encryptionEnabled

If you want the initial input and output data to be encrypted, you must set the encryptionEnabled field as True. To disable the feature, set the value of the encryptionEnabled field as False.

Default value: Not set

Types of Credentials

You can specify Service Run-As credentials for a given Service in one of two ways: as stored credentials or pass through credentials.

•

Stored Credentials  — Enter Service Run-As credentials on the Director with the GridServer Administration Tool. These credentials are synchronized with all Brokers. These credentials are linked to Services in the Service Type Registry by specifying the user name in the RunAsUser field. Credentials in the repository consist of a user name and a password. The user name can be in Windows DOMAIN/username format if domain-specific authentication is required. UNIX Engines ignore this domain.

•

“Pass through” Credentials  — The Driver provides the user name of the current Principal that is logged in and is running the Driver. The password is provided as a DriverManager property, CURRENT_USER_PASSWORD. These are referred to as “pass through” credentials. A password set on the Driver is necessary to prevent user account spoofing between authentication domains (for example, logging in as a local user on the Driver machine to pose as an LDAP user in the credentials DB).

Pass through credentials are indicated for a Service in the Service Type Registry with the $ token. This token is substituted with the user name of the current principal that is executing the Driver process. The token might also be prepended with a Windows domain if domain-specific authentication is required. UNIX Engines ignore this domain.

Note

When you create a Service using pass through credentials and the Collection.NEVER Service option, failover does not work under all circumstances. • If the Broker accepts the Service and the Engine has not yet picked up the tasks, failover works correctly and tasks successfully rerun. • If the Broker accepts the Service and the Engine has already picked up the tasks, tasks do not rerun successfully and an Exception is thrown. Pass through credentials do not persist through failover.