Planning for compatible settings

Replication Server accepts incoming logins and initiates logins to other servers. Security parameters for all incoming logins (when Replication Server is acting as a server) are set with the configure replication server command. Security parameters for outgoing logins (when Replication Server is acting as a client) are set as described in Table 8-7.

When you set up network-based security, you must plan for the interaction between security settings at each end of the secured pathway. Security settings at both ends of each pathway must be compatible.

NoteIt is the replication system administrator’s responsibility to choose and set security features for each server. Replication Server does not query the security features of remote servers before attempting to establish a pathway. An attempted login fails if security features at both ends of the pathway are not compatible.

Use configure replication server with the use_security_services parameter to activate or deactivate all security services. Table 8-9 describes compatible security settings for client/server interaction. If the security services parameters are not compatible, for example, if a parameter is set to “not_required” at the client and “required” at the server, the server does not allow the client to log in.

Table 8-9: Compatible client/server settings

Client

Server

use_security_services “off”: no security services

Compatible settings:

  • use_security_services “off”, or

  • use_security_services “on” and security feature “not required”

use_security_services “on” and security feature “not required”

Compatible settings:

  • use_security_services “on” and security feature “not required,” or

  • use_security_services “off”

use_security_services “on” and security feature “required”

Compatible settings:

  • use_security_services “on” and security feature “required”