Server-side administration

To set up cr1 to protect the service on the server side, you must do the following:

1. Set up the port monitor's _pmtab file:

   • Create an entry for the service and specify ``cr1 servicetag'' in the ``scheme'' field.

   • Create an entry for reportscheme. Leave the ``scheme'' field empty to mean the NULL scheme.

2. Set up ID mapping to include a database entry that maps the name of the user on the client to a local name. The command lines are as follows:

   • Initialize the scheme:

     idadmin -S cr1 -I M1@M2

   • Enable transparent mapping:

     idadmin -S cr1 -a -r @client -l %1

   ---

   NOTE: For information about administration of the ID mapping databases, see ``Administering ID mapping''.

   ---

3. Add the shared key to the server's key database.

• setting up the key database initially and managing shared keys

• creating and managing the master key

• stopping and starting the key management daemon

• optionally, adding cr1 to the connection server's /etc/iaf/serve.allow file on the client

Instructions for administering facilities with which cr1 interfaces, such as the connection server and ID mapping, can be found in ``Administering the connection server'' and ``Administering ID mapping'', respectively.