Copyright © TIBCO Software Inc. All Rights Reserved
Copyright © TIBCO Software Inc. All Rights Reserved


Appendix A SDK Programming Guidelines : Security Considerations

Security Considerations
The user management and domain monitoring components of TIBCO Administrator allow administrators to define an access control list (ACL) for repositories in the administration domain. See TIBCO Administrator User’s Guide for more information.
The TIBCO Administrator administration server checks the users that access or invoke project repositories and ensure that they have the appropriate privileges defined in the ACL.
TIBCO Administrator Administration Server Access
File Repositories
Local file repositories must be secured using file system permissions. The same applies to a file-based repository managed by an administration server.
Local file repositories cannot be secured using tools provided by TIBCO because there is no enforcement mechanism available to stop a user from accessing a file, if the user has file access rights.
Server-Based Repositories
The read-only or read-write mode can be used for a server-based repository. The mode is specified in the tibcoadmin.tra file.
The read-only mode is only available if the server is operating in Load Balancing mode. All servers other than the repo.master operate as read-only. The master may switch its mode by changing the tibcoadmin.tra file directly and restarting, or using the Repository palette (need to provide an administration server password).
repo.state=READ_ONLY
repo.master=localhost
See the TIBCO Administrator Server Configuration Guide for more information about load balancing.
Password Obfuscation
A domain utility, which includes an obfuscation tool, is provided with TIBCO Runtime Agent. The obfuscation tool can be used to mask the password stored in a properties file.
For example, an adapter needs to log into the database, and the username and password are provided in a properties file. The password needs to be obfuscated so it is not recognizable to a casual user looking at the file.
1.
In TIBCO Designer, define global variables for fields such as the username and password (%%username%%, %%dbpassword%%). Configure and save the adapter instance.
These variables are user defined. dbpassword refers to a database the adapter wants to access.
2.
Create a properties file and include the parameters clientVar.username and clientVar.dbpassword. Precede the parameters with a #. For example, lientVar.username=#frog.
3.
Run the domain utility, (found under tra/bin) choose obfuscation as the task to perform, and supply the properties file.
The obfuscation tool will create a new properties file of the same name and which contains the username and password in obfuscated form.
The adapter can be run with this properties file using the -propFile command line option.
Data Security
If data security for an adapter on the network is required, developers should consider using TIBCO Enterprise Message Service and implement the adapter to use SSL.
As an alternative, developers requiring the use of TIBCO Rendezvous can consider the transformation plug-in. See Transformation Plug-in.

Copyright © TIBCO Software Inc. All Rights Reserved
Copyright © TIBCO Software Inc. All Rights Reserved