Parameters
The Host Based Authentication Module parameters are listed in the following table.
| Parameter | Description |
|---|---|
| debug | When set to
true, enables debug output for the module. Enabling this parameter may aid in diagnosing configuration problems.
Warning: Enabling the debug flag may create security vulnerabilities by revealing information in the log file. The default setting is false. |
| tibems.hostbased. accepted_hostnames | A comma delimited list of host names or patterns to compare with the incoming connection's host name, as known by the EMS server. A match results in successful authentication.
Host names or domains can be explicitly specified, or any regular expression working with the Java Pattern class may be used. A domain may be used by beginning the string with a dot (.). Each host-name or pattern must be encapsulated by a single quote and separated by a comma. These entries are compared with the hostname associated with the IP of the connecting EMS client. WARNING: This could have a performance impact as a NIS or DNS lookup may be performed. If this property is not set, host names are not checked during authentication. For example: 'host1', '.tibco.com', '^.*_SERVER\\.tibco\\.com' |
| tibems.hostbased. accepted_addresses | A comma delimited list of IP addresses or net/prefix (CIDR notation) masks to compare with the incoming connection's IP address.
Both IPV4 and IPV6 are supported. Any match results in successful authentication. If this property is not set, IP address checking is disabled. For example: 10.1.2.23, 10.100.0.0/16, 0:0:0:0:0:0:0:1 |