Applicable Versions: All
DataPA can be configured to allow or deny connections to the AppServer based on an existing business applications security, removing the need to maintain user lists in two places.
When using connection security, the following occurs when DataPA attempts to connect to an AppServer instance:
- When DataPA needs to connect to an AppServer, it first prompts the user for a username and password.
- DataPA sends a request to the broker to connect to the AppServer. The username and password is included in this request.
- The broker connects to an agent, and runs a connect procedure, passing it the username and password.
- The connect procedure accesses the database and determines whether or not the username and password are valid.
- The connect procedure finishes, returning an error if it did not validate the username and password.
- If the connect procedure returned an error, the broker returns a connection refused message to DataPA and terminates the connection. Otherwise, the broker returns a connection succeeded message to DataPA and awaits the next request.
The three steps required to configure DataPA to use connection security are detailed below:
Step 1 - Write a connect procedure
To implement the connection security, you must first create a Progress 4GL connect procedure that will validate a username and password. The Connect procedure must receive three string parameters, the username, the password and a third parameter called AppServerInfo to receive any other information.
/* ******************* Definitions ********************** */ DEFINE INPUT PARAMETER cUsername AS CHARACTER NO-UNDO. DEFINE INPUT PARAMETER cPassword AS CHARACTER NO-UNDO. DEFINE INPUT PARAMETER cAppServerInfo AS CHARACTER NO-UNDO. |
The procedure should then validate the username and password using the standard procdure for the connected business application, and return an error if the username or password is not valid.
/* ***************** Main Block ******************* */ IF NOT SETUSERID(cUsername,cPassword) THEN RETURN ERROR. |
Step 2 - Configure the AppServer
To configure the AppServer to use connection security, follow these steps:
- Copy the connect procedure detailed above into the PROPATH of the AppServer
- Start Progress Explorer
- Choose the AppServer.
- Choose Action-->Properties.
- Expand the Agent tree from the Properties dialog box and select Advanced Features
- Enter the name of the connect procedure in the Connect field.
- Press OK
- Restart the AppServer
Step 3 - Configure DataPA to use Connection Security
Once the AppServer has been configured to process a username and password, the DataPA system must be configured so DataPA prompts the user for a username and password before it tries to connect. Follow these steps to configure a system to prompt for a username and password:
- Open the DataPA setup screen and ensure the Systems tab is selected.
- Select the system you wish to modify.
- Select File --> Open
- Press Next until you reach the Enter Connection Details screen
- Select the default connection, or connection you wish to administer, and press Edit
- Select the Advanced Tab
- Select Prompt for username and password
- Press OK
- Enter a username and password, press OK, press Next, press Finish