User Authentication | Cyclades AlterPath BladeManager instruction

5: Advanced Configuration

User Authentication

To use NIS only to authenticate users, change the lines about passwd, shadow and group in the configuration file (/etc/nsswitch.conf) as described below.

The BladeManager does not support user authentication against a NIS map and the local file (/etc/passwd) at the same time. Either the user is present in the NIS map or in the passwd file, but not both. The BladeManager will not even allow you to add a user in the local database if the user is already present in the NIS server.

The configuration below enables the system to authenticate NIS users and local users.

Authenticate the user first through the local database and if the user is not found, use NIS.

passwd: files compat

shadow: files compat

group: files compat

passwd_compat: nis

shadow_compat: nis

group_compat: nis

Authenticate the user first through NIS and if the user is not found, use the local database.

passwd: compat files

shadow: compat files

group: compat files

passwd_compat: nis

shadow_compat: nis

group_compat: nis

Authenticate the user first through NIS, and if the user is not found or the NIS server is down, use the local database.

passwd: compat [UNAVAIL=continue TRYAGAIN=continue] files

shadow: compat [UNAVAIL=continue TRYAGAIN=continue] files

group: compat [UNAVAIL=continue TRYAGAIN=coninue] file

passwd_compat: nis

shadow_compat: nis

5-14	Alterpath BladeManager Manual

Image 176

Cyclades AlterPath BladeManager user manual User Authentication

Contents

AlterPath BladeManager Page Table of Contents BladeManager Web Access BladeManager Web Administration Table of Contents Table of Contents Advanced Configuration Appendix a Hardware Specifications Viii Before You Begin AudienceDocument Organization Chapter Title Description Typographical Conventions Form/Window LabelsHypertext Links Form/Window Levels Naming Conventions Command Line Syntax Where outlet lists format is Before You Begin AlterPath BladeManager Manual Introduction Chapter Key Features Connectivity and Capacity Centralized Authentication Consolidated Views and Blade AccessSingle Point Security Gateway Simple and Easy Web User Interface One-Click Access to Blades and Switches Prioritized Triggers & AlarmsCentralized Data Logging System Log File Compression and Rotation Backup, Restore, and Replicate User Data Other Alarm FeaturesBlade Wizard Chassis, Blades, and User Group Management Multiport Ethernet Cards Command Line Interface CLIExhaustive Reporting Deploying the BladeManager Introduction AlterPath BladeManager Manual BladeManager Installation Product Installation Checklist Rack Mounting Guidelines Rack Mounting Guidelines BladeManager Installation Rack Mounting Guidelines BladeManager Installation Rack Mounting Guidelines BladeManager Installation Rack Mounting Guidelines BladeManager Installation Major Components of the BladeManager Static-Sensitive Devices Installation Safety GuidelinesSystem Reliability Guidelines Installation Procedures Installing DIMMs BladeManager Installation Go to Completing the Installation, this chapter Installing a Hard Disk DriveInstalling a Simple-Swap Serial ATA Hard Disk Drive Installing a Scsi Hard Drive Installing an Adapter BladeManager Installation Installation Procedures BladeManager Installation Completing the Installation Connecting the Cables Updating the Server Configuration BladeManager Controls, LEDs, and Power Front LEDs/Buttons Function Rear LEDs Function Power-control buttonReset button BladeManager Power Features Switching On the Server Switching Off the BladeManager Pre-Configuration Requirements Requirement Description Configuring the COM Port Connection and Logging BladeManager Installation AlterPath BladeManager Manual Menu Option Function AlarmsUser Interface Overview Using the Web Interface as a Regular User User Interface Overview General Screen Features Sorting a List Form by Column/Field Name Alarms Search and Filter Functions Alarm List Form Alarm LogsResponding to an alarm Fieldname Definition Viewing the Alarm Detail Form Form brings up the Alarm Detail form Fieldname / Button Definition Viewing Alarm or Console Logs Assigning a Ticket to a User Blades Viewing the Blade List Column or Button Definition Name CLI, KVM, VM, ON, OFF Viewing a Blade or Switch Connecting to a Blade ConsoleMultiple Users and Read/Write Access Consoles Detail Form Port Field Name DefinitionConsole Name Consoles Access Form Consoles Notify Form Consoles Groups Form Logs Log Type Definition Viewing the Logs Access Logs Event Logs Data Buffer User’s Profile Profile Disabled Viewing the User Groups Form Changing Your PasswordViewing the User Access Form System displays the User Group form User list box Viewing the Security Form List box to the Selected security profiles list Security profile list box BladeManager Web Administration Operational Modes Configuration Process Flow First Time Configuration Wizard Running the First Time Configuration Wizard Resetting Configuration to Factory Settings Password First Time Configuration Wizard An Example ===================================================== First Time Configuration Wizard Setting the Authentication Method Hostname Configuration Must Follow RFC Standard Connecting to the Web Interface Encrypted version BladeManager Web Interface Admin Mode Forms Summary Menu Option Forms and their Functions Menu Option Forms and their Functions Menu Option Forms and their Functions Logging Into the BladeManager Web Interface Parts of the Web Interface BladeManager Web Interface Admin Mode Sorting, Filtering, and Saving a List Form Using the Form Input Fields Verifying Error MessagesChassis Management Action Forms Used Switch 1 through Switch Blade Wizard Save & Create Blades Chassis Devices List Form Fieldname / Element Definition Search Adding or Editing a ChassisFilter by button Chassis Management Devices Details Form Fields and Elements Intdhcp Intdhcp or static Using a Dhcp Server and Selecting the Correct IP Mode IP Mode When to use this modeFunction of the Status Field Static Selecting the Groups to Access a Chassis To select one or more groups to access a chassis Proxy Type Function ProxiesProxy Types Proxy Type Function Configuring the Proxy Verifying your Proxy Setting Configuring the Chassis SwitchConfiguring Ports to be Proxied From the menu, go to Devices Details Groups Switch Mode intdhcp or static Two Methods of Blade Configuration Running the Blade Wizard Screen/Form Name Function Connection Method BladeManager Web Administration Unconfigured Consoles Groups Edit Configuration Confirmation Configuring Blades Manually through the Menu Consoles List Form Connecting to a Device Deleting a Device Deleting a Device Group Alarm TriggerDeleting a Device from a Group Alarm Trigger Management Viewing the Alarm Trigger ListCreate Alarm and Priority Form Function Forms Used Creating an Alarm Trigger Field Name Definition Using the Logical and in the Alarm Trigger Expression Blades / SwitchesDeleting an Alarm Trigger Consoles List Form Connection Applies to Use this connection to Type Viewing the Console List OFF Adding a Serial Console Blades / Switches 10Consoles Detail Form Fieldnames and Elements Selecting Users to Access the Console Adding a Switch Console Selecting Users to be Notified Assigning the Console to a Group Deleting a Console from a Group Connecting to a Console Log RotationInitiating Log Rotation Deleting a Console Group Setting Log Rotation in Auto Mode Users User List form Adding a User Fieldnames Definition Username Authentication e.g., LDAP, RADIUS, it is Selecting Consoles for a User Selecting User Groups for a User Deleting a User Group Deleting a UserDeleting a User from a Group Setting a User’s Security Profile Setting the Local PasswordSetting Up Local Authentication Groups Creating a Group Groups Deleting a Group Assigning a Security Profile to a User Group Security Profiles Status Enabled , Disabled or Deleted Security Profile ListForm Title Use this form to Column Name Definition Adding or Editing a Security Profile Security Profiles Source IP Field Name Function Security Profiles LAN ITF Selected LAN ITF Conditions list box right Security Profile Date/Time Configuring Authorization Go to Security Profiles Authorization Authorized Action Function Data Type Definition Deleting a Security ProfileBacking Up User Data System Recovery Guidelines Backup and Restore Scenarios BladeManager Database Transaction Support Responding to the Warning Message Changing the Default Configuration Info / Reporting Info / Reporting Page Advanced Configuration Shell Commands Command Use this command toWorking from a CLI Logging Menu Option Use this option to Connecting Directly to PortsCopying and Pasting Text within the Console Applet Window Sample Command Line Interface CLI CLI Commands Keys Command Set Commands Setboot sets the network boot utility. For example Setcons sets console connection. For example Date sets the date and date format. For example More Ethernet Subinterfaces Yes, No or Changing the Escape Sequence Setsmtp sets the email server’s IP address. For example Changing the Session Timeout Re-defining the Interrupt KeyChanging the Number of Lines in the SSH Applet Edit the file /opt/tomcat/apm/applet.conf Edit /etc/xinetd.conf as follows service telnet Enabling Telnet NIS Configuration File to edit /etc/nsswitch.confWhere Parameter Definition Status Meaning User Authentication Active Directory Configuration Adding Firmware Disabling Http to Use Only HttpsFirmware Backing Up User Data Upgrading the Apbm Firmware Managing Log Files Backup and Restore CommandsWhere Log Files are Archived Backing Up Log Files to a Remote Server Where Changing the Database Configuration Restoring Your ConfigurationRestconf config.tgz.old Maxconnections in my.cnf Parameter Description Installing SSL CertificatesEnter OpenSSL command Upon receipt, install the certificate Submit the CSR to the CA Keytool -import -alias tomcat -file jcertfile.cer Advanced Configuration Alterpath BladeManager Manual Access Control List AuthenticationBios ACL Boot Break SignalBlade Server Checksum Cluster ConsoleConsole Port DNS Server Escape Sequence EthernetFlash Flow Control Hot-Swap In-band NetworkManagement IP Address KVM Network Mask Parity Pcmcia Root Access Proxy ARPRouting Table Secure Shell SSH Stop Bit Subnet Mask Telnet Terminal Server UDP Rack Height Unit Appendix a Air Temperature BladeManager Hardware Specifications BladeManager Hardware Specifications