Sun Microsystems SunLink SNA 9.1 PU2.1, Руководство по настройке

Страница: 287 / 298

LUType 6.2 Security G-5
G
G.5 Unix-Level Security
By default, Unix-level security controls only how processes are invoked from
remote systems to the local system. The Sun PU2.1 SNA Server provides
additional Unix-level security by not allowing user processes to be invoked as
root. Whenever the server invokes a user process, the server sets the user ID of
the process to the Default User name specified for the PU2.1 server. For
information, refer to Section 5.1, “Basic PU2.1 Server Configuration,” on
page 5-2.
Unlike other system files, which are automatically modified during
installation, the
/etc/passwd
file (or any associated NIS password database
file) is not modified for security reasons. Therefore, you must manually add
the user ID specified for the PU2.1 server (either the default name
sunlu62
or
any other name you specify) to the
/etc/passwd
file. If you try to invoke a TP
through an Attach request and the
/etc/passwd
file has not been updated, the
Attach request is rejected and the session is brought down with a security
violation sense code.
You can also specify a group ID for the PU2.1 server. If you do, you must
manually add the group ID to the
/etc/passwd
file.
If the Sun PU2.1 SNA Server is configured to use full Unix-level security, you
can map the user ID, password, and profile from the Attach request to Unix
system parameters. The Attach parameters are checked against the
/etc/passwd
and
/etc/group
files as the final check.