
9.4 Configuration
9.4.1 Changing Usernames and Passwords
To edit or add usernames and passwords for accessing Rhino with the Web Console, edit either
$RHINO_HOME/etc/defaults/config/rhino.passwd
(if embedded or using JMX Remote authentication) or
$CLIENT_HOME/etc/web-console.passwd
(if using local file authentication in a standalone Web Console). The Rhino node
(or standalone Web Console) will need to be restarted for changes to this file to take effect.
The format of this file is:
username:password:role1,role2,role3
The role names must match roles defined in the
$RHINO_HOME/etc/defaults/config/rhino.policy
file, as described in the
security section of this chapter. The security configuration chapter (Chapter 15) also has information on configuring security
policies.
9.4.2 Changing the Web Console Ports
To change the Web Console ports, edit the file
$RHINO_HOME/etc/defaults/config/config_variables
and set the vari-
ables to the desired port numbers as follows:
WEB_CONSOLE_HTTP_PORT=8066
WEB_CONSOLE_HTTPS_PORT=8443
Standalone Web Console Ports
When the Web Console is running in standalone mode, the Jetty configuration files need to be updated by hand, or regenerated
from the
config_variables
file. The
$CLIENT_HOME/bin/generate-client-configuration
script will regenerate the
client configuration files. Copy
config_variables
to the host running the web console, then run the script with that file as
a parameter. Warning: any custom changes to these files (e.g., enabling or disabling listeners) will be overwritten – in this
situation the file should be updated by hand.
9.4.3 Disabling the HTTP listener
For a production environment, it is recommended that the standard (unencrypted) HTTP listener be disabled. To do this, edit
either the
$RHINO_HOME/etc/defaults/config/jetty.xml
file (embedded Jetty) or one of the
$CLIENT_HOME/etc/
jetty-*-auth.xml
files (standalone Jetty), and comment out or remove the following element:
<Call name="addListener">
<Arg>
<New class="org.mortbay.http.SocketListener">
<Set name="Port">8066</Set>
...
</New>
</Arg>
</Call>
9.5 Security
The Web Console relies on the HTTP server and servlet container to provide secure socket layer (SSL) connections, declarative
security, and session management.
Open Cloud Rhino 1.4.3 Administration Manual v1.1 68
Kommentare zu diesen Handbüchern