Configuring Native Operating System Authentication

Configure the server for native OS authentication by modifying the <node-name>.xml and csi_native_nt.xml or csi_native_unix.xml files.

Native OS authentication requires the same username-password credentials that users enter to log in to their machines. Native OS authentication relies on the underlying operating system’s built-in authentication framework.

By default, the installation process creates a cluster configuration file called node1.xml. This file contains security information for the cluster, including a reference to the file that determines the authentication type. If you created a different cluster name during installation, your cluster configuration file name takes the form <node-name>.xml.

When native OS is the active authentication method, the <node-name>.xml file refers to either the csi_native_nt.xml or the csi_native_unix.xml file, which provide configuration information for native OS authentication for Windows and Linux/Solaris respectively. Event Stream Processor provides default csi_native_nt.xml and csi_native_nt.xml files in the ESP_HOME/security directory that you can use as-is, or modify based on your specific implementation.

If you performed a typical installation, or selected native OS authentication at installation time, there is no need to modify the <node-name>.xml file. If you installed with a different authentication type, perform these steps to enable and configure native OS authentication:

  1. Use a text editor to open the cluster configuration file, ESP_HOME/cluster/nodes/<node-name>/<node-name>.xml.
  2. Within the <Security> section of the cluster configuration file, in the <Csi> section, change the <File> value to csi_native_nt.xml or csi_native_unix.xml. For example:
    <Csi>
      <File>csi_native_unix.xml</File>
    <Csi>
  3. Restart the server and all of the cluster managers.
Next
If you are configuring native OS authentication for Linux or Solaris, configure a pluggable authentication module (PAM). This step is not necessary for Windows.