Hitachi

uCosminexus Application Server Security Management Guide


14.3.4 Definition file for user mapping and authentication information

Organization of this subsection

(1) Additional CSV file specifications

In addition to the specifications shown in 14.3.1 Basic CSV file specifications, the following specifications are added for specifying lists of attributes:

(2) Specification formats

Information to be specified in the first line

Specify the header information shown in the table below. Each item must consist of ASCII characters and be separated by a comma (,). Item IDs can be specified in any order.

Table 14‒4: Header information to be specified (definition file for user mapping and authentication information)

Item ID

Specification

Description

Attribute

REALMNAME

Register identification

Specify the name of a realm. User entries are created under the specified name.

Required

USERID

User ID

Required

SECRETDATA

Authentication information

Data is to be encrypted and saved.

Optional

PUBLICDATA

Data is to be saved without encryption.

Optional

LINK_xxxx

Destination system user

Specify the name of a user of an application that has user management functionality. (xxxx must be a REALMNAME.)

Optional

OPERATION

Line operation command

Specify a line operation type. A file can contain specifications of addition, change, and deletion.

Optional

If the specified name is not an item ID, the field is ignored.

LINK_xxxx is an item ID created for each realm registered in the single sign-on repository.

Second and subsequent lines

Specify actual data to be registered, separating each item by a comma (,).

(3) User definition for applications that have JAAS-compatible user management

The xxxx portion of a LINK_xxxx item ID indicates the name of a realm representing an application that has user management functionality for the connection destination. To define the connection destination, specify a user ID in the xxxx field. To add to or modify the specification, use the following operations:

Add

This adds to the given LINK_xxxx item the user ID of an application (or realm) to which you wish to assign user management functionality for the connection destination.

Modify

This modifies the given LINK_xxxx item to the user ID of an application (or realm) to which you wish to assign user management functionality for the connection destination.

Delete

This deletes the user ID from the given LINK_xxxx item (or specifies nothing in it).