Win16 Client Security, Snapwinsec domain | HP UX SNAplus2 specification

Managing SNAplus2 Clients

Managing Win16 Clients

To disable the NAP, click on the Windows NAP icon and choose Close. If any SNAplus2 applications are running, the Close option is not selectable; if you are sure you want to disable the NAP, stop the relevant applications before retrying.

Win16 Client Security

SNAplus2 provides a facility for validating the user name and password of any Win16 client attempting to contact a server running SNAplus2. This enables you to ensure that only authorized Windows users are able to access the SNAplus2 system.

By default, Win16 client security is not active, so that any computer with the Win16 client software installed can access SNAplus2 servers. To enable Win16 client security, use the following procedure:

Step 1. Agree on a user name and password with each Win16 client user who is authorized to access the SNAplus2 system.

Step 2. On the Win16 client computer, deﬁne this user name. For Windows 3.1 or Windows for Workgroups 3.11, this name is deﬁned using the snauser parameter in the [Configuration] section of the sna.ini ﬁle, described in “Win16 Client Initialization File (sna.ini)”.

Step 3. On all servers that this client can access, deﬁne this user name and password to the HP-UX system as a system user name. (The servers the client can access are speciﬁed in the sna.ini ﬁle or the Windows Program Registry.)

Step 4. After enabling the SNAplus2 software on a server, use the following command:

snapwinsec domain

This command enables Win16 client security on all servers in the SNAplus2 domain. You do not need to repeat the command when enabling the SNAplus2 software on other servers.

When a Win16 client starts up and tries to access a server on which Win16 client security is enabled, the client software displays a pop-up message requesting a password. This password and the user name from the sna.ini ﬁle are checked against the user names deﬁned to the HP-UX system on the server. If the Win16 client user does not specify a

