IBM Tivoli Netcool/OMNIbus, Version 7.4

Tivoli Netcool/OMNIbus user access security

Tivoli Netcool/OMNIbus provides user access security mechanisms to protect your Tivoli Netcool/OMNIbus system from accidental or deliberate damage caused by users or potential users of your system.

Communication security techniques protect connections between different components of your Tivoli Netcool/OMNIbus system. Tivoli Netcool/OMNIbus uses the Secure Sockets Layer (SSL) security protocol to provide confidentiality, authenticity, and integrity of information between components.

User access security mechanisms
Tivoli Netcool/OMNIbus is a distributed system that can be used simultaneously by different types of users. In a typical deployment, operators use desktop tools to monitor the faults in a particular area of the network. At the same time, administrators use the SQL interactive interface, Netcool/OMNIbus Administrator, and process control to keep Tivoli Netcool/OMNIbus running smoothly and efficiently.
Secure mode authentication
Tivoli Netcool/OMNIbus components perform authentication checks to provide a secure environment.
Configuring the ObjectServer for user authentication
If users are authenticated in the ObjectServer, you can control the user authentication mechanism by setting ObjectServer properties. You can change the encryption algorithm for passwords, or restrict the passwords to a specific format, or both.
Configuring Tivoli Netcool/OMNIbus to use LDAP for external authentication
Tivoli Netcool/OMNIbus supports external authentication of ObjectServer users whose passwords are stored in a Lightweight Directory Access Protocol (LDAP) compliant repository, such as Active Directory or Tivoli® Directory Services.
PAM authentication (UNIX and Linux)
Pluggable Authentication Modules (PAM) is an integrated UNIX login framework. PAM is used by system entry components, such as the dtlogin display manager of the Common Desktop Environment, to authenticate users logging into a UNIX system.
Implementing authorization by using groups and roles
Permissions control access to objects and data in the ObjectServer. By combining one or more permissions into roles, you can manage access quickly and efficiently.
Using restriction filters to filter table information
A restriction filter provides a way to restrict the rows that are displayed when a user views table data. When the filter is assigned to a user or group, the filter controls the data that is displayed and modified from client applications, and modified in SQL commands.
Defining and following an audit trail
When you secure applications, it is important to monitor, or audit, the effectiveness of your security. One way to do this is to configure the system to log certain types of messages. Then you can monitor the logs to see if anything of interest or concern has occurred.
Property value encryption
You can use property value encryption to encrypt string values in a properties file or configuration file so that the strings cannot be read without a key. When the process that uses the properties file or configuration file starts up, the strings are decrypted.

Parent topic: Security

Related concepts:

Using SSL for client and server communications

Feedback