Chapter 7 HPSS User Interface Configuration
418 September 2002 HPSS Installation Guide
Release 4.5, Revision 2
The HPSS_REUSE_CONNECTIONS environment variable is used to control whether TCP/IP
connections are to be left open as long as a file is open or are to be closed after each read or write
request. A non-zero value will cause connections to remain open, while a value of zero will cause
connections to be close. The default value is zero.
The HPSS_USE_PORT_RANGE environment variable is used to control whether the HPSS
Mover(s) should use the configured port range when making TCP/IP connections for read and
writerequests. A non-zero value will cause the Mover(s) to use the port range, while a value of zero
willcause the Mover(s) to allow the operating system to select the port number. The default value
is zero.
The HPSS_TOTAL_DELAY environment variable is used to control the number of seconds to
continueretrying requests. A value of zero indicates that no there is no time limit. The default value
is 0.
The HPSS_REGISTRY_SITE_NAME environment variable is used to specify the name of the
securityregistry used when inserting security information into connection binding handles. This is
onlyneeded when the client must support DFS in a cross-cell environment. The default registry is
“/.../dce.clearlake.ibm.com”.
The HPSS_DMAP_WRITE_UPDATES environment variable is used control the frequency of
cache invalidates that are issued to the DMAPI file system while writing to a file that is mirror in
HPSS. The default value is 20.
The HPSS_NDCL_KEY_CONFIG_FILE environment variable is used to specify an alternate file
(default file is/var/hpss/etc/ndcl.keyconfig) that contains the key used to perform encryption in
DCE authentication mode. This is set on the client machine.
The HPSS_KRB_TO_DCE_FILE is used to specify an alternate file (default file is/var/hpss/etc/
krb5_Realms_to_DCE_Cells) that contains the mapping from kerberos realm names to dce cell
names. This is set on the Non-DCE Gateway host.
HPSS_KCHILD_PATH is used to specify an alternate executable file (default is/opt/hpss/bin/
ndcg_kchild) that handles kerberos authentication on the Gateway machine.
HPSS_NDCG_KRB5_SERVICENAMEis used to specify the name of the Kerberos Service for the
Non-DCEGateway. Typicallythis shouldbe something like ndcg/<hostname> where hostname is
the name of the Non-DCE Gateway host machine.
HPSS_KCHILD_KEYTABis used to specify an alternate keytab file (default is /krb5/v5srvtab)to
be used to perform kerberos authentication. This is set on the Non-DCE Gateway host.
7.2.3 Authentication Setup
In order to enable the Non DCE Gateway and Client API to perform security in either DCE or
Kerberos Modes the following setup needs to be done:
7.2.3.1 DCE Mode
This is the default security mode for the NDCG.