Chapter 3: Joining a ContentBridge to Harmonic MediaGrid with Local User Authentication
2. Enable the service account in
/etc/sudoers
on the first ContentDirector
visudo
and add the
following:
# Enable service account for LUA with CLB-4000
omauthchk ALL=(ALL) NOPASSWD: /usr/bin/omntlm_auth
Defaults:omauthchk !requiretty
3. Log in to the first ContentDirector using the
omauthchk
service account.
4. From the
omauthchk
home directory, make an
.ssh
subdirectory, if needed, then verify permissions
and enter the
.ssh
directory. For example:
mkdir -p .ssh
chmod 700 .ssh
cd .ssh
5. In the .ssh directory, generate private and public authentication keys, then press
Enter
twice to set up
passwordless access. Use the key names
id_omauthchk
and
id_omauthchk.pub
:
ssh-keygen -f id_omauthchk
6. Append the public key to the authorized_keys file as follows:
chmod 644 authorized_keys (if present)
cat id_omauthchk.pub >> authorized_keys
chmod 444 authorized_keys
What to do next
Now you can set up the second ContentDirector unit, and the ContentBridge. Then, optionally configure
omauthremote.conf
for primary and secondary authentication servers.
Setting up the second ContentDirector unit
Set up the second ContentDirector.
1. Log in to the second ContentDirector as root and create a service account named
omauthchk
.
useradd -g wheel -n omauthchk -K UID_MIN=400 -K UID_MAX=499
passwd omauthchk
2. Enable the service account in
/etc/sudoers
on the second ContentDirector
visudo
and add the
following:
# Enable service account for LUA with CLB-4000
omauthchk ALL=(ALL) NOPASSWD: /usr/bin/omntlm_auth
Defaults:omauthchk !requiretty
3. Log in to the ContentDirector using the
omauthchk
service account.
4. From the
omauthchk
home directory, make an
.ssh
subdirectory, if needed, then verify permissions
and enter the
.ssh
directory. For example:
mkdir -p .ssh
chmod 700 .ssh
cd .ssh
26
