No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

eSight V300R010C00 Maintenance Guide 07

Rate and give feedback :
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Collaboration Management

Collaboration Management

Password Change Using BME

This script is used to encrypt plaintext. Changing passwords periodically prevents theft of the passwords and unauthorized access.

Syntax
  • Windows: encrypt.bat
  • Linux: encrypt.sh
Parameter Description

Parameter

Description

0

0 indicates AES algorithm.

Enter a password in the interactive mode.

1

1 indicates HMAC-SHA256 algorithm.

Enter a password in the interactive mode.

2

2 indicates PBKDF2 algorithm. Indicates the password to be encrypted.

Enter a password in the interactive mode.

old

old indicates AES algorithm. The usage of this parameter is the same as the parameter 0.

Enter a password in the interactive mode.

-help

Display the help.

NOTE:

The password must be a string of 6 to 32 characters and contain uppercase letters (A~Z), lowercase letters (a~z), and digits (0~9).

Path
  • Windows: eSight installation directory\AppBase\tools\bmetool\encrypt
  • Linux: eSight installation directory/AppBase/tools/bmetool/encrypt
Prerequisite

On Windows, this operation is performed by the Administrator user. On Linux, this operation is performed by the ossuser user.

Precautions

None.

Related Commands

None.

Example
  • Windows
    1. Log in to the eSight server as an Administrator user.
      NOTE:

      If security hardening has been completed for the Windows operating system, log in to the server as an SWMaster user.

    2. Choose Start > Run. In the Run dialog box, enter cmd and press Enter.
    3. Use the encryption tool to encrypt the passwords.

      cd /d eSight installation directory\AppBase\tools\bmetool\encrypt

      encrypt.bat 0

      The following information is displayed:

      please input the password: 
       
      Please input the password again: 
       
      @010200000000b44ed1400e851e03c88cf7b8c4c6adb9d380124b56deab03a8dc220e152ac5a6

      @010200000000b44ed1400e851e03c88cf7b8c4c6adb9d380124b56deab03a8dc220e152ac5a6 indicates the cipher-text password.

    4. Replace preset passwords with cipher-text passwords.
  • Linux
    1. Log in to the eSight server as an ossuser user.
    2. Use the encryption tool to encrypt the passwords.

      cd eSight installation directory/AppBase/tools/bmetool/encrypt

      ./encrypt.sh 0

      The following information is displayed:

      please input the password: 
       
      Please input the password again: 
       
      @010200000000b44ed1400e851e03c88cf7b8c4c6adb9d380124b56deab03a8dc220e152ac5a6

      @010200000000b44ed1400e851e03c88cf7b8c4c6adb9d380124b56deab03a8dc220e152ac5a6 indicates the cipher-text password.

    3. Replace preset passwords with cipher-text passwords.

Adding uPortal SSO Network Isolation Configuration

This command is used to add uportal SSO network isolation configuration. After the network isolation configuration is added, the IP address provided by eSight for logging in to eSight from the uPortal in SSO mode will add the listening ports 31943 and 31942.

Syntax
  • Windows: addSSONginxCfg.bat
  • Linux: addSSONginxCfg.sh
Path
  • Windows: eSight installation directory\AppBase\app\com.huawei.oms.app.terminal\install\upgrade\script\windows
  • Linux: eSight installation directory/AppBase/app/com.huawei.oms.app.terminal/install/upgrade/script/linux
Prerequisite

On Windows, this operation is performed by the Administrator user. On Linux, this operation is performed by the ossuser user.

Precautions

None.

Related Commands

None.

Example
  • Windows
    1. Log in to the server as the Administrator user.
      NOTE:

      Log in to the server as the SWMaster user if the Windows is hardened.

    2. Run the following command to add uportal SSO network isolation configuration:

      cd /d eSight installation directory\AppBase\app\com.huawei.oms.app.terminal\install\upgrade\script\windows

      addSSONginxCfg.bat

      The following information is displayed:

      please input uPortal sso login IP:Enter the IP address provided for uPortal SSO. 
      please input eSight login IP:Enter the IP address for locally accessing eSight.

      After the command is successfully executed, the following information is displayed:

      successful
  • Linux
    1. Log in to the server as the ossuser user.
    2. Run the following command to add uportal SSO network isolation configuration:

      cd eSight installation directory/AppBase/app/com.huawei.oms.app.terminal/install/upgrade/script/linux

      ./addSSONginxCfg.sh

      The following information is displayed:

      please input uPortal sso login IP:Enter the IP address provided for uPortal SSO. 
      please input eSight login IP:Enter the IP address for locally accessing eSight.

      After the command is successfully executed, the following information is displayed:

      successful

uPortal Number Allocation Switch and OpenAPI Whitelist Configuration

This command is used for configuring the uPortal number allocation switch, OpenAPI whitelist, and primary IP address of the uPortal in the Linux operating system.

Format
  • Linux operating system: terminal.sh
Path
  • Linux operating system: eSight installation directory/AppBase/tools/linux
Prerequisites

The command is executed by the ossuser user in the Linux operating system.

Precautions

None

Related Commands

None

Example
  1. Log in to the eSight server as the ossuser user.
  2. Run the following commands to configure the uPortal number allocation switch, OpenAPI whitelist, and primary IP address of the uPortal:

    cd eSight installation directory/AppBase/tools/linux

    ./terminal.sh IP address

    In the command, IP address indicates the IP address to be added to the OpenAPI whitelist. That is, the primary IP address of the uPortal, for example, 10.10.10.1.

    The following information is displayed:

    info script exected successfully
Translation
Download
Updated: 2019-06-30

Document ID: EDOC1100044373

Views: 24832

Downloads: 74

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next