The information in the
tunnel feature's configuration file controls access to remote SAS
sessions. The configuration file is required; it allows the administrator
to limit which machines are accessed and through which ports and client
machines they are accessed.
For the
SAS/CONNECT
driver for Java, the configuration file also controls which user IDs
are allowed to connect to the SAS server and the commands that those
users are allowed to use to start the remote SAS session. Without
the configuration file, there would be no limits on the commands that
users could execute during the process of starting SAS.
To use a configuration
file, the administrator creates the shrcgi.cfg file, specifies any
options that
are needed, and stores it on the Web server in the directory specified
by the environment variable, SHRCGI_CFG. If you have not set SHRCGI_CFG,
the Message Router looks for the configuration file in your
CGI directory.
Note: The Message Router reads
the configuration file each time the communication session is started
with a particular host.
The shrcgi.cfg file
included with the tunnel feature archive is a configuration file template.
You must modify it to specify configuration information that is specific
to your site. Do not attempt to use the template file as the final
configuration file because it does not include your specific host
and port names.