Configuring Active Directory

Configure Active Directory for the ztC Edge system to authorize existing users or groups from an Active Directory domain to log on to the ztC Edge Console with their Active Directory credentials.

After you add the ztC Edge system to an Active Directory domain, you can assign administrative privileges to domain users using the Grant Access wizard, which you start from the Users & Groups page (see Configuring Users and Groups).

Prerequisite: If you are configuring Active Directory for the first time on Stratus Redundant Linux Release 3.x or higher, or upgrading from Release 2.x to 3.x or higher, you need to create a new rootCA SSL certificate and install it into the Java keystore of the ztC Edge system to enable the more secure Active Directory/LDAP over SSL support in Release 3.x or higher.

For detailed information about creating and installing a custom certificate for Active Directory, access the Knowledge Base (see Accessing Knowledge Base Articles) to search for the article How to re-enable connection to Active Directory Server after migrating from ztC SRL v2.x to v3.x (KB0015909). For information about the certificate_installer script, see To install a custom certificate into the Java keystore.

To add the ztC Edge system to an Active Directory domain

  1. Click Preferences in the left-hand navigation panel, to open the Preferences page.
  2. Click Users & Groups.
  3. Click the Enable Active Directory button in the lower pane.
  4. Next to Active Directory Domain, type the name of the domain to use.

  5. Click one of the following to prevent or allow automatic assignment of the "Everyone" role:

    • Prevent all AD users from being automatically assigned the "Everyone" role (the default).

    • Allow all AD users to authenticate and be authorized for "Everyone" role access.

  6. Click Add System to Active Directory.
  7. Type the Username and Password of an Active Directory Administrator in order to add this ztC Edge system to the domain. When entering the username, enter only the username without specifying the domain. The system automatically appends the domain that you entered in step 4.
  8. Click Add.
  9. Assign administrative privileges to domain users on the Users & Groups page, as described in Managing Domain User Accounts.
  1. In the ztC Edge Console, click Preferences in the left panel, to open the Preferences page.
  2. Click Users & Groups.
  3. Click Remove System from Active Directory in the lower pane.
  4. Type a Username and Password that provides you with administrative privileges within the domain. When entering the username, enter only the username without specifying the domain. The system automatically appends the domain.
  5. Click Remove.
  1. In the ztC Edge Console, click Preferences in the left panel, to open the Preferences page.
  2. Click Users & Groups.
  3. Click Disable Active Directory in the lower pane.
Note: Disabling Active Directory prevents the use of domain authentication for authorizing administrators of the ztC Edge system; however, it does not remove the system from the domain. To restore the use of domain authentication, click Enable Active Directory. You do not need to retype the name of the controller or restore domain users on the Users & Groups page.

Related Topics

Configuring Users and Groups

Managing Domain User Accounts

Managing Local User Accounts

Preferences Page

ztC Edge Console

Security Hardening