Smarts SAM: What is the usage for "UsePrivilegedPort yes" in Smarts Failover Manager? What is "UsePriviledgedPort yes"?
Article ID: 332215
Updated On:
Products
VMware Smart Assurance
Environment
VMware Smart Assurance - SMARTS
Resolution
Why is the option "UsePrivilegedPort yes" used in Smarts Failover Manager?
-> Failover Manager uses the option "UsePrivilegedPort yes" to specify the ssh configuration to be used by SCP. The default value for this is "no".
As per notation, ports below 1024 are called as privileged ports. Usually, only the root has the control to start processes listening in these ports. Hence, if any external client is talking to the processes listening on one of these ports, it can be assured that its a genuine entity started by the root and not any fake service.
With respect to failover manager, the option specifically asks the file copy service to use a Privileged port which by default is 22 for ssh and file transfers. That option is used in 9.4.1 as well. By default the option is always specified and the scenario of not using the option is not tested in-house.
-> Failover Manager uses the option "UsePrivilegedPort yes" to specify the ssh configuration to be used by SCP. The default value for this is "no".
As per notation, ports below 1024 are called as privileged ports. Usually, only the root has the control to start processes listening in these ports. Hence, if any external client is talking to the processes listening on one of these ports, it can be assured that its a genuine entity started by the root and not any fake service.
With respect to failover manager, the option specifically asks the file copy service to use a Privileged port which by default is 22 for ssh and file transfers. That option is used in 9.4.1 as well. By default the option is always specified and the scenario of not using the option is not tested in-house.
Feedback
Yes
No
Powered by
