Home
Главная
Aten
CC2000 3.0
Руководство пользователя Страница: 177

Aten CC2000 3.0 [177/353] Add authentication services

Chapter 6. User Accounts

163

Add Authentication Services

Follow the steps below to add authentication services:

1. Click Add for a pop-up window as shown:

2. Enter the Server name, choose the Server type using the drop-down menu,

and enter a description for the server.

Note: 1. The Server name can be from 2–32 English alphanumeric

characters, but cannot contain the following: " '

2. The Description can be up to 256 bytes.

3. Click Next for the Connection Settings page. This page will be different

for different Server type.

Содержание

Cc2000 p.1
User notice p.2
User information p.2
Telephone support p.2
Online registration p.2
Product information p.3
Package contents p.3
Important note about software version p.3
Server installation and utilities p.4
Introduction p.4
Contents p.4
Chapter 2 p.4
Chapter 1 p.4
Chapter 5 p.5
Chapter 4 p.5
Chapter 3 p.5
Browser operation p.5
Device management p.5
Dashboard and basic operation p.5
User accounts p.7
Chapter 6 p.7
System p.8
Chapter 7 p.8
Chapter 8 p.9
Appendix the cc2000 utility p.10
Appendix technical information p.10
Appendix authentication key utility p.10
Appendix sso html sample codes p.11
Appendix external authentication services p.11
About this manual p.12
Aten regularly updates its product documentation for new features and fixes for an up to date cc2000 documentation visit p.13
Appendix e sso html sample codes provides sample codes for the single sign on function p.13
Appendix d external authentication services discusses the use of authentication via external third party services it also provides examples of configuring openldap for cc2000 authentication and configuring radius for cc2000 authentication in a linux environment p.13
This manual uses the following conventions p.13
Read this manual thoroughly and follow the installation and operation procedures carefully to prevent any damage to the unit or connected devices p.13
Http www aten com global en p.13
Conventions p.13
This page intentionally left blank p.14
Overview p.15
Introduction p.15
Chapter 1 p.15
Features p.17
Systems that the cc2000 server will be installed on should meet the following requirements p.19
Server requirements p.19
Requirements p.19
Operating system requirements p.19
Hardware requirements p.19
Hardware requirements p.20
Client requirements p.20
Operating systems p.20
Supported browsers for users logging into the cc2000 include the following p.21
Note 1 devices must be configured to communicate on the same port that as the cc2000 s device port see device port page 17 p.21
For a list of supported devices refer to the aten website p.21
Device requirements p.21
Browsers p.21
All aten altusen ip products must be at a firmware level that contains the cc management function and the cc management function must be enabled download and install the latest version of the relevant firmware from our website if necessary for details on upgrading the firmware see update restore on page 128 p.21
Licenses p.22
Secondaries p.23
This page intentionally left blank p.24
Switching to cc2000 v3 p.25
Server installation and utilities p.25
Overview p.25
Chapter 2 p.25
Stop cc2000 service p.26
Before you begin p.28
Windows version installation p.28
Starting the installation p.28
In the configuration dialog box fill in the fields according to the information provided in the table below p.31
Post installation check p.34
Linux version installation p.35
Before you begin p.35
Installing p.36
Post installation check p.37
Post installation setup p.38
Uninstalling the cc2000 p.39
Uninstalling from a windows system p.39
Uninstalling from a linux system p.39
Upgrading the cc2000 p.40
Preliminary steps p.40
Cc2000 secondary servers p.41
Cc2000 redundant secondary servers p.41
Migrating the database p.42
Database migration utility p.42
Before you begin p.42
Notes about the migration p.45
This page intentionally left blank p.46
Logging in p.47
Chapter 3 p.47
Browser operation p.47
Motp authentication p.49
Logging in using motp or dual authentication p.49
Dual authentication p.49
The screen components are described in the table below p.50
The interface p.50
The general interface of cc2000 and its components sections and items are shown below p.50
Screen components p.50
Add favorites p.52
My favorites p.52
Remove favorites p.53
Recent p.54
Message box p.55
Overview p.59
Dashboard and basic operation p.59
Chapter 4 p.59
Device status p.60
Events p.61
This panel displays the number of used and available nodes an example is shown p.64
License p.64
Filter p.65
Basic operations p.65
Search p.66
Modifications on interactive display panel p.67
Edit further options p.67
Table headings p.67
This page intentionally left blank p.68
Overview p.69
Device management p.69
Chapter 5 p.69
Using vpn p.71
Preliminary procedures p.71
Introduction p.72
Device table column headings p.72
By devices general operations p.72
An explanation of the column headings is provided in the table below p.72
The device types and an explanation of their purposes are described in the following table p.73
Device types that can be added and configured are found under the add drop down menu at the top of the main panel p.73
More configuration options are available here click more for the drop down menu as shown p.75
If you wish to edit a device check the device and click edit for the drop down menu p.75
If you wish to delete device s check the device s and click delete p.75
