| TSP Lab | Sga-Authorizer | SgaAutho |
|---|
| Menu | Menu item | Shortcut(s) | Meaning |
|---|---|---|---|
| [Log] | |||
| Find line containing... | (Ctrl-F) | Find text in log window | |
| Find next matching line | (F3) | Find next occurrence of text in log window | |
| Details | Detail level of logging (Off, Normal, Detailed or Debug) | ||
| Recover from log file error | When the program could not write the log file it suspends its normal working. If the problem has been solved normal working can be achieved by this menu item. | ||
| [Connections] | |||
| Allow clients to connect | (Ctrl-A, or   )
| Allows the users to connect to the Authorizer | |
| Disconnect *all* active ones now! | Interrupts the connections with all active users | ||
| Allow remote password changing | (Ctrl-P, or   )
| Allows the user to change his password through the Change Password client | |
| [Users] | |||
| Re-enter Oracle passwords | Oracle passwords can be re-entered without restarting the module | ||
| [SL.DAT] | |||
| Reload | (Ctrl-S) | Reload the SL.DAT file (when it is changed) | |
| Activate creating utility | When activated, it calls the SgaAutho.ini/[SL_DAT]/sCreateUtility program to create new SL.DAT file | ||
| Re-enter creating utility's password | Values from SgaAutho.ini/[SL_DAT]/sCreateUtility, sCreatePassword, and dwMaxSendingChunkSize will get reloaded (and logged). If sCreatePassword is empty a pop-up window will appear to enter the password. | ||
| [Options] | |||
| Auto scroll | (  )
| Allows automatic scrolling of the log screen | |
| Show log | (Ctrl-Tab) | Shows the log window | |
| Show connections | (Ctrl-Tab) | Shows the connections window, where the active connections are listed | |
| Save settings | Saves current settings into the configuration (SgaAutho.ini) file |
| Menu item | Shortcut(s) | Meaning | |
|---|---|---|---|
| Disconnect this application/user | Aborts user's current connection. | ||
| Remove hilite (no selection) | Selections will be removed. |
User's list and password file (SgaAutho.pwd and SgaAutho.pwl)
+ username 7003 0123.....9 ;
User can change his password for INI/[Passwords]/dwUserValiditySec. This value should be greater than INI/[Passwords]/dwActualPasswordValiditySec, so user can change the password for a while after its expiration.
User can not change the password too frequently. While the oldest password (five ones are stored) does not reach the age of INI/[Passwords]/dwPasswordListValiditySec, then user can not change the latest password.
Examples:
| Settings | Comment | Meaning |
|---|---|---|
| dwActualPasswordValiditySec = 2592000 | i.e., 30 days | A password can be used for 30 days. |
| dwUserValiditySec = 5184000 | i.e., 60 days | User can change the password for further 30 days after its epxiration (and during its validity, as well). |
| dwPasswordListValiditySec = 604800 | i.e., 7 days | User can change the password no more than five times within 7 days. |
The following table shows examples for all server definitions.
The bold part of the server name is the mandatory prefix and the other part can freely be used.
Port definition is an option for all types of CDRs, leaving it out means the default port is used.
