ServerView Resource Orchestrator Virtual Edition V3.4.0 Design Guide

10.2.2 Single Sign-On When Using the ServerView Operations Manager Console

In the "Resource" tab of the ROR console, you can open the screen of ServerView Operations Manager using the function to open the server management screen. This section explains how to set up Single Sign-on. You can use it access the server management screen of ServerView Operations Manager without being prompted to log in.

Assign roles to users on ServerView Operations Manager.

Assign roles to users in the following procedure.

When Using Directory Services Provided with ServerView Operations Manager

• ServerView Operations Manager V5.5 or later

  1. Start the "User Management Wizard" of ServerView Operations Manager.

  2. Add the user who will coordinate Resource Orchestrator and Single Sign-On, and assign them a suitable role.

  3. Log in to the ROR console as a user with administrative privileges.

  4. Register the user registered in step 2 on the ROR console.

  For details on the "User Management Wizard", refer to the following manual.

  • "Configuring directory service access" and "ServerView user management with OpenDS" in "ServerView Suite User Management in ServerView"

• ServerView Operations Manager V5.5 of earlier

  1. Create an ldif file.

     An example of how to assign the Administrator role to the "roruser" user account is indicated below.

     dn: cn=roruser,ou=Users,dc=example,dc=local
     changetype: add
     objectclass: inetOrgPerson
     cn: roruser
     sn: roruser
     uid: roruser
     userPassword: mypassword
     
     dn: cn=Administrator,OU=AuthorizationRoles,OU=CMS,OU=Departments,OU=SVS,dc=fujitsu,dc=com
     changetype: modify
     add: member
     member: cn=roruser,ou=users,dc=fujitsu,dc=com
     
     dn: cn=Administrator,OU=AuthorizationRoles,OU=DEFAULT,OU=Departments,OU=SVS,dc=fujitsu,dc=com
     changetype: modify
     add: member
     member: cn=roruser,ou=users,dc=fujitsu,dc=com

  2. Specify the ldif file created in step 1 and execute the ldapmodify command of the directory service.

     Before executing the ldapmodify command of the directory service, set the installation directory of the Java Runtime Environment (JRE) for the environment variable JAVA_HOME. An execution example is shown below.

     [Windows]

     >"C:\Program Files (x86)\Fujitsu\ServerView Suite\Directory service\bat\ldapmodify.bat" -p 1473 -f user.ldif -D "cn=Directory Manager" -w admin -c <RETURN>

     [Linux]

     # /opt/fujitsu/ServerViewSuite/Directory service/bin/ldapmodify -p 1473 -f user.ldif -D "cn=Directory Manager" -w admin -c <RETURN>

     The meanings of the options of the ldapmodify command are as follow.

     -p: the port number when not using SSL communication for the directory service (the default value is 1473).
     -f: the ldif file
     -D: the directory service administrator DN("cn=Directory Manager")
     -w: the password of the directory service administrator DN.

  3. Log in to the ROR console as a user with administrative privileges.

  4. Register the user registered in step 2 on the ROR console.

When Using Active Directory

Refer to the following manual.

• "Integrating ServerView user management into Microsoft Active Directory" of the "ServerView Suite User Management in ServerView"