HP OpenVMS Systems Documentation

When you click I/O on the Filter page, the Availability Manager displays the OpenVMS I/O Filters page (Figure 6-8).

Figure 6-8 OpenVMS I/O Filters Page

The OpenVMS I/O Summary page (Figure 3-11) displays the values you set on this filters page.

This filters page allows you to change values for the following data:

The OpenVMS Lock Contention Filters page allows you to remove (filter out) resource names from the Lock Contention page (Figure 3-17).

When you click Lock Contention on the Filter page, the Availability Manager displays the OpenVMS Lock Contention Filters page (Figure 6-9).

Figure 6-9 OpenVMS Lock Contention Filters Page

Each entry on the Lock Contention Filters page is a resource name or part of a resource name that you want to filter out. For example, the STRIPE$ entry filters out any value that starts with the characters STRIPE$. To redisplay original entries, click Use default values.

6.4.6 OpenVMS Memory Filters

When you click Memory Filters on the Filter page, the Availability Manager displays the OpenVMS Memory Filters page (Figure 6-10).

Figure 6-10 OpenVMS Memory Filters Page

The OpenVMS Memory page (Figure 3-9) displays the values on this filters page.

The OpenVMS Memory Filters page allows you to change values for the following data:

When you click Page/Swap File on the Filter page, the Availability Manager displays the OpenVMS Page/Swap File Filters page (Figure 6-11).

Figure 6-11 OpenVMS Page/Swap File Filters Page

The OpenVMS I/O Page Faults page (Figure 3-11) displays the values that you set on this filters page.

This filters page allows you to change values for the following data:

You can also select (turn on) or clear (turn off) the following options:

• Show page files
• Show swap files

You can customize a number of characteristics of the events that are displayed in the Events pane of the Application window (Figure 1-3).

When you select the Customize OpenVMS... or Customize Windows NT... option from the Application window's Customize menu, the Availability Manager displays a tabbed page similar to the one shown in Figure 6-12.

Figure 6-12 Event Customization Page

You can change the values for any data that is available (does not appear dimmed) on this page. The following table describes the data you can change:

The section of the page called "Event explanation and investigation hints" includes a description of the event and a hint about how to correct any problems that the event signals.

6.6 Customizing Security Features

The following sections explain how to change these security features:

• Data Analyzer passwords for OpenVMS and Windows NT Data Collector nodes
• OpenVMS Data Collector security triplets
• A Windows NT Data Collector password

You can change the passwords that the Windows NT Data Analyzer uses for OpenVMS Data Collector nodes and for Windows NT Data Collector nodes. The following sections explain how to perform both actions.

6.6.1.1 Changing a Data Analyzer Password for an OpenVMS Data Collector Node

When you click Customize OpenVMS... on the Customize menu of the Application window, the Availability Manager displays a Security page (Figure 6-13).

Figure 6-13 OpenVMS Security Customization Page

To change the default password for the Data Analyzer to use to access OpenVMS Data Collector nodes, enter a password of exactly 8 uppercase alphanumeric characters. The Availability Manager will use this password to access OpenVMS Data Collector nodes. This password must match the password that is part of the OpenVMS Data Collector security triplet (see Section 1.4).

When you are satisfied with your password, click OK. Exit the Availability Manager, and restart the application for the password to take effect.

6.6.1.2 Changing a Data Analyzer Password for a Windows NT Data Collector Node

When you click Customize Windows NT... on the Customize menu of the Application window, the Availability Manager displays a Security page (Figure 6-14).

Figure 6-14 Windows NT Security Customization Page

To change the default password for the Data Analyzer to use to access Windows NT Data Collector nodes, enter a password of exactly 8 alphanumeric characters. Note that this password is case sensitive; any time you type it, you must use the original capitalization.

This password must also match the password for the Windows NT Data Collector node that you want to access. (See Section 6.6.3 for instructions for changing that password.)

When you are satisfied with your password, click OK. Exit and restart the Availability Manager for the password to take effect.

6.6.2 Changing Security Triplets on OpenVMS Data Collector Nodes

To change security triplets on an OpenVMS Data Collector node, you must edit the AMDS$DRIVER_ACCESS.DAT file, which is installed on all Data Collector nodes. The following sections explain what a security triplet is, how the Availability Manager uses it, and how to change it.

6.6.2.1 Understanding OpenVMS Security Triplets

A security triplet determines which nodes can access system data from an OpenVMS Data Collector node. The AMDS$DRIVER_ACCESS.DAT file on OpenVMS Data Collector nodes lists security triplets.

On OpenVMS Data Collector nodes, the AMDS$AM_CONFIG logical translates to the location of the default security file, AMDS$DRIVER_ACCESS.DAT. This file is installed on all OpenVMS Data Collector nodes.

A security triplet is a three-part record whose fields are separated by backslashes (\). A triplet consists of the following fields:

• A network address (hardware address or wildcard character)
• An 8-character alphanumeric password
  The password is not case sensitive (so the passwords "testtest" and "TESTTEST" are considered to be the same).
• A read or write (R or W) access verification code

The exclamation point (!) is a comment delimiter; any characters to the right of the comment delimiter are ignored.

