Aster Client Guide

Authentication and Security

Using Single Sign-on (SSO) example, if libvas-gssapi.so

is deployed at

/usr/lib64

, then the

GSSPath parameter needs to be set to

/usr/lib64

in the

ODBC.ini

config file as shown below:

GSSPath=/usr/lib64

• For 32-bit Linux machines: The ODBC driver assumes that libvas-gssapi.so

is present at

/opt/quest/lib/

. If

/opt/quest/lib/libvas-gssapi.so

does not exist, locate libvas-gssapi.so

by referring to the VAS documentation and set the

GSSPath

parameter to point to the installed location of libvas-gssapi.so

. For example, if libvas-gssapi.so

is deployed at

/usr/lib

, then the

GSSPath parameter needs to be set to

/usr/lib

in the

ODBC.ini

config file as shown below:

GSSPath=/usr/lib

Adding AD-Based SSO Authentication to ODBC Connections with SSL

If your Aster Database is configured to authenticate users against Active Directory (“AD”), you can configure your Aster ODBC clients to authenticate against AD, too. With this configuration in place, each ODBC client will be required to authenticate against AD when it tries to connect to Aster Database. If the ODBC client authenticates successfully, an SSL channel is established automatically for communication between Aster Database and the client. When your system is configured to use SSO, the

\password

command in ACT will not be available.

Using SSO with ACT

Note that when using SSO with ACT, the

-U

and

-w

options are not used, because the username and password are passed directly to the host via SSO. Also, when using SSO, you should specify a fully qualified hostname using the

-h

option, as in the example:

<hostname>.<domain>.<com|org etc>

. If only the hostname is used, ACT will append the local domain name before attempting to look up the host. Using an IP address with

-h

is not supported with SSO.

The following is an example of a configuration file that uses SSO:

# ACT configuration file example

# Contains settings for connecting securely to a specific host and database host: saturn.asterdata.com

dbname: sampledb username: sampleuser

# SSL settings enable-ssl: true ssl-self-signed-peer: true

# SSO settings enable-sso: true

50 Aster Client Guide