CyberSafe TrustBroker Client for Open Client and Open Server 12.5 or later.
Install CyberSafe GSS Run Time Library.
Set the credentials (desired security features) using ct_con_props, or use the default credentials by not setting credential properties.
Configure the security section of the libtcl.cfg or libtcl64.cfg configuration file.
Verify that the application has a preexisting user credential to connect to the server. In other words, the user of the application must log in to CyberSafe before running the client application.
Log in to the CyberSafe security mechanism with the CyberSafe utility kinit before running your Client-Library application.
If a user name is supplied, it must match the user’s preexisting credential. If a user name is not supplied, Client-Library connects to the server using the user name associated with the user’s CyberSafe credential.
The environment variable CSFC5CCNAME, sets the path to the credentials cache file. If the corresponding file is located in a non-default directory, set the environment variable to the file’s full path.
For more information, refer to your CyberSafe documentation.
The libgss.so or libgss.sl file must be in the path while running your Client-Library application. This file is not provided by Sybase, but is included with some CyberSafe products. If this file is not included with your CyberSafe product, contact CyberSafe to obtain their GSS-API library.
No extra flags are required when compiling your Client-Library applications to use CyberSafe Kerberos security services.
Once you have configured Open Client and Open Server and CyberSafe, you can use isql to test your configuration.
See README.SEC in the $SYBASE/$SYBASE_OCS/sample/srvlibrary directory for an example of configuring and running the sample program.
