ZKTeco OP-400, Быстрый старт

Страница: 19 / 51

16 OP-400 Quick Start Guide
5.2 Basic Lenel OnGuard Configuration
All OnGuard related configuration is for OnGuard DataConduIT support and is not
specific to Opera at all. DataConduIT is the OnGuard feature which allows 3rd party
applications, such as the ZK Opera Service, to integrate with OnGuard via the
Windows Management Instrumentation (WMI) interface.
Chapter 2, Getting Started, of the The OnGuard DataConduIT User Guide should
be read and understood. The following notes review the main points.
1) OnGuard DataConduIT is installed as part of a standard OnGuard server
installation.
2) DataConduIT must be installed on the same machine as the OnGuard Linkage
Server if you want to receive events through DataConduIT. As covered earlier, it
is simplest to have DataConduIT, the OnGuard Linkage Server, and the ZK
Opera Service all installed and running on the main OnGuard server machine.
3) DataConduIT is a licensed OnGuard feature.
4) When a client such as the ZK Opera Service makes a call into DataConduIT, the
first thing DataConduIT does is decide whether the client is permitted to
perform the operation. To do this, DataConduIT checks which Windows
account has made the DataConduIT call. This is the account that the ZK Opera
Service is configured to run under. Once DataConduIT retrieves this account, it
attempts to perform automatic single sign-on (SSO) using this account. This is
the same SSO mechanism used by all OnGuard applications. If the SSO
succeeds, then the ZK Opera Service is logged on to the system as the
appropriate OnGuard user. DataConduIT then uses the OnGuard user
information to decide whether the client has permission to perform the
requested operation.
5) It is impossible to use OnGuard internal authentication with DataConduIT.
Automatic SSO is the only authentication mechanism. Therefore, to use
DataConduIT, single sign-on must be configured. To configure single sign-on in
OnGuard:
a) Add the directory that you wish to use. (For more information please refer
to “Add a Directory” in the Directories Folder chapter of the OnGuard
System Administration User Guide.)
b) Link the user account that you want to use automatic single sign-on to a
directory account. (For more information please refer to “Link a User
Account to a Directory Account” in the Users Folder chapter of the
OnGuard System Administration User Guide.)