Llogon via Active directory with XCOM in Windows UNIX Linux

Products

• XCOM Data Transport
• XCOM Data Transport - Windows
• XCOM Data Transport - Linux PC

Issue/Introduction

During processing of remotely-initiated transfers, XCOM needs to impersonate the userid specified in the transfer request, for example, to access the files processed by the transfer.

Could XCOM process these logins using Active Directory services?

Environment

• XCOM™ Data Transport® for Windows
• XCOM™ Data Transport® for UNIX/Linux PC

Resolution

For Windows, when the incoming transfer request specifies the DOMAIN= parameter, XCOM requests a 'domain type' logon which Windows processes using Active Directory.

For Linux/UNIX, XCOM may be configured to use PAM (Pluggable Authentication Modules) standard to process logons instead of using the local security. On its turn, PAM may be configured to process logons via Active directory.

This is setvia parameters in xcom.glb file:

• AUTH_TYPE=PAM instructs XCOM to use PAM modules to impersonate users
• PAM_PATH= sets the path containing the PAM library which will be used by XCOM. Note that the file name is set by XCOM depending on the platform where it is running.

This is documented in Pluggable Authentication Modules (PAM) Based Authentication section of XCOM online documentation