Back to Contents | GAS Configuration File Overview
The AUTHENTICATION element in the Genero Application Server configuration file sets the authentication configuration for the Genero Application Server. Authentication allows you to run impersonated DVM through HTTP (where the DVM is started as the authenticated user). Authentication is currently supported by the Genero Desktop Client (GDC and GDC/AX) and the Genero Web Client. Refer to the respective client manuals for client-specific authentication configuration.
<AUTHENTICATION Type="authtype">
<REALM>realm</REALM>
<SERVICE_NAME>service</SERVICE_NAME>
<KEYTAB>filename</KEYTAB>
</AUTHENTICATION>
The AUTHENTICATION element takes an attribute of Type where authtype specifies the type of authentication. Currently, only the Kerberos type is supported. The AUTHENTICATION element may contain the following child elements (described below):
<AUTHENTICATION Type="KERBEROS"> <REALM></REALM> <SERVICE_NAME>gassvc</SERVICE_NAME> <KEYTAB>$(res.path.as)/etc/gwc.keytab</KEYTAB> </AUTHENTICATION>
The REALM element specifies the Kerberos realm. If no realm is specified (the element is empty), the default realm is used.
Usage Examples:
The following examples would be valid for the REALM element:
<REALM></REALM> <REALM>KERBEROS.MYDOMAIN.COM</REALM>
The SERVICE_NAME element specifies the service name for the Genero Application Server. By default, the value of this element is "gassvc".
The value set for the SERVICE_NAME element is only used on Unix systems.
The following example would be valid for the SERVICE_NAME element:
<SERVICE_NAME>gassvc</SERVICE_NAME>
The KEYTAB element specifies the path to the keytab file. This file provides the Kerberos service private key.
The value set for the KEYTAB element is only used on Unix systems.
The following example would be valid for the KEYTAB element:
<KEYTAB>$(res.path.as)/etc/gwc.keytab</KEYTAB>