and have been defined to
simplify the description of the configuration options. In particular,
these variables DO NOT correspond to environment variables implemented in the
OpenPegasus code.
Platform |
|
|
Linux |
$LOGDIR |
/var/opt/tog-pegasus/log |
$PROVIDERDIRS |
/opt/tog-pegasus/providers/lib |
$REPOSITORYDIR |
/var/opt/tog-pegasus/repository |
$CERTIFICATEDIR |
/etc/opt/tog-pegasus |
$LOCALAUTHDIR |
/var/opt/tog-pegasus/cache/localauth |
$TRACEDIR |
/var/opt/tog-pegasus/cache |
$CONFIGDIR |
/var/opt/tog-pegasus |
$PIDFILE |
/var/run/cimserver.pid |
$RANDOMDIR |
/etc/opt/tog-pegasus |
$SOCKETDIR |
/var/run/tog-pegasus/socket |
$MESSAGEDIR |
/opt/tog-pegasus/share/locale/ICU_Messages |
HP-UX |
$LOGDIR |
/var/opt/wbem |
$PROVIDERDIRS |
/opt/wbem/providers/lib |
$REPOSITORYDIR |
/var/opt/wbem/repository |
$CERTIFICATEDIR |
/etc/opt/hp/sslshare/ |
$LOCALAUTHDIR |
/var/opt/wbem |
$TRACEDIR |
/var/opt/wbem |
$CONFIGDIR |
/etc/opt/wbem/ |
$PIDFILE |
/etc/opt/wbem/cimserver_start.conf |
$RANDOMDIR |
/var/opt/wbem |
$SOCKETDIR |
/var/opt/wbem/socket |
$MESSAGEDIR |
/opt/wbem/share/locale/ICU_Messages |
OpenVMS |
$LOGDIR |
/var/opt/wbem/logs |
$PROVIDERDIRS |
/var/opt/wbem/providers/lib |
$REPOSITORYDIR |
/var/opt/wbem/repository |
$CERTIFICATEDIR |
/etc/opt/hp/sslshare |
$LOCALAUTHDIR |
/var/opt/wbem |
$TRACEDIR |
/var/opt/wbem |
$CONFIGDIR |
/var/opt/wbem |
$PIDFILE |
/var/opt/wbem |
$RANDOMDIR |
/var/opt/wbem |
$SOCKETDIR |
|
$MESSAGEDIR |
|
Definitions
authorizedUserGroups
Description: If
the authorizedUserGroups property is set, the value is interpreted as
a list of comma-separated user groups whose members may issue CIM requests.
A user who is not a member of any of these groups is restricted from issuing
CIM requests, with the exception of privileged users (root user). If the
authorizedUserGroups property is not set, any user may issue CIM
requests.
Default Value: false
Recommended Default Value(Test Build): false
Recommended Default Value(Release Build): false
Recommend To Be Fixed/Hidden(Test Build): No/No
Recommend To Be Fixed/Hidden(Release Build): No/No
Dynamic?: No
Example: #
cimconfig -s authorizedUserGroups=users,systemusers
Considerations: This feature is available only when the
OpenPegasus source is compiled with the flag
PEGASUS_ENABLE_USERGROUP_AUTHORIZATION set.
daemon
Description: This option enables/disables forking of the
code to create a background daemon process.
Default Value: true
Recommended Default Value(Test Build): true
Recommended Default Value(Release Build): true
Recommend To Be Fixed/Hidden(Test Build): No/No
Recommend To Be Fixed/Hidden(Release Build): No/Yes
Dynamic?: No
Platform |
Source Configuration File |
Linux |
Pegasus/Config/DefaultPropertyTableLinux.h |
HP-UX |
Pegasus/Config/DefaultPropertyTableHpux.h |
OpenVMS |
Pegasus/Config/DefaultPropertyTableVms.h |
enableAssociationTraversal
Description: If true, the CIM Server will support
the fourn association traversal operators: Associators,
AssociatorNames,References, and ReferenceNames.
Default Value: true
Recommended Default Value(Test Build): true
Recommended Default Value(Release Build): true
Recommend To Be Fixed/Hidden(Test Build): No/No
Recommend To Be Fixed/Hidden(Release Build): No/No
Dynamic?: No
Considerations: There is still an outstanding
Provider Registration issues that restricts the degree to
which separate Providers can register for Associations.
Platform |
Source Configuration File |
Linux |
Pegasus/Config/DefaultPropertyTableLinux.h |
HP-UX |
Pegasus/Config/DefaultPropertyTableHpux.h |
OpenVMS |
Pegasus/Config/DefaultPropertyTableVms.h |
enableAuthentication
Description: If true, a Client must be authenticated
to access the CIM Server.
