Enabling Authentication

Follow these steps to enable authentication and authorization in ActiveSpaces.

1. For the tibdg administration tool and tibdgadmind to connect to a secure realm server with authentication credentials:
   1. The username using the -user option.
   2. The password file using the -password option.
      Use one of the following options:

      • pass:<password>

        -password pass:mypassword

      • file:<password file>

        -password file:mypasswordfile

      • env:<environment variable>

        -password env:%myPassword%

      • stdin

        You are prompted for the password when the command executes.

   3. The location of the trusted realm server using the -trustfile option:

      -trustfile %TRUST_FILE%

      For details, see Trust File.
   Example

   tibdg -r %REALM_URL% -s my_script_file.tibdg -user all -password pass:mypasswords -trustfile %TRUST_FILE%

2. For the tibdgnode, tibdgkeeper, and tibdgproxy processes to connect to a secure realm server with authentication credentials:
   1. Specify the password file that these processes uses to connect to the grid.
      The password file is specified using the --user-password-file option.
      For details, see Password File.
   2. Specify the location of the trusted realm server using one of the following options:
      • --trust-file: The contents of the specified trust file instructs clients to trust the realm server's certificate.

        For details, see Trust File.

      • --trust-all: The client trusts any realm server without verifying trust in the server's certificate.
        Note: This option should only be used for development and testing.
   Example

   tibdgproxy -r %REALM_URL% --user-password-file c:\AS\tests\myPasswordfile.txt --trust-all