HOME
 
 

FASTCopy with no user and password


Question:

I am setting up FASTCopy to run in a secured environment, so there is no need for a any username or password. Can FASTCopy enable a remote node to work with no user and password?

Answer:

Utilizing FASTCopy's Proxy Security Mechanism, administrators can define a comprehensive operations rules base, among them allowing specific remote nodes to issue commands without a username or password. The Proxy Security Mechanism can prohibit transfer operations to specified time periods, allow incoming operations from a specific subnet, and more - thus permitting the removal of the username and password requirements. The local Proxy Security Mechanism must have the details of a real system account under whose context incoming operation will be performed. For complete details on the usage of the Proxy Security Mechanism consult SoftLink Support , or refer to the FASTCopy Administrator Guide.
The specific criteria and the local system username, under which remote requesters will be allowed to perform operations with no user/password, should be listed in FASTCopy's Administration and Security files. These files are softlink.security and softlink.login, located in the /etc directory on UNIX, under SYS$MANAGER on OpenVMS, or in the \security directory under the FASTCopy installation directory on Windows NT and 2000/XP.
Let's say you would like to allow nodeA (at IP address 192.168.6.129) to initiate FASTCopy operations against your machine without specifying a username or a password:

  1. First, edit the softlink.login file and add the following rule:
    ====
    Requester
    criteria -peer_address=192.168.6.129
    action -approve -l_user=real_user -class=zzz
    ====
    This rule means that all requests (regardless of user or node name) coming from 192.168.6.129 are to be approved and run the context of local user real_user. The class=zzz qualifier is used to identify the request in further rules. Next, edit softlink.security and add the following rule:
    ====
    requester
    criteria -class=zzz
    action -approve
    ====
  2. On a Windows machine you must also add the local real system account to the sl_passwd list. From the command line, use the sl_passwd.exe utility (stored in the same directory as all FASTCopy-related executables) in the following manner:
    sl_passwd add real_user -system_password=real_system_password
    This step is not required on a Unix system since the FASTCopy daemon runs in the context of user root. Unlike Windows' administrator, the root account in Unix can change user context to another user without supplying the password.
  3. 3. On the remote node (nodeA at IP address 192.168.6.129) instruct the user to replace the qualifiers "-user=xxx" and "-pass=xxx" with the qualifiers "-nouser" and "-nopass" in the FASTCopy command.
The criteria specified in softlink.login (see section 1) can subscribe to any restrictive requirements you would like. Refer to the FASTCopy Administrator Guide for additional criteria qualifiers.


Related Topics:
FASTCopy
SECURITY

Back to FAQ Index



Site mapSupportContact us