Setup Authentication And Authorization - IBM High Performance Storage System HPSS Installation Manual

MKHPSS_ROOT – set to the path of HPSS 6.2 code (e.g. "/opt/hpss")
•
HPSS_DB_INSTANCE_OWNER – the Unix User ID of the DB2 HPSS instance (e.g.
•
"hpssdb")
HPSS_LDAP_BIND_TYPE – should correspond with the type of bindings allowed for LDAP
•
(e.g. "SIMPLE")
HPSS_LDAP_URL – the valid URL for the HPSS LDAP server (e.g.
•
"ldap://hpss.acme.com/cn=hpss.acme.com")
HPSS_LDAP_BIND_ARG – the name of the file created previously to hold the user name
•
and password of the LDAP owner (e.g. "/var/hpss/etc/ldap_stash")
HPSS_LDAP_HOST – the host name of the LDAP server (e.g. "hpss.acme.com")
•
HPSS_LDAP_REALM – the realm name for HPSS on the LDAP server (e.g.
•
"hpss.acme.com")
HPSS_PRINCIPAL_CORE – the 6.2 principal name for the Core Server (e.g. hpsscore)
•
HPSS_PRINCIPAL_DMG – the 6.2 principal name for the DMAP Gateway server (e.g.
•
hpssdmg)
HPSS_PRINCIPAL_FTPD – the 6.2 principal name for the FTP Daemon (e.g. hpssftp)
•
HPSS_PRINCIPAL_GK – the 6.2 principal name for the Gatekeeper (e.g. hpssgk)
•
HPSS_PRINCIPAL_HPSSD – the 6.2 principal name for the Startup Daemon (e.g. hpsssd)
•
HPSS_PRINCIPAL_LOG – the 6.2 principal for the Log Client and Log Daemon (e.g.
•
hpsslog)
HPSS_PRINCIPAL_LS – the 6.2 principal for the Location Server (e.g. hpssls)
•
HPSS_PRINCIPAL_MOUNTD – the 6.2 principal for the Mount Daemon (e.g. hpssmntd)
•
HPSS_PRINCIPAL_MPS – the 6.2 principal for the Migration/Purge Server (e.g. hpssmps)
•
HPSS_PRINCIPAL_MVR – the 6.2 principal for the Mover (e.g. hpssmvr)
•
HPSS_PRINCIPAL_PVL – the 6.2 principal for the Physical Volume Library server (e.g.
•
hpsspvl)
HPSS_PRINCIPAL_PVR – the 6.2 principal for the Physical Volume Repository server (e.g.
•
hpsspvr)
HPSS_PRINCIPAL_SSM – the 6.2 principal for the Storage System Manager (e.g. hpssssm)
•

6.3.10. Setup Authentication and Authorization

The mkhpss utility is used to setup authentication and authorization for the HPSS 6.2 system. See
Section 6.2.3: New Authentication and Authorization Mechanisms page 182 for a list of the supported
authentication and authorization mechanisms. In HPSS 6.2, the new authentication mechanism used
by each server is determined by the environment variables HPSS_PRIMARY_AUTHN_MECH and
HPSS_PRIMARY_AUTHENTICATOR. These environment variables will be set in the
/var/hpss/etc/env.conf file.
Valid settings for Kerberos authentication are:
HPSS Installation Guide
Release 6.2 (Revision 2.0)
July 2008
199