Default ESF Configuration

In the context of:

Directory Server

There are three possible security domains within the Enterprise Server architecture, ESCWA, Directory Servers, and enterprise server regions. Each of them uses an External Security Facility (ESF) configuration. An ESF configuration consists of a security manager stack and ESF configuration information. Micro Focus recommends that ESCWA, Directory Servers, and regions all use the same ESF configuration.

For Directory Servers, you can configure a Default ES Configuration security manager stack to be used for multiple domains.

For a Directory Server's own ESF configuration, you can set it to use the configured Default ES Configuration.

Using a different ESF configuration to that of the Default ES Configuration is something that you should reassess, unless it was configured this way for a specific requirement.

Region

There are three possible security domains within the Enterprise Server architecture, ESCWA, Directory Servers and enterprise server regions. Each of them uses an External Security Facility (ESF) configuration. An ESF configuration consists of a security manager stack and ESF configuration information. Micro Focus recommends that ESCWA, Directory Servers and live regions all use the same ESF configuration.

For Directory Servers, you can configure a Default ES Configuration security manager stack to be used for multiple domains.

A region will automatically be configured to use the Default ES Configuration for its ESF configuration and will use this when it is started.

Using a different ESF configuration to that of the Default ES Configuration is something that you should reassess, unless it was configured this way for a specific requirement.

Configuration options

Directory Server

To configure a Default ES Configuration, use ESCWA to perform the following steps:

  1. In the top menu bar, click Native.
  2. In the Native Navigation pane, expand Directory Server.
  3. Click the directory server you require, then click Security > Default ES Configuration.

    This takes you to the Default ES Security Facility Configuration page.

  4. Click Add.

    This opens the Defined External Security Managers dialog box.

  5. Choose a security manager and then click Select.
    • Micro Focus recommends that you check Use all groups.
  6. Click Apply.

To ensure a Directory Server is using the Default ES Configuration, use ESCWA to perform the following steps:

  1. In the top menu bar, click Native.
  2. In the Native Navigation pane, expand Directory Server.
  3. Click the directory server you require, then click Security > Directory Server Configuration.

    This takes you to the Directory Server Security Facility Configuration page.

  4. Check Use ES Default Security Managers.
  5. Click Apply.

    You might be prompted for credentials for the ESF configuration.

Region

To configure a Default ES Configuration, use ESCWA to perform the following steps:

  1. In the top menu bar, click Native.
  2. In the Native Navigation pane, expand Directory Server.
  3. Click the directory server you require, then click Security > Default ES Configuration.

    This takes you to the Default ES Security Facility Configuration page.

  4. Click Add.

    This opens the Defined External Security Managers dialog box.

  5. Choose a security manager and then click Select.
    • Micro Focus recommends that you check Use all groups.
  6. Click Apply.

To ensure a live region is using the Default ES Configuration, use ESCWA to perform the following steps:

  1. In the top menu bar, click Native.
  2. In the Native Navigation pane, expand Directory Server.
  3. Click the region you require.
  4. Click General > Security.
  5. Check Use Default Security Facility Configuration.
  6. Click Apply.
Parent topic: Configuration Report