Set up the concsm.cfg file for SSO

You must specify credentials encryption libraries in the communications support module (CSM) configuration file to enable single sign-on (SSO). In addition, you can control whether SSO functions with Kerberos-defined confidentiality and integrity services.

HCL® OneDB® provides the following shared libraries for use as CSMs. The paths and fixed file names are:
  • $INFORMIXDIR/lib/csm/libixgss.so (UNIX™ and Linux™)
  • %INFORMIXDIR%\bin\libixgss.dll (Windows™)
The shared libraries also have version-specific names that can be used in place of the fixed names. If you use the version-specific name, and the server is updated, you must update the concsm.cfg file.

To configure the CSM for SSO, use the following syntax to add a line to $INFORMIXDIR/etc/concsm.cfg (UNIX and Linux) or %INFORMIXDIR%\etc\concsm.cfg (Windows).

Figure 1: Syntax
(1)
Notes:
  • 1 Use path no more than once.
Option Description
csmname The name that you assign to the CSM
csmlib The path and name of the shared library that is the CSM if the CSM is shared by both the database server and the client computers
clientlib The path and name of the shared library that is the CSM on the client computer
serverlib The path and name of the shared library that is the CSM on the database server
c The setting for Kerberos-defined confidentiality services
0
Disabled
1
Enabled. This is the default setting
i The setting for Kerberos-defined integrity services.
0
Disabled
1
Enabled. This is the default setting.