DOCSLIB.ORG

Teamcenter 10.1 Security Services Installation/Customization

Total Page：16

File Type：pdf, Size：1020Kb

Download full-text PDF Read full-text
Teamcenter 10.1 Security Services Installation/Customization SIEMENS Teamcenter 10.1 Security Services Installation/Customization TSS00001 • 10.1.4 Contents Getting started with Security Services . 1-1 Overview of Security Services . 1-1 Siemens PLM Software customization support . 1-2 Prerequisites . 1-2 Where to find system requirements . 1-2 Supported Web application servers . 1-3 Supported Web browsers . 1-3 Supported LDAP directories . 1-3 Java environment . 1-3 Teamcenter Security Services product support . 1-3 Basic concepts about Security Services . 1-4 Security Services components . 1-7 Session management . 1-7 Security Services communication channels . 1-8 Using Teamcenter Security Services AutoLogin as the authentication mechanism . 1-11 Context-sensitive rights management . 1-12 Installing Security Services . 2-1 Overview of Security Services installation . 2-1 Basic guidelines . 2-1 Basic installation process . 2-2 Upgrade to Security Services 10.1 . 2-2 Installation files . 2-2 Create the WEB_ROOT directory . 2-3 Copy installation files from the software distribution image . 2-3 Copy files in Windows Explorer . 2-3 Copy files in UNIX . 2-4 Launch the Web Application Manager . 2-4 Creating the Login Service . 2-5 Create the Login Service . 2-5 Name the Login Service . 2-5 Choose advanced options . 2-5 Enter disk locations . 2-6 Select the solution type . 2-6 Select solutions . 2-7 Create the Identity Service . 2-7 Logging Teamcenter application information . 2-9 Setting up an LDAP server for Security Services . 3-1 Choose an LDAP server . 3-1 LDAP requirements . 3-1 Overview of LDAP requirements . 3-1 TSS00001 10.1.4 Security Services Installation/Customization 3 CoContentsntents Example 1 – Defining multiple attributes . 3-2 Example 2 – Defining a single shared Teamcenter attribute . 3-2 Example 3 – Defining pseudo application IDs . 3-3 Example 4 – No schema changes . 3-4 How to enable encrypted LDAP . 3-4 Configuring Security Services . 4-1 Context parameter worksheets . 4-1 Debugging Teamcenter Security Services . 4-14 Using the DEBUG parameter . 4-14 Debug output files . 4-15 Debugging from within an application . 4-15 Configuring the Login Service . 4-15 Launch the Web Application Manager . 4-15 Modifying Web application information . 4-16 Modifying context parameters . 4-16 Values found in the Login Input Definitions table . 4-17 Configuring a load balancer, reverse proxy, or SSO Gateway (commercial SSO) . 4-18 Customizing the logon window . 4-18 Configuring the Identity Service . 4-18 Modify context parameters for the Identity Service . 4-18 Modifying Identity Service tables . 4-19 Configuring the secure socket layer (SSL) . 4-25 Overview of secure socket layer (SSL) configuration . 4-25 Enable SSL for Security Services components . 4-25 Enable SSL for Teamcenter clients . 4-25 Enable SSL for Teamcenter applications . 4-26 Debug SSL issues . 4-27 Deploying Security Services on Web application servers . 4-27 Setting environment variables . 5-1 Verifying Security Services . 6-1 Test Identity Service . 6-1 Test Login Service . 6-1 Test Java API documentation . 6-2 Verify DNS lookup of Active Directory domain controllers . 6-3 Customizing Security Services . 7-1 Overview of Security Services customization . 7-1 Customize client-certificate authentication . 7-1 What is client-certificate authentication? . 7-1 Retrieving Teamcenter user names from certificates . ..
