Setting Up Windows Active Directory Authentication; Setting Up Pam Authentication - Symantec XGS-4728F Installation Manual

94 Setting up authentication plug-ins for VCS One

Setting up Windows Active Directory authentication

Setting up Windows Active Directory authentication

Setting up PAM authentication

Server URL :
SSL Enabled :
User Base DN :
User Object Class :
User Attribute :
User GID Attribute :
Group Base DN :
Group Object Class :
Group Attribute :
Group GID Attribute :
Group GID Attribute Type:
Auth Type :
Admin User :
Admin User Password :
Search Scope :
VCS One supports the Windows Active Directory through the ldap
authentication plug-in. Enable Active Directory for use with VCS One by
following the procedure for LDAP.
See "Setting up LDAP authentication" on page 90.
Pluggable Authentication Modules (PAM) authenticate users on the Policy
Master system.
No set up is required for the PAM domain. You add VCS One users to the PAM
configuration and give them the necessary privileges.
To add a VCS One user to the PAM configuration with the necessary privileges
1 Add the user by entering the following command:
# /opt/VRTSvcsone/bin/hauser -add pamuser@vcsone_cluster_name
where pamuser is the user name and vcsone_cluster_name is the name
of the VCS One cluster. By default, the VCS One cluster name is
vcsone_cluster.
2 Add roles for the user by entering the following command:
# /opt/VRTSvcsone/bin/hauser -addrole \
pamuser@vcsone_cluster_name ServerFarmObjectGuest
3 Test that the user's log in credentials work by running a VCS One "ha"
command such as hasys:
# /opt/VRTSvcsone/bin/hasys -state -user pamuser -domaintype pam
ldap://myldap.server1.com:389
No
ou=People, dc=mycompany,dc=corp,dc=com
account
uid
gidNumber
ou=Group, dc=mycompany,dc=corp,dc=com
posixGroup
cn
memberUid
FLAT
SUB