NAME

tkadmin set minprotectlevel - defines the minimum protection level at which the server accepts client RPCs as authenticated

SYNOPSIS

tkadmin set minprotectlevel -server servername level

ARGUMENTS

-server servername Specifies the server affected by the command. The server name is the name that is registered with the DCE Directory Service. If the server name is not specified in the command line, it is retrieved from an environment variable, ENCINA_TK_SERVER. 

level Defines the minimum level of RPC protection. 

DESCRIPTION

The tkadmin set minprotectlevel command sets the minimum level of protection at which the server accepts client RPCs as authenticated. You can set the minimum protection level when the server is initially started by using Enconsole or the -N option of the server start-up command. You can use Enconsole or the tkadmin set authorization command to set the minimum protection level while the server is running.  Possible values (as described by the OSF DCE documentation set) are

0 - (default) Use DCE default authentication level (determined when DCE is compiled) for the specified authentication service. 

1 - (none) Perform no authentication. 

2 - (connect) Authenticate only when the client establishes a connection with the server. 

3 - (call) Authenticate only at the beginning of each RPC received by the server. 

4 - (packet) Authenticate that all data received is from the expected client. 

5 - (packet integrity) Authenticate and verify that none of the data transferred between client and server has been modified. 

6 - (packet security) Perform authentication as specified by all of the previous levels and also encrypt each RPC argument value. 

EXAMPLES

The following command defines the server’s minimum level of RPC protection to be 4:

% tkadmin set minprotectlevel 4

PRIVILEGE REQUIRED

Encina Monitor administer (a) permission to the server

Encina RQS administer (a) permission to the RQS server

Encina SFS administer (a) permission to the SFS server

RELATED INFORMATION

tkadmin query authorization

tkadmin query minprotectlevel

tkadmin set authorization

  —  March 1997