Load more

Recommended publications
  • Desktop Migration and Administration Guide
    Red Hat Enterprise Linux 7 Desktop Migration and Administration Guide GNOME 3 desktop migration planning, deployment, configuration, and administration in RHEL 7 Last Updated: 2021-05-05 Red Hat Enterprise Linux 7 Desktop Migration and Administration Guide GNOME 3 desktop migration planning, deployment, configuration, and administration in RHEL 7 Marie Doleželová Red Hat Customer Content Services [email protected] Petr Kovář Red Hat Customer Content Services [email protected] Jana Heves Red Hat Customer Content Services Legal Notice Copyright © 2018 Red Hat, Inc. This document is licensed by Red Hat under the Creative Commons Attribution-ShareAlike 3.0 Unported License. If you distribute this document, or a modified version of it, you must provide attribution to Red Hat, Inc. and provide a link to the original. If the document is modified, all Red Hat trademarks must be removed. Red Hat, as the licensor of this document, waives the right to enforce, and agrees not to assert, Section 4d of CC-BY-SA to the fullest extent permitted by applicable law. Red Hat, Red Hat Enterprise Linux, the Shadowman logo, the Red Hat logo, JBoss, OpenShift, Fedora, the Infinity logo, and RHCE are trademarks of Red Hat, Inc., registered in the United States and other countries. Linux ® is the registered trademark of Linus Torvalds in the United States and other countries. Java ® is a registered trademark of Oracle and/or its affiliates. XFS ® is a trademark of Silicon Graphics International Corp. or its subsidiaries in the United States and/or other countries. MySQL ® is a registered trademark of MySQL AB in the United States, the European Union and other countries.
    [Show full text]
  • Version 7.8-Systemd
    Linux From Scratch Version 7.8-systemd Created by Gerard Beekmans Edited by Douglas R. Reno Linux From Scratch: Version 7.8-systemd by Created by Gerard Beekmans and Edited by Douglas R. Reno Copyright © 1999-2015 Gerard Beekmans Copyright © 1999-2015, Gerard Beekmans All rights reserved. This book is licensed under a Creative Commons License. Computer instructions may be extracted from the book under the MIT License. Linux® is a registered trademark of Linus Torvalds. Linux From Scratch - Version 7.8-systemd Table of Contents Preface .......................................................................................................................................................................... vii i. Foreword ............................................................................................................................................................. vii ii. Audience ............................................................................................................................................................ vii iii. LFS Target Architectures ................................................................................................................................ viii iv. LFS and Standards ............................................................................................................................................ ix v. Rationale for Packages in the Book .................................................................................................................... x vi. Prerequisites
    [Show full text]
  • Version 20160304-Systemd
    Linux From Scratch Version 20160304-systemd Created by Gerard Beekmans Edited by Douglas R. Reno Linux From Scratch: Version 20160304-systemd by Created by Gerard Beekmans and Edited by Douglas R. Reno Copyright © 1999-2016 Gerard Beekmans Copyright © 1999-2016, Gerard Beekmans All rights reserved. This book is licensed under a Creative Commons License. Computer instructions may be extracted from the book under the MIT License. Linux® is a registered trademark of Linus Torvalds. Linux From Scratch - Version 20160304-systemd Table of Contents Preface .......................................................................................................................................................................... vii i. Foreword ............................................................................................................................................................. vii ii. Audience ............................................................................................................................................................ vii iii. LFS Target Architectures ................................................................................................................................ viii iv. LFS and Standards ............................................................................................................................................ ix v. Rationale for Packages in the Book ...................................................................................................................
