HP 3PAR InForm OS Common Criteria Administrator's Reference (QL226-96586, October 2012)

Documentation Errata 30
6 Documentation Errata
This section identifies Common Criteria-related errors in the HP 3PAR Storage System
customer documents.
CLI Administrator’s Manual
The user name restrictions have nothing to do with SSH. These are user names that
already exist on the system and therefore cannot be created using the createuser CLI
command. It is not possible to log onto the HP 3PAR Storage System through the CLI (or
IMC) using these user names. Additionally, the list of reserved names is incorrect and
should read: root, daemon, bin, console, nobody, sshd, telnetd, sys, sync, man, statd and
ntp.
CLI User Name Restrictions Using SSH (p. 57)
The tables do not include all rights supported by the HP 3PAR Storage System (missing are
the tunepd, tunesys and waittask rights).
Appendix A (p. 151) and Appendix B (p. 162)
The section correctly identifies the default event log segment size at 3MB and that the
system maintains 11 generations. However, it incorrectly identifies the total retained data
as 30 MB instead of 33 MB (3 MB X 11 generations). Note that the total could be slightly
larger, depending on when the system switches from one generation to the next. Also, the
section should reference the Common Criteria Administrator’s Reference.
Monitoring and Managing the Event Log (p. 116)
Command Line Reference
removesshkey CLI command (p. 254)
The synopsis and discussion imply that a user with ‘super’ role can remove the key of
another user. This is incorrect. The removesshkey command operates only on the
logged-in user. A ‘super’ role user can effectively remove the key of a user by removing
the user entirely with the removeuser command.
The second bullet in the “NOTES” section is confusing. There is no –from option in the
setsshkey command in the TOE. The comment is referring to the ability of OpenSSH
servers to limit public key authentication using a given key to a specific source IP address.
The token “from=<ip address>“ must be manually added to the public key material
setsshkey CLI command (p. 328)