Security Management

If you enable the Tuxedo SECURITY while assembling a Tuxedo application, you need to configure certain authentication and authorization related information in the Security Management page, which can be brought out by clicking Security Management button in Domain UBBCONFIG Editor.

Adding Application Password

If the SECURITY parameter in UBBCONFIG is not set to NONE, you should specify an application password in the Security Management page, otherwise, a validation error will occur when saving the domain status.

Adding a Group

If the SECURITY parameter in UBBCONFIG is set to one of USER_AUTH | ACL | MANDATORY_ACL, you should add Tuxedo user groups in the Security Management page. A table is used for collecting the group related information in the Group Management section. You can add, delete and edit a group in the table.

To add a group, do the following:

From the Group Management section, click Add.
In the page that appears, specify the following options:
- GID: Tuxedo GID
- Group Name: Tuxedo group name
Click OK.

Adding a User

If the SECURITY parameter in UBBCONFIG is set to one of USER_AUTH | ACL | MANDATORY_ACL, you should add Tuxedo users in the Security Management page. A table is used for collecting the user related information in the User Management section. You can add, delete, and edit a user in the table.

To add a user, do the following:

From the User Management section, click Add.
In the page that appears, specify the following options:
- User Name: Tuxedo user name
- Password: User password
- UID: Tuxedo UID
- Group Name: Choose an existing group from the list
- Client Name: Tuxedo client name
Click OK.

If the SECURITY parameter in RESOURCES section is set to one of USER_AUTH | ACL | MANDATORY_ACL, Resource Broker component checks whether there is at least one user configured with client name "tpsysadm". If not, an error message is shown up.

Adding an Access Control List

If the SECURITY parameter in UBBCONFIG is set to ACL or MANDATORY_ACL, you should add Tuxedo ACL in the Security Management page. A table is used for collecting the user related information in the Access Control List section. You can add, delete, and edit an access control list in the table.

To add an access control list, do the following:

From the Access Control List section, click Add.
In the page that appears, specify the following options:
- Group Name: Choose an existing group from the list
- Resource Type: The type of the object. You can choose one of the following: ENQ, DEQ, SERVICE, and POSTEVENT. The default is SERVICE.
- Resource Name: Enter a service name. If the resource type SERVICE is selected, all service items in the SERVICES section of current UBBCONFIG file are listed. You can either choose an existing service or enter a new name.