System Config Manager Parameters for Multitenancy

This parameter is used to define the device group properties.

Default value is null.

Example values:

tag.Name,tag.Region,addDeviceSshKeyToUserSelection

NO

Set this parameter with the related email domains. (More than one domain can be added with a comma (“,”). Ex: singleconnect.com, gmail.com)

gmail.com, singleconnect.com

NO

This parameter sets the preferred languages as an option in GUI. More than one language preference can be added with a comma (“,”) separator.

en_US, ru_RU, ko_KR

NO

The body of the expire message to be sent to the approver after a command approval workflow step expires.

Text

NO

The body of the expire message to be sent to the approver after a connection approval workflow step expires.

Text

NO

The body of the expire message to be sent to the request owner after a command approval workflow step expires.

Text

NO

The body of the expire message to be sent to the request owner after a connection approval workflow step expires.

Text

NO

The title of the expire message to be sent to the approver after a command approval workflow step expires.

Text

NO

The title of the expire message to be sent to the approver after a connection approval workflow step expires.

Text

NO

The title of the expire message to be sent to the request owner after a command approval workflow step expires.

Text

NO

The title of the expire message to be sent to the request owner after a connection approval workflow step expires.

Text

NO

This parameter defines the user group properties.

allowSftpInSshDevices

YES

The delimiter for the HTTP Approval SMS



NO

The HTTP Encoding method for the Approval SMS



NO

The HTTP Headers for the Approval SMS.



NO

The HTTP method for the Approval SMS.



NO

The HTTP URL for the Approval SMS.



NO

The body text for the Command Request Expired message to be sent to approver (HTTP)

Text

NO

The body text for the Command Request Expired message to be sent to request owner (HTTP)

Text

NO

The body text for the Command Request Expired message to be sent to approver (SMPP)

Text

NO

The body text for the Command Request Expired message to be sent to request owner (SMPP)

Text

NO

The body text for the Connection Request Expired message to be sent to approver (HTTP)

Text

NO

The body text for the Connection Request Expired message to be sent to request owner (HTTP)

Text

NO

The body text for the Connection Request Expired message to be sent to approver (SMPP)

Text

NO

The body text for the Connection Request Expired message to be sent to request owner (SMPP)

Text

NO

This parameter defines the default mail template directory. Kron PAM sends emails to group admins to notify them of new user requests, password manager actions, command authorization requests etc. Kron PAM also sends password reset emails, and MFA activation token emails. In order to complete these actions, mail settings have to be configured on Kron PAM from the Mail Config screen in the System Config Manager menu

${netright.home}/templates/mail

YES

This parameter enables or disables LDAP/AD authentication.

false

YES

This parameter defines the Base DN of LDAP. Base DN is the section of the directory where the application will commence searching for Users and Groups.

DC=example,DC=com

NO

Security principal of context set from the expression defined as uid.

uid=?,DC=example,DC=com

NO

This parameter determines the Active Directory/LDAP hostname/ip address, port number, and LDAP/LDAPS protocol. If more than one URL is used, parameters should be separated by “,”. (e.g. ldap://10.10.10.10:389, ldaps://10.10.10.20:636)

ldap://1.1.1.1:389

NO

This parameter defines the SAPM Account password reservation times. When a user makes a password reservation for a SAPM account, these time options are presented for the reservation time.

5m,30m,2h,24h

NO

This parameter defines the sender email address for MFA.

change_it@change_it.com

YES

These parameters are used to adjust MFA Offline/Online Settings.



YES

NO

NO

YES

NO

Kron PAM can send logs to SIEM systems. This parameter is used to set the SIEM Host IP address.

YES

This parameter is used to set the SIEM host port. The default value is "514".

514

YES

RFC_5424 and RFC_3164 formats are supported in the SIEM configuration. This parameter determines the RFC format and must be set as one of these values.

RFC_5424,RFC_3164

YES

This parameter is used to determine content format.

KEY_VALUE, CEF

YES

This parameter is used to determine the protocol used to send messages. Possible values are UDP or TCP.

UDP

YES

This parameter is used to define the Connector site name for sending logs to SIEM systems.

E.g: Istanbul

YES

These parameters are used to define an interface name for devices that have the same IP address, so they can be properly identified during a connection.

E.g: interface_1, interface_2