HP Systems Insight Manager 5.3 Technical Reference Guide

Related procedures
• Importing an SSH key
• Exporting an SSH key
• Configuring SSH key security
Related topic
▲ Managing SSH keys
Configuring SSH bypass properties
The globalsettings.props has many configurable properties. These setting are used to fine-tune the
performance of various settings of HP SIM to adjust to your running environment.
SSH Bypass is used to boost performance by bypassing the overhead of setting up SSH connections for
specified users when the CMS is executing a tool locally on the CMS. This alleviates potential problems with
SSH not being configured properly locally and applies to tools that run exclusively on the CMS. This feature
was introduced with HP SIM 4.2 SP2 – Windows and is included for HP-UX and Linux with HP SIM 5.0 This
feature is enabled by default for the root user on HP-UX and Linux and for the administrator and the installer
account on Windows.
To configure SSH bypass properties in globalsettings.props:
1. Open the globalsettings.props file located at:
• On Windows It is typically located at C:\Program Files\HP\Systems Insight
Manager\config\globalsettings.props.
• On HP-UX and Linux It is located at /etc/opt/mx/config/globalsettings.props.
2. Edit the following properties:
• mx_dtf_ssh_bypass_user Modify this property to add additional user names for the SSH bypass
feature. Separate each with a comma. For Windows domain accounts, two backslashes must exist
between the domain name and the user name. For example, mydomain\\myname . Do add a user
name if you do not intend for them to have full administrator privileges on the CMS.
• mx_dtf_enable_ssh_bypass Set this property to True to bypass use of SSH for most local tools
for the users listed in mx_dtf_ssh_bypass_user , or set to False to always use SSH tools that execute
locally. The default setting is set to True .
Audit log
HP SIM logs all tasks performed by all HP SIM users on all systems . The information is stored in the Audit
Log file on the Central Management Server (CMS). Several features of the HP SIM Audit Log are configurable.
For example, you can specify which tools log data and the maximum Audit Log file size. The HP SIM Audit
Log is configured through the log.properties file, and tool logging is enabled or disabled through the
XML tool definition files.
Configuring the HP SIM audit log
Configuring the HP SIM Audit log is performed from the CLI , and you must be signed-in as root or
administrator.
See “Configuring the audit log file” for more information.
Configuring the tool definition files
The XML tool definition file provides an option to disable logging of single-system aware (SSA) and
multiple-system aware (MSA) command tools. The log attribute for the command element specifies whether
the results of the command are output to the HP SIM log file. Command output is logged by default.
Configuring SSH bypass properties 601