Refer to more on page 105 for the option details within more p.75
Refer to editing devices on page 96 for details on how to edit a device p.75
Refer to adding device on page 62 for details on how to add a device p.75
Adding device p.76
Fill in the fields according to the information provided in the table below p.78
When you have finished click add to complete the procedure p.79
If you have difficulty adding arm based pe series pdu refer to adding arm based pe series pdu on page 266for more details p.79
For cat5 kvm switches only the ports that have a kvm adapter cable attached and are online can be recognized and added to the device list this is because each adapter cable has its own independent identity and if it is not online there is no way for it to be recognized once a port has been added it will appear in the list even if it is off line p.79
This item refers to adding aten pdu s into the cc2000 management system p.80
Fill in the fields according to the information provided in the table below p.80
Adding aten pdu p.80
When you have finished click next the properties page appears p.81
When you have finished with this page click add p.82
Note after adding a device its ports are locked see locking unlocking p.82
Fill in the fields according to the information provided in the table below p.82
Devices page 107 p.82
When you have finished with this page click next the connectivity page appears p.84
Fill in the fields according to the information provided in the table below p.84
Fill in the fields according to the information in the table below p.85
When you have finished with this page click save the system will display a list for you to select which devices are to be added to the aten ecodc check and select the device s port s you wish to be associated with the aten ecodc p.86
To add an apc pdu do the following p.87
This item refers to adding apc pdu into the cc2000 management system p.87
Fill in the fields according to the information provided in the table below p.87
Adding an apc pdu p.87
When you have finished with this page click next the properties page appears p.88
Fill in the fields according to the information provided in the table below p.88
When you have finished with this page click next the connectivity page appears check to enable web ssh telnet sessions p.89
When you have finished click add to complete the procedure p.89
This item refers to adding virtual host into the cc2000 management system p.90
Fill in the fields according to the information provided in the table below p.90
Adding a virtual host p.90
Fill in the fields according to the information provided in the table below p.91
When you have finished with this page click next the properties page appears p.91
When you have finished with this page click next the virtual server machine page appears p.92
When you have finished with this page click next the connectivity page appears p.92
Fill in the fields according to the information in the table below p.92
When you have finished with this page click next the properties page appears p.94
This item refers to adding blade chassis into the cc2000 management system p.94
Fill in the fields according to the information provided in the table below p.94
Adding a blade chassis p.94
Fill in the fields according to the information provided in the table below p.95
When you have finished with this page click next the connectivity page appears p.96
The maximum number of slots field is for information purposes and can t be configured on supported chassis it can only be set on generic chassis p.96
Fill in the fields according to the information in the table below p.96
When you have finished with this page click next the blade page appears p.97
When you have finished click save to complete the procedure p.97
For the blade switching hotkey this information is filled in automatically with the details of the assigned model p.97
For each blade you can specify its department location and type and provide a brief description p.97
When finished click next for the properties page p.99
When finished click next for the connectivity page p.100
Fill in the fields according to the information provided in the table below p.100
Fill in the fields according to the information in the table below p.101
When finished click save to complete the procedure p.102
For operations in the drop down menu of the operation column refer to operation on page 109 p.102
This item refers to adding generic device into the cc2000 management system p.103
Note see generic device page 60 for an explanation of generic devices p.103
Fill in the fields according to the information provided in the table below p.103
Adding a generic device p.103
When you have finished click add to complete the procedure p.104
This item refers to adding group device into the cc2000 management system p.104
Adding a group device p.104
Note 1 refer back to group device page 61 for an explanation of the differences between aggregate and group devices p.105
Fill in the fields according to the information provided in the table below p.105
A port can belong to any number of group devices when a port is made part of a group device it retains the locked unlocked status of the original physical port if you lock or unlock any of these ports all the ports including the original physical port change to the new locked unlocked status p.105
When you have finished click add to complete the procedure p.105
This item refers to adding devices into the cc2000 management system using the search by ip option p.107