    [Show full text]
  • SUSE Linux Enterprise Server 15 SP2 Security and Hardening Guide Security and Hardening Guide SUSE Linux Enterprise Server 15 SP2
    SUSE Linux Enterprise Server 15 SP2 Security and Hardening Guide Security and Hardening Guide SUSE Linux Enterprise Server 15 SP2 Introduces basic concepts of system security, covering both local and network security aspects. Shows how to use the product inherent security software like AppArmor, SELinux, or the auditing system that reliably collects information about any security-relevant events. Supports the administrator with security-related choices and decisions in installing and setting up a secure SUSE Linux Enterprise Server and additional processes to further secure and harden that installation. Publication Date: September 24, 2021 SUSE LLC 1800 South Novell Place Provo, UT 84606 USA https://documentation.suse.com Copyright © 2006– 2021 SUSE LLC and contributors. All rights reserved. Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.2 or (at your option) version 1.3; with the Invariant Section being this copyright notice and license. A copy of the license version 1.2 is included in the section entitled “GNU Free Documentation License”. For SUSE trademarks, see https://www.suse.com/company/legal/ . All other third-party trademarks are the property of their respective owners. Trademark symbols (®, ™ etc.) denote trademarks of SUSE and its aliates. Asterisks (*) denote third-party trademarks. All information found in this book has been compiled with utmost attention to detail. However, this does not guarantee complete accuracy. Neither SUSE LLC, its
    [Show full text]
  • AIX 4.3 Quick Beginnings
    Bull AIX 4.3 Quick Beginnings AIX ORDER REFERENCE 86 A2 75HX 04 Bull AIX 4.3 Quick Beginnings AIX Software September 1999 BULL ELECTRONICS ANGERS CEDOC 34 Rue du Nid de Pie – BP 428 49004 ANGERS CEDEX 01 FRANCE ORDER REFERENCE 86 A2 75HX 04 The following copyright notice protects this book under the Copyright laws of the United States of America and other countries which prohibit such actions as, but not limited to, copying, distributing, modifying, and making derivative works. Copyright Bull S.A. 1992, 1999 Printed in France Suggestions and criticisms concerning the form, content, and presentation of this book are invited. A form is provided at the end of this book for this purpose. To order additional copies of this book or other Bull Technical Publications, you are invited to use the Ordering Form also provided at the end of this book. Trademarks and Acknowledgements We acknowledge the right of proprietors of trademarks mentioned in this book. AIXR is a registered trademark of International Business Machines Corporation, and is being used under licence. UNIX is a registered trademark in the United States of America and other countries licensed exclusively through the Open Group. Year 2000 The product documented in this manual is Year 2000 Ready. The information in this document is subject to change without notice. Groupe Bull will not be liable for errors contained herein, or for incidental or consequential damages in connection with the use of this material. About This Book: AIX 4.3 Quick Beginnings This book contains information for first–time users who have little or no experience with the AIX operating system.
    [Show full text]
  • CS 460 Operating Systems
    CS 460 Operating Systems Linux Boot Process Arch Linux CS460 02/03/20 Pacific University 1 Resources https://wiki.archlinux.org/index.php/Arch_boot_process https://doc.opensuse.org/documentation/leap/reference/html/ book.opensuse.reference/cha.boot.html https://doc.opensuse.org/documentation/leap/reference/html/ book.opensuse.reference/cha.systemd.html http://www.thegeekstuff.com/2011/02/linux-boot-process (a bit dated) https://www.freedesktop.org/wiki/Software/systemd/ https://wiki.archlinux.org/index.php/systemd https://opensource.com/article/18/1/analyzing-linux-boot-process https://0xax.gitbooks.io/linux-insides/content/ https://0xax.github.io CS460 02/03/20 Pacific University 2 Process - Linux ● POST ● BIOS/UEFI – disk partitions – file hierarchy standard ● Boot Loader ● Kernel ● initramfs ● init process / SystemD ● Display Manager / Getty CS460 02/03/20 Pacific University 3 POST ● Power On Self Test – firmware on motherboard does check of the hardware ● Common failures CS460 02/03/20 Pacific University 4 BIOS/UEFI ● Main job: launch the boot loader ● BIOS – basic input/output system ● UEFI – Unified Extensible Firmware Interface – can handle larger boot disks – 32bit or 64 bit mode (larger address space) – Secure boot – can have network capabilities – shell CS460 02/03/20 Pacific University 5 Devices Physical device vs partition vs file system Same information can be obtained with: df -h CS460 02/03/20 Pacific University 8 Boot loader ● Load the OS Kernel into memory and go – provide parameters to the kernel – initial RAM disk:
