This document covers the following topics:
Note:
You must install security for Broker kernel and - if your
application(s) use API version 7 or below - also for Broker stubs. See note
below.
To install Security for Broker under Windows
Determine that all Prerequisites for EntireX components have been met before installing EntireX Security.
Insert the following statements into the
DEFAULTS=BROKERsection of the Broker attribute file:
SECURITY=YES
Modify the
DEFAULTS=SECURITY
section of the Broker attribute file according to your requirements. These
parameters are used to determine whether you will use Windows security or
LDAP-based authentication. See
Security-specific
Attributes. If you are using LDAP-based authentication,
authorization rules are not available to you.
Note:
Authentication: Windows authentication calls LogonUser() with the
flag LOGON32_LOGON_INTERACTIVE.
Note:
If you are running your application(s) at ACI version 7 or below, the
following steps are required to install EntireX Security for the Broker stubs
in all environments where applications execute either as clients or servers.
See list of
platforms where Security for Broker stubs is supported.
These
steps are not required if you are running your application(s) at ACI version
8.
To install Security for Broker stubs on Windows
When requested to specify the installation type, choose Custom and check the Security box.
(The required directories including secuexit.dll are copied to your computer as part of installing the contents of the EntireX DVD.)
Note:
Secuexit.dll is needed for backwards
compatibility if your applications issue any commands using ACI version 7 or
below. Applications using ACI version 8 do not require this additional
component in the stub.
To use encrypted communication, set the environment variable NA2_BKPRIV=1. For no encryption, set NA2_BKPRIV=0 (default).
| Warning: If stub tracing level is > 1, unencrypted contents of the send/receive buffers are exposed in the trace. |
Installation of EntireX Security for Broker stubs is now complete. Now you can install the security components for the Broker stubs on the remaining operating systems where your application components are located.