Adding Secondary Local Auth Administration Access
- Zane England
- Glen Steedman
This setup can be used when the primary authentication is LDAP based to provide backup access incase of LDAP connection issues, Note that this method will use a local Yarnman authentication
Ensure that strong passwords are used for local accounts
Create second Administration Application service
Configure Administration application
Set the service name to Administration App - Local User to identify this is the local auth DB service
Set the node/arm
Set the host to the ip address of the node or 0.0.0.0 to bind to all IP addresses
Set the port - this is the port that will be used to connect to the local admin access in this example 3999 was used
Set the authentication policy as required
Via SSH allow HTTP access to the port defined above adjust the port as set in the administration application configuration
Photon yarnman
sudo ym-edit-config.sh enable-local-admin-access
legacy yarnman
yarnman@yarnman:~$ sudo ufw allow 3999 Rule added
Verify access to the administration application - Note that https must be used
