Authentication Services | Avocent SPC420 guide

79

CHAPTER

6

Authentication Services

Users must be authenticated before they may access or perform any tasks in the DSView 3 management software system.

When users log in, they will be prompted for a username and password. The DSView 3 software will look up the login, determine the authentication service to use and forward the login credentials to the appropriate authentication service for verification. All authentication is performed over an HTTPS (SSL) encrypted link.

Some web browsers may store password information; see your web browser documentation.

Supported Authentication Services

The DSView 3 software is delivered with the DSView internal authentication service, which verifies a log in and password against user account information stored in the database on the DSView 3 software server.

The DSView 3 software also supports the following external authentication services:

•Microsoft Active Directory® *

•IBM® SecureWay® Directory Server *

•Novell® LDAP Services *

•Sun Solaris R9 LDAP Directory Server *

•Sun ONE™ LDAP Directory Server *

•Microsoft Windows NT domain

•Cisco® Secure ACS 3.3 for Windows 2000/2003 server

•Microsoft IAS for Windows 2000/2003 server

•FreeRADIUS for Red Hat RHL3

•Cisco Secure ACS 3.3 for Windows 2000/2003 server

•RSA SecurID®

* Uses LDAP V3

If the DSView 3 server is configured for external authentication, login requests are re-directed to the configured external authentication server.

Image 99

Avocent SPC420 manual Supported Authentication Services

Contents

Dsview Page DSView→ Page Table of Contents Server Properties 103 137 185 219 249 319 401 Xii DSView 3 Software Installer/User Guide List of Figures Xiv DSView 3 Software Installer/User Guide List of Tables 256 Table D.4 VT100 Special Keys and Control Keys Xviii DSView 3 Software Installer/User Guide Product Overview Features and Benefits System Components Environmental monitoring with Uptime Devices Third party productsPartner products DSView 3 software client Supported Units Cyclades ACS advanced console serverDSView 3 Mobile software LANDesk Server Manager Virtual environments DSR switchesMergePoint 52xx service processor SP manager Cyclades OnSite branch office appliance Legacy units Blade chassisGeneric appliances Embedded units System Configuration Power devicesTarget devices TCP/IP Cascade Switch Installation About InstallationMinimum requirements for the DSView 3 software Before installing and configuring the DSView 3 software Installing the DSView 3 Software Click Install DSView 3 Software. -or DSView 3 Software Installer/User Guide Upgrading the DSView 3 Software Configuring the DSView 3 Software Recommended upgrade processTo upgrade the DSView 3 software What you will need To configure the DSView 3 software Minimum client requirements Running the DSView 3 Software Opening a client session Before opening a client sessionTo open a client session Uninstalling the DSView 3 Software Regaining accessRSA SecurID login To close a DSView 3 software session Java InstallationTo configure Java to find the JRE Closing a DSView 3 Software Session Avocent Viewer Plug-in Installation To install the JRE on a Windows clientTo install the JRE on a Linux or Solaris client Installing the DSR Remote Operations Software DSView 3 Software Installer/User Guide Example Avocent DSView 3 Explorer Window Areas DSView 3 Explorer Windows Using the Side Navigation Bar Accessing Target Devices DSView 3 Explorer Windows Using Windows Sorting information in a windowFiltering information in a window Saving information in a window To filter the list in a windowFilter Text Strings Typed in the Filter Field To customize a window using the Customize link Using the Customize link in windows DSView 3 Explorer Page Navigation Buttons Description Displaying pages To bookmark a window Bookmarking a windowPrinting a window Refreshing a window Spinner Keyboard Commands Description Using keyboard commandsGeneral Keyboard Commands Description Calendar Keyboard Commands Description DSView 3 Software Installer/User Guide DSView 3 Help Configuring the DSView 3 help locationTo configure the DSView 3 help location Basic Operations Installing DSView 3 help on a local server To download or update DSView 3 help on the local serverGlobal System Properties PCI Compliance Configuration To enable or disable and configure the legal noticeLegal Notice To change user options To enable PCI complianceProfiles Changing user options To change the color scheme Changing your passwordTo change your password Changing the color scheme Choosing the serial session application Specifying a user certificateTo specify the serial session application To specify a user certificate To enable user settable certificatesTo enable user settable SSH keys Specifying an SSH key Built-In User Group Allowed Operations To enable user credential cachingBuilt-in User Groups Enabling user credential caching Preemption Levels Internet Explorer Considerations Managing ActiveX controls Security zones Advanced Internet options To display or change the restrictions of a security zoneTo add a hub server to the Trusted Sites list Server certificates CertificatesSystem certificate and SSH key To view or export the system certificate or SSH key Managed appliance certificates To configure certificate policy settingsSystem certificate policy and trust store Client certificates User Certificates Chain ValidationCertificate Revocation Lists CRL Secure Sockets Layer SSL To display and manage the trust store Integrated Windows Authentication Firewalls Proxy VPNs VPN NAT Devices Licenses To display license information To display license keysLicense Summary Fields Section Description To view system information System InformationAdding a new license key To add a new license key ISV Partners To add or change the partner URLsTo launch a browser session to a partner URL DSView 3 Software Installer/User Guide DSView 3 Servers Server PropertiesServer Properties Property Description To change server network properties To display server properties Security alerts Server certificates Serial session security alerts To create a CSR To update certificate information on the DSView 3 server Managing hub and spoke server certificates To update the certificate of a hub server on a spoke server Avocent proxy serverTo specify the Avocent proxy server To specify client session information Server trap destinationsClient session information To specify trap destinations To specify modem session properties DSView 3 software modem sessions To specify email properties Backing up and Restoring Hub Servers Manually Unit status pollingTo use unit status polling DSViewBackupRestore.exe -backup -archive db.zip -passwd test DSView 3 Servers Spoke Servers To display a list of spoke serversDSView 3 Software Spoke Server Status Cause To register a hub server as a spoke server To add a spoke server To delete a spoke server To change spoke server network properties Replication Promoting spoke serversTo promote a spoke server to be a hub server To initiate an immediate replication on a spoke server DSView 3 Servers DSView 3 Software Installer/User Guide Supported Authentication Services Authentication Services DSView 3 software internal authentication service To display configured authentication servicesTo remove authentication services See Unlocking User Accounts on To add an Active Directory external authentication service Active Directory external authentication service Click Next DSView 3 Software Installer/User Guide Authentication Services DSView 3 Software Installer/User Guide To add a Windows NT external authentication service Windows NT external authentication service To add an Ldap external authentication service Ldap external authentication service Authentication Services DSView 3 Software Installer/User Guide Authentication Services DSView 3 Software Installer/User Guide To add a Radius external authentication service Radius external authentication service DSView 3 Software Installer/User Guide To add a TACACS+ external authentication service TACACS+ external authentication service DSView 3 Software Installer/User Guide Authentication Services To add an RSA SecurID external authentication service RSA SecurID external authentication service Authentication Services To enable or disable an authentication service User Authentication Services Window To refresh trusted forests DSView 3 Software Installer/User Guide Types of Units View windows Units View Windows Topology view To attach a device from a topology view To enable or disable a topology view To access Units View windows Accessing Units View windows To hide multiple units with one operation Showing and hiding unitsUnits View windows fields To hide a unit Unit Status Values Unit type Status and Icon Description Action Links Action link Displays Valid for Action Site See Site, Department and Location Groups on Multiple unit operations from a Units View window Unit Overview Windows Unit Status Window To change overview information for a target deviceTo use the Unit Status window DSView 3 Software Installer/User Guide Adding Units Adding and Deleting Units To add a single managed appliance Wizards that add unitsAdding a single managed appliance IPv4 and IPv6 network protocols 117 To add a single embedded appliance Adding a single embedded appliance Click Next. Go to step For HP iLO embedded appliances Click Next Click Finish 121 To add a target device Adding a target device To delete a unit To modify target device delete policy settingsDeleting Units Automatically deleting attached units DSView 3 Software Installer/User Guide Name pull Synchronizing the DSView 3 Software DatabaseName Synchronization Name push To enable or disable automatic name push Automatic name pushAutomatic Name Push Operation Effects Unit Automatic Name Pull Operation Effects Unit Automatic name pull To enable or disable automatic name pull Manual name pushAutomatic Name Pull Operation Effects UnitEffect To initiate a name push operation from a Units View window Manual name pull To initiate a name pull operation from a Units View window Topology Synchronization To enable or disable automatic topology synchronization Automatic topology synchronizationTopology synchronization options in the Add Unit Wizard Topology synchronization options in the Resync Wizard To merge target devices from a Units View window Merging target devices To merge or split cascade switches Merging or splitting cascade switches Automatic Inheritance for Group Memberships and Properties To enable or disable automatic discoveryTo enable automatic inheritance Automatic Discovery DSView 3 Software Installer/User Guide Managing Units Appliance Configuration TemplatesSaving appliance configuration templates To save an appliance configuration template Applying appliance configuration templates Modifying appliance configuration template properties To replace a failed appliance Unit Properties DSView 3 Software Installer/User Guide To change the identity properties for a unit To change the location properties for a unitTo change the contact properties for a unit To change the note properties for a unit To change the custom fields for a unit To change the network properties for a managed appliance To change the network properties for a target device About Access Rights About target device access rights How access rights can be assigned To add or remove access rights from a Units View window Unit Access Rights Managed Appliance Status Managed Appliance SettingsTo move a DSR switch to the managed units list To change the network settings of a managed appliance To display version information for a managed appliance Managed Appliance Snmp Settings To enable or disable secure mode on an applianceTo change Snmp settings for a managed appliance Target Device Settings Customizing the Target Devices windowTo change the appliance name for a target device To add support for services on a target device Target Device Services Target Device Naming To change service optionsTo remove support for a service on a target device To enable and specify fixed target device names To delete offline IQ modules IQ Module SettingsTo adjust target device names To display IQ module information KVM Switch and Cascade Switch Settings To upgrade IQ modulesTo set the USB speed for IQ modules To change the Name in DSView for a cascade switch To change the name in appliance for a cascade switch Oscar interface settings To change local Oscar interface settingsTo change modem port settings Customizing the Appliance Local User Accounts window Local Account SettingsTo change access control method for local user accounts To display the Appliance Local User Accounts window To delete a local user account To change target device access rights to a local account To change the settings of a local user account Launching embedded unit sessions Embedded Units Changing embedded unit credentials To change login credentials for a Drac 4 embedded appliance Asset and Usage Reports AssetTo view Asset reports To view Usage reports Usage DSView 3 Software Installer/User Guide Power Devices and Power Device Sockets Power DevicesCustomizing the Power Devices Attached to Appliance window To change power device settings To add or remove a power device Customizing the Power Device Input Feeds window Power Device Input FeedUpgrading the firmware of a Cyclades power device To display power device input feed information Power Device Sockets To change power device input feed informationCustomizing the Power Device Sockets window Power Control of Devices Attached to Power Devices To change power device socket settingsTo control power from a Power Device Sockets window To control power from a Units View window Managed Appliance Session Settings Unit Sessions and ConnectionsCustomizing the Appliance Sessions window To display session information 173 To change the virtual media session settings on a KVM switch To define exit macros Defining exit macros To display information about all active sessions Active SessionsAll active sessions Example Creating a macro To disconnect an active session from an appliance window Customizing a target device Active Sessions window Active sessions on a target device Active modem sessions To disconnect one or more target device active sessionsSecure connections Supported modems Connections to Units Connection display formatExample Target device connections To display a connections window Example Cascade switch connectionExample Power device connection Renaming a managed appliance connection To delete a target device connection Adding and deleting target device connectionsMerging virtual and physical target device connections To add a target device connection To delete merged connections To merge virtual and physical target device connections Data log files Data Logging Data log licenses Configuring Data Logging Enabling the Syslog server To enable the SSH serverTo enable or disable Syslog server port Enabling the SSH server Verifying the data logging settings for each connection To enable or disable data logging on a unitEnabling and disabling data logging on units Viewing and customizing the SSH server settings To check the data logging settings for connectionsTo view and customize the SSH server settings To specify where data log files will be stored Configuring the buffer warnings events as SnmpSpecifying where data log files will be stored To configure the buffer warnings as Snmp To specify archiving properties Archiving and deleting data log files Dynamically archiving and deleting data log files To archive data log files dynamicallyTo delete data log files dynamically To display a list of data log files for a single unit Displaying data log file contentViewing Data Log Files Displaying lists of data log files Verifying data log file digital signatures Enabling SSH Passthrough Configuring SSH PassthroughTo enable or disable SSH Passthrough SSH Passthrough Sessions SSH port sharing To configure SSH Passthrough port sharing Preemption Configuring the Avocent Session ViewerTo configure the Avocent Session Viewer SSH Passthrough Sessions Establishing an SSH Passthrough connection to a unit 199 To enter an escape key sequence Escape key sequenceBreak sequences To modify the escape sequence New line \ c Character c Carriage return Delete Tab To configure break sequencesTo send a break sequence Ooo is one to three octal digits Transferring read/write access Disconnecting a sessionDisplaying session output Supported service processor commands DSView 3 Software Installer/User Guide Grouping Units Site, Department and Location GroupsTo add a site, department or location To change the name of a site, department or location To delete a site, department or location 207 Custom Fields To define custom fields To associate a custom label with a unitExample Custom fields 209 Unit Groups 211 User Defined Unit group hierarchy To display a list of unit groups in the Unit Groups window To display a list of unit groups in a Units View windowMore subgroups Adding or deleting a unit group To display information about a unit groupTo add a unit group Changing the unit group properties To delete a unit groupTo change unit group properties To add or remove members in a unit group To add or remove access rights for one or more unit groups 217 DSView 3 Software Installer/User Guide Creating zones Managing and Accessing ZonesDS Zones Enabling DS Zones Accessing zones To specify zone log in optionsTo log in to a zone To modify the zone name To switch zonesTransferring units to a zone Managing zone properties Managing zone access rights Assigning zone licensesTo assign zone licenses Using Zones To allow or deny access rights for a zoneUnits actions in a zone Deleted User actions in a zone Reports, events and data logging actions in a zone Modifying system settings in a zone DSView 3 Software Installer/User Guide Customizing the User Accounts window Managing User AccountsUser Accounts Windows To display the User Accounts window Account restrictions and expiration settings on User Status Icons Authentication Method To add a user account Adding User Accounts DSView 3 Software Installer/User Guide To delete one or more user accounts Resetting a User Account PasswordDeleting User Accounts Unlocking User Accounts To change the name of a user To reset a user account passwordChanging User Account Properties Username To specify a user SSH key User certificatesUser SSH key To change the certificate associated with a user To change user account restrictions and expiration settings User passwordUser account restrictions and expiration settings To change a user password or force a new password To change the group membership of a user User group membershipPreemption level Address Phone contact Email contactUser notes To change the custom fields User Access RightsTo display a user’s access rights Custom field properties To add or remove access rights through a user account To display user groups User Groups Adding User-defined User Groups Group naming in external authentication services 243 To delete a user-defined user group Deleting User-defined User Groups To add or remove user group members User Group PropertiesChanging User Group Members To display the properties of a built-in user group To display user group access rights User Group Access Rights To add or remove user group access rights DSView 3 Software Installer/User Guide About the Video Viewer Using the Video Viewer Window Features Opening a KVM Session To open a KVM session from the DSView 3 ExplorerVideo Viewer Window Descriptions Number Description Connecting to an existing session To open a KVM session using the Unit Overview windowOpening an exclusive KVM session To change Video Viewer session properties Video Viewer session properties To close a Video Viewer session Closing a Video Viewer SessionKVM Session Profiles Session time-out Name General profile settingsDefault macro group Keyboard pass through mode Option-Command-D Command-Option-EjectCommand-Control-Eject Command-Option-Control-Eject Menu activation keystroke Cursor profile settingsSingle cursor mode session startup Single cursor mode release keystroke Video profile settings Toolbar profile settings To display KVM session profile names and settings Managing KVM session profilesBackground refresh To change a KVM session profile To add a KVM session profile 261 To delete one or more KVM session profiles To assign a KVM session profile to a target deviceTo assign a KVM session profile to multiple target devices To enable or disable full screen mode Using Menu Commands to Manage Session SettingsGeneral commands To enable keyboard pass through Cursor commands Video commands Toolbar commands To refresh the screen Mouse scaling commandTo enable or disable background refresh Avocent Mouse Sync Manual Video Adjustment To manually adjust the video quality of the windowTo set Avocent Mouse Sync from the Video Viewer DSView 3 Software Installer/User Guide Block noise threshold and pixel noise threshold Automatic video adjustmentContrast and brightness Detection thresholds Displaying Video Viewer Users Saving the View To start scan mode Scan ModeAbout scan mode Thumbnail Viewer features DSView 3 Software Installer/User Guide Performing Thumbnail Viewer tasks Macros To launch a session to a device from the Thumbnail ViewerTo exit the Thumbnail Viewer To create or edit a macro To send a macro To copy a macro To delete a macro To rename a macro group Macro groupsTo create a macro group To add or delete macros in an existing macro group To copy a macro group To delete a macro group Requirements Using Virtual MediaTo power up, power down or power cycle a target device To display a predefined macro group Sharing and preemption considerations Virtual Media dialog box To launch a virtual media session Virtual media session settingsVirtual Media Session Settings Description Opening a virtual media session To display virtual media drive details To unmap a virtual media drive To close the Virtual Media dialog box Using Smart CardsTo reset all USB devices on the target device Closing a virtual media session To clear the local Java cache Video Viewer TroubleshootingTo map a smart card To unmap a smart card 285 DSView 3 Software Installer/User Guide Using the Telnet Viewer Telnet Viewer Window FeaturesAbout the Telnet Viewer DSView 3 Software Installer/User Guide Telnet Viewer window toolbar Telnet Viewer Window Descriptions Number DescriptionTelnet Viewer Window Toolbar Icons Icon Description Security Property Opening a SessionTo open a Telnet Viewer session To change the cursor appearance To enable/disable autoscalingCustomizing the Telnet Viewer To change the window background and/or text color To change the Telnet Viewer Arrow key sequences To change the terminal emulation modeCustomizing Session Properties To change the terminal window size To change the linefeed settings To change the terminal typeTerminal Emulation and Type Terminal Type To enable/disable 7-bit Ascii Login scriptsTo enable/disable line wrap To enable/disable local echo To build a login script and enable/disable automatic login Reviewing Session DataTo change the maximum number of lines in the session buffer To create a macro To edit an existing macro To use a macro To edit an existing macro group Logging To change the default log file directory To enable automatic loggingLog files To disable automatic logging To start dynamic loggingTo pause logging To stop logging To copy all of the Telnet Viewer session buffer contentsCopying, Pasting and Printing Session Data To resume logging To paste system clipboard contents To power up, power down, or power cycle a target deviceTo print a Telnet Viewer window screen To close a Telnet Viewer session Closing a Telnet Viewer Session To display the Units Tools window Using ToolsUsing Unit Tools Exporting units To export units To export access rights Exporting access rights Merging target device endpoints To merge target devicesTo merge target device endpoints Importing DSView 2.x software databases To backup the database Before using the Import DSView 2.x Software Database tool To import DSView 2.x software databases Importing data After running the Import DSView 2.x Database toolTo import data Using the Managed Appliance Tools RebootingTo access the managed appliance tools To reboot a managed appliance from a Unit Overview window To