TS/MP System Management Manual (G06.24+, H06.03+)

Managing the Pathsend Environment
NonStop TS/MP System Management Manual—541819-001
6-6
Specifying Security
•
The PATHMON process must be able to open the server processes (to send
startup messages).
All of these opens are performed using the PATHMON process’s user ID. Therefore,
the user ID of the PATHMON process controlling the server class must have
corresponding user IDs on—and remote passwords with—these systems:
•
The system of the Pathsend process
•
The PATHMON process’s system
•
The server class’s system
Server Class Security
To configure servers for access by Pathsend processes, you use the SET SERVER
command to define attributes for the OWNER and SECURITY parameters. Together,
the OWNER and SECURITY parameters define whether a Pathsend process can
access a server class.
LINKMON processes perform authorization checks on each send to make sure that the
user ID of the Pathsend process at the time of the send conforms to the SERVER
OWNER and SERVER SECURITY attributes.
(Note that TCPs running under the Pathway/iTS product ignore these parameters; the
parameters only affect Pathsend process access.)
OWNER
The SERVER OWNER parameter defines the user ID that controls access to the
server class from a Pathsend process.
The user ID you assign must be known to the system in which PATHCOM is running.
You define the user ID either with a system number, group number, and user number,
or with a system name, group name, and user name.
For example, these commands set the SERVER OWNER attribute to the user ID of the
super user on the system 222 or \ABC, respectively:
= SET SERVER OWNER 222.255,255
= SET SERVER OWNER \ABC.SUPER.SUPER
If the user ID’s system is the same as the system in which PATHCOM is running, you
need not specify the system number or name. If you do not specify the SERVER
OWNER parameter, the default user ID is the owner ID of the user who started the
PATHMON process.
SECURITY
The SERVER SECURITY attribute specifies the users, relative to the SERVER
OWNER, who can access a server class from a Pathsend process.