Symantec Veritas Cluster Server One, Руководство по установке

Страница: 94 / 210

94 Setting up authentication plug-ins for VCS One
Setting up Windows Active Directory authentication
Server URL : ldap://myldap.server1.com:389
SSL Enabled : No
User Base DN : ou=People, dc=mycompany,dc=corp,dc=com
User Object Class : account
User Attribute : uid
User GID Attribute : gidNumber
Group Base DN : ou=Group, dc=mycompany,dc=corp,dc=com
Group Object Class : posixGroup
Group Attribute : cn
Group GID Attribute : memberUid
Group GID Attribute Type:
Auth Type : FLAT
Admin User :
Admin User Password :
Search Scope : SUB
Setting up Windows Active Directory authentication
VCS One supports the Windows Active Directory through the ldap
authentication plug-in. Enable Active Directory for use with VCS One by
following the procedure for LDAP.
See “ Setting up LDAP authentication ” on page 90.
Setting up PAM authentication
Pluggable Authentication Modules (PAM) authenticate users on the Policy
Master system.
No set up is required for the PAM domain. You add VCS One users to the PAM
configuration and give them the necessary privileges.
To add a VCS One user to the PAM configuration with the necessary privileges
1 Add the user by entering the following command:
# /opt/VRTSvcsone/bin/hauser -add pamuser @ vcsone_cluster_name
where
pamuser
is the user name and
vcsone_cluster_name
is the name
of the VCS One cluster. By default, the VCS One cluster name is
vcsone_cluster
.
2 Add roles for the user by entering the following command:
#
/opt/VRTSvcsone/bin/hauser -addrole
\
pamuser @ vcsone_cluster_name ServerFarmObjectGuest
3 Test that the user’s log in credentials work by running a VCS One “ha”
command such as
hasys
:
# /opt/VRTSvcsone/bin/hasys -state -user pamuser -domaintype pam