Configuration files


By default TrueSight Server Automation automatically recognizes standard configuration files for all supported OSs.

For TrueSight Server Automation to read a configuration file correctly, it must adhere to configuration file standards for the relevant operating system. TrueSight Server Automation can also treat most types of XML files as configuration files.

Parsing configuration files

TrueSight Server Automation uses a system of grammar files to parse configuration files. Typically the TrueSight Server Automation grammars examine each line in a configuration file, and if the line matches rules set up in the grammar, the grammar generates a configuration file record. When defining a grammar file, an option exists for creating configuration file records from multiple lines, which is required for some types of configuration files.

After configuration file records are created, you can browse, snapshot, audit, run compliance on, and deploy them like other server objects. Using these standard procedures, you can manipulate the contents of configuration files with great precision, down to their individual lines. In this way you can monitor configuration files on servers throughout your system and if necessary correct inconsistencies. For more information, see:

Note

For information about a special issue and workaround in deploying the grub configuration file, see Password in grub configuration file does not deploy properly.

Configuration files available in TrueSight Server Automation

Following configuration files are available in TrueSight Server Automation for respective operating systems:

Operating System

Configuration files

IBM® AIX®

/etc/security/user

/etc/dt/config/Xconfig

/etc/dt/config/en_US/sys.resources

/etc/hosts.deny

/var/adm/cron/at.allow

/var/adm/cron/cron.allow

Oracle™ Solaris™ 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

/etc/default/login

/etc/security/policy.conf

/etc/security/audit_control

/etc/inet/inetd.conf

/etc/shells

/etc/dfs/sharetab

/etc/nfssec.conf

/etc/default/nfs

/usr/aset/asetenv

/var/spool/cron/crontabs/root

/etc/hosts.deny

/etc/hosts.allow

/etc/sfw/smb.conf

/etc/ssh/sshd_config

/etc/vfstab

/etc/default/passwd

/boot/grub/menu.lst

/usr/aset/masters/uid_aliases

/etc/security/audit_user

/etc/user_attr

/etc/pam.conf

/etc/coreadm.conf

/etc/default/inetinit

/etc/rmmount.conf

/etc/security/crypt.conf

/etc/dumpadm.conf

/etc/system

/var/sadm/install/admin/default

/etc/ftpd/ftpaccess

HP-UX

/etc/rc.config.d/auditing

/etc/inetd.conf

/etc/shells

/etc/default/security

/etc/rc.config.d/syslogd

/etc/hosts.allow

/etc/hosts.deny

/etc/nsswitch.conf

/etc/opt/samba/smb.conf

/etc/rc.config.d/ipfconf

RHEL

/etc/login.defs

/etc/pam.d/system-auth

/etc/pam.d/system-auth-ac

/etc/default/useradd

/etc/vsftpd/vsftpd.conf

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*