Caché System Administration Guide - InterSystems Documentation
Caché System Administration Guide - InterSystems Documentation
Caché System Administration Guide - InterSystems Documentation
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
Managing <strong>Caché</strong> Licensing<br />
positive acknowledgements in response to instance updates. The individual instances then allow new<br />
logins.<br />
4.4 Identifying Users<br />
The <strong>Caché</strong> licensing system attempts to identify distinct users and to allocate one license unit per user.<br />
A user is identified by a license user ID, which can be an IP address, a username, a CSP session ID,<br />
or some other identifier depending on how the user connects.<br />
Multiple processes started by or for a single user share a license unit up to a maximum limit of processes<br />
per user. The $<strong>System</strong>.License.MaxConnections() method returns the maximum value (maxconn)<br />
for the current implementation.<br />
Set maxconn=$<strong>System</strong>.License.MaxConnections()<br />
Write "Maximum connections = ",maxconn<br />
If the number of processes exceeds this maximum, a transition occurs and <strong>Caché</strong> begins allocating<br />
one license unit per process for that user ID. The system presumes that if more than maxconn connections<br />
are associated with a user ID, multiple users are accessing <strong>Caché</strong> through an intermediary, (for example,<br />
a firewall system) so additional license units are required. Therefore, when the (maxconn + 1) process<br />
starts, the number of license units allocated to that user ID changes from one to (maxconn + 1). Processes<br />
started by the Job command are allocated against the process limit of the user ID invoking the Job<br />
command.<br />
Once the number of connections drops back under the maximum, the number of license units consumed<br />
is not set back to 1. Each connection continues to consume one license unit. You have to close all<br />
connections of a user ID before that user can start up to the maximum connections using one license<br />
unit again.<br />
Inter<strong>System</strong>s expects that most applications are moving to identify their users by name, eliminating<br />
problems associated with using a default user ID based on client IP address, CSP session ID, or other<br />
connection-derived user ID.<br />
For example, when firewall or terminal server software is used, <strong>Caché</strong> cannot differentiate among<br />
connecting users, so it falls back on the maximum-connection transition rule. Using mixed connections,<br />
such as CSP and <strong>Caché</strong> Direct, from the same client also makes it impossible to count users appropriately<br />
using automatic ID creation.<br />
When the username serves as the license identifier, these problems disappear. The importance of<br />
accurate user identification is expected to grow as organizations implement new access and audit<br />
requirements. Using the user identity to control license compliance is a natural corollary to this trend.<br />
This section covers the following topics:<br />
• License Logins<br />
60 <strong>Caché</strong> <strong>System</strong> <strong>Administration</strong> <strong>Guide</strong>