Recommended Default Value(Test Build): false
Recommended Default Value(Release Build): true
Recommend To Be Fixed/Hidden(Test Build): No/No
Recommend To Be Fixed/Hidden(Release Build): Yes
Dynamic?: No
Source Configuration File: Pegasus/Config/SecurityPropertyOwner.cpp
enableBinaryRepository
enableIndicationService
Description: If true, the CIM Server will support
CIM Indications.
Default Value: true
Recommended Default Value(Test Build): true
Recommended Default Value(Release Build): true
Recommend To Be Fixed/Hidden(Test Build): No/No
Recommend To Be Fixed/Hidden(Release Build): No/No
Dynamic?: No
Platform |
Source Configuration File |
Linux |
Pegasus/Config/DefaultPropertyTableLinux.h |
HP-UX |
Pegasus/Config/DefaultPropertyTableHpux.h |
OpenVMS |
Pegasus/Config/DefaultPropertyTableVms.h |
enableHttpConnection
Description: If true, allows connections to
the CIM Server using the HTTP protocol
Default Value: true
Recommended Default Value(Test Build): true
Recommended Default Value(Release Build): false
Recommend To Be Fixed/Hidden(Test Build): No/No
Recommend To Be Fixed/Hidden(Release Build): No/No
Dynamic?: No
Considerations: This option should only be enabled in
environments where sending the HTTP Request and HTTP Response as
clear text messages does not introduce a security risk.
Note that if authentication is enabled (enableAuthentication),
user names and passwords will be included in the text of the HTTP
message.
Platform |
Source Configuration File |
Linux |
Pegasus/Config/DefaultPropertyTableLinux.h |
HP-UX |
Pegasus/Config/DefaultPropertyTableHpux.h |
OpenVMS |
Pegasus/Config/DefaultPropertyTableVms.h |
enableHttpsConnection
Description: If true, allows connections to
the CIM Server using the HTTPS protocol (HTTP using
Secure Socket Layer encryption)
Default Value: false
Recommended Default Value(Test Build): true
Recommended Default Value(Release Build): true
Recommend To Be Fixed/Hidden(Test Build): No/No
Recommend To Be Fixed/Hidden(Release Build): No/No
Dynamic?: No
Considerations: For this option to work,
the environment variable PEGASUS_HAS_SSL must have
been set when CIM Server was built.
Platform |
Source Configuration File |
Linux |
Pegasus/Config/DefaultPropertyTableLinux.h |
HP-UX |
Pegasus/Config/DefaultPropertyTableHpux.h |
OpenVMS |
Pegasus/Config/DefaultPropertyTableVms.h |
enableNamespaceAuthorization
Description: If true, the CIM Server restricts
access to namespaces based on configured user authorizations
[user authorizations may be configured using the cimauth command]
Default Value: false
Recommended Default Value(Test Build): false
Recommended Default Value(Release Build): false
Recommend To Be Fixed/Hidden(Test Build): No/No
Recommend To Be Fixed/Hidden(Release Build): No/No
Dynamic?: No
Considerations:
This option offers limited functionality and, in most environments,
expensive to administer. It's use is not recommended.
Source Configuration File: Pegasus/Config/SecurityPropertyOwner.cpp
enableProviderProcesses
Description: If true, the CIM Server runs Providers in separate
processes rather than loading and calling Provider libraries directly within
the CIM Server process.
Default Value: false
Recommended Default Value(Test Build): false
Recommended Default Value(Release Build): false
Recommend To Be Fixed/Hidden(Test Build): No/No
Recommend To Be Fixed/Hidden(Release Build): No/No
Dynamic?: No
Platform |
Source Configuration File |
Linux |
Pegasus/Config/DefaultPropertyTableLinux.h |
HP-UX |
Pegasus/Config/DefaultPropertyTableHpux.h |
OpenVMS |
Pegasus/Config/DefaultPropertyTableVms.h |
enableRemotePrivilegedUserAccess
Description: If true, the CIM Server allows
access by a privileged user from a remote system
Default Value: true
Recommended Default Value(Test Build): true
Recommended Default Value(Release Build): true
Recommend To Be Fixed/Hidden(Test Build): No/No
Recommend To Be Fixed/Hidden(Release Build): No/No
Dynamic?: No
Considerations: Many management operations require
privileged user access. Disabling remote access by
privileged user could significantly affect functionality.
