Registering an external authentication server and an external authorization server

Ops Center Automator Installation and Configuration Guide

Version
11.0.x
Audience
anonymous
Part Number
MK-99AUT000-24

In the exauth.properties file, set the type of the external authentication server to be used, the server identification name, and the machine information about the external authentication server and external authorization server.

  • Log in as a user with Administrator permissions (for Windows) or as a root user (for Linux).
  • Copy the template of the exauth.properties file.
    In Windows:

    Common-Component-installation-folder\sample\conf\exauth.properties

    In Linux:

    Common-Component-installation-directory/sample/conf/exauth.properties

  • Verify the data structure of user entries (for LDAP authentication).
  • Set up the environment for the DNS server on the OS of the LDAP directory server.*
  • Register information about the LDAP directory server to the SRV record of the DNS server.*

Verify the following information:

  • Common information:
    • Type of the external authentication server
  • For LDAP authentication:
    • Machine information about the external authentication server and the external authorization server (Host name or IP address, Port number)
    • BaseDN
    • Domain name for external authentication servers managed by the LDAP directory server (when linking to an external authorization server)
    • Domain name for multi-domain configurations managed by the LDAP directory server (for a multi-domain configuration)
  • For RADIUS authentication
    • Machine information about the external authentication server and the external authorization server (Host name or IP address, Port number)
    • Authentication protocol
    • Host name or IP address of the management server
    • Domain name managed by the LDAP directory server (when linking to an external authorization server)
    • BaseDN (when linking to an external authorization server)
  • For Kerberos authentication
    • Machine information about the external authentication server and the external authorization server (Host name or IP address, Port number)
    • Realm name
    • Domain name managed by the LDAP directory server (when linking to an external authorization server)
    • BaseDN (when linking to an external authorization server)

*: This process is required to look up the information about the LDAP directory server by using the DNS server.

  1. Specify required items in the exauth.properties file being copied.
  2. Save the exauth.properties file in the following location:
    In Windows:

    Common-Component-installation-folder\conf\exauth.properties

    In Linux:

    Common-Component-installation-directory/conf/exauth.properties

  3. If the setting value of the auth.ocsp.enable or auth.ocsp.responderURL property is changed, the Common Component product services must be restarted.

    If the setting value of any other property or attribute is changed, the change takes effect immediately.