User Interface
R&S
®
GP-E/GP-S
48User Manual v16.2.1 ─ 01
The "Single Sign-On" settings allow you to configure the following elements:
Field Description
"Keytab File" By clicking "Select File" , you can import the keytab file generated on the
domain controller.
Note: The dialog changes as soon as the keytab file has been imported suc-
cessfully.
"Zones" From the drop-down list, select the zones where you want to use SSO (the
zone of the domain controller is not needed). To remove a zone from the list,
click on the left side of the name of the zone.
To disable SSO, click the "Delete" button to remove the keytab file.
The buttons at the bottom right of the editor panel allow you to shut ( "Close" ) the edi-
tor panel as long as no changes have been made and to store ( "Save" ) or to discard
( "Reset" ) your changes.
Under "LAN > Ethernet Zones" , you need to set the IP address of the domain control-
ler as the primary DNS server for every Ethernet zone that is supposed to provide Win-
dows clients with SSO capabilities.
Under "Nodes > Custom Hosts" , you can create a custom host node for the domain
controller on the desktop. The node is connected to the zone of the domain controller
and used to establish a connection between the zones that Windows clients are con-
nected to and the domain controller.
During the connection process, the Windows clients need to receive a ticket from the
domain controller. Therefore, you need to:
●
establish connections between the zones that the Windows clients are connected
to and the domain controller and
●
to set up a minimum of five firewall rules to allow traffic to pass between the Win-
dows clients and the domain controller.
Under "Firewall > User Authentication > Directory Service" , you can connect the
domain controller to gateprotect Firewall to be able to configure user-specific firewall
rules.
Click "
Activate" in the toolbar at the top of the desktop to apply your configuration
changes.
> Configuring the Windows Client
The installation medium contains the UAClientSSO directory with three files:
●
the UAClientSSOSetup.exe file, the setup program,
●
the UAClientSSO.exe file and
●
the UAClientSSO.msi file, the installation routine as an MSI file.
The first two files are needed to configure the Windows clients themselves for SSO.
For detailed instructions on setting up SSO, see Chapter 4.2, "Setting Up Single Sign-
On", on page 137.
Menu Reference
To Next Page
Loading...