Source Configuration File: Pegasus/Config/SecurityPropertyOwner.cpp
enableSSLExportClientVerification
Description: If true, the CIM Server allows HTTPS connection for CIMExport requests on the port specified by the service name "wbem-exp-https".
Default Value: false
Recommended Default Value(Test Build): true
Recommended Default Value(Release Build): false
Recommend To Be Fixed/Hidden(Test Build): No/No
Recommend To Be Fixed/Hidden(Release Build): No/No
Dynamic?: No
Source Configuration File: Pegasus/Config/SecurityPropertyOwner.cpp
enableSSLTruststoreAutoUpdate (WILL BE REMOVED IN 2.5)
Description: If a client sends an untrusted certificate with
valid username/password credentials for a privileged system user, the
server will automatically add the certificate to its truststore.
Default Value: false
Recommended Default Value(Test Build): false
Recommended Default Value(Release Build): false
Recommend To Be Fixed/Hidden(Test Build): Yes
Recommend To Be Fixed/Hidden(Release Build): Yes
Dynamic?: No
Considerations: This feature will be removed in 2.5 in favor
of a better certificate management handler.
Source Configuration File: Pegasus/Config/SecurityPropertyOwner.cpp
enableSubscriptionsForNonprivilegedUsers
Description: If true, nonprivileged user
of the system will be allowed to create Indication
Subscription, otherwise priviledged access is required.
Default Value: true
Recommended Default Value(Test Build): true
Recommended Default Value(Release Build): false
Recommend To Be Fixed/Hidden(Test Build): No/No
Recommend To Be Fixed/Hidden(Release Build): No/No
Dynamic?: No
Considerations: This option has meaning only if
enableIndicationService=true.
Source Configuration File: Pegasus/Config/SecurityPropertyOwner.cpp
exportSSLTrustStore
Description: Specifies the location of the OpenSSL truststore
for Indications. Consistent with the OpenSSL implementation, a truststore
can be either a file or directory. If the truststore is a directory, all the
certificates within the directory are considered trusted.
Default Value: indication_trust.pem
Recommended Default Value(Test Build): indication_trust.pem
Recommended Default Value(Release Build): $CERTIFICATEDIR/indication_trust.pem
Recommend To Be Fixed/Hidden(Test Build): No/No
Recommend To Be Fixed/Hidden(Release Build): Yes
Dynamic?: No
Source Configuration File: Pegasus/Config/SecurityPropertyOwner.cpp
home
Description: If set, this configuration option defines
the runtime default value for PEGASUS_HOME.
Default Value: "./"
Recommended Default Value(Test Build)"./"
Recommended Default Value(Release Build)""
Recommend To Be Fixed/Hidden(Test Build): No/No
Recommend To Be Fixed/Hidden(Release Build): Yes
Dynamic?: No
Platform |
Source Configuration File |
Linux |
Pegasus/Config/DefaultPropertyTableLinux.h |
HP-UX |
Pegasus/Config/DefaultPropertyTableHpux.h |
OpenVMS |
Pegasus/Config/DefaultPropertyTableVms.h |
httpPort
Description: OpenPegasus first attempts to look up the
port number for HTTP using getservbyname for the 'wbem-http' service.
The httpPort configuration setting is used only when the
getservbyname lookup fails.
Default Value5988
Recommended Default Value(Test Build): 5988
Recommended Default Value(Release Build): 5988
Recommend To Be Fixed/Hidden(Test Build): No/No
Recommend To Be Fixed/Hidden(Release Build): Yes
Dynamic?: No
Considerations: The use of 5988 for WBEM HTTP is
recommended by the DMTF. This port has been registered with
IANA.
In a production environment, the recommendation is to use
/etc/services to configure the value of this port.
Platform |
Source Configuration File |
Linux |
Pegasus/Config/DefaultPropertyTableLinux.h |
HP-UX |
Pegasus/Config/DefaultPropertyTableHpux.h |
OpenVMS |
Pegasus/Config/DefaultPropertyTableVms.h |
httpsPort
Description:
OpenPegasus first attempts to look up the port number for HTTPS using
getservbyname for the 'wbem-https' service. The httpsPort configuration
setting is used only when the getservbyname lookup fails.
Default Value: 5989
Recommended Default Value(Test Build): 5989
Recommended Default Value(Release Build): 5989
Recommend To Be Fixed/Hidden(Test Build): No/No
Recommend To Be Fixed/Hidden(Release Build): Yes
Dynamic?: No
Considerations: The use of 5989 for WBEM HTTPS is
recommended by the DMTF. This port has been registered with
IANA.
