IBM Hub/Switch Switch User Manual


 
Chapter 7 HPSS User Interface Configuration
418 September 2002 HPSS Installation Guide
Release 4.5, Revision 2
The HPSS_REUSE_CONNECTIONS environment variable is used to control whether TCP/IP
connections are to be left open as long as a file is open or are to be closed after each read or write
request. A non-zero value will cause connections to remain open, while a value of zero will cause
connections to be close. The default value is zero.
The HPSS_USE_PORT_RANGE environment variable is used to control whether the HPSS
Mover(s) should use the configured port range when making TCP/IP connections for read and
write requests. A non-zero value will cause the Mover(s) to use the port range, while a value of zero
will cause the Mover(s) to allow the operating system to select the port number. The default value
is zero.
The HPSS_TOTAL_DELAY environment variable is used to control the number of seconds to
continue retrying requests. A value of zero indicates that no there is no time limit. The default value
is 0.
The HPSS_REGISTRY_SITE_NAME environment variable is used to specify the name of the
security registry used when inserting security information into connection binding handles. This is
only needed when the client must support DFS in a cross-cell environment. The default registry is
/.../dce.clearlake.ibm.com”.
The HPSS_DMAP_WRITE_UPDATES environment variable is used control the frequency of
cache invalidates that are issued to the DMAPI file system while writing to a file that is mirror in
HPSS. The default value is 20.
The HPSS_NDCL_KEY_CONFIG_FILE environment variable is used to specify an alternate file
(default file is /var/hpss/etc/ndcl.keyconfig) that contains the key used to perform encryption in
DCE authentication mode. This is set on the client machine.
The HPSS_KRB_TO_DCE_FILE is used to specify an alternate file (default file is /var/hpss/etc/
krb5_Realms_to_DCE_Cells) that contains the mapping from kerberos realm names to dce cell
names. This is set on the Non-DCE Gateway host.
HPSS_KCHILD_PATH is used to specify an alternate executable file (default is /opt/hpss/bin/
ndcg_kchild) that handles kerberos authentication on the Gateway machine.
HPSS_NDCG_KRB5_SERVICENAME is used to specify the name of the Kerberos Service for the
Non-DCE Gateway. Typically this should be something like ndcg/<hostname> where hostname is
the name of the Non-DCE Gateway host machine.
HPSS_KCHILD_KEYTAB is used to specify an alternate keytab file (default is /krb5/v5srvtab)to
be used to perform kerberos authentication. This is set on the Non-DCE Gateway host.
7.2.3 Authentication Setup
In order to enable the Non DCE Gateway and Client API to perform security in either DCE or
Kerberos Modes the following setup needs to be done:
7.2.3.1 DCE Mode
This is the default security mode for the NDCG.