Chapter 4 Configuring the Appliance
Skybox version 8.5.400
23
2
Save and close the file.
3
Open
/etc/pam_radius.conf
and find the following entry:
127.0.0.1 secret 1
4
Replace that line with the relevant information for your RADIUS server.
For example, if the RADIUS server’s IP address is 192.168.1.1 and the shared
secret is
radiussecret
, replace the preceding line with:
192.168.1.1 radiussecret 1
5
Save and close the file.
6
Add the new user on the OS level, using the following command:
useradd <user1>
There is no need to set the password; it comes from RADIUS.
You can now log in to Skybox with the user’s credentials: <user1> / <password>
(using the password stored on the RADIUS server for this user).
Changing the TLS version
The Apache HTTP Server module
mod_ssl
provides an interface to
the OpenSSL library, which provides Strong Encryption using the Secure Sockets
Layer and Transport Layer Security (TLS) protocols.
There are 3 possible configurations for TLS:
›
Default Security configuration for SSL: All TLS versions are enabled
›
High Security configuration for SSL: TLS versions 1.2 and higher are enabled
›
Medium Security configuration for SSL: TLS versions 1.1 and higher are
enabled
Only 1 configuration can be active at any time. We recommend that you use the
highest level possible for your browser to increase the security of communication
between the browser and the Appliance web server.
The configuration settings are stored in the following file:
/etc/httpd/conf.d/
skyboxwebadmin.conf