| Section | Server definition | Meaning |
|---|---|---|
| [SL_DAT+8934] | ||
| CS_MSB1 = 10.111.112.33 | CDR server for circuit switched BSSAP/RANAP traffic, listening on the default port | |
| PS_MSB1 [7099] = 10.111.112.34 | CDR server for packet switched RANAP traffic, listening on the port 7099 (TCP) | |
| [SL_DAT+8942] | ||
| SGsAP_MSS1 = 10.111.112.35 | CDR Server for SGsAP traffic | |
| SGsAP_MSS2 [7199] = 10.111.112.35 | CDR Server for SGsAP traffic, listening on the port 7199 (TCP) | |
| [SL_DAT+8943] | ||
| S1AP_MME1 = 10.111.112.36 | CDR server for S1AP traffic | |
| [SL_DAT+8944] | ||
| GTP_MME1 = 10.111.112.37 | CDR server for GTP traffic | |
| [SL_DAT+8945] | ||
| SIP_IMS1 = 10.111.112.38 | CDR server for SIP traffic | |
| [SL_DAT+8946] | ||
| DiamS6S13_MME1 = 10.111.112.39 | CDR server for Diameter S6/S13 traffic | |
| [SL_DAT+8947] | ||
| DiamACC_IMS1 = 10.111.112.40 | CDR server for Diameter Accounting traffic | |
| [SL_DAT+8948] | ||
| DiamCx_IMS1 = 10.111.112.41 | CDR server for Diameter Cx/Sh traffic | |
| [SL_DAT+8949] | ||
| DiamGx_GW1 = 10.111.112.42 | CDR server for Diameter Gx/Gy traffic | |
| [SL_DAT+8950] | ||
| DiamRx_CSCF1 = 10.111.112.43 | CDR server for Diameter Rx traffic | |
| [SL_DAT+8951] | ||
| DiamVoWifi_SDC1 = 10.111.112.44 | CDR server for Diameter SWm/SWx/S6b traffic | |
| [SL_DAT+8952] | ||
| RTP_MME1 = 10.111.112.45 | CDR server for RTP statistics | |
| [SL_DAT+8953] | ||
| MAP_MSB1 = 10.111.112.46 | CDR server for MAP D/E interface traffic | |
| [SL_DAT+8954] | ||
| PFCP_MME1 = 10.111.112.47 | CDR server for Packet Forward Control Protocol traffic | |
| [SL_DAT+8955] | ||
| EDR_MME1 = 10.111.112.47 | CDR server for EDR records | |
| [SL_DAT+8956] | ||
| SIPCall_IMS1 = 10.111.112.48 | CDR server for SIPCall records | |
| [SL_DAT+8957] | ||
| NGAP_AMF1 = 10.111.112.49 | CDR server for NGAP records | |
| [SL_DAT+8958] | ||
| SBI_1 = 10.111.112.50 | CDR server for SBI records |
| Section | Entry | Example | Meaning |
|---|---|---|---|
| [Position] | |||
| iLeft | 140 | Position of the program module on the display screen | |
| iTop | 72 | Position of the program module on the display screen | |
| iWidth | 995 | Position of the program module on the display screen | |
| iHeight | 694 | Position of the program module on the display screen | |
| [Options] | |||
| bAutoScroll | True | (Refer to the [OPTIONS]/Autoscroll menu item!) | |
| [Connections] | |||
| bAllowConnections | True | (Refer to the [Connections]/ Allow clients to connect menu item!) | |
| bDualAuthenticationIsInUse | False | If it is True only SgaChangePassword utility v2.00 or later can be used to change password(s). False value means the usability of earlier version of SgaChgPwd utility. | |
| [Active Directory Authentication] | |||
| bAllowOnlyCompatibleSW | True | (defaults to "False") | |
| sDatabaseN | LDAP://10.0.0.253 | Name or IP address of the LDAP- or WinNT-type AD server database. "N" in sDatabaseN can run from 0 to 9, and they are loaded on-the-fly. When it is left empty then no AD handling. (Defaults to "empty") | |
| [Passwords] | |||
| sUserListFile | SgaAutho.pwd | The name of the user list file | |
| sPasswordListFile | SgaAutho.pwl | Tee file which stores passwords of users | |
| dwActualPasswordValiditySec | 604800 | Validity period for the currently used password. After this time the user must change his password. | |
| dwPasswordListValiditySec | 1814400 | User can not change his current password until his oldest password does not reach this age. | |
| dwUserValiditySec | 1814400 | When this time expires user can not change his current password at all. | |
| [SL_DAT] | |||
| dwMaxSendingChunkSize | 100000 | Maximum size of data sending to client module | |
| sCreateUtility | Sl2Dat.exe | Defines which utility runs when user activates the [SL.DAT]/Activate creating utility menu item | |
| sCreatePassword | A password (or optionally any command line parameters) can be given to the SL.DAT creating utility. If this entry is empty a pop-up window appears on application start-up to enter the password. | ||
| sSpecialSigLinkMarker | virtual | Link data where the link name contains this string will only be transferred for StatisticsQuery client. | |
| [SL_DAT+NNNN] | Lists of different types of Query Servers. Details are in the CDR Servers section. | ||
| [SL_DAT+8934] | |||