    [Show full text]
  • Using SAS® on Unix with Multiple Active Directories As Authentication Providers Jan Bigalke, Allianz Managed Operations & Services SE, Business Unit ASIC
    SAS Global Forum 2011 Systems Architecture and Administration Paper 369-2011 Using SAS® on Unix with multiple active directories as authentication providers Jan Bigalke, Allianz Managed Operations & Services SE, Business Unit ASIC ABSTRACT Using SAS on Unix / Linux servers with active directories as authentication providers is now a common approach. This paper explains the basics of Unix authentication against active directories. Limitations of using standard PAM modules for authenticating users stored in multiple domains are explained. Various solutions are required to address challenges for the different access methods used by clients to connect to SAS, e.g. web access and client applications like Enterprise Guide®. INTRODUCTION More and more the Microsoft active directory is becoming a common solution as authentication system for UNIX and Linux based systems. Active Directory is used to simplify the authentication process for business users reducing the number of authentication systems required. Since the distribution of Windows Server 2003 R2 Microsoft ships schema additions to the active directory for UNIX authentication. These schema enhancements provide attributes that map closely enough to RFC 23071 to be generally usable for UNIX authentication. The standard implementations to connect UNIX systems to the active directory are nss_ldap and pam_ldap. This paper discusses a scenario using SAS on a UNIX system with an active directory as authentication provider. The SAS users in the discussed enterprise organization are based in different active directories. The requirement for the discussed solution is that a user only has a single identity. Workarounds to solve this task are not discussed. Some of these could be additional accounts for users in a central domain, local user accounts in SAS (@saspw), etc.
    [Show full text]
  • Desktop Migration and Administration Guide
    Red Hat Enterprise Linux 7 Desktop Migration and Administration Guide A guide to the GNOME 3 Desktop migration planning and administration on Red Hat Enterprise Linux 7. Petr Kovář Jana Heves Red Hat Enterprise Linux 7 Desktop Migration and Administration Guide A guide to the GNOME 3 Desktop migration planning and administration on Red Hat Enterprise Linux 7. Petr Kovář Red Hat Customer Content Services [email protected] Jana Heves Red Hat Customer Content Services [email protected] Legal Notice Copyright © 2015 Red Hat, Inc. This document is licensed by Red Hat under the Creative Commons Attribution-ShareAlike 3.0 Unported License. If you distribute this document, or a modified version of it, you must provide attribution to Red Hat, Inc. and provide a link to the original. If the document is modified, all Red Hat trademarks must be removed. Red Hat, as the licensor of this document, waives the right to enforce, and agrees not to assert, Section 4d of CC-BY-SA to the fullest extent permitted by applicable law. Red Hat, Red Hat Enterprise Linux, the Shadowman logo, JBoss, MetaMatrix, Fedora, the Infinity Logo, and RHCE are trademarks of Red Hat, Inc., registered in the United States and other countries. Linux ® is the registered trademark of Linus Torvalds in the United States and other countries. Java ® is a registered trademark of Oracle and/or its affiliates. XFS ® is a trademark of Silicon Graphics International Corp. or its subsidiaries in the United States and/or other countries. MySQL ® is a registered trademark of MySQL AB in the United States, the European Union and other countries.
