Basic Security Setup

[Greg Tataryn]

We are looking at trying to make our Cloverleaf servers a bit more secure by using at least basic security until we are able to move to Advanced Security Server.

I have not worked with the basic security setup in the past and was hoping someone might have some information on how to configure it. Can it tap into LDAP to use our network/AD authentication? How do we set up users?

Topic

[aaron kaufman-moore]

Unless something has changed, the certificate creation process for moving to basic security requires you creating certificate request and Infor generating certificate files to place on your system.  I’d recommend starting by opening a ticket on InforXtreme, since they would have the latest documentation for that process.

We do attach our system that utilizes basic security to the enterprise microsoft active directory  (I believe that feature first came with 6.0, but we are on 6.1.2).  The users are setup as part of the normal creation process by whoever manages your domain.  We had an AD group created which all people who need to access Cloverleaf were placed into.  Within the LDAP configuration in Cloverleaf, you choose which AD group(s) are allowed access to cloverleaf.

[Max Drown (Infor)]

Basic Security does tap into LDAP. It’s very easy to setup and use.

-- Max Drown (Infor)

[Greg Tataryn]

The built in documentation seems rather sparse on the LDAP configuration. If anyone has any additional documentation on how to set up LDAP and tie it to basic security it would be appreciated.

We of course don’t want the whole organization to have access but if we can tied it to the few user who need access it should simplify things.

[Max Drown (Infor)]

Most of the time you just need to plug in the AD hostname(s) and the AD group containing the users that have access to the IDE. You get this information from your AD admin. The AD setup is done using the Cloverleaf Server Administration tool (found in the start menu or the $HCIROOT/bin directory. Pull up the tool and you can see what fields are available.

-- Max Drown (Infor)

[Shane Lavallie]

Does the Basic Security Setup change if we are on Linux?  We have worked with Infor, recv’d the certs, uploaded to server and upgraded from No Security to Basic Security… in our TEST environment.  How do we add users and manage the security system, e.g. add users, manage LDAP, etc.?

[Author]

Replies