Configuring APPC Security

You can perform the following configuration tasks for APPC security:

Configuring session security as described in “Configuring Session Security”
Configuring conversation security as described in “Configuring Conversation Security”

Configuring Session Security

Session-level security is used to validate LU-LU sessions. Each definition consists of a local LU name, a partner LU name, and a password.

SNAplus2 uses the password to validate sessions between the local LU and partner LU. (The passwords are not related to HP-UX logon passwords.)

To configure session security, use one of the following methods:

Motif administration program

Select APPC, Security, and Session-level security from the Services menu on the Node window.

Command-line administration program

Issue the following command:

define_lu_lu_password

Session Security Configuration Parameters

The following parameters are required for session security configuration:

Local LU: The LU name of the local LU. The name is a string of 1-8 characters.
Partner LU: The fully qualified LU name of the partner LU.
Password: A password that SNAplus2 can use to validate sessions between the local LU and the partner LU. The password is a 16-digit hexadecimal number that is used to create a key, which is exchanged when the session is established. This password is not related to HP-UX login passwords on either the local or the remote node.

Additional Configuration

After performing the session security configuration, continue with the following configuration tasks:

To configure conversation security, see “Configuring Conversation Security”.
To configure 5250 communication, see Chapter 8 “Configuring User Applications”

Configuring Conversation Security

Conversation security is used to validate incoming conversations. Each definition consists of a user ID and a password. The user IDs and passwords are not related to HP-UX logon user IDs and passwords.

To configure conversation security, use one of the following methods:

Motif administration program

Select APPC, Security, and Conversation-level security from the Services menu on the Node window.

Command-line administration program

Issue the following command:

define_userid_password

Conversation Security Configuration Parameters

The following parameters are required for conversation security configuration:

User ID: The user ID to be accepted in an incoming conversation from a remote node. The user ID can be up to 10 characters long. This user ID is not related to HP-UX login user IDs on either the local or the remote node.
Password: The password to be accepted in an incoming conversation from a remote node. The password can be up to 10 characters long. This password is not related to HP-UX login passwords on either the local or the remote node.

Additional Configuration

After configuring conversation security, you can configure 5250 communication as described in Chapter 8 “Configuring User Applications”

Configuring a Security Access List

You can define an APPC security access list to control access to an LU or TP (or both). This list can be referred to by the definition for an APPC local LU or TP.

To configure a security access list, use one of the following methods:

Motif administration program

Select APPC, Security, and Conversation-level security from the Services menu on the Node window, then select the Security Access Lists pane and choose New.

Command-line administration program

Issue the following command:

define_security_access_list

Security Access List Configuration Parameters

The following parameters are required for security access list configuration:

Name: Name of the security access list. The definition for an APPC TP or local LU can use this name to refer to the access list.
Users in access list: The names of users included in the security access list.

Additional Configuration

After performing the security access list configuration, continue with the following configuration tasks:

Configure TP access as described in “Defining TPs”.

Configuring APPC Security

Technical documentation

» Table of Contents

» Index

Configuring Session Security

Session Security Configuration Parameters

Additional Configuration

Configuring Conversation Security

Conversation Security Configuration Parameters

Additional Configuration

Configuring a Security Access List

Security Access List Configuration Parameters

Additional Configuration