Command Line Interface (CLI) Security

Added by Moran Avigdor, last edited by Moran Avigdor on Sep 16, 2009  (view change)
Search XAP 7.0
Searching XAP 7.0.X Documentation
Browse XAP 7.0
Quick Start Guide
Product Overview
Programmer's Guide
Administrator's Guide
Offline Documentation

Download latest offline documentation in HTML format:
xap-7.0.2-documentation.zip (12.3MB)

                                                              
Summary: Applying security with the Command Line Interface

Overview

The Command Line Interface (CLI) can be used to manage and monitor a running system. It is mainly used for script automation, and when there is a limitation to run a Graphical User Interface. This section covers how security can be applied to the commands supported by the CLI tool.

Command Line Interface

Login/Logout

The Command Line Interface (CLI) has two modes - an interactive shell mode and a non-interactive mode. The difference in terms of security is the login stage. When in interactive mode, you can call the login command, supply credentials, and perform operations using this session. But, when in a non-interactive mode, you can execute only one command line at a time - no session is being managed.

Note that the login is being performed against the GSM. If the Grid is not secured, you can deploy without logging in. For example, you can deploy a secured Processing Unit into a non-secured Grid.

To logout quit the interactive shell.

Deploy Command

The CLI deploy command accepts a -secured true/false used to deploy a secured Processing Unit with a secured Space. Common when deploying a data-grid.
In order to pass the user credentials, use -user and -password arguments. This will implicitly deploy a secured Processing Unit, and the credentials will be propagated to the Processing Unit and its internal services.

Same syntax applies for deploy-space and pudeploy commands.

Here are some examples and how they are accomplished in both CLI modes:

  1. login with user uuu and password ppp - this will log onto the Grid
  2. deploy a non secured data-grid
  3. deploy a secured data-grid
  4. deploy a secured processor PU with user xxx and password yyy

Undeploy Command

The CLI undeploy command of a processing unit is done on its managing GSM. If the GSM is not secured, then no credentials are needed.

Space Command

The CLI space commands are basically all the same. They require that the user has sufficient privileges to perform operations on the data.

Note that the login is being performed against the Space; It doesn't matter if the GSM or GSC are secured. The login credentials should reflect the operations being performed on the service.

For example, for the space clean command, the user (uuu/ppp) needs Alter privileges.

For the space copy command, the user needs Read privileges on the source space (copied from) and Write privileges on the target space (copied to).
This documentation refers to product version 7.0

Labels

 
(None)