Configuring Security

Set up authentication, access control, and SSL connections, and encrypt passwords in configuration files.

Security in Event Stream Processor is managed centrally, by the cluster manager. All projects running in a remote cluster are subject to the security rules defined for that cluster. For information on security for projects running in the local cluster, see the Studio Users Guide.

• Authentication
  SAP Sybase Event Stream Processor is designed to integrate with your existing authentication framework whether you are using Kerberos, RSA, LDAP, SAP BI, or your operating system’s native credential management system.
• Access Control
  Access control is an additional layer of security available with LDAP, preconfigured login, and native OS authentication.
• Secure Sockets Layer (SSL) Connections
  Event Stream Processor supports SSL connections over the network to ensure the privacy of communication between client applications and ESP Server.
• Generating the Java Keystore
  Java keystores provide a convenient mechanism for storing and deploying X.509 certificates and private keys. Use keystores with Secure Sockets Layer (SSL) to have the ESP Server store and read the key. Use keystores to encrypt passwords for external servers and applications (like databases) to avoid storing passwords as clear text in configuration file. Also use keystores for RSA authentication because it stores user certificates.
• Generating PEM Format Private Keys
  Convert the Java keytool to generate privacy enhanced mail (PEM) format private keys.
• Encryption
  ESP provides two utilities for encryption, esp_cluster_admin and esp_encrypt. These utilities support password encryption for internal adapter, service, cluster, and project configuration files. Event Stream Processor also provides the encrypt.sh and encrypt.bat scripts for encrypting passwords in external adapter configuration files.