Configuring the Application Service


A default installation of TrueSight Server Automation sets up an Application Service to support single sign-on. Typically, no additional configuration is necessary.

Various options exist for modifying the standard behavior of an Application Service. Use the following procedure to set any of those options.

To configure the Application Service

  1. Start the Application Server Administration console.
  2. To specify a listening port other than 9841 for the Application Service, enter the following:
    set appserver AppSvcPort #
    where # is the number of the port. Setting AppSvcPort to 0 turns off the Application Service.
  3. To specify whether the client's IP address included in a session credential should be compared to the IP address of the client that is presenting the credential, enter the following:
    set appserver ValidateClientIpAddress true|false
    In the command:
    • true means the IP address of the client must match the client's IP address included in the session credential. If the IP addresses do not match, the client is denied access. By default, this option is set to true.
    • false means the IP address of the client does not have to match the client's IP address included in the session credential.
      Set this value to false only if you are using a network load balancer for your Application Servers or Network Shell proxy servers, you are not using a load balancer for the Authentication Service, and a client can access any one of many Application Servers when establishing a session connection.
  4. To specify whether the service URL of the Application Service or Network Shell Proxy Service specified in a client's service request should be compared to the service URL of that service, enter the following:
    set appserver ValidateRequestURL true|false
    In the command:
    • true means the service URL of the Application Service or Network Shell Proxy Service managing the request must match the service URL to which the request was addressed. By default, this option is set to true.
    • false means the receiving service's URL does not have to match the service URL to which the request is addressed.
      Always set this value to false if you are using a network load balancer for your Application Servers or Network Shell proxy servers, and a client can access any one of many Application Servers when establishing a session connection.
  5. Restart the Application Server.

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*