To map external user groups to predefined WS-NOC roles
Purpose
In shared-mode deployments that include the WS-NOC product, nspOS is hosted on the NSP cluster rather than the WS-NOC server. When the CAS authenticates a user against an authentication source, and that user needs access to WS-NOC, that user group property needs to be mapped to an WS-NOC predefined role (except for read-only viewer access).
Steps
1 |
Install the WS-NOC with “External LDAP” bench option. This tells the WS-NOC to read from the following file in order to convert external user groups into WS-NOC defined authorization profiles: /opt/hpws/tomcat/webapps/oms1350/WEB-INF/classes/ext-aut-map.properties See the WS-NOC Installation Guide; Appendix E - Remote authentication; “External LDAP configuration” for more information. |
2 |
Configure an LDAP server in the WS-NOC bench options. Note: In a shared-mode deployment that includes the WS-NOC, LDAP server properties are not used by WS-NOC or CAS. |
3 |
After installing the WS-NOC product, navigate to the /opt/hpws/tomcat/webapps/oms1350/WEB-INF/classes/ directory and create the ext-auth-map.properties file with the appropriate mapping between the external user groups returned by the CAS, to the predefined WS-NOC profiles. The following is an example of the file contents: extldap.defaultprofile=Viewer profile.map.num=8 extauth.map.1.extrole=Administrator extauth.map.1.profile=Administrator extauth.map.2.extrole=RadiusGroup extauth.map.2.profile=Constructor extauth.map.3.extrole=Operator extauth.map.3.profile=Operator extauth.map.4.extrole=Viewer extauth.map.4.profile=Viewer extauth.map.5.extrole=ldapadmin extauth.map.5.profile=Administrator extauth.map.6.extrole=ldapconstruct extauth.map.6.profile=Constructor extauth.map.7.extrole=ldapoper extauth.map.7.profile=Operator extauth.map.8.extrole=ldapviewer extauth.map.8.profile=Viewer where extrole is the external user group property that is returned by the CAS profile is the predefined WS-NOC role RadiusGroup is the group, configured within the RADIUS server, that is returned upon successful authentication See the WS-NOC Installation Guide; Appendix E - Remote authentication; “Post Installation actions” for more information. |
4 |
Configure or install the nspOS instance (NSP cluster) to reference the needed authentication sources (RADIUS, AD, LDAP, and so on). End of steps |