Security

Reply
MVP
Posts: 1,405
Registered: ‎11-30-2011

CPPM admin users local and from external source priority

when using admin users via the Administration > Users and Privileges > Admin Users section and from a changed service based on [Policy Manager Admin Network Login Service] where AD is a source does either of them have a priority. what if you have the same name in both sources?

Aruba
Posts: 1,536
Registered: ‎06-12-2012

Re: CPPM admin users local and from external source priority

It will search from the top down. So if the user is in both location it will use the auth from the first source. 

Thank You,
Troy

--Give Kudos: found something helpful, important, or cool? Click Kudos Star in a post.

--Problem Solved? Click "Accepted Solution" in a post.
MVP
Posts: 1,405
Registered: ‎11-30-2011

Re: CPPM admin users local and from external source priority

but the admin users, so i don't mean the local users, but specially the admin users isn't a source i use in any service.

MVP
Posts: 710
Registered: ‎03-25-2009

Re: CPPM admin users local and from external source priority

[ Edited ]

mm, it seems the admin user repository doesn't need to be included in any service but can be used nonetheless.

Perhaps this is a security measure to not lock oneselves out completely?

 

I've also noticed my successfull admin user repository logons do not get logged in the access tracker regardless of using the admin user rep in a service or not. Even if I use a service with both AD and admin user rep as sources failures against both only show the AD failure. 

 

Is this intended behaviour?

Koen (ACMX #351 | ACDX #547 | ACCP)

-- Found something helpful, important, or cool? Click the Kudos Star in a post.
-- Problem Solved? Click "Accept as Solution" in a post.
Guru Elite
Posts: 20,416
Registered: ‎03-29-2007

Re: CPPM admin users local and from external source priority

You would see that under monitoring> event viewer.



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

MVP
Posts: 1,405
Registered: ‎11-30-2011

Re: CPPM admin users local and from external source priority


koenv wrote:

mm, it seems the admin user repository doesn't need to be included in any service but can be used nonetheless.

Perhaps this is a security measure to not lock oneselves out completely?

 


I assume the same, would be nice if Aruba could confirm this.

Search Airheads
Showing results for 
Search instead for 
Did you mean: