Page Comparison

...

1. From Administration Menu select Databases to create an authentication database

   

2. Name the LDAP authentication database

   

3. Configure the required roles

   

4. Configure the required roles for yarngate application, it is expected that there would be both a Yarngate-Admin and Yarngate-User. These permissions control what options are availible available in the yarngate application after a user is Authenticated and Authorised. Repeat this process for as many roles as required

   Image Removed

...

Yarngate Authentication

...

1. Create Authentication Policy

2. 

   Name the authentication policy and select Authentication Method LDAP + Database with Roles

   

3. Select Linked authentication Database created previously for Yarngate

   Image Removed

4. Image Added

5. Configure LDAP authentication

   

   1. The LDAP server address should be in the format LDAPS://<FQDN>:<port> - Note that LDAP:// can be used but passwords will not be encrypted in transit

   2. Verify TLS/SSL certificates can be enabled - Note that the LDAPS server certificate or trusted root CA certificate must be uploaded via the administration app

   3. LDAP username match regex can be used to match username formats - This is a generic username match regex that can be adjusted as needed(^[A-Za-z0-9]+(?:[ _-][A-Za-z0-9]+)*$)

   4. LDAP replace regex allows to adding prefixes/suffices to suite the authentication requirements such as adding a domain suffix

6. Save the authentication policy - Note that new tabs will now become visible

7. Configure LDAP authorisation and roles

   

   1. The LDAP interface field is optional - this can be used if an out of band check using another LDAP user is required for LDAP user group search on LDAP. If this option is not selected, the LDAP groups are retreived using the authenticated LDAP user

   2. Base DN - provide the base DN for LDAP searches

   3. Username Match Field - this is the LDAP username field used typically sAMAccountName

   4. LDAP group to role mapping - this provide a mapping from LDAP groups to the Autentication Database roles defined previously. The LDAP groups can be entered in as global group name of LDAP distingushed name

...

1. Add the yarngate application service

   Image Modified

2. Configure the yarngate services

   Image Modified

   1. Configure service name

   2. Select node/arm

   3. Host should use localhost as yarngate will be behind the proxy service

   4. HTTPS can remain default

   5. Select Authentication policy configured previously for Yarngate

3. Open the Proxy Service

   Image Modified

4. Select proxy service - service routing

5. Image Modified

   Add the yarngate application and save

   Image Modified

6. Test Access to Yarngate using the LDAP authentication policy

   Image Modified

   1. Copy the base path - this will be randomly generated /yarngate-app-16a85c5e89e142e5bebaa547bc5eeda5

   2. Logout of yarnman

   3. browse to the yarngate application https://<yarngate IP address>/<base url>

      • Example https://<yarngate IP address>/yarngate-app-16a85c5e89e142e5bebaa547bc5eeda5

   4. The login prompt should appear

      Image Modified

   5. If login is sucessful

      1. proceed to next step

         Image Modified

      2. If login is not sucessful refer to the following LDAP authentication troubleshooting guide LDAP Authentication and Authorisation Troubleshooting or raise a support case including the yarnman logs to resolve before proceeding

7. Finalise LDAP configuration

   1. Update default administration application access policy - NOTE that this service will be named Standalone Yarnman Administration App by default

      Image Modified

   2. Optionally set the yarngate application to be the default application for the proxy so that when users browse to yarngate and login they will go directly to Yarngate

      Image Modified