Novell ZENWORKS 10 CONFIGURATION MANAGEMENT SP3 - NETWORK DISCOVERY DATABASE STRUCTURE, Руководство системного администратора

Страница: 22 / 374

22 ZENworks 10 Configuration Management System Administration Reference
n
ov
do
cx (e
n)
16
Ap
ril 20
10
1.4 Changing the Default Login Disable Values
By default, an administrator’s account is disabled for 60 seconds after he or she unsuccessfully
attempts to log in three times. You can change the number of login tries and the timeout length by
editing a configuration file. The changes are only applied to the instance of ZENworks Control
Center being run from the server where you open and modify the configuration file. To make the
change applicable to all ZENworks Primary Servers, you must make the same change in each
server’s copy of this file.
IMPORTANT: Login attempts per administrator account are maintained in the ZENworks
database, and there is only one ZENworks database per Management Zone. Therefore, if a particular
administrator unsuccessfully attempts to log in to one Primary Server, that administrator is locked
out of all Primary Servers in the zone. The lockout period is determined by the configuration on the
server where the login attempts failed.
To modify the login tries and timeout values:
1 In a text editor, open the following file:
Windows:
installation_location \novell\zenworks\conf\datamodel\zdm.xml
Linux:
/etc/opt/novell/zenworks/datamodel/zdm.xml
2 Add the following lines to the file:
<entry key="allowedLoginAttempts">5</entry>
<entry key="lockedOutTime">300</entry>
The 5 in this example represents the number of retries before disabling login, and 300
represents the number of seconds (the default is 60 seconds, or 1 minute).
Keep in mind that the longer the delay before allowing a re-login after the configured number
of failures (such as 5), the longer your authorized administrators must wait to access ZENworks
Control Center.
IMPORTANT: If you enter 0 as the login attempts value, the lockout functionality is disabled,
allowing unlimited attempts at logging in.
3
Save the file, then restart the zenloader and zenserver services on the Primary Server to make
the changes effective.
For instructions on restarting the services, see
Section 6.2.4, “Restarting the ZENworks
Services,” on page 75 .
1.5 Changing the Timeout Value for ZENworks
Control Center
By default, ZENworks Control Center has a 30-minute timeout value, so if you leave ZENworks
Control Center idle on your computer for more than 30 minutes, you are prompted to log in again to
continue.
The purpose of the timeout is to clear memory resources. The larger the timeout value, the longer
ZENworks Control Center retains the memory resources, which might have a negative impact on the
long-term performance of the device from which you have launched ZENworks Control Center,
including the ZENworks Server if you have it running locally on it.