    [Show full text]
  • User Guide for Resource Manager Essentials Software Release 3.4 Ciscoworks2000
    User Guide for Resource Manager Essentials Software Release 3.4 CiscoWorks2000 Corporate Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 USA http://www.cisco.com Tel: 408 526-4000 800 553-NETS (6387) Fax: 408 526-4100 Customer Order Number: DOC-7813951= Text Part Number: 78-13951-01 THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS. THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY. The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s public domain version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California. NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE. IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
    [Show full text]
  • Univention Corporate Server
    Univention Corporate Server Extended domain services documentation 2 Table of Contents 1. Integration of Ubuntu clients into a UCS domain ...................................................................... 4 1.1. Integration into the LDAP directory and the SSL certificate authority .................................. 4 1.2. Configuration of the System Security Services Daemon (SSSD) ......................................... 5 1.3. Configuring user logins .............................................................................................. 7 1.4. Kerberos integration .................................................................................................. 8 1.5. Limitations of the Ubuntu domain integration ................................................................ 9 1.6. Additional references ................................................................................................. 9 2. Integration of Linux/Unix systems into a UCS domain ............................................................. 10 2.1. Managing the systems in the Univention Management Console ........................................ 10 2.2. Configuration of the name resolution .......................................................................... 10 2.3. Configuration of the time server ................................................................................. 10 2.4. Access to user and group information of the UCS domain ............................................... 10 2.5. Integrating into Kerberos .........................................................................................
    [Show full text]
  • Hosting BSD L Cloud Computing L Open BSD, Netbsd and Freebsd As File Sharing Servers - Part2
    Editor in Chief: Olga Kartseva Dear Readers! [email protected] Contributing: BSD is already becoming international magazine. People Jan Stedehouder, Rob Somerville, Marko Milenovic, Petr all over the world have an access to our magazine and Topiarz, Paul McMath, Eric Vintimilla, Matthias Pfeifer, Theodore Tereshchenko, Mikel King, Machtelt Garrels, Jesse Smith download it. We are happy that our work is so appreciated and BSD magazine popularity is growing!. Special thanks to: Marko Milenovic, Worth Bishop and Mike Bybee Art Director: First of all I wanted to thank you for you letters of Agnieszka Marchocka support, they mean really a lot to us and help constantly DTP: to improve! All our authors worked hard to make their Ireneusz Pogroszewski articles interesting and useful. I really hope you will like this issue as much as the previous. Senior Consultant/Publisher: Paweł Marciniak [email protected] This month topic is “BSD as a desktop”. Why this National Sales Manager: Ewa Łozowicka topic? [email protected] We thought that some of you still might have doubts Marketing Director: Ewa Łozowicka on choosing OS, so this issue surely will help you to [email protected] learn more about BSD as a desktop and help to make a decision. Executive Ad Consultant: Karolina Lesińska [email protected] But those of you who already use BSD should not Advertising Sales: close the magazine after reading my previous statement, Olga Kartseva because you could loose a lot. =) [email protected] Publisher : Software Press Sp. z o.o. SK Please feel free to contact us, we are open to critics, ul.
    [Show full text]
  • AIX Version 4 Desktop Handbook
    AIX Version 4 Desktop Handbook Document Number GG24-4451-00 December 1994 International Technical Support Organization Austin Center Take Note! Before using this information and the product it supports, be sure to read the general information under “Special Notices” on page xv. First Edition (December 1994) This edition applies to the AIXwindows Desktop which is part of AIX Version 4.1.1. Order publications through your IBM representative or the IBM branch office serving your locality. Publications are not stocked at the address given below. An ITSO Technical Bulletin Evaluation Form for reader′s feedback appears facing Chapter 1. If the form has been removed, comments may be addressed to: IBM Corporation, International Technical Support Organization Dept. 632B Building 821 Internal Zip 2834 11400 Burnet Road Austin, Texas 78758-3493 When you send information to IBM, you grant IBM a non-exclusive right to use or distribute the information in any way it believes appropriate without incurring any obligation to you. Copyright International Business Machines Corporation 1994. All rights reserved. Note to U.S. Government Users — Documentation related to restricted rights — Use, duplication or disclosure is subject to restrictions set forth in GSA ADP Schedule Contract with IBM Corp. Abstract This document provides an overview for using and customizing the AIXwindows Desktop delivered with AIX Version 4.1.1. The information provided is intended to help desktop users and system administrators better understand how-to-use and customize the AIXwindows Desktop and its facilities. Each of the major components of the desktop are covered with an overview and detailed how to use information.
    [Show full text]