same role begins (or at 12:00 midnight, if no other reservations are set.) A dialog warns the user before the logoff occurs. The lead time of this warning can be configured in System Settings on the General page of the HP SAM administrative console.
For example, a school may use resource reservations to ensure students get a resource from the correct role for each class and make sure resources are freed in time for a later class needing resources in the same role. The administrator can set a reservation on the Math Class role specifying the IP address range of a certain classroom and a certain time/day when the math class occurs. The student who logs in using a computer in this classroom during the right day and time will get a resource in the Math Class role without having to choose which role. He can then use the resource until the class is over. Another reservation on the Math Class role may specify another math class in a different room at a later time for the same resource(s). The automatic logoff feature ensures that those resources will be available for students in the later class.
When the HP SAM Server and the access devices are in different time zones, note that the times set in Resource Reservations are the times of the access device, not the time of the server. For example, suppose the HP SAM server is in the Central Standard time zone and the time in the reservation is specified as 4PM. This will correspond to 4PM on the access device in the Pacific Standard time zone (even though the time on the HP SAM server operating system will show 6PM.) Therefore, be sure that times and time zones are set correctly for all systems involved.
The automatic logoff time is given to the resource during user logon and is not updated if the reservations are subsequently updated on the server. For example, if a user is logged in during a reservation set for
NOTE: This feature is only supported on resources running a Windows operating system.
Refrain from using resources assigned to multiple roles while using this feature. This can cause the automatic logoff to not occur when the resource is needed for a reservation set on one of the resource’s other roles.
There are two other features in HP SAM that can bypass the role selection dialog for users with multiple roles: Monitor Layouts and
Authenticate Before Allocation
When enabled, this feature enhances security by requiring the user to enter his username and password on the HP SAM client, which will then be authenticated by Active Directory before sending a user to a resource or displaying a list of roles and resources. The feature also eliminates the possibility of Active Directory locking out a user because he mistyped his password during a single connection attempt when trying to connect to multiple resources at once. This feature is disabled by default.
With this feature disabled, the behavior is the same as with previous versions of HP SAM where password authentication is first done when logging into the operating system on the resource.
Authenticate Before Allocation | 83 |