CSP Gateway Configuration Guide - InterSystems Documentation

CSP Gateway Operation and Configuration
modify data at will. This is distinct from authenticating individual users to a CSP application. The CSP Gateway's Caché
username and password, Windows network credentials, or UNIX® Kerberos key table should never be used by ordinary
users.
2.2.1 Gateway Security Parameters
Maintain the following security parameters using the CSP Gateway Web Management application. Under the Configuration
section, click Server Access and choose to edit, copy, or add a server. The Connection Security section has the following
settings:
• Connection Security Level — Choice of:
– Password
– Kerberos
– Kerberos with packet integrity
– Kerberos with encryption
• User Name
• Password
• Product— Choice of:
– Caché
– Ensemble
• Service Principal Name
• Key Table
2.2.2 Minimal Connection Security
In Minimal Connection Security, the Connection Security Level is set to Password and the User Name and Password fields
are left empty.
In this mode, there is a minimal level of security applied to the connection between the Gateway and Caché. This mode of
operation is the default scenario if an older version of the Gateway is used (that is, an installation without the additional
security parameters). It is also the mode of operation if a newer Gateway is used to connect to an earlier version of Caché
(pre version 5.1).
If this mode of operation, ensure that the CSP service (%Service_CSP) together with the user name under which it
operates (for example, CSPSystem) is not expecting any form of authentication.
2.2.3 Simple Username- and Password-based Authentication
In Username- and Password-based Authentication, the Connection Security Level is set to Password and the User Name
and Password fields are applied.
This is the simplest form of authentication that can be applied between the Gateway and Caché.
It should be remembered that Caché passwords are a weak form of authentication since they must be sent over the network
as plain text for authentication in Caché. Network sniffing is easy to do and can be used to reveal these passwords. Passwords
used in this configuration option must be held in the Gateway configuration file (CSP.ini) in accordance with the following
guidelines.
28 CSP Gateway Configuration Guide