| CS_BSSAP_MSB1 | 10.111.112.33 | BSSAP/RANAP-CDR server for circuit switched traffic | |
| PS_BSSAP_MSB1 | 10.111.112.34 | BSSAP/RANAP-CDR server for packet switched traffic | |
| [SL_DAT+8942] | |||
| SGsAP_CDR_MME1 | 10.111.112.35 | CDR Server for SGsAP traffic | |
| [SL_DAT+8943] | |||
| S1AP_CDR_MME1 | 10.111.112.36 | CDR server for S1AP traffic | |
| [SL_DAT+8944] | |||
| GTP_CDR_MME1 | 10.111.112.37 | CDR server for GTP traffic | |
| [SL_DAT+8945] | |||
| SIP_CDR_MME1 | 10.111.112.38 | CDR server for SIP traffic | |
| [SL_DAT+8946] | |||
| DiamS6S13_CDR_HSS1 | 10.111.112.38 | CDR server for Diameter S6/S13 traffic | |
| [Autolock Timing] | Values in this section are loaded on-the-fly and given in minutes. | ||
| byInactiveUserDimTime | 10 | This value is provided for clients. When the user is inactive for this amount of time then the results box of client goes blank. 0 switches this feature off. | |
| wInactiveModuleLogoutTime | 60 | This value is provided for clients. When there is no active query the user is automatically logged out after this amount of time. 0 switches this feature off. | |
| [Login Answer Texts] | Answer text for different error cases during log in process. For details see Login Answer Texts paragraph! | ||
| 0 | OK. | Answer text in case of successful log in. | |
| -1 | No such username. | User does not exist in the system or the user name typed is incorrect. | |
| [Application-specific Warning Texts] | Module dependent warning texts can be defined in this section. | ||
| 7033 | This module is for capturing raw messages from monitor units. Please, be careful! | ||
| [Remote Control 2] | |||
| wLocalPort | 9009 | Defines the port where it connects the remote admin utility | |
| (IP address) | Allowed | Allows the Remote Admin Module to connect from the IP address. An entry in this section with "*.*.*.*" on the left side and any value on the right side relaxes its station restriction. | |
| bNewUserDefaultValueForADrequired | True | Value of the bADrequired field (as well as the bSuperUser field) when adding a new user via the remote interface. Default is False. | |
| [Advanced] | |||
| wLogDetailLevel | 3 | (Equals to the listed order; refer to the [LOG]/Details menu item!) | |
| dwMaxLinesInLogWindow | 1000 | Number of lines in the log window on screen | |
| sLogFilesPath | d:\LogFiles | Path for the LOG files | |
| [Query Servers] | |||
| $QS-General$ | 1 | A Query Server connecting with the name of "$QS-General$" gets the value of "sPassword_1" entry in [Oracle User Groups] as the client password | |
| $QS-BSSAP$ | 3 | A Query Server connecting with the name of "$QS-BSSAP$" gets the value of "sPassword_3" entry in [Oracle User Groups] as the client password | |
| $QS-MAP$ | 3 | A Query Server connecting with the name of "$QS-MAP$" gets the value of "sPassword_3" entry in [Oracle User Groups] as the client password | |
| [Oracle User Groups] | In this section one or more username and its password can be defined for client modules what establish connection to the database during their works | ||
| sUserName_1 | username | User name of the 1st Oracle user group | |
| sPassword_1 | password | User name of the 1st Oracle user group. When this field is set to empty, the program will ask the password when it is started up. | |
| [Roles] | |||
| sDescription_N | Role_name #N | Placeholder for role names. N corresponds to N in the entries of INI/[Oracle User Groups]/sUserName_N and sPassword_N; loaded on-the-fly. | |
Login Answer Texts
In this INI section answer texts for different error cases during log in process can be defined.
Error codes and recommended answer texts are the followings:
| -0 | = | OK. |
| -1 | = | No such username. |
| -2 | = | Such task for this user is not allowed. |
| -3 | = | Bad password. |
| -4 | = | Password is not yet set. |
| -5 | = | Your current password is too old. Please change it. |
| -6 | = | New password cannot be the same as the current. |
| -7 | = | New password cannot be any of the last 5. |
| -8 | = | Passwords cannot be changed this often. |
| -9 | = | Tried too many bad passwords. Login disabled. |
| -10 | = | Use a more recent version of SgaChgPwd utility! |
| -11 | = | Your password was *very* old. You are expelled. |
| -12 | = | ActiveDirectory authentication required. |
| -13 | = | ActiveDirectory authentication failed. |