In a production environment, the recommendation is to use
/etc/services to configure the value of this port.
Platform |
Source Configuration File |
Linux |
Pegasus/Config/DefaultPropertyTableLinux.h |
HP-UX |
Pegasus/Config/DefaultPropertyTableHpux.h |
OpenVMS |
Pegasus/Config/DefaultPropertyTableVms.h |
logdir
Description: Specifies the name of the directory
to be used for the OpenPegasus specific log files.
Recommended Default Value(Test Build): logs
Recommended Default Value(Release Build): $LOGDIR
Recommend To Be Fixed/Hidden(Test Build): No/No
Recommend To Be Fixed/Hidden(Release Build): Yes
Dynamic?: Yes
Considerations:
Source Configuration File: Pegsus/Config/LogPropertyOwner.cpp
logLevel
Description: Defines the desired level of logging.
Valid values include: TRACE, INFORMATION, WARNING, SEVERE,
FATAL.
Default Value: "INFORMATION"
Recommended Default Value(Test Build): "INFORMATION"
Recommended Default Value(Release Build): "SEVERE"
Recommend To Be Fixed/Hidden(Test Build): No/No
Recommend To Be Fixed/Hidden(Release Build): No/No
Dynamic?: Yes
Considerations:
Source Configuration File: Pegsus/Config/LogPropertyOwner.cpp
messageDir
Description: Specifies the name of the directory to be used for
the OpenPegasus translated messages.
Default Value: msg
Recommended Default Value(Test Build): msg
Recommended Default Value(Release Build): $MESSAGEDIR/msg
Recommend To Be Fixed/Hidden(Test Build): No/No
Recommend To Be Fixed/Hidden(Release Build): Yes
Dynamic?: No
Considerations: Only used when message localization is enabled.
See PEGASUS_HAS_MESSAGES for details.
Source Configuration File: FileSystemPropertyOwner.cpp
providerDir
Description: Specifies the names of the directories
that contains Provider executables.
Recommended Default Value(Test Build): lib
Recommended Default Value(Release Build): $PROVIDERDIRS
Recommend To Be Fixed/Hidden(Test Build): No/No
Recommend To Be Fixed/Hidden(Release Build): Yes
Dynamic?: No
Considerations: The CIM Server runs as a privileged user.
And, since Providers run in the same process space as the CIM
Server, Providers also have privileged access to the system.
Allowing a registered Provider’s executable to be replaced with
malicious code would result in a critical security defect,
giving a malicious user privileged access to the system.
Adminstrators are responsible for ensuring that only trusted Providers
are loaded into providerDir. In order to simplify the management
task associated with securing Provider executable, the value
of providerDir can be fixed at build time (i.e., set to one or more
fixed, well-known locations).
Source Configuration File: Pegasus/Config/FileSystemPropertyOwner.cpp
repositoryDir
Description: Specifies the name of the directory
to be used for the OpenPegasus repository.
Recommended Default Value(Test Build): repository
Recommended Default Value(Release Build): $REPOSITORYDIR/repository
Recommend To Be Fixed/Hidden(Test Build): No/No
Recommend To Be Fixed/Hidden(Release Build): Yes
Dynamic?: No
Considerations:
Source Configuration File: Pegasus/Config/FileSystemPropertyOwner.cpp
repositoryIsDefaultInstanceProvider
Description: If true, the Repository functions
as the Instance Provider for all classes for which there
is not an explicitly registered Provider. This flag is
also used to control the behavior of the repository when
processing association operators.
Recommended Default Value(Test Build): true
Recommended Default Value(Release Build): false
Recommend To Be Fixed/Hidden(Test Build): No/No
Recommend To Be Fixed/Hidden(Release Build): No/Yes
Dynamic?: No
Considerations: This flag can be used to configure the CIM Server to allow
the Repository to be used by CIM Clients and CIM Providers as
a dynamic data store. The setting of this flag will
significantly affect CIM Server behavior as viewed
by the CIM Client.
The following issues should be considered when setting
repositoryIsDefaultInstanceProvider=true:
- Authorization. The repository has no concept of which users
(or components) are authorized to perform which operations.
- Appearance of instrumentation. A client application cannot
determine whether instrumentation exists for a given CIM class. For example,
imagine a client issues a CreateInstance operation on a Disk class for
which no provider is registered. The instance will be stored in the repository, and the client gets a "success" response. Does that mean a
disk device has been created on the server? Even worse, when another
client issues an EnumerateInstances operation, the spurious Disk instance
is returned. With repositoryIsDefaultInstanceProvider=false, the
CreateInstance operation above would have returned a NOT_SUPPORTED
error.