Chapter 11

277

Image 277

HP UX SNAplus2 manual Win16 Client Security, Snapwinsec domain

Contents

J2740-90013 HP 9000 Networking E1098 Edition HEWLETT-PACKARD Company Legal NoticesPage Page Contents Introduction to SNAplus2 Administering SNAplus2 Deﬁning Connectivity Components Basic Conﬁguration Tasks Conﬁguring Appc Communication Conﬁguring Dependent LUs Conﬁguring User Applications Conﬁguring Passthrough Services Managing SNAplus2 Clients Managing SNAplus2 from NetView Conﬁguration Planning Worksheets Using SNAplus2 in a High Availability Environment Conﬁguring an Invokable TP Using snaptpinstall Contents Contents Prerequisite Knowledge PrefaceAbout This Book Organization of This BookPage Opcode LU name Typographic Conventions0p1 Definenode cd SNAplus2 Publications Operating System ConventionsPublications for Users Special Element Sample of Typography HP-UX SNAplus2 3270/3179G Users Guide Publications for Administrators Publications for Programmers HP-UX SNAplus2 Administration Command Reference HP-UX SNAplus2 MS Programmers Guide Related PublicationsPage SNA Terms and Concepts Overview Systems Network Architecture Network Types Basic SNA ConceptsSNA Nodes Node Types in a Subarea Network Basic SNA Concepts SNA Subarea Network Node Types in a Peer Network Connectivity Application Programming Interfaces Transaction Programs Physical Units Network Accessible Units LU 6.2 for APPC, 5250 and CPI-C Logical Units LU 2 for 3270 displays Control Points Session Types Sessions Logical Unit Attributes for Sessions Multiple and Parallel Sessions Multiple and Parallel Sessions Conversations Units Communication between Transaction Programs and Logical Route Selection Modes Class of Service Appn Node Types Basic Appn Concepts Portion of a Sample Appn Network Appn End Nodes Appn Network Nodes LEN Nodes Appn Control Point Locating Resources Directory ServicesResource Names Basic Appn Concepts LEN Node Directory End Node Directory Network Node Directory Session Routing Topology and Routing Services Basic Appn Concepts Network Topology Database in Network Nodes Basic Appn Concepts Intermediate Routing Direct Connectivity Appn Network Using a Shared-Access Transport Facility Appn Connection Networks Basic Appn Concepts 11 Deﬁnitions Needed for Direct Links Using a Virtual Node Basic Appn Concepts Accessing Subarea Networks from Appn Networks Introduction to SNAplus2 Introduction to SNAplus2 What Is SNAplus2? Within a TCP/IP local area network LAN, SNAplus2 Standalone SNAplus2 Node That Communicates Directly with a Example ConﬁgurationsHost SNAplus2 Nodes in an Appn Network SNAplus2 Node Providing PU Concentration and Dlur SNAplus2 Node Conﬁgured for TN Server SNAplus2 Client/Server Conﬁguration Components of SNAplus2 SNAplus2 Components Node Components Passthrough ServicesSNA Support PU Concentration SNAplus2 Components TN Server Emulation User Applications RJE Workstation Daemon Windows client APIs see Windows APIs Appc API CPI-C API Windows APIs LUA API Client/Server Support Beneﬁts of Client/Server Operation Master Server and Backup Servers A domain with multiple SNAplus2 servers, one server holds Reference HP-UX Clients Windows Clients SNAplus2 Resources DLCs Connectivity Resources Link Stations PortsConnection Networks Local node can have an explicit link station deﬁned for its Session Resources SNAplus2 Resources Directory Information Modes and Classes of Service Domain Resources Administration Responsibilities SNAplus2 Administration Motif Administration Program Administration Tools Xsnapadmin Command-Line Administration Program Conﬁguration Files Remote Command Facility Chapter 103 NOF Applications Diagnostic Tools Simple Network Management Protocol Support Administering SNAplus2 108 Planning Worksheets Planning for SNAplus2 Conﬁguration Task Sheets Local System Enabling and Disabling SNAplus2 onSpecifying the Path to SNAplus2 Programs Snap start -s -m kernelmemorylimit -t Enabling SNAplus2 ServersMkernelmemorylimit Disabling SNAplus2 Servers Snap stop Invoking the Motif Administration Program Using the Motif Administration Program Resource Windows Domain Window SNAplus2 Domain Window Node Window Node Window Chapter 121 Resource Items SNAplus2 Tool Bar Tool Bar Buttons Resource Dialogs Sample Dialog Status Dialogs Sample Status Dialog Help Windows Sample Help Window Snap2adm Ascii Administration Program Using the Command-Line Administration Program Define StatusDelete Query Using the Command-Line Administration Program 132 Basic Conﬁguration Tasks 134 Conﬁguring Client/Server Functions Deletebackup AddbackupQuerysnanet Node Conﬁguration Parameters Conﬁguring the NodeAppn support Control point name Control point alias Additional ConﬁgurationNode ID Conﬁguring Logging Setcentrallogging Setgloballogtype Setlogtype Setlogfile