[JEUS 6] 관리자 계정명 및 비밀번호 변경, 프로세스 노출 방지

1. WASID(변경할관리자ID), WASPW(변경할관리자비밀번호) 를 정하여 아래 스크립트 실행합니다.

(아래는 wasadmin/nimdasaw로 설정 예시)

WASID=wasadmin
WASPW=nimdasaw
WASPWENC=`encryption aes $WASPW | head -n 1 | awk -F'[][]' '{print substr($4, 8)}' | awk '{print substr($0, 1, length($0)-1)}'`

echo "AES" > $JEUS_HOME/bin/jeusEncode
echo $WASID >> $JEUS_HOME/bin/jeusEncode
echo $WASPWENC >> $JEUS_HOME/bin/jeusEncode
chmod 640 $JEUS_HOME/bin/jeusEncode

echo WASID   : $WASID
echo WASPWENC: $WASPWENC

 

2. 기존 계정 설정 파일 백업 후, 위에서 확인한 ID,PW(암호화) 값으로 변경합니다.

# cp -f $JEUS_HOME/config/`hostname`/security/SYSTEM_DOMAIN/accounts.xml \
    $JEUS_HOME/config/`hostname`/security/SYSTEM_DOMAIN/accounts_old.xml
# cp -f $JEUS_HOME/config/`hostname`/security/SYSTEM_DOMAIN/policies.xml \
    $JEUS_HOME/config/`hostname`/security/SYSTEM_DOMAIN/policies_old.xml

# vi $JEUS_HOME/config/`hostname`/security/SYSTEM_DOMAIN/accounts.xml
<?xml version="1.0"?>
<accounts xmlns="http://www.tmaxsoft.com/xml/ns/jeus" version="6.0">
      <users>
        <user>
            <name>$WASID로변경</name>
            <password>{aes}$WASPWENC로변경</password>
            <group>Administrators</group>
...

# vi $JEUS_HOME/config/`hostname`/security/SYSTEM_DOMAIN/policies.xml
<policies xmlns="http://www.tmaxsoft.com/xml/ns/jeus" version="6.0">
    <policy>
        <role-permissions>
            <role-permission>
                <principal>$WASID로변경</principal>
                <role>AdministratorsRole</role>
...

 

3. 각종 관리 스크립트 파일을 수정합니다. (아래 내용은 시스템 환경에 따라 다를 수 있습니다.)

# vi $JEUS_HOME/bin/ja
$JEUS_HOME/bin/jeusadmin `hostname` -f $JEUS_HOME/bin/jeusEncode "$@"

# vi $JEUS_HOME/bin/jboot
$JEUS_HOME/bin/jeus -xml -f$JEUS_HOME/bin/jeusEncode &

# vi $JEUS_HOME/bin/jdown
$JEUS_HOME/bin/ja jeusexit

# vi $JEUS_HOME/bin/jcboot
$JEUS_HOME/bin/ja startcon `hostname`_$1

# vi $JEUS_HOME/bin/jcdown
$JEUS_HOME/bin/ja downcon `hostname`_$1