The search by ip window is shown below p.107
Search by ip p.107
Fill in the fields according to the information provided in the table below p.107
Click next and a table will appear with the results use the radio buttons to select the types of devices to be displayed in the table aten devices aten pdus or other servers or devices p.107
The description column reveals one of three results p.108
Fill in the properties fields and click add p.108
Check the checkbox of the device or server you would like to add and click add p.108
Editing devices p.110
Primary nic specify the network protocol s for this nic p.114
Power via pdu check uncheck to enable disable p.114
Kvm settings select the access rights refer to the table below p.114
Additional nic3 specify the network protocol s for this nic p.114
Additional nic2 specify the network protocol s for this nic p.114
Additional nic1 specify the network protocol s for this nic p.114
Serial settings select the network protocol s and the access rights full access and broadcast full access and view only p.114
The options for blade chassis aggregate device is shown below p.115
Primary nic specify the network protocol s for this nic p.115
Kvm settings select the access rights refer to the table below p.115
Check to set the access rights for the user or group p.115
Blade chassis aggregate device p.115
Additional nic3 specify the network protocol s for this nic p.115
Additional nic2 specify the network protocol s for this nic p.115
Additional nic1 specify the network protocol s for this nic p.115
Deleting devices p.118
Operation p.123
You can right click your mouse in the text row area to bring up a menu style version of the toolbar p.125
The control panel of the cc kvm viewer is hidden in the upper default or lower center of the screen and becomes visible when you mouse over it the panel consists of three rows an icon row at the top and two text rows below it p.125
The control panel functions are described in the table below p.125
Control panel functions p.125
Cc kvm viewer p.125
The snviewer provides a control panel that is hidden at the center top of the screen and becomes visible when your mouse moves over it the panel consists of three rows an icon row at the top and two text rows below it p.128
The control panel functions are described below and in the following sections p.128
Snviewer p.128
Control panel functions p.128
Webclient viewer p.130
The webclient viewer provides access to the devices ports directly on the browser without requiring windows or java client app installation its control panel is explained below p.130
Page 140 p.130
Note to launch webclient viewer when clicking kvm viewer see p.130
Control panel functions p.130
Web access p.131
Clicking web access opens a browser session for the device server on your desktop just as if you had opened your browser and logged into from the url bar an example is shown below p.131
Dell idrac 8 example p.135
Hp ilo 5 example p.136
If you want to launch viewers to see the screen of the port check the port and click launch viewer the system will open the viewer in a new window java or winclient p.137
If you select a device in by device the lower screen will list all the ports of the device p.137
All the operations are the same as the device by devices general operations on page 58 except that configurations are at the port level and it includes a launch viewer option p.137
Selecting by port will list all ports in the system p.137
Refer to operation on page 109 for more information p.137
Port column headings p.137
Launch viewer p.137
Properties system macro p.138
To configure the settings refer to the device s user manual to obtain the necessary information p.139
The meanings of the attribute headings are described in the table below p.139
Port settings p.139
Click edit port settings to edit port attributes an example is shown p.139
Unsupported devices p.140
Update restore p.142
This submenu allows you to manage firmware and back up files p.142
The table here shows the aten and redfish enabled devices that have recently firmware upgraded p.142
The status column shows the firmware upgrade status of the device p.142
Firmware upgrade p.143
Firmware repository p.146
Backup configuration p.148
Restore configuration p.149
Preferences p.151
Device port alias p.151
Serial ports broadcast p.153
General p.155
Advanced p.155
System broadcast p.156
Default access rights p.156
Device sync p.158
User accounts p.159
Overview p.159
Chapter 6 p.159
Enter the required information in the appropriate fields a description of each of the fields is given in the table below p.161
System user types p.167
Click the user type tab to show a list of user types an example is shown p.167
User types p.167
There are system and customer user types where the category column helps you identify which is which p.167
The roles performed by members of the system category are fixed the roles associated with each type are summarized in the table below p.167
The custom user type category provides you with the convenience and flexibility of assigning various combinations of roles that best suit your installation s requirements p.167
The cc2000 supports six system user types and are predefined in the system the roles assigned to members of these user types are fixed and cannot be changed p.167
You can create custom user types with any combination of roles assigned to them to suit your requirements p.168