Example

All Data Collector nodes in group FINANCE have the following AMDS$DRIVER_ACCESS.DAT file:

*\FINGROUP\R   ! Let anyone with FINGROUP password read
               !
2.1\DEVGROUP\W ! Let only DECnet node 2.1 with
               ! DEVGROUP password perform fixes (writes)

On each Data Collector node on which you want to change security, you must edit the AMDS$DRIVER_ACCESS.DAT file. The data in the AMDS$DRIVER_ACCESS.DAT file is set up as follows:

      Network address\password\access

Use a backslash character (\) to separate the three fields.

To edit the AMDS$DRIVER_ACCESS.DAT file, follow these steps:

1. Edit the network address.
   The network address can be either of the following:
   • Hardware address
     The hardware address field is the physical hardware address in the LAN adapter chip. It is used if you have multiple LAN adapters or are running the Compaq DECnet-Plus for OpenVMS networking software on the system (not the Compaq DECnet Phase IV for OpenVMS networking software).
     For adapters provided by Compaq, the hardware address is in the form 08-00-2B-xx-xx-xx, where the 08-00-2B portion is Compaq's valid range of LAN addresses as defined by the IEEE 802 standards, and the xx-xx-xx portion is chip specific.
     To determine the value of the hardware address on a node, use the OpenVMS System Dump Analyzer (SDA) as follows:

     $ ANALYZE/SYSTEM SDA> SHOW LAN

     
     These commands display a list of available devices. Choose the template device of the LAN adapter you will be using, and then enter the following command:

     SDA> SHOW LAN/DEVICE=xxA0

   • Wildcard address
     The wildcard character (*) allows any incoming triplet with a matching password field to access the Data Collector node. Use the wildcard character to allow read access and to run the console application from any node in your network.
     Because the Data Analyzer does not use this field, you should use the wildcard character in this field in the AMDS$CONSOLE_ACCESS.DAT file.
     Caution: Use of the wildcard character for write-access security triplets enables any person using that node to perform system-altering fixes.
2. Edit the password field.
   The password field must be an 8-byte alphanumeric field.
   The password field gives you a second level of protection when you want to use the wildcard address denotation to allow multiple modes of access to your monitored system.
3. Enter either R or W as an access code.
   R means READONLY allowance for the Data Analyzer. W means READ/WRITE allowance for the Data Analyzer. (WRITE implies READ.)

OpenVMS Data Collector nodes accept more than one password. Therefore, you might have several security triplets in an AMDS$DRIVER_ACCESS.DAT file for one Data Collector node. For example:

*\1DECAMDS\R
*\KOINECLS\R
*\KOINEFIX\W

In this example, Data Analyzer nodes with the passwords 1DECAMDS and KOINECLS would be able to see the Data Collector data, but only the Data Analyzer node with the KOINEFIX password would be able to write or change information, including performing fixes, on the Data Collector node.

If you want, you can set up your AMDS$DRIVER_ACCESS.DAT file to allow anyone in the world to read from your system but allow only a certain node or nodes to write or change information on your system.

The Availability Manager performs these steps when using security triplets to ensure security among Data Analyzer and Data Collector nodes:

1. A message is broadcast at regular intervals to all nodes within the LAN indicating the availability of a Data Collector node to communicate with a Data Analyzer node.
2. The node running the Data Analyzer receives the availability message and returns a security triplet that identifies it to the Data Collector, and requests system data from the Data Collector.
3. The Data Collector examines the security triplet to determine whether the Data Analyzer is listed in the AMDS$DRIVER_ACCESS.DAT file to permit access to the system.
   • If the AMDS$DRIVER_ACCESS.DAT file lists Data Analyzer access information, then the Data Provider and the Data Analyzer can exchange information.
   • If the Data Analyzer is not listed in the AMDS$DRIVER_ACCESS.DAT file or does not have appropriate access information, then access is denied and a message is logged to OPCOM. The Data Analyzer receives a message stating that access to that node is not permitted.

Table 6-3 describes how the Data Collector node interprets a security triplet match.

To change the Data Collector password in the Registry, follow these steps:

1. Click the Windows NT Start button. First click Programs and then Command Prompt.
2. Type regedit after the angle prompt (>).
   The system displays a screen for the Registry Editor, with a list of entries under My Computer.
3. On the list displayed, click HKEY_LOCAL_MACHINE .
4. Click SYSTEM.
5. Click CurrentControlSet.
6. Click Services.
7. Click damdrvr.
8. Click Parameters.
9. Double-click Read Password. Then type a new 8-character alphanumeric password, and click OK to make the change.
10. To store the new password, click Exit under File on the main menu bar.
11. On the Control Panel, click Services and then Stop for "PerfServ."
12. Again on the Control Panel, click Devices and then Stop for "damdrvr."
13. First restart damdrvr under "Devices" and then restart PerfServ under "Services."
    This step completes the change of your Data Collector password.