Term |
Definition |
ACE |
Access Control Entry: an entry in an Access Control List (ACL). It
specifies an actor (e.g. a user or group) and the kinds of access that the
actor has to a particular resource. |
ACEE |
Access Control Environment Element: on the mainframe, a data
structure that contains access control information for a task; in MF Server, a
data structure that holds security information for a user (or potentially other
actor). |
ACL |
Access Control List: a rule specifying what actors (typically users
and groups) are allowed what kinds of access (e.g. read, update) to a resource
(file, transaction, configuration object, etc). (Some ESMs may not implement
ACLs as such, but they provide an equivalent scheme.) |
Auditing |
Auditing refers to collecting information on security-related events
and preserving it in for later review. |
ESF |
The Micro Focus External Security Facility, which relays security
queries to external security managers. This facility can run within both
Enterprise Server and MF Directory Server. |
ESM |
External Security Manager: any system outside MF Server that can
respond to security queries. It might be the OS itself, or an LDAP server, or
some other facility. |
ESM Module |
A loadable module which MF Server can use to connect to an ESM and
issue security queries against it. |
LDAP |
Lightweight Directory Access Protocol: a standard for
configuration-data directories, particularly user directories. Microsoft Active
Directory is an LDAP implementation. |
LDIF |
LDAP Directory Interchange Format: a standard for transporting LDAP
data and schema definitions between LDAP servers. |
MLDAP ESM module |
The Micro Focus ESM module that the External Security Facility uses
to connect to LDAP servers. |
Resource |
Any item to which access is controlled. A
resource has a name and a class. A resource name is unique within its
class. |
schema |
In LDAP, the organization of information in the directory. The schema
defines the types of configuration objects, their attributes, and their
relationships. |
SNMP |
Simple Network Monitoring Protocol: a standard protocol for
communicating system status and administration information. SNMP clients
(usually called "agents") send information about changes in system status
("alerts") to an SNMP server ("monitor" or "manager"). They also respond to the
monitor's queries for current status, and may be written to accept some
administrative commands from the manager as well. The current version of SNMP
is SNMPv3, which includes security provisions. |
Security Manager |
A definition within MF Directory Server that specifies the
information (i.e. the ESM module and associated configuration information) that
the External Security Facility needs in order to connect to an external
security manager. |
SSL |
Secure Sockets Layer: the standard mechanism for secure
per-conversation TCP/IP communications. |