How-To Guides
...
Authentication with Auth-Servi...
Proxy and GUI Authentication with Auth-Service
9 min
the initial kron pam installation includes the tacacs+ configuration if there is a need for ldap user authentication with the kron pam gui, ldap needs to be configured on the tacacs+ management page to use auth service instead, add ldap configurations on the ldap manager page, as described in docid\ hwqwibdznukefynjzlwis configuring netright tomcat for auth service for tomcat configuration open and edit the file /u01/netright tomcat/netright/netright properties change the line below and add a new property as follows netright auth tacacs=true change to netright auth tacacs=false add parameters netright auth auth service=true netright auth auth service base url=http //127 0 0 1 8087 restart the netright tomcat service with the following command systemctl restart netright tomcat if you receive the error authservice 109 error in the catalina log, it means that the auth service is not up and running error authservice 109 an exception occurred details i/o error on post request for "http //127 0 0 1 8087/authenticate/aioc" connect to 127 0 0 1 8087 \[/127 0 0 1] failed connection refused (connection refused); nested exception is org apache http conn httphostconnectexception connect to 127 0 0 1 8087 \[/127 0 0 1] failed connection refused (connection refused) configuring ssh proxy for auth service for ssh proxy configuration open and edit the file /u01/nssoapp/conf/nsso properties change the line below and add a new property as follows nsso auth type=tacacs change to nsso auth type=auth service add parameter nsso authservice server=http //127 0 0 1 8087 restart the ssh proxy service with the following command line systemctl restart nssoapp configuring sftp proxy for auth service for ssh proxy configuration open and edit the file, /u01/sftp proxy/conf/nsso properties change the line below and add a new property as follows nsso auth type=tacacs change to nsso auth type=auth service add parameter nsso authservice server=http //127 0 0 1 8087 restart the sftp proxy service with the following command line systemctl restart sftp prox configuring http proxy for auth service for http proxy configuration open and edit the file /u01/http proxy/conf/ http proxy properties change the line below and add a new property as follows http proxy auth type=tacacs change to http proxy auth type=auth service add parameter nsso authservice server=http //127 0 0 1 8087 restart the sftp proxy service systemctl restart http prox