Previous Topic: Execute from Native USSNext Topic: Security Setup


Setting Default Values

The following file lets you set default values per your site requirements:

unpax_directory/Bin/lib/MSMSetupDefault.properties

This file contains the following parameters:

Hostname or IP Address
HOSTNAME=

Specify the host name or IP address of your system. The Prerequisite Validator utility uses the host name or the IP address of your system to test the FTP connection and to verify the JESINTERFACELEVEL value.

Local Host FTP Port
ftp.port=

Specify the FTP port number for the host name or IP address you specified. The Prerequisite Validator utility tests the FTP connection and verifies the JESINTERFACELEVEL value.

Default: 21

Authorization for Issuing FTP Command
ftp.stat.check.credential=

Specify ftp.stat.check.credential=y if your site requires authorization to issue FTP quote STAT commands. The command appears in the log as follows:

503 Login required, enter USER

When set to y, the utility prompts you for a user ID and password.

Default: n

Proxy Server for FTP Request

The following parameters are related to FTP proxy checks. Set the parameter to yes to activate FTP check through the proxy.

ftp.proxy.enabled=
ftp.proxy.host=
ftp.proxy.port=
ftp.proxy.credential.check=
ftp.proxy.fireCmd.proxy_userid=
ftp.proxy.fireCmd.site=
ftp.proxy.fireCmd.acct=
ftp.advanced.session.options=

The utility verifies the connection to the external CA Support FTP servers. If your site requires these requests to go through a proxy server, then modify these parameters as shown in the following example:

ftp.proxy.enabled=yes
ftp.proxy.host=host_name_or_IP_address
ftp.proxy.port=port_number
ftp.proxy.credential.check=n_or_y

When ftp.proxy.credential.check=y, change the following parameters:

ftp.proxy.fireCmd.proxy_userid=proxy_userid

The following parameters can be changed based on your proxy requirements:

ftp.proxy.fireCmd.site=
ftp.proxy.fireCmd.acct=
ftp.advanced.session.options=
Proxy Server for HTTP Request

The following parameters are related to HTTP proxy checks. Set the following parameter to yes to activate HTTP check through the proxy.

http.proxy.enabled=
http.proxy.host=
http.proxy.port=80
http.proxy.credential.check=
http.proxy.type=
http.domain=

The utility verifies the connection to the external CA Support HTTP servers. If your site requires these requests to go through a proxy server, then modify these parameters as shown in the following example:

http.proxy.enabled=yes
http.proxy.host=company_proxy_name
http.proxy.port=80
http.proxy.credential.check=y_or_n
http.proxy.type=NTLM
http.domain=company_domain_name
SAF Resource Access Check
SafSecurityResourceAccess=

The utility verifies user access for the following resources:

BPX.SERVER(UPDATE)
BPX.FILEATTR.SHARELIB(READ) 
BPX.FILEATTR.PROGCTL(READ)
BPX.FILEATTR.APF(READ) 

Specify SafSecurityResourceAccess=n to turn off the resource access check.

Default: y

MSMServerPortNo
MSMServerPortNo=

Specifies the port number to use as the application server HTTP port for web-based access to CA CSM.

Default: 22120

MSMDSIPORTNO

Specifies the port number for CA DSI Server, which CA CSM uses internally to provide security features.

Default: 22130

MSMConnectorRedirectPortNo

Specifies the port number to which a request is redirected. Redirection occurs if a request comes in on a non-SSL port and is subject to a security constraint with a transport guarantee that requires SSL.

Default: 22140

MSMTomcatServerShutdownPortNo

Specifies the port number to which the CA CSM application server listens for the shutdown command.

Default: 22150