thalesgroupsm/sentinel_ldk_rte repository overview

---

⁠Quick reference

1. Maintained by: Thales Software Monetization Team
2. Where to get help: Thales Customer Support Portal⁠
3. For details on the latest version of the Docker image, see: Readme⁠

⁠Supported tags and respective Dockerfile links

1. 10.33, latest⁠

⁠How to use this image

$ docker run -p 127.0.0.1:1947:1947 --name some-server -e HASPLM_DATABASE=mysql -e HASPLM_DATABASE_MYSQL_HOST=192.168.10.100 -e HASPLM_DATABASE_MYSQL_USER=my-user-name -e HASPLM_DATABASE_MYSQL_PASSWORD=my-secret-pw -e HASPLM_DATABASE_MYSQL_PORT=3306 -d thalesgroupsm/sentinel_ldk_rte:tag

... where some-server is the name you want to assign to your container, my-secret-pw is the password to be used for the MySQL account and tag is the tag specifying the Sentinel LDK RTE version you want. See the list above for relevant tags.

Copy your Vendor libraries for all Batch Codes to the /var/hasplm directory on each license server machine.

⁠How to configure cloud license manager service behind reverse proxy

The Sentinel License Manager service (LMS) has built-in cross-site request forgery (CSRF) protection and DNS Rebinding attack protection. Therefore, LMS access may be denied because the HTTP headers such as "Origin", "Host", and "X-Forwarded-Host" are missed or are not set correctly by the reverse proxy service.

To solve this issue, for example in the NGINX configuration file, you can add the following part:

proxy_set_header Host $host;

proxy_set_header X-Forwarded-Host $host;

This passes the targeted address of LMS in the HTTP header to LMS.

In addition, to ensure that session info in the ACC can show the correct client IP address, Thales recommends that you add the following in the NGINX configuration file. This forwards the client IP in the HTTP header.

proxy_set_header X-Real-IP $remote_addr;

proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

⁠How to configure the cloud license manager service securely

1. See: How to configure the cloud license manager service securely⁠

⁠Environment variables

When you start the sentinel_ldk_rte image, you can adjust the initialization of the License Manager instance by passing one or more environment variables on the docker run command line.

⁠HASPLM_DATABASE

Specify the value: mysql (This entry is required even if using the MySQL CNF file.)

⁠HASPLM_DATABASE_MYSQL_HOST

The host machine where MySQL is located.

⁠HASPLM_DATABASE_MYSQL_USER

User name for the MySQL account to use to connect to the database.

⁠HASPLM_DATABASE_MYSQL_PASSWORD

Password for the above MySQL account.

⁠HASPLM_DATABASE_MYSQL_PORT

Port on the database server for connecting to the database. Default: 3306

⁠HASPLM_DATABASE_MYSQL_DATABASE

Name of the MySQL database to create. Default is sentinel_ldk.

This is similar to the database option in my.cnf. However, when this option specified in the hasplm.ini file, the database is created automatically if it does not yet exist. The same option in my.cnf causes the connection to fail if the specified database does not exist.

⁠HASPLM_CLOUD_PORTAL

Configure Sentinel Admin Control Center on the license server machine to issue a warning against using Admin Control Center to manage client identities.

Specify the value: 1

⁠License

View license information⁠ for the software contained in this image.

As with all Docker images, these likely also contain other software which may be under other licenses (such as Bash, etc. from the base distribution, along with any direct or indirect dependencies of the primary software being contained).

As for any pre-built image usage, it is the image user's responsibility to ensure that any use of this image complies with any relevant licenses for all software contained within.