- Potential for inconsistent data. Using the repository as
a data cache increases the probability that a client will see stale
or incorrect data. A provider can better control the correlation
between the data returned and the current state of the underlying
managed resource (whether or not the provider caches the data).
The following issues should be considered when setting
repositoryIsDefaultInstanceProvider=false:
- Provider Availability. Certain Providers have been developed
to use the Repository as a dynamic data store. These Providers are
currently not supported on system where this flag is disabled. E.g., the Common
Diagnostics Model (CDM) Provider (http://developer.intel.com/design/servers/cdm/)
relies on use of the Repository to store instances
of CIM_DiagnosticSetting. If this flag set to false, this Provider
will not function correctly. Note that this feature is supported by other WBEM implementation.
Therefore, disabling this feature can increase the cost of migrating
existing Providers to OpenPegasus.
Source Configuration File: Pegasus/Config/RepositoryPropertyOwner.cpp
shutdownTimeout
Description: When a cimserver -s shutdown command is issued,
specifies the maximum time in seconds for the CIM Server to
complete outstanding CIM operation requests before shutting down;
if the specified timeout period expires, the CIM Server will shut
down, even if there are still CIM operations in progress.
Minimum value is 2 seconds.
Recommended Default Value(Test Build): 10
Recommended Default Value(Release Build): 10
Recommend To Be Fixed/Hidden(Test Build): No/No
Recommend To Be Fixed/Hidden(Release Build): No/No
Dynamic?: No
Considerations:
Source Configuration File: Pegasus/Config/ShutdownPropertyOwner.cpp
slp
Description:
Default Value: false
Recommended Default Value(Test Build): false
Recommended Default Value(Release Build): false
Recommend To Be Fixed/Hidden(Test Build): No/No
Recommend To Be Fixed/Hidden(Release Build): Yes
Dynamic?: No
Platform |
Source Configuration File |
Linux |
Pegasus/Config/DefaultPropertyTableLinux.h |
HP-UX |
Pegasus/Config/DefaultPropertyTableHpux.h |
OpenVMS |
Pegasus/Config/DefaultPropertyTableVms.h |
sslCertificateFilePath
Description: Contains the CIM Server SSL Certificate.
Recommended Default Value(Test Build): server.pem
Recommended Default Value(Release Build): $CERTIFICATEDIR/server.pem"
Recommend To Be Fixed/Hidden(Test Build): No/No
Recommend To Be Fixed/Hidden(Release Build): Yes
Dynamic?: No
Considerations:
Source Configuration File: Pegasus/Config/SecurityPropertyOwner.cpp
sslClientVerificationMode
Description: Describes the desired level of support for
certificate-based authentication.
- “required” –
The server requires certificate-based client authentication. A client
MUST present a trusted certificate in order to access the CIM Server. If the client fails to send a certificate or
sends an untrusted certificate, the connection will be rejected.
- “optional” –
The server supports, but does not require, certificate-based client
authentication. The server will request and attempt to validate a client certificate,
however the connection will be accepted even if no certificate is sent or an untrusted
certificate is sent. The server will then seek to authenticate the client
via an authentication header.
- “disabled” – The server does not support certificate-based
client authentication.
Recommended Default Value(Test Build): optional
Recommended Default Value(Release Build): disabled
Recommend To Be Fixed/Hidden(Test Build): No/No
Recommend To Be Fixed/Hidden(Release Build): No/No
Dynamic?: No
Considerations: This property is only used if enableHttpsConnection is
"true".
Source Configuration File: Pegasus/Config/SecurityPropertyOwner.cpp
sslKeyFilePath
Description: Contains the private key for the CIM Server SSL Certificate.
Recommended Default Value(Test Build): file.pem
Recommended Default Value(Release Build): $CERTIFICATEDIR/file.pem
Recommend To Be Fixed/Hidden(Test Build): No/No
Recommend To Be Fixed/Hidden(Release Build): Yes
Dynamic?: No
Considerations:
Source Configuration File: Pegasus/Config/SecurityPropertyOwner.cpp
sslTrustStore
Description: Specifies the location of the OpenSSL truststore.
Consistent with the OpenSSL implementation, a truststore can be either a
file or directory.
If the truststore is a directory, all the certificates
within the directory are considered trusted.
Recommended Default Value(Test Build): client.pem
Recommended Default Value(Release Build): $CERTIFICATEDIR/client.pem
Recommend To Be Fixed/Hidden(Test Build): No/No
Recommend To Be Fixed/Hidden(Release Build): Yes
Dynamic?: No
Considerations:
Source Configuration File: Pegsus/Config/SecurityPropertyOwner.cpp
sslTrustStoreUserName
Description: Specifies the system user name to be associated
with all certificate-based authenticated requests.
