Versions Compared

Old Version 17

changes.mady.by.user James Greenwood

Saved on

compared with

New Version 18

changes.mady.by.user Simon May

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Warning

Authentication methods are evaluated in sequence.  The first method that returns successful authentication terminates the authentication process.  If a method returns an unsuccessful authentication, the process does not terminate, the next authentication method will be evaluated.  Consider the following scenario when provisioning authentication for OMK applications.

  1.  OMK First authentication method: LDAP
  2.  OMK Second authentication method: htpasswd
  3.  User Bob has an LDAP account and has a user in the htpasswd users file.
  4.  User Bob leaves the company
  5.  The IT department removes Bob's LDAP account assuming he will no longer be able to access corporate systems.
  6.  Bob will still be able to access OMK applications because there is a user Bob in the htpasswd user file.

NMIS9 notes

From nmis9, changes will need to be made to /usr/local/omk/conf/opCommon.json. Also, because we are using .json instead of .nmis, the format of the commands are slightly different. See below for an example using tacacs:

Code Block
"auth_tacacs_server" : "host:port",
"auth_tacacs_secret" : "secret",


Related Topics