Configure Security for the Connection to the RSSD

At startup, Replication Server contacts the RSSD for configuration information. Secure the pathway from Replication Server to RSSD using network-based security.

When you set up Replication Server, rs_init creates the RSSD connection and places default security information in the Replication Server configuration file, Rep_Server_name.cfg. By default, rs_init sets all network security parameters to “not required.” If you want to secure the pathway, you must use a text editor to change desired default values to “required.”

Configuration values for the RSSD are preceded by an “RSSD_” prefix. For example:

RSSD_mutual_auth
RSSD_msg_origin_check
RSSD_server_principal_name

For example, to set RSSD server principal name to Kerberos_PDS_princ, add this line in the Rep_Server_name.cfg configuration file:

RSSD_server_principal=Kerberos_PDS_princ

Note: If you do not enter RSSD_server_principal_name in the Rep_Server_name.cfg configuration file, Replication Server considers that RSSD server principal name is same as RSSD server name.