Recommended Default Value(Test Build): NONE
Recommended Default Value(Release Build): NONE
Recommend To Be Fixed/Hidden(Test Build): No/No
Recommend To Be Fixed/Hidden(Release Build): No/No
Dynamic?: No
Considerations: This
property has no default; for security reasons, the system administrator must
explicitly specify this value. This feature allows a single user name to
be specified. This user will be associated with all certificates in the
truststore. In the future, OpenPegasus will allow a system administrator
to associate a distinct user name with each certificate.
Source Configuration File: Pegsus/Config/SecurityPropertyOwner.cpp
tempLocalAuthDir
Description: For local connections (i.e., connectLocal), OpenPegasus
uses a file-based authentication mechanism. The tempLocalAuthDir configuration
property specifies the name of the directory to used as part of this process.
Default Value: /tmp
Recommended Default Value(Test Build): /tmp
Recommended Default Value(Release Build): $LOCALAUTHDIR/localauth
Recommend To Be Fixed/Hidden(Test Build): No/No
Recommend To Be Fixed/Hidden(Release Build): Yes
Dynamic?: No
Platform |
Source Configuration File |
Linux |
Pegasus/Config/DefaultPropertyTableLinux.h |
HP-UX |
Pegasus/Config/DefaultPropertyTableHpux.h |
OpenVMS |
Pegasus/Config/DefaultPropertyTableVms.h |
traceComponents
Description: Defines the components to be traced.
Default Value: ""
Recommended Default Value(Test Build): ""
Recommended Default Value(Release Build): ""
Recommend To Be Fixed/Hidden(Test Build): No/No
Recommend To Be Fixed/Hidden(Release Build): No/Yes
Dynamic?: Yes
Considerations:
Source Configuration File: Pegasus/Config/TracePropertyOwner.cpp
traceFilePath
Description: Specifies the location of the OpenPegasus trace
file.
Default Value: cimserver.trc
Recommended Default Value(Test Build): cimserver.trc
Recommended Default Value(Release Build): $TRACEDIR/cimserver.trc
Recommend To Be Fixed/Hidden(Test Build): No/No
Recommend To Be Fixed/Hidden(Release Build): Yes
Dynamic?: Yes
Considerations:
Source Configuration File: Pegasus/Config/TracePropertyOwner.cpp
traceLevel
Description: Defines the desired level of tracing.
Valid values include: 1, 2, 3, 4, 5.
Default Value: 1
Recommended Default Value(Test Build): 1
Recommended Default Value(Release Build): 1
Recommend To Be Fixed/Hidden(Test Build): No/No
Recommend To Be Fixed/Hidden(Release Build): No/Yes
Dynamic?: Yes
Considerations:
Source Configuration File: Pegasus/Config/TracePropertyOwner.cpp
Configuration Constants
Definitions
static char CURRENT_CONFIG_FILE [] =
Description: Default file name for the current configuration file.
Recommended Default Value(Test Build): cimserver_current.conf
Recommended Default Value(Release Build): $CONFIGDIR/cimserver_current.conf
Dynamic?: No
Platform |
Source Configuration File |
Linux |
Pegasus/Config/ConfigFileDirLinux.h |
HP-UX |
ConfigFileDirHpux.h |
OpenVMS |
Pegasus/Config/ConfigFileDirVms.h |
static char PLANNED_CONFIG_FILE [] =
Description: Default file name for the planned configuration file.
Recommended Default Value(Test Build): cimserver_planned.conf
Recommended Default Value(Release Build): $CONFIGDIR/cimserver_planned.conf
Dynamic?: No
Platform |
Source Configuration File |
Linux |
Pegasus/Config/ConfigFileDirLinux.h |
HP-UX |
Pegasus/Config/ConfigFileDirHpux.h |
OpenVMS |
Pegasus/Config/ConfigFileDirVms.h |
static char CIMSERVER_START_FILE [] =
Description: This is for the default file name for the cimserver startup
file containing the PID.
