Filter
Top Products
Solaris SFS Driver User Manual Page 94
5. Click OK in the New Access Sub-Group dialog box. The ASG is created. The following process
sets up the ASG (see Figure 61)
a. The SSC utility runs.
b. A new ASG is created with Systems 2 and 15 as clients.
c. A new SA_ID is selected for System 2, and a new SA_ID is selected for System 15.
d. SA file updates are sent to each system in the ASGs. In Figure 61, System 2 has remote
access to systems 3 through 9. System 15 has remote access to systems 8 through 15. System 2
and System 15 have remote access to systems 8 and 9.
Figure 61: ASG Creation Example
Reserved Indices - Examples
A particular security installation can support the creation of several hundred access groups (ACGs and
ASGs). When you create each new access group, you allocate some number of 'indices' to the client
system of the new ASG. This number reflects the number of subsequent 'child' ASGs that can
subsequently be created at the new client's system.
• If zero indices are reserved, you cannot create any lower-level ASG under the client of the new
ASG. Thus, for example, if you want to implement a multi-tiered security architecture consisting
of many ASGs, and you wanted to create them all from the Master Security Client (MSC), zero
indices would be allocated to each of the new ASGs client platforms when they are created.
• If you create an ASG, and you reserve 25 indices for the new ASG client platform, a child ASG
created by this platform will have a maximum of only 24 indices available to be reserved (one is
taken by the creation of the child ASG itself). This continues down the ASG hierarchy as each
lower level ASG is created.
• When you create an ASG from the MSC, a maximum of 50 indices (or less if fewer are available)
can be reserved. For all other clients, the maximum depends on how many indices were
reserved to that client when its ASG was created, and on how many it has subsequently
allocated to its ASGs.