Tail Chapter 141 Conﬁguring Logging 142 Deﬁning Connectivity 144 Chapter 145 146 Deﬁning Ports, DLCs, and Connection Networks SNA port name Port, Connection Network, and DLC Conﬁguration ParametersAdapter card number Port number Initially active Additional Port Parameters for SdlcLine details Type Encoding 6AT &&D3 &&Q1 DT7,012345678 Dial string Local SAP number Additional Port Parameters for X.25 QllcDeﬁne on connection network CN name Additional Port Parameters for Implicit PU Conﬁgure downstream LUs for implicit PU accessConcentration Maximum active template instances Deﬁning Link Stations Definetypels Link Station Conﬁguration Parameters Name Common Link Station ParametersActivation LU trafﬁc Poll address Additional Link Station Parameters for Sdlc Line encoding SAP number MAC address Channel ID Circuit typeRemote X.25 address Adapter/Port Number Remote node name Parameters for Independent LU TrafﬁcRemote node type Local node ID Parameters for Dependent LU TrafﬁcRemote node ID Remote node role Dlur PU Conﬁguration Parameters Deﬁning Dlur PUsDefineinternalpu PU Name Reactivate PU after failure Dlus Name 166 Conﬁguring Dependent LUs 168 LU Types 0-3 Conﬁguration Parameters Deﬁning LU TypesDefinelu0to3 Definelu0to3range LU name LU type LU numbersLU in pool Pool name Definelupool Deﬁning LU Pools Assigned LUs LU Pool Conﬁguration Parameters Deﬁning LU Pools 174 Conﬁguring Appc 176 Chapter 177 Deﬁning Local LUs Local LU Conﬁguration Parameters Member of default poolDefinelocallu LU alias 180 Deﬁning Remote Nodes Definedirectoryentry Remote Node Conﬁguration ParametersDefinepartnerlu Nodes SNA network name Defineadjacentlennode definedirectoryentry Deﬁning Partner LUs Partner LU name Partner LU Conﬁguration ParametersWildcard partner LU name Alias Supports parallel sessions Uninterpreted NameLocation 186 Deﬁning TPs Issue the snapadmin definetp command TP name TP Invocation ParametersParameters are for invocation on any LU/on speciﬁc LU Route incoming Allocates to running TP Multiple instances supported Arguments Full path to TP executableUser ID Group ID TP Deﬁnition ParametersConversation level security required Security access list Restrict access 194 Deﬁning Modes and Classes of Service Mode Associated Purpose Name COS Name Standard Mode and COS Names Session limits Mode Conﬁguration ParametersInitial session limit Maximum session limit Minimum contention loser sessions Minimum contention winner sessionsAuto-activated sessions Receive pacing window Maximum window size Session timeoutMaximum RU size Chapter 199 Deﬁning CPI-C Side Information Use default LUCPI-C Conﬁguration Parameters Local LU Mode Partner LUPartner TP Security Password Chapter 203 Conﬁguring Appc Security DefinelulupasswordConﬁguring Session Security Session Security Conﬁguration Parameters Conﬁguring Conversation Security DefineuseridpasswordAdditional Conﬁguration Conversation Security Conﬁguration Parameters Security Access List Conﬁguration Parameters Conﬁguring a Security Access ListDefinesecurityaccesslist Users in access list Chapter 207 Conﬁguring Appc Security 208 Conﬁguring User Applications 210 Chapter 211 212 Conﬁguring 3270 Emulator Users Conﬁguring 3270 Users and SessionsDefineemulatoruser User Name Emulation User and Group Conﬁguration ParametersGroup Name Style File Sessions Style ﬁle accessPermissions Session Conﬁguration Parameters Conﬁguring 3270 SessionsSession name LU/Pool name Display or PrinterSession base name Number of sessions Conﬁguring 5250 Emulator Users Conﬁguring 5250 Users Chapter 219 RJE Workstation Conﬁguration Parameters Conﬁguring RJE WorkstationsWorkstation name Run on computer Unix group name Conﬁguring RJE Workstations 222 Conﬁguring Passthrough 224 Conﬁguring TN Server TN Server Access Record Conﬁguration Parameters Conﬁguring TN Server Access RecordsDefinetn3270access TN3270 client address TCP/IP port number Support TN3270E Conﬁguring TN Server Association Records Allow access to speciﬁc LUDisplay LU assigned Printer LU assigned Definetn3270association TN Server Association Record Conﬁguration ParametersDisplay LU Printer LU Conﬁguring PU Concentration Downstream LU name Downstream LU Conﬁguration Parameters Upstream LU name Allow timeoutFake logon Conﬁguring Dlur 234 Managing SNAplus2 from NetView 236 Using the Host NetView Program Overview of RCF Command Syntax Changing the Size of the Command Input AreaNetView Screen Display Input n Uppercase Characters and Escape Characters Commandtext Characters to Produce Input ABcd Using Escape Characters in RCF Commands Restrictions on Administration Commands Used with Spcf Using Spcf Runcmd sp=myspname, appl=node, -a -d querylu0to3 Examples of Spcf Commands UCF Command Syntax Using UCFRuncmd sp=spname, appl=unix, HP-UXcommand HP-UXcommand Permitted Commands