Global Security

Restriction: This topic applies to Windows environments only.

The XDB Server allows you to set up one location that will validate access security for all XDB Servers on a LAN. This eliminates duplicate AuthIDs and passwords in a distributed environment.

Using global security, each XDB Server in a distributed environment is configured to point to one location as the security server. This is done through the XDB Server Configuration Utility and by inserting values into the system catalog tables on each XDB Server.

Whenever a user attempts to login to any XDB Server using global security, the AuthID and password are passed to the global security location for verification. Global security extends server-to-server connectivity by allowing all XDB servers to use just one location for verifying passwords.

Note that a user must have a valid AuthID on each XDB Server in SYSXDB.SYSACFUSERS, with valid access to data, on every XDB Server that will be accessed. Global security only verifies AuthIDs and passwords.

The information in the global security system catalog tables can also be used to map AuthIDs and passwords. Be particularly careful when setting up this sort of scheme.

Multiple global security locations can be set up in a distributed environment. This allows you to have multiple security schemes for different XDB Servers. It also allows you to set up a redundant global security system to be used in case of hardware failure on your original global security server.