Creating and Working with Grids › Modifying a Grid › Configuring Authentication

Configuring Authentication

The Authentication tab enables you to specify additional authentication settings for CA 3Tera AppLogic. The available options are Local, LDAP, or Active Directory. This setting determines how CA 3Tera AppLogic uses Role Based Access Control to authenticate a user upon login. For more information about using RBAC, see Using Role Based Access Control in the Command Line Shell Reference Guide.

Note: If you select LDAP as the autentication method, then a global user is only recognized in the global directory service if its entry uses one of the following basic object classes for a person:

• person
• inetOrgPerson
• organizationalPerson

In addition, a group in the global directory service is only recognized if its entry uses one of the basic object classes for a group (groupOfNames and groupOfUniqueNames).

To configure authentication for a grid

1. Select Grids from the left Menu.

   The Grids page appears. The state of the grid can be running, stopped, failed, failed - running (grid create failed but left the servers running), needs attention, and requires reboot.

2. Click the desired grid name in the GRID column.

   The Servers tab for the grid appears.

3. Click the Authentication tab.
4. Specify the following fields:

   Authentication

   Options are Local, LDAP, and Active Directory.

   Server Address

   IP Address or Resolvable Domain Name of Directory Server.

   Port

   Port number used to access the directory service.

   Use TLS

   Indicates whether to use Transport Layer Security (TLS) to access the directory service using an encrypted connection.

   User DN

   User Base Distinguished Name.

   Group DN

   Group Base Distinguished Name.

   User ID

   Directory field containing User ID.

   Group ID

   Directory field containing Group ID.

   Login Cache Period

   The period in seconds since a global user last authenticated with the global directory service during which the user may authenticate locally in the event the global directory service is unavailable.

5. Click the Save button in the upper right corner.