Output from HP-UX System Commands Example of a UCF CommandGrep Temp ab*.c TEMP.out Runcmd sp=myspname, appl=unix, ux-cancel Canceling a Command UCF Security Using UCF 248 Managing SNAplus2 Clients End of Section 250 Client Networking Requirements Setting Up IP Port Numbers Client Networking Requirements For Windows LAN Access Timeout NOF verbs querycentrallogger or querynodeall Deﬁning Client TPs Managing Win32 Clients Disabling SNAplus2 for a Win32 Client Enabling a Win32 Client Snapwinsec domain Win32 Client SecuritySnapwinsec off Possible values for each Registry subkey are as follows Win32 Client Conﬁguration Domain ConﬁgurationSnagroup Invokedtps Lanaccesstimeout Broadcastattemptcount Serverlosttimeout Servers ClientstarttimeoutServer1 Server2-Server10 Auditloggingenabled ExceptionloggingenabledLogging Backuperrorﬁle ErrorﬁleErrorﬁlewrapsize Logdirectory Auditﬁle BackupauditﬁleAuditﬁlewrapsize Succinctaudits Succincterrors ﬁle1 APItracingﬁle2 ﬂipsize Allapi TruncationlengthAppc Cpic Rui CsvNof MSGtracing Fmi CStracing Datagram AdminmsgData Receive Send Csvtblg CSVdata Managing Win16 Clients Disabling SNAplus2 for a Win16 Client Enabling a Win16 Client Win16 Client Security Win16 Client Initialization File sna.ini Chapter 279 Snauser Chapter 281 282 Chapter 283 284 Chapter 285 286 Chapter 287 288 Chapter 289 290 Chapter 291 292 Chapter 293 End of Section 294 Enabling SNAplus2 on HP-UX Clients Managing HP-UX ClientsSnap start -t HP-UX Client Network Data File snaclnt.net Chapter 297 Server names End of Section Chapter 299 Managing HP-UX Clients 300 Conﬁguration Planning Worksheets 302 Appn End Node Node Worksheets Your Motif FieldValid Entry/Notes Implementation Value LEN NodeYour LEN node Conﬁguration server? Connectivity Worksheets Leased line Switched outgoing Switched incomingNumber Port number Initially active Select if needed Line Details Type Negotiable Primary Primary multi-drop Secondary Duplex SettingPhysical link type Sdlc Link Station Dialog Any Independent only Dependent only By administrator On node startup On demand Name Upstream Dlus Token Ring Appendix a 311 Motif Field Valid Entry/Notes Implementation Value Ethernet Appendix a 313 314 Fddi Independent LU trafﬁc NETNAME.CNNAME each Appendix a 317 Qllc Appendix a 319 320 Subnet ID Your Motif FieldValid Entry/NotesImplementation Value Passthrough Services Worksheets LU Pool Dialog Pool name PU ConcentrationLU lists Downstream LU Dialog TN Server TN Server Access Dialog TN Server Association Dialog Display LU Allow access to speciﬁc Appc User Application Support Worksheets Supports parallel 255 Motif Field Valid Entry/Notes Implementation Value Location Minimum contentionEbcdic characters LS name Multiple instances Restrict to speciﬁc LUSupported Route incoming Basic Mapped Either User ID Up to 10 characters PasswordSync level PIP allowed Select if needed Name Local LU 5250Partner TP name LU Type 0-3 Dialog LU name 3270 Style ﬁle name Emulator User and Emulator Group Dialogs User name or group Multiple sessions Session name Session Dialog Single session orSession type RJE Workstation Dialog Workstation name LUA 337 338 Introduction to Snmp 340 SNAplus2 Appn Snmp Subagent Appn Management Information Base MIB Conﬁguring an Invokable TP Using snaptpinstall Snaptpinstall -r -t TPname -l LUalias Snaptpinstall -aﬁlenameSnaptpinstall -r -t TPname Snaptpinstall -q -t TPname -l LUalias TPname File Format for snaptpinstall 346 Appendix C 347 348 Appendix C 349 350 Securitytype Securitytype is Service 352 Using SNAplus2 in a High Availability Environment 354 What is High Availability? 356 Appendix D 357 LU Pools for 3270, 3179G, and LUA SNAplus2 High Availability Features Figure D-2 LU Pools Client/Server Conﬁguration 360 Appendix D 361 Table D-1 Component Primary Server Backup Server Appendix D 363 364 Figure D-6 SNAplus2 environment with ServiceGuard Using SNAplus2 with MC/ServiceGuard Identifying Critical SNAplus2 Connectivity Creating the HA SNAplus2 Package Appendix D 367 SNAplus2 Package Table D-2 Suggestions for Deﬁning the SNAplus2 Package Specifying the Service CommandOpt/sna/bin/snapmon HALS. See Specifying 370 Specifying a Package IP Address Figure D-7 SNAplus2 in Client/Server Conﬁguration SNAplus2 Client/Server LAN Connections SNA LAN Connections Figure D-9 SNAplus2 Server Running TNServer TN Server LAN Connections Figure D-10 Accessing SNAplus2 Server via LAN Using the LAN to Access Standalone Servers Script Customizing the SNAplus2 Package ControlModifying the Path variable Adding Customer Deﬁned Functions Snapadmin startls, lsname=HALS Lans Compatibility Constraints Qllc Sdlc Appendix D 381 Advanced Conﬁguration Techniques Writing Your Own SNAplus2 Service Script 384 Appendix D 385 386 Numerics Index 388 389 390 391 392 393 394 395 396 397 398