Note 1 the differences between super administrators and system administrators are as follows p.168
Follow the steps below to create a custom user type p.168
Custom user types p.168
Click add for a pop up window as shown p.168
Auditor p.168
Groups tab p.170
Groups p.170
Domain groups tab p.174
Authentication services p.176
Add authentication services p.177
Server information p.178
Select the security connection and browse method using the corresponding drop down menu click save p.178
Enter the server ip domain and click connect to test the connection p.178
Enter information on the page refer to server information on page 164 for the information fields p.178
An explanation of the information required for each of the servers is provided below p.178
Active directory p.178
Kerberos p.179
Windows nt domain p.181
Radius and tacacs p.181
Get the information for the domain name from the service administrator for example settings see nt domain settings example page 308 p.181
Motp mobile one time password p.182
Note the motp server is for one time password otp token authentication only if you want to adopt the otp function you need to install a motp server first p.183
If you want to purchase a motp server contact changing information technology inc https www changingtec com en p.183
Dual authentication p.183
If you want to purchase a motp server contact changing information technology inc https www changingtec com en p.184
Dual authentication requires you to log in by entering the username and password of a user in the cc2000 server followed by the motp authentication p.184
Note 1 the motp server is for one time password otp token authentication only if you want to adopt the otp function you need to install a motp server first p.184
With regard to the cc2000 s internal authentication services there are some configuration settings you can make to the password policy function all user accounts must follow the requirements you set here to configure the cc2000 s password policy do the following p.185
Make the configuration choices you desire refer to the table below for an explanation of the fields p.185
Check the server and click edit p.185
Cc2000 authentication p.185
Alternatively you can move your cursor over the server and click the pencil icon p.185
When you have finished click save p.186
To delete an authentication server check the server s and click delete p.186
Note 1 you can delete all deleteable servers by checking the box at the top of the column p.186
If a user account has been created on the cc2000 that uses an external p.186
Delete an authentication server p.186
Authentication server the server cannot be deleted p.186
A confirmation message will pop up click yes to delete the user s p.186
System p.187
Overview p.187
Chapter 7 p.187
This page allows you to configure the cc2000 server s settings p.188
The system info submenu offers three tab menu choices general time and server ips the default system info page is general as shown below p.188
The meanings of each fields are described in the table below p.188
The default page is general and looks similar to the one above p.188
System info p.188
Note changes to other servers on the installation can only be made by logging p.188
Into them directly p.188
General p.188
Server ips p.190
Notification p.191
Snmp traps p.193
Syslog p.194
Advanced p.195
Snmp agent p.199
Snmp manager p.201
Access protection p.203
Security p.203
Certificate p.206
Check the create a new self signed ssl server certificate checkbox and fill in the fields according to the information in the table below p.207
Changing a self signed certificate allows you to provide additional information in the certificate that wasn t generated in the installation certificate the way to change a self signed ssl certificate is to create a new one to create a new self signed certificate do the following p.207
Changing a self signed certificate p.207
At the bottom left of the page click update for the following page p.207
When you have finished filling in the fields click apply p.208
A message appears asking you to wait while the database gets updated with the new information after a moment the web page closes at this point you are brought back to the beginning of the login sequence where you must go through the procedure of accepting the security certificate and logging in p.208
Disclaimer p.211
The page items contained are described in the table below p.212
The cc2000 license controls the number of nodes permitted on the cc2000 server installation the default license that comes with your purchase is a demo license for one primary no secondaries that allows 16 nodes to add anything more secondary servers and additional nodes a purchased license and license upgrade is required p.212
Select license from the system menu a page similar to the one below appears p.212
License p.212
Task manager p.217
Editing a task p.232
Deleting a task p.232
Run now p.232
Replicate database p.233
Vmware settings p.234
Vmrc plugin p.234
Installing xterm p.234
The redundant servers menu offers two tab menu choices primary secondary servers and advanced as displayed below p.235
The interactive display panel provides a table listing the cc2000 servers along with some corresponding basic information a green online status means that the server is currently accessible a red offline status means that it is currently inaccessible p.235
The definitions of the server table headings are explained below p.235
Redundant servers p.235
Primary secondary servers p.235
View properties p.236
