Downloadable - Hewlett-Packard

target prot opt source destination
ports
ACCEPT tcp ------ anywhere anywhere
any -> 3080
Accept connections on the range of ports used by our Orbix servers (TAL Orbix Server FM)
defined in the orbix_temip.cfg
target prot opt source destination
ports
ACCEPT tcp ------ anywhere anywhere
any -> 6000:6030
Accept connections that have been initialized by our host.
It is needed because the TAL Orbix Server FM is also client of the TeMIPClient. So, it
initializes a TCP connection.
To be more secure, we can specify the range of ports that we want to contact on the remote
hosts. It can be done if we define also the range of port used by the TeMIPClient on the
TeMIPClient host.
target prot opt source destination
ports
ACCEPT tcp !y---- anywhere anywhere
50000:50300 -> any
6.2.1.3 The TeMIP Client is protected by a firewall
In that case only the TeMIP Client is protected. The same variable must be defined in the
Orbix configuration file used by the TeMIP Client.
In C:\Program Files\TeMIP Client V5.X for Windows\Orbix Run
Time\etc\domains\orbix_temip_client.cfg
Example: policies:iiop:server_address_mode_policy:port_range = "50000:50300";
Protect the TeMIPClient with a firewall and open some ports in order the TAL Orbix Server
FM can communicate with the TeMIPClient.
Important Note
Limitation: if the port_range value is defined on the TeMIP Client host, only one TeMIPClient
can run on this host.
6.3 Sign-on TeMIP Authentication Support
With TeMIP Client V5.1, you can choose single sign-on for the TeMIP authentication policy
(WINDOWS or WINDOWS then UNIX). In that case, a file will be used for authentication
and also to associate an Acloc security profile to the Windows user.
You have to edit the following file on the TeMIP PM Server platform:
/var/opt/temip/acloc/user_profiles/temip_acloc_tal_users
40