> # Service Attributes that Affect Security

> Table 13-5 briefly describes the service attribute that SequeLink Server uses to set security features. For more detailed information, see "SequeLink® Service Attributes".

> Table 13-5. Attributes Used to Set Security
> Service Attribute | Description
> --- | ---
> "DataSourceApplID" | Specifies a list of application IDs for the service attribute.
> "DataSourceAutoApplId" | Specifies an application ID that is automatically generated by the ODBC Client to identify the client application to the SequeLink service.
> "DataSourceLogonMethod" | Specifies the method to be used to log on to the data store.
> "MVSDataSourceUIDMap" | Specifies the name of a user ID (UID) map. UID maps can be referenced at both the service and data source level. The valid value is a defined UIDMap name.
> "MVSServiceAdminAuthorizationClass" | Specifies a general resource class name to be used by the server.
> "MVSServiceAdminAuthorizationEnable" | Enables authorization for the SequeLink agent.
> "MVSServiceAuthorizationClass" | Specifies a general resource class name used by the SequeLink Server when authorization is enabled.
> "MVSServiceAuthorizationEnable" | Enables authorization for data access to the service.
> "MVSServiceAuthorizationResource" | If MVSServiceAuthorization is enabled, the resource name is used to validate a connection request against the z/OS security system. If the attribute's value is blank or an empty string, the server uses the service name as the resource name to be checked.
> "MVSServiceDataSourceAuthorization" | Enables authorization for data access to the server data source.
> "ServiceAdminAuthMethods" | Specifies authentication mechanisms that the SequeLink Manager can use to authenticate itself to the server.
> "ServiceAdministrator" | Sets authorization for users who are allowed to manage SequeLink services using the SequeLink Manager.
> "ServiceAdministratorGroup" | Sets authorization for defined Linux, UNIX, and Windows user groups who are allowed to manage SequeLink services using the SequeLink Manager.
> "ServiceAdminKerberosPrincipalName" | Specifies a service principal name other than the default service principal name to be used for Kerberos authentication for the SequeLink Agent service.
> "ServiceAuthMethods" | Specifies one or multiple authentication mechanisms the service accepts.
> "ServiceAuthorizedAdminClient" | Specifies one or multiple client TCP/IP network identifiers that are allowed to access the service using an administrator client.
> "ServiceAuthorizedClient" | Specifies client TCP/IP network identifiers to limit the number of clients that are allowed data access connections to data access services.
> "ServiceEncryptionAlgorithm" | Specifies the data scrambling algorithm used when sending requests or replies across the network between client and server.
> "ServiceKerberosPrincipalName" | Specifies the case-sensitive service principal name to be used for Kerberos authentication to the SequeLink data access service on Linux/UNIX/Windows.
> "ServiceSSLCipherSuites" | Specifies the supported cipher suites. The default is TLS_DH_anon_WITH_AES_128_CBC_SHA.
> "ServiceSSLEnabled" | Specifies whether SSL or TLS is enabled for the SequeLink service. The default is false.
> "ServiceSSLSessionCacheSize" | Specifies the maximum number of SSL or TLS session identifiers that are cached on the SequeLink Server before the sessions are flushed from the cache.
> "ServiceSSLSessionCacheTimeout" | Specifies the maximum time in seconds to keep a SSL or TLS session in the SequeLink Server session cache. The default is 300 seconds.
> "ServiceSSLVersions" | Specifies the version of the SSL standard that is used for encryption. The default is TLS 1.0.
> "ServiceUser" | Sets authorization for users who are allowed to access the service for data access. The setting can be affected by the value of ServiceAuthMethods.