upgrade the firmware on a managed applianceUpgrading firmware To resynchronize a unit Resynchronizing units To restore a managed appliance configuration Saving a managed appliance configurationRestoring a managed appliance configuration To save a managed appliance configuration to a file To save the user database of a managed appliance To restore the user database of a managed applianceSaving a managed appliance user database Restoring a managed appliance user database DSView 3 Software Installer/User Guide Customizing the Tasks window Using TasksUsing the Tasks Window To display the Tasks window Adding tasks Specifying when to run tasks To run a task daily To run a task periodically Adding tasks using the Add Task Wizard To run a task weeklyTo run a task monthly To add the task Task Backup DSView 3 software database and system files Task Power control a target device Task Configure Snmp trap settings on a managed appliance Task Exporting an event log .csv file Migrating DSView 2.x software units Task Migrating units Migrating AlterPath Manager software units To add the task Task Updating the firmware of an appliance type Task Test modem connections to selected units Task Pull names from selected units Task Update topology for selected units Task Backup Power Manager database Task Restore Power Manager database To display the results of a task Running tasks manuallyDisplaying task results To manually run tasks To change a task schedule Deleting tasksChanging tasks To delete a task To add a firmware file Firmware ManagementTo display the Appliance Firmware Files window Customizing the Appliance Firmware Files window To delete firmware DSView 3 Software Installer/User Guide Event Severity Levels Icon Description Events and Event LogsEvent Severity and Categories Event severity Email Notifications Event categoriesSeverity icons Customizing the Email Notifications window To configure an email notification To change an email notification To test an email notificationTo delete an email notification Event log display fields To enable or disable logging of one or more eventsEnabling and Disabling Event Logging Displaying the Event Log To display details of an event log entry To display the event log Event states To delete one or more event log entriesTo change the state of one or more event log entries To change the event log retention period Using the date filterChanging the Event Log Retention Period To use the date filter To create an event log .csv file Creating an Event Log .csv File DSView 3 Software Installer/User Guide To add or upgrade a plug-in Plug-insRecommended Sequence for Adding/Upgrading Plug-ins To display plug-in information Adding Plug-insDisplaying Plug-in Information To add a plug-in Plug-ins Display Information Field Description Administrative status on this server. Valid values are To upgrade a plug-in Managing Plug-insUpgrading a plug-in To disable a plug-in Disabling and activating a plug-inTo activate a plug-in DSView 3 Software Installer/User Guide Appendix a Technical Support To resolve an issue Appendix B TCP and UDP Ports KVM switch ports Port DSView 3 Software Client With Tunnel Serial console appliance ports With Port Tunnel Port Firewall Firewall Port With DSView 3 server portsGeneric appliance ports 1078 TCP/IP Https Snmp ports External authentication ports Snmp Manager Optional Appendix C DSR Remote Operations Software DSView 3 Software Server Authentication Minimum requirements for the DSR Remote Operations software Before using the DSR Remote Operations softwareInstalling the DSR Remote Operations software To install the DSR Remote Operations software Click Install DSR Remote Operations. -or To exit the DSR Remote Operations software Using the DSR Remote Operations softwareWindow features To start the DSR Remote Operations software Servers view Version view Power view Managing servers Rebooting a switchPower control of devices attached to power device sockets To reboot the switch DSView 3 Software Installer/User Guide Appendix D Terminal Emulation VT terminal emulationTable D.1 VT Key and Keypad Numeric Codes Table D.3 VT102 Receive Codes Action VT100+ terminal emulationVT102 terminal emulation Table D.2 VT100+ Function Key Support Sequence VT100 terminal emulation DC2 Table D.6 VT100 PF1-PF4 Key Definitions Code Sequence DSView 3 Software Installer/User Guide 379 VT220 terminal emulation 381 Table D.9 lists the decoding for VT220 terminal emulation 383 Table D.11 lists the decoding for VT52 terminal emulation VT52 terminal emulation VT320 terminal emulation Table D.14 lists the decoding for VT320 terminal emulation 387 DSView 3 Software Installer/User Guide To regain access to a DSView 3 software system Appendix E Regaining Access to the DSView 3 Software Appendix F Glossary Avsp Avocent Video Session Protocol Cascade switchCertificate authentication Dhcp Dynamic Host Configuration Protocol DSR switch Digital CertificateDSView 3 software client session Embedded appliance DSView 3 software hub serverDSView 3 software spoke server DSView 3 software system FRU Field Replaceable Unit External authentication serverIntegrated windows authentication Flash Java KVM switchLdap Lightweight Directory Access Protocol IQ module NAT device Managed applianceMIB Management Information Base NAT Network Address Translation PPP Point to Point Protocol Power deviceOscar interface Positive hysteresis Snmp Simple Network Management Protocol SessionSite Smart card UDP User Datagram Protocol Tiered switchTelnet session Telnet Viewer 509 Web server Index 402 AV2000 Installer/User Guide Isdn 404 AV2000 Installer/User Guide 405 See also Hub server and Spoke servers Services SSH See also Telnet Viewer Telnet Viewer 409 See Certificates Page 590-395-501M