Default Value: /tmp/cimserver_start.conf
Recommended Default Value(Test Build): /tmp/cimserver_start.conf
Recommended Default Value(Release Build): $PIDFILE
Dynamic?: No
Platform |
Source Configuration File |
Linux |
Pegasus/Config/ConfigFileDirLinux.h |
HP-UX |
Pegasus/Config/ConfigFileDirHpux.h |
OpenVMS |
Pegasus/Config/ConfigFileDirVms.h |
Configuration Macros
Definitions
PEGASUS_SSLCLIENT_CERTIFICATEFILE
Description:
Recommended Default Value(Test Build): client.pem
Recommended Default Value(Release Build): $CERTIFICATEDIR/client.pem
Dynamic?: No
Considerations:
Source Configuration File: Pegasus/Common/Constants.h
PEGASUS_SSLCLIENT_RANDOMFILE
Description: On platforms that do not support /dev/random or
/dev/urandom, OpenSSL will use this file to seed the PRNG (Pseudo-Random
Number Generator). This PEGASUS_SSLCLIENT_RANDOMFILE defines the default CIM
Client random file.
Recommended Default Value(Test Build): ssl.rnd
Recommended Default Value(Release Build): $RANDOMDIR/ssl.rnd"
Dynamic?: No
Considerations: Use of this variable requires
PEGASUS_HAS_SSL to be set. CIM Client use of a shared random file is
not recommended. On systems where /dev/random or /dev/urandom are not
available, CIM Clients are encouraged to generate a unique random file which
contains sufficiently entropy.
Source Configuration File: Pegasus/Common/Constants.h
PEGASUS_SSLSERVER_RANDOMFILE
Description: On platforms that do not support /dev/random or
/dev/urandom, OpenSSL will use this file to seed the PRNG (Pseudo-Random
Number Generator). This PEGASUS_SSLSERVER_RANDOMFILE defines the CIM Server
random file.
Recommended Default Value(Test Build): cimserver.rnd
Recommended Default Value(Release Build): $RANDOMDIR/cimserver.rnd
Dynamic?: No
Considerations: Use of this variable requires
PEGASUS_HAS_SSL to be set.
Source Configuration File: Pegasus/Common/Constants.h
PEGASUS_LOCAL_AUTH_DIR
Description:
Recommended Default Value(Test Build): /tmp
Recommended Default Value(Release Build): $LOCALAUTHDIR/localauth
Dynamic?: No
Considerations:
Source Configuration File: Pegasus/Common/Constants.h
PEGASUS_LOCAL_DOMAIN_SOCKET_PATH
Description:
Recommended Default Value(Test Build): /tmp/cimxml.socket
Recommended Default Value(Release Build): $SOCKETDIR/cimxml.socket
Dynamic?: No
Considerations:
Source Configuration File: Pegasus/Common/Constants.h
Rationale
Schedule
Discussion
Version History
Version |
Date |
Author |
Change Description |
1.0 |
22 June 2004 |
Denise Eckstein |
Initial Submission |
1.1 |
06 July 2004 |
Denise Eckstein |
Included LSB Linux options.
Added the following environment variables: PEGASUS_ENABLE_USERGROUP_AUTHORIZATION,
PEGASUS_USE_AUTOMATIC_TRUSTSTORE_UPDATE,
PEGASUS_HAS_PERFSTATS
Added the following configuration options:
enableProviderProcesses,
authorizedUserGroups, sslClientVerificationMode,
enableSSLTruststoreAutoUpdate, sslTrustStoreUsername
Changed sslTrustFilePath to sslTrustStore.
|
1.2 |
07 July 2004 |
Denise Eckstein |
Added enableSSLExportClientVerification,exportSSLTrustStore
Changed Linux directory prefix from "lsb" to "tog".
Removed Suse-specific items, the proposal is for
OpenPegasus to support a single set of Linux configurations
that are tunable by the distributions.
Added enableBinaryRepository & removeDescriptionQualifiers
Added messageDir & PEGASUS_MSG_HOME
|
1.3 |
02 Aug 2004 |
Denise Eckstein |
Changed "Debug Build" to "Test Build"
Added the following environment variables:
ENABLE_JMPI_PROVIDER_MANAGER,
PEGASUS_ADVANCED_CIMCLIENT
Replaced environment variable ENABLE_PROVIDER_MANAGER2 with
PEGASUS_USE_23PROVIDER_MANAGER
Changed $(CONFIGDIR) for Linux to /var/opt/tog-pegasus.
Set $(MSGDIR) for Linux to /opt/tog-pegasus/share/locale/en_US/LC_MESSAGES;
for HP-UX to /opt/wbem/share/locale/en_US/LC_MESSAGES
Updated "External Interfaces" section.
Updated "Environment Variable" Example setting to be consistent with
recommended default settings.
|
1.4 |
03 Aug 2004 |
Denise Eckstein |
Changed title of "External Interfaces" section to "Change Summary"
Updated Globalization entry in "Change Summary" section
Updated WQL Query entry in "Change Summary" section. This option
is not configurable.
