OSI/MHS Management Programming Manual
Password Server Interfaces
OSI/MHS Management Programming Manual—424824-001
7-36
Using the Master Password Server
MPS Operational Parameters
Whether you use PATHCOM or a TACL command interpreter, you specify values of the
following MPS startup parameters:
MPS-AUTH-DB
is a valid filename specifying the (local) file name of the authorization database.
This parameter is required. (When you run an MPS process in RECONFIGURE
mode, as explained later in this list, this parameter is required even though it is not
used.)
MPS-CONF-DB
is a valid filename specifying the (local) file name of the configuration database. If
the file does not yet exist, the MPS process creates it and writes its contents. Once
the configuration database is loaded, it can be modified only by an MPS process in
RECONFIGURE mode, unless an ADD, ALTER, or DELETE command adds or
deletes the master user or changes the master password. In those cases, the MPS
process that validates the SPI request makes the required change in the configuration
database.
MPS-MHSMGR-PROC
specifies the (local) process name of the MHSMGR. It must be the manager of the
OSI/MHS subsystem that is authorized to use the MPS process. This parameter is
optional but can be omitted only if the configuration database already contains the
MHSMGR name. If another MPS process has loaded the configuration database, an
attempt to specify a different MHSMGR name causes a warning message.
When you run an MPS process in RECONFIGURE mode, the MHSMGR name
must be the same name as that specified for other MPS processes using the same
configuration database. To change the MHSMGR name, you must stop all the MPS
processes and recreate the configuration database.
MPS-MODE
specifies one of the following values, indicating the four possible modes in which
the MPS process can operate:
NORMAL (default)
RECONFIGURE
ISOLATE
POPULATE
NORMAL
In this mode, the MPS process services requests from the MHSMGR and the
MS. If the configuration database already exists (because another MPS process
created it), the normal-mode server uses the parameters stored in the database.
If you specify different parameters—except to identify a different authorization
database and the mode—the MPS process writes a warning message to its
output file and continues to use the old parameters.