SNA Server Host Security: SNA Servers of Variables

The Registry variables in this section affect Host Security Integration and are located in the following areas:

Windows NT Account Synchronization Setup

There are two password change variables in the Registry. The first is found in the following location:

HKEY_LOCAL_MACHINE
SOFTWARE
Microsoft
SnaServer
CurrentVersion
Host Security
Password Change

The variable that affects this Registry entry is as follows:

MdbDomain:REG_MULTI_SZ Windows NT Domain Name

This Registry entry contains the name of the Windows NT domain names entered in the Domains Providing dialog box in Setup. Additional Windows NT domain name can be added using this registry setting and can be an unlimited number.

The second Registry entry is in the following location:

HKEY_LOCAL_MACHINE
SYSTEM
CurrentControlSet
Control
Lsa

The variable that affects this Registry entry is as follows:

NotificationPackages: REG_MULTI_SZ path name

This is the complete path for the SNA Server password change. It is entered without the DLL extension. For example, the path d:\sna\system\snapwchg is a valid path name.

Password Management Process (PMP)

The Registry variables that affect PMP are in the following location:

HKEY_LOCAL_MACHINE
SYSTEM
CurrentControlSet
Services
SNAPMP
Parameters

The variables that affect PMP are as follows:

RolePrimary: REG_DWORD {1 | 0}

For the primary process management process (PMP), the value is 1. For all other PMPs the value is 0.

MdbDomains:REG_MULTI_SZ

This Registry entry contains the name of the Windows NT domain names entered in the Domains Providing dialog box in Setup. An unlimited number of additional Windows NT domain names can be added using this registry setting.

Host Account Synchronization Process

The Registry variables that affect the Host Account Synchronization are in two locations. The first is:

HKEY_LOCAL_MACHINE
SYSTEM
CurrentControlSet
Services
SNAHostProcess
Parameters

The variables that affect Host Account Synchronization are as follows:

InitializeInterval: REG_DWORD Default: 60 seconds

This value represents the decimal number of seconds to reissue the RpcServerInitialize call.

The second Registry entry location is:

HKEY_LOCAL_MACHINE
SYSTEM
CurrentControlSet
Services
SNAHostProcess subkeys

The subkeys that affect Host Account Synchronization are as follows:

Domains

For each host security domain defined, there is a subkey under the Domains subkey that contains the values needed by the security integration DLL.

Security DLLs

This is the root of template information for registered security integration DLLs. The Host Security Wizard in SNA Server Manager uses this information to create host security domain definitions under the Domains subkey. For each security integration DLL supported by the wizard, there is a subkey whose name is the security integration DLL The wizard copies any values it finds under this subkey to the Domains subkey. The wizard then replaces the "placeholder" in the values with the actual names of SNA resources it collects from the user dialog and substitutes the actual strings into the Registry values constructed in the Domains subkey. The current placeholder values are:

Host Security Domain Definitions for Security Integration DLLs

The security integration DLLs are in the following Registry location:

HKEY_LOCAL_MACHINE
SYSTEM
CurrentControlSet
Services
SNAHostProcess
Parameters
Domains
domainName

The Host Account Synchronization process requires a single value under this subkey as follows:

HostSecurityDLL:REG_SZ Default: %F

This is the file path to security integration DLLs. It is used by the host process to load the DLL during initialization.

The remaining variables are used only by the specific security integration DLL which varies from vendor to vendor. The variables used by SEC400.DLL, which is bundled with SNA Server, are as follows:

ForcetoUpper:REG_SZ: Default: True

When this is set to true, it causes the SEC400.DLL to force lowercase usernames and passwords when converting from Windows NT to AS/400. It forces uppercase to lowercase when converting from the AS/400 to Windows NT.

LocalLU:REG_SZ Default: %L

This identifies the local APPC LU used to communicate with the host computer.

RemoteLU:REG_SZ Default: %R

This identifies the remote APPC LU used to communicate with the host computer.

TPMode:REQ_SZ Default: QPCSUPP

The mode determines the type of session established in an APPC session. This entry determines whether the session is batch, interactive, on an AS/400, or to be used with the ODBC drivers. The default is QPCSUPP, which is used for all sessions with an AS/400 computer.

For more information about modes and how to use them, see the topic "What are Modes and How Do I Use Them" in Part 4, "SNA Server APPC Connectivity," in the Microsoft SNA Server Administration Guide.

Host Account Cache

The Registry variables that affect the Host Account Cache are in the following location:

HKEY_LOCAL_MACHINE
SYSTEM
CurrentControlSet
Services
SnaDatabase
Parameters

The variables that affect the Host Account Cache are:

Master:REG_DWORD Default: 1

If the Host Account Cache resides on the primary controller, it is the master copy, or a default of 1. If it is on a backup or member server, the entry is 0.

DatabaseFile:REG_EXPAND_SZ path name

The full path to the master data base is used. For example, the default path could be <snaroot>\CONFIG\Dbase.DBS.