SAS Scalable Performance Data Server 4.5, Administrator'S Manual

Page: 158 / 271

Example Server Setup with ACL Security
The following command invokes SPD Server with ACL support enabled and configures it
with the specified LIBNAME domain definitions.
spdssrv -ACL -acldir
InstallDir/site -nameserver samson
-LIBNAMEfile libnames.parm
The libnames.parm file contains:
LIBNAME=public pathname=/disk1/public;
LIBNAME=qadata pathname=/disk2/qadata
owner=qamgr;
LIBNAME=marketing pathname=/disk3/marketing
owner=mktmgr;
LIBNAME=clinical pathname=/disk4/clinical
owner=drzeuss;
SPD Server is invoked connecting to the name server running on machine 'samson'. The
password file listing all valid system users resides in directory 'InstallDir/site'. LIBNAME
domains 'public' 'qadata', 'marketing' and 'clinical' are registered with the name server.
The
/disk1/public
,
/disk2/qadata
,
/disk3/marketing
, and
/disk4/
clinical
directories must exist and the user ID that invokes spdssrv must have read and
write access to them.
The following LIBNAME statements connect SAS clients to the data areas:
LIBNAME open sasspds 'public'
host='samson'
user='employee'
prompt=yes;
LIBNAME pres sasspds 'clinical'
host='samson'
user='ceo'
prompt=yes;
LIBNAME report sasspds 'marketing'
host='samson'
user='ceo'
aclgrp='mrktng'
prompt=yes;
LIBNAME efficacy sasspds 'clinical'
host='samson'
user='drfda'
prompt=yes;
Additionally, ACLs can be created on the LIBNAME domains themselves and the
resources that are created within them. The simplest way to do this is using PROC SPDO.
The following example demonstrates this:
LIBNAME clin sasspds 'clinical'
host='samson'
user='drzeuss'
prompt=yes;
152
Chapter 14 • ACL Security Overview