To view the properties of each server check the checkbox of the server you want to view and click view properties p.236
Advanced p.240
This page intentionally left blank p.242
Overview p.243
Chapter 8 p.243
System logs p.244
Options p.247
Device logs p.250
Options p.251
Serial console history p.253
Options p.256
Snmp traps p.257
Options p.258
User access activity p.260
Reports p.260
The meanings of each fields are described in the table below p.261
The device access page provides statistics for device access p.261
Fill in the fields from the main panel to build and display either a pie or bar chart or both according to the parameters set when pie is selected for chart the device access page looks similar to the one below p.261
Device access p.261
The meanings of each fields are described in the table below p.262
Fill in the fields from the main panel to build and display either a pie or bar chart or both according to the parameters set the port access page looks similar to the one below p.263
The port access page provides the statistics for port access p.263
The meanings of each fields are described in the table below p.263
Port access p.263
The port access page looks similar to the one below p.264
The asset statistics page displays all the assets that have been added to the cc2000 installation shown in two charts all aten device statistics by model and all device statistics by category p.264
Asset statistics p.264
Options p.265
Default color tab click to return all colors back to their default settings p.266
Technical information p.267
License agreement p.267
Grant of rights p.267
Definitions p.267
Appendix a p.267
Limited warranty p.268
Limitation of liability p.269
Export regulations p.269
Termination p.270
Miscellaneous p.270
Your computer configuration including operating system revision level expansion cards and software p.271
When you contact us please have the following information ready beforehand p.271
Usb authentication key specifications p.271
The sequence of operations that led up to the error p.271
Technical support p.271
Product model number serial number and date of purchase p.271
North america p.271
International p.271
For telephone support see telephone support page ii p.271
For online technical support including troubleshooting documentation and software updates http eservice aten com p.271
Any other information you feel may be of help p.271
Any error messages displayed at the time the error occurred p.271
Supported aten altusen products p.272
Device anms settings p.272
Firewalls p.274
Cc2000 proxy function p.275
The following table lists the parameters and defaults for names descriptions and ranges found in the cc2000 management system p.276
Note unless otherwise specified all field entries can be inputted in any p.276
Name description and range parameters p.276
Language supported p.276
Trusted certificates p.279
Overview p.279
Adding arm based pe series pdu p.280
Troubleshooting p.282
Windows p.287
Installing openjdk 8 p.287
Openssl req new newkey rsa 1024 days 3653 nodes x509 keyout ca key out ca cer config openssl cnf subj c ca st bc l richmond o aten international ou aten cn aten emailaddress eservice aten com tw p.290
Openssl req new newkey rsa 1024 days 3653 nodes x509 keyout ca key out ca cer config openssl cnf p.290
Importing the files p.290
Examples p.290
Self signed private certificates p.290
Openssl req new newkey rsa 1024 days 3653 nodes x509 keyout ca key out ca cer config openssl cnf subj c yourcountry st yourstateorprovince l yourlocationorcity o yourorganiztion ou yourorganizationalunit cn yourcommonname emailaddress name yourcompany com p.290
The cc2000 utility p.291
Overview p.291
Appendix b p.291
System settings p.292
The dialog box is divided into three panels as described in the table below p.293
Restore p.293
Clicking the restore tab brings up a dialog box that looks similar to the one below p.293
View license p.294
The view licenses tab lets you view the licenses that are related to the cc2000 package to view a license click its radio button p.294
Overview p.295
Key utilities p.295
Key status information p.295
Authentication key utility p.295
Appendix c p.295
Starting the upgrade p.296
Key firmware upgrade p.296
Upgrade succeeded p.299
Overview p.300
Key license upgrade p.300
Online upgrade p.301
Upgrade succeeded p.305
After the upgrade has succeeded the dealer distributor receives an e mail from altusen informing him that the upgrade has been completed online for example p.305
Offline upgrade p.306
Offline upgrade failure p.312
Order expiration p.313
This page intentionally left blank p.314
Ldap ldaps openldap setting example p.315
External authentication services p.315
Approved services p.315
Appendix d p.315
Overview p.315
Active directory settings example p.317
Radius settings example p.318
Tacacs settings example p.320
Nt domain settings example p.322
Ldap group authorization setting examples p.323
Example 1 p.323
Example 2 p.325
Active directory group authorization setting example p.328
Motp vm server setup p.330
Motp settings p.330
Motp server initialization p.332
Step 1 ip setting p.333
Enter the account name admin and password admin p.333
Motp server setting p.336
Motp authentication services on cc2000 p.346
Setting up motp authentication service p.346
Creating user account s for motp authentication service p.348
Logging into cc2000 p.349
Sso html sample codes p.351
Overview p.351
Appendix e p.351

Aten CC2000 3.0 [177/353] Add authentication services

Содержание

Похожие устройства