Security Services with Windows LAN Manager

When using SAP ASE on Windows, you can enable the security services provided by Windows LAN Manager to authenticate users, clients, and servers to one another.

You can use secure connection between LAN Manager and a server to provide a unified login to SAP ASE. Through this login, the LAN Manager authenticates users once and does not require them to supply a name and password each time they log in to SAP ASE.

• How Login Authentication Works
  When a client validates the login with LAN Manager, SAP ASE establishes a secure connection between itself and the client.
• Administering Security Services Using LAN Manager
  Administer the SAP ASE unified login capability with LAN Manager.
• Modify Configuration Files Required for a Unified Login
  Configuration files are created during installation at a default location in the SAP ASE directory structure.
• Identify Users and Servers to LAN Manager
  The security administrator for LAN Manager must define principals (defined users) to the security mechanism. Use LAN Manager’s User Manager utility to identify all users for the system.
• Configure SAP ASE for LAN Manager Security
  SAP ASE uses several configuration parameters to administer unified login and security services through LAN Manager. To set these parameters, you must be a system security officer.
• Add Logins to Support Unified Login
  Consider whether to allow only users who are defined as valid logins to use SAP ASE or to allow any user with the default login to use SAP ASE.
• Define the Connection to a Server for Security Services
  Define the connection to a server for security services by specifying the principal name for SAP ASE, network-based user authentication, and the name assigned to LAN Manager through the isql and bcp utilities.
• Determining the Status of Security Services
  Determine whether security services are enabled for the current session, by using show_sec_services
• Configuration Parameters Used in Security Services
  Unified login and security services use configuration parameters through LAN Manager that provide security checks.
• Manage Login Security on an Windows Computer
  You can use SAP ASE security features alone or with Windows security features.