Configuring security for the Adapter Platform

It is important to secure access to the Adapter PlatformServer. Service Assurancecomponents authenticate users and determine their privileges through three files: serverConnect.conf, clientConnect.conf, and brokerConnect.conf. These files ensure that only authorized users access Service AssuranceServer applications. Use sm_editto modify these files, which are located in BASEDIR/smarts/conf.

The Adapter Platformfunctions as a server application. The following are possible clients of the Adapter PlatformServer:

• Broker

• Command line utilities (dmctl)

• Global Manager

• sm_ems

• SNMP Trap Adapter(Receiver)

• Syslog Adapter

  System Administration Guideprovides a complete list of server and client programs and a more detailed explanation of the Service Assurancesecurity mechanism.

  Security configuration of the Adapter Platformprovides an overview of the security files required in a typical deployment of the Adapter Platform. A circle in the figure indicates that the component represented by the adjacent box is a client application. An arrowhead indicates that the component represented by the adjacent box is a server application. For example, the Adapter Platformis a client of the broker and the Adapter Platformhas five clients”the broker, the Global Manager, the SNMP Trap Adapter, the Syslog Adapter, and sm_ems. Although not depicted in the figure, the SNMP Trap Adapter, the Syslog Adapter, and sm_ems are also clients of the Broker because everything is a client of the Broker.

  Note:

  In general, the Global Managerand the Adapter Platformare deployed on different hosts. If the Adapter Platformresides on the same host as another Service Assuranceserver application, such as the Adapter Platform, then they can share the same serverConnect.conf file. Likewise, if clients of the Adapter Platformreside on the same host as other Service Assuranceclient applications, they too can share the same clientConnect.conf file.

  Figure 1. Security configuration of the Adapter Platform

  

  The following sections provide examples of authentication records for the client programs, SNMP Trap Adapter(Receiver), Syslog Adapter, and sm_emscommand line interface and corresponding records for the server program, Adapter PlatformServer.

  The System Administration Guideprovides examples of authentication records for the broker and the Global Manager.