Security Parameters

Use

The parameters described below are used to configure the gateway to ensure secure connections.

Integration

Refer also to Security Settings in the SAP Gateway.

Prerequisites

Your system must be configured for using the SNC interface.

Features

gw/sec_info

File with the security details (see Assigning Start Authorizations for External Programs).

Any unauthorized starting of external programs can be prevented by maintaining the file secinfo in the data directory of the gateway instance. 

Default value

<Data-Directory>/secinfo

Dynamic

Yes

gw/tcp_security

These parameters can be used to protect external programs against being started.

If this parameter has the value ‘1', the information in file gw/sec_info is read. The gateway establishes from the entries in this file whether the user has the authority to start external programs.

Default value

1

Dynamic

Yes

(*) but only if changing the parameter affords increased security, thus 0 -> 1 is allowed, 1 -> 0 is not allowed.

gw/reg_info

File with the security information for registered programs (see Access Controls for Registered Programs).

Unauthorized registration of programs can be prevented by maintaining the file reginfo in the data directory of the gateway instance.

If the file exists, the system searches for valid registration entries in this list. If there are none, the system searches, as up to now too, in the gw/sec_info file.

Default value

<Data directory>/reg info

Dynamic

Yes

SNC Parameters

There are a number of additional parameters that control the behavior of the SAP Gateway in conjunction with SNC (Secure Network Communication).

Parameter

Meaning

Default value

Dynamic

snc/enable

This parameter specifies whether the gateway accepts connections that protect the data via SNC.

0

No

snc/permit_insecure_comm

This parameter specifies whether the gateway accepts connections without SNC.

0

No

snc/permit_insecure_start

This parameter specifies whether the gateway may establish connections with programs that communicate without SNC.

0

No

snc/permit_common_name

This parameter specifies whether the gateway can use a default SNC name specified by the parameter snc/identity/as, if an SNC name for the connection cannot be read from secinfo.

0

No

snc/gssapi_lib

Path for the shared library of the security system in use.

""

No

snc/identity/as

Identity of the gateway application server

""

No