Content Comparison

RFC connection

Dropdown

Select the RFC connection configured in the KGS SAP Connector

Default Security

Int

Default setting for Content-Repositories.

0: Security inactive

1: Security active & certificates are automatically activated after a putCert-Request.

2: Security active & certificates aren't automatically activated after a putCert-Request.

The certificate must be activated with the CSAdmin in the transaction OAC0.

This parameter can be defined Content-Repository specific.

Initial Certificate Store Password

String

Initial KeyStore password. Should not be changed after deployment.

SecurityChangeOnCommand

CSV list of ArchiveLink requests (non-case sensitive), e.g. create, delete, update, etc.

When a request that is maintained in this list arrives, the value set in the Secutity parameter is inverted to process this request.

Example 1:

Security=2 →  the SecKey procedure is acive.

SecurityChangeOnCommand=get,delete,info

The incoming GET request is processed WITHOUT checking the SecKeys incl. Expiration.

Example 2:

Security=0 → the SecKey procedure is not active.

SecurityChangeOnCommand=get,delete,info

The incoming GET request is processed WITH examination of the SecKeys incl. Expiration.

This parameter can be defined Content-Repository specific.

Allowed Clients

Only the clients specified here (IPs or hostnames) may write to the archive (create, update etc.). If no client is specified, all clients may write. The parameter is to be created as a CSV list. If a client is not listed, they receive the RC 401 →  unauthorized.

This parameter can be defined Content-Repository specific.

Allowed CSAdmin Clients

Only the IP addresses or hostnames specified here (SAP server) are authorized to use the CSAdmin function in SAP.

Requests from other IPs or hosts receive the RC 401 →  unauthorized. This parameter is to be created as a CSV list. The last IP segment can be used a wildcard. For example; ContentServer.AllowedCSAdmin=sapadm,192.168.1.2,192.168.2.*

This parameter can be defined Content-Repository specific.

Only the IP addresses or hostnames are allowed to use the X-Forward-For Header. It can be a comma separated list. Wildcards are allowed. 

For example: 192.168.1.2, 192.168.2.*

Is no ReverseProxy in use, this Setting should be set to "None"

Otherwise another Client can pretend to be a valid Host (for example with an IP-Address of the SAP System in the X-Forward-For Header). Only trusted Servers (Like ReverseProxies etc.) should be allowed to use the Header.

Default: *  - Every client is allowed to use the X-Forward-For Header.

Default Document Protection

String

Default value for the DocProtection variable, if it does not exist in the http request. Usually this is part of the SAP http request.

r: read

u: update

c: create

d: delete

Keystore Path

String

Path to the used KeyStore. Leave empty for default.