Added Experimental to CMPI Provider item in "Change Summary"
Minor formatting changes suggested by reviewers.
Added OpenVMS to various tables.
Changed "Remote CMPI" from "Not Enabled" to "Not Included".
|
1.5 |
07 Aug2004 |
Denise Eckstein |
Added "For Selected Platforms" to the title.
Removed "Pending Item" section.
Added statement to Abstract highlighting the platforms that are
referenced in this PEP.
Added definition of "Configurable".
Added the sentence "The values defined in the PEP are currently
Pre-CTC (Certification Test Complete) and represent the
recommendations of the PEP submitter. Post-CTC, this PEP will
be updated to reflect the specific recommendations of the Platform
Advocates for the platforms referenced in this PEP." to the Abstract.
Changed "Cross Namespace
Associations" to INCLUDE(NC).
Removed Release Build Column from Change Summary table.
Removed the flag PEGASUS_ADVANCED_CLIENT. It is not implemented.
|
1.6 |
07 Aug2004 |
Denise Eckstein |
Added second Note. "Note 2: The recommendations defined in this PEP
are not intended to document the feature set included in any vendor's
OpenPegasus-based product. Rather, the purpose of this PEP is to provide
input to vendors when making product decisions."
|
1.7 |
10 Aug 2004 |
Denise Eckstein |
Added "static char" before definition of CIMSERVER_START_FILE.
Changed "ENABLE_CMPI_PROVIDER_MANAGER" to "PEGASUS_ENABLE_CMPI_PROVIDER_MANAGER";
"ENABLE_JMPI_PROVIDER_MANAGER" to "PEGASUS_ENABLE_JMPI_PROVIDER_MANAGER"; ENABLE_REMOTE_CMPI
to "PEGASUS_ENABLE_REMOTE_CMPI"
Added "/tmp/" to
Default Value: /tmp/cimserver_start.conf
and
Recommended Default Value(Test Build): /tmp/cimserver_start.conf
for CIMSERVER_START_FILE
Added missing "/repository" to $REPOSITORYDIR |
1.8 |
13 Aug 2004 |
Denise Eckstein |
Added "and their dependent components" to the descriptions PEGASUS_ENABLE_CMPI_PROVIDER_MANAGER,
PEGASUS_ENABLE_JMPI_PROVIDER_MANAGER, and PEGASUS_ENABLE_REMOTE_CMPI.
Updated "Considerations:" field for PEGASUS_ENABLE_CMPI_PROVIDER_MANAGER,
PEGASUS_ENABLE_JMPI_PROVIDER_MANAGER, and PEGASUS_ENABLE_REMOTE_CMPI to
refer to the PEGASUS_USE_23PROVIDER_MANAGER variable.
Fixed typo in "Considerations:" field of PEGASUS_USE_SYSLOGS.
Removed "removeDescriptionQualifiers" option.
|
1.9 |
24 Aug 2004 |
Denise Eckstein |
Actually removed "removeDescriptionQualifiers" option.
Version approved - Ballot 69.
|
1.10
Approved
Ballot 77 |
21 Sept 2004 |
Denise Eckstein |
Removed Pre-CTC Note in Abstract.
For Linux, changed PEGASUS_SOCKET_DIR from /var/run to /var/run/tog-pegasus/socket
Noted that the recommended settings for the variable PEGASUS_ENABLE_CMPI_PROVIDER_MANAGER
are for Linux only.
Changed the name of PEGASUS_HAS_PERFSTATS to PEGASUS_HAS_PERFINST.
Changed name of sslTrustStoreUsername to sslTrustStoreUserName.
|
Copyright (c) 2004 EMC Corporation; Hewlett-Packard Development Company, L.P.; IBM Corp.; The Open Group;
VERITAS Software Corporation
Permission is hereby granted, free of charge, to any person
obtaining a copy of this software and associated documentation files (the
"Software"), to deal in the Software without restriction, including without
limitation the rights to use, copy, modify, merge, publish, distribute,
sublicense, and/or sell copies of the Software, and to permit persons to whom
the Software is furnished to do so, subject to the following conditions:
THE ABOVE COPYRIGHT NOTICE AND THIS PERMISSION NOTICE SHALL BE INCLUDED IN ALL
COPIES OR SUBSTANTIAL PORTIONS OF THE SOFTWARE. THE SOFTWARE IS PROVIDED
"AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT
LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE
AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF
CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
Template last modified: January 20th 2004 by Martin Kirk
Template version: 1.6