user manual

296 BES Developer’s Guide
Security Management with the Security Map
VisiConnect will use the vault if Security Map information is specified in at
deployment time for a Resource Adapter. If the resource vault is password
protected, VisiConnect will need to have the following property passed to it:
-Dvisiconnect.resource.security.vaultpwd=<vault_password>
If the resource vault is in a user specified location (-vaultfile ...), VisiConnect
will need to have the following property passed to it:
-Dvisiconnect.resource.security.login=<path of specified vault file>
The following examples illustrate the use of ResourceVaultGen:
Example 1:
java -Dborland.enterprise.licenseDir=/opt/BES/var<install_dir/var/domains/
base/configurations/<configuration_name>/mos/<partition_name>/adm/
properties/management_vbroker.properties>
-Dserver.instance.root=/opt/BES/var/servers/servername -
Dpartition.name=standard
com.borland.enterprise.visiconnect.tools.ResourceVaultGen -rolename
administrator
-username red -password balloon -vaultfile
/opt/BES/var/servers/servername/adm/properties/partitions/standard/
resourcevault -vpwd
lock
This usage generates a resource vault named "resourcevault" to /opt/BES/var/
servers/servername/adm/properties/partitions/standard, with a role
"administrator" associated with a Password Credential with username "red"
and password "balloon". The vault file itself is password protected, using the
password "lock". For VisiConnect to use this vault, the following properties
must be set for it:
-Dvisiconnect.resource.security.vaultpwd=lock
-Dvisiconnect.resource.security.login=resourcevault
Example 2:
java -Dborland.enterprise.licenseDir=/opt/BES/var/domains/base/
configurations/<configuration_name>/mos/<partition_name>/adm/properties/
management_vbroker.properties>
-Dserver.instance.root=/opt/BES/var/domains/base/configurations/
<configuration_name>/mos/<partition_name>/adm/properties/
management_vbroker.properties>
-Dpartition.name=petstore
com.borland.enterprise.visiconnect.tools.ResourceVaultGen
-rolename manager accounts -username mickey daffy
-password mouse duck -vpwd goofy
This usage generates a default resource vault (named "resource_vault") to /
opt/BES/var/servers/servername/adm/properties/partitions/petstore, with a
role "manager" associated with a Password Credential with username
"mickey" and password "mouse", and another role "accounts" associated with
a Password Credential with username "daffy" and password "duck". The vault