Echelon SmartServer 2.2 - Manual (Page 528)

SmartServer 2.2 User’s Guide 529
Securing Folders and Files
You can secure a folder or individual files in the SmartServer. This section does the following:
1. Lists the key folders in the SmartServer, explains how they should be secured, and provides the
formats of the realms that you can add to the WebParams.dat file to secure them.
2. Provides the formats of the realms that you can add to the WebParams.dat file to secure
individual files.
Securing Folders
/user
The /user folder includes the directories that hold custom Web pages, factory i.LON Vision Web
pages and framesets, and web pages that do not contain web tags. If you have a single user group (for
example, “all”), you can secure the entire /user folder by creating a realm with the following format:
/user/*:all:everywhere
/user/Echelon
The /user/Echelon folder contains the factory i.LON Vision Web pages and framesets. Some of the
HTML files in this folder are also used for custom framesets.

If you password protect the entire /user/Echelon folder, you must add a realm for each HTML file
used in your custom framesets and web pages.

If you have multiple user groups, do not secure the entire /user/Echelon folder. This is because all
custom framesets use specific HTML files in this folder. Instead, you can secure the
/user/Echelon/Menu.html file and then secure all custom Web page folders using the following
format:
/user/Echelon/Menu.html:all:everywhere
See Securing Files for more information about the /user/Echelon/Menu.html file.
/user/
The /user/<customWebPages> folder contains the user-created folders that hold the user i.LON Vision
framesets. If you secure the entire /user/Echelon folder, you will have to add a realm entry for any
factory HTML files, such as ViewEventScheduler.html, that are used by the custom Web pages or
framesets.
To secure a custom Web page folder, create a realm using the following format:
/
The following example displays a realm created for a custom Web page folder:
/user/user1/*:all:everywhere
/WSDL
The /WSDL folder contains WSDL files, which are used by SOAP clients accessing the SmartServer.
If you secure the WSDL files, all SOAP clients need a user name and password to access the
SmartServer.
Securing the /WSDL folder, affects the following Web pages and applications:

All Web pages, including those that have functions using SOAP calls. This folder does not contain
Web Tags or i.LON Vision objects.

Client programs, such as .NET applications, that use SOAP to access the SmartServer.

Web connections.