CA Technologies

Secure Data Repository (Optional)

If you want to limit the users who can log in to the database to just the Data Repository administrative account and the root user, lock down the database.

Follow these steps:

  1. Modify the /etc/pam.d/sshd file by adding the following entry, for the PAM access module, after the "account required pam_nologin.so" entry:
    account required pam_access.so accessfile=/etc/security/sshd.conf
    
  2. Remove the following line from the /etc/security/access.conf file:
    -:ALL EXCEPT database_admin_user root:LOCAL
    

    For example:

    -:ALL EXCEPT dradmin root:LOCAL
    

More information:

Install the Data Repository Component


Previous Topic: Install the Data Repository ComponentNext Topic: Configure Log Rotation for Data Repository (Required)