Setting up configuration files for security  The objectid.dat file

Chapter 16: External Authentication

Preparinglibtcl.cfg to use network-based security

libtcl.cfg and libtcl64.cfg (for 64bit applications) contains information about three types of drivers:

A driver is a Sybase library that provides an interface to an external service provider. Drivers are dynamically loaded so that you can change the driver used by an application without relinking the application.


Entries for network drivers

The syntax for a network driver entry is:

driver=protocol description

where:


Entries for Directory Services

Entries for Directory Services apply if you want to use a Directory Service instead of the interfaces file. For information about directory entries, see the configuration documentation for your platform, and the Open Client/Server Configuration Guide for your platform.


Entries for security drivers

The syntax for a security driver entry is:

provider=driver init-string

where:


UNIX platform information

This section contains information specific to UNIX platforms. For more information, see the Open Client/Server Configuration Guide for UNIX.

No special tools for editing the libtcl.cfg file are available. Use your favorite editor to comment and uncomment the entries that are already in place after you install Adaptive Server.

The libtcl.cfg file, after installation of Adaptive Server on a UNIX platform, already contains entries for the three sections of the file:

The sections do not have to be in a specific order.

Make sure that the entries you do not want to use are commented (begin with “;”) and the entries you want are uncommented (do not begin with “;”).


Sample libtcl.cfg for Sun Solaris

[DRIVERS]
;libtli.so=tcp unused ; This is the non-threaded tli driver.
;libtli_r.so=tcp unused ; This is the threaded tli driver.

[DIRECTORY]
;dce=libsybddce.so ditbase=/.:/subsys/sybase/dataservers
;dce=libsybddce.so ditbase=/.:/users/cfrank

[SECURITY]
dce=libsybsdce.so secbase=/.../svrsole4_cell

This libtcl.cfg file is set up to use the DCE security service. This file does not use Directory Services because all [DIRECTORY] section entries are commented.

Because all entries in the [DRIVERS] section for network drivers are also commented, appropriate drivers are chosen automatically by the system. A threaded driver is chosen automatically when security services are being used, and a nonthreaded driver is chosen automatically for applications that cannot work with threaded drivers. For example, Backup Server does not support security services and does not work with a threaded driver.


Desktop platform information

This section contains information specific to desktop platforms. For more information, see the Open Client/Server Configuration Guide for Desktop Platforms.

Use the ocscfg utility to edit the libtcl.cfg file. See the Open Client/Server Configuration Guide for Desktop Platforms for instructions for using ocscfg.

The ocscfg utility creates section headings automatically for the libtcl.cfg file.


Sample libtcl.cfg file for desktop platforms

[NT_DIRECTORY]
ntreg_dsa=LIBDREG  ditbase=software\sybase\serverdsa

[DRIVERS]
NLWNSCK=TCP  Winsock TCP/IP Net-Lib driver
NLMSNMP=NAMEPIPE  Named Pipe Net-Lib driver
NLNWLINK=SPX  NT NWLINK SPX/IPX Net-Lib driver
NLDECNET=DECNET  DecNET Net-Lib driver

[SECURITY]
NTLM=LIBSMSSP




Copyright © 2005. Sybase Inc. All rights reserved. The objectid.dat file

View this book as PDF