Versions Compared

Old Version 3

changes.mady.by.user Maksim Kuzmov

Saved on

compared with

New Version Current

changes.mady.by.user Pavel Golubnichiy

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.


Warning
iconfalse

All URLs are specified in lowercase.

Перейдите в каталог Switch to C:\inetpub\wwwroot\Indeed.Idp и откройте для редактирования файл idp folder and edit appsettings.json.Заполните секции file:

ConnectionStrings:

  • Data Source -
 имя SQL-сервера.
  •  is the name of Microsoft SQL Server or its named instance
  • Initial Catalog -
имя базы данных IDP.
  • Integrated Security - тип проверка подлинности.
  • User ID - имя для входа сервисной учётной записи для работы с базами данных Indeed PAM.
    • Password - пароль сервисной учётной записи.
    • is the name of database (IPAMIdP)
    • User ID - is the service account to use with Indeed PAM databases

    • Password - is the password for that service account


    Code Block
    languagexml
    themeConfluence
    "ConnectionStrings": {
	"DefaultConnection": "Data Source=MSSQLServer;Initial Catalog=IPAMIdP;Integrated
    Пример: "ConnectionStrings": {"DefaultConnection": "Data Source=sqlserver;Initial Catalog=idppam;Integrated 
    Security=False;User ID=
    SQLservicePAM
    IPAMSQLService;Password=
    123456
    password"
    }Примечание: В случае использования SQL Express параметр подключения к серверу необходимо задавать в формате <имя сервера SQL >\<имя инстанса SQL>. Пример: {
    
}


    Warning
    iconfalse

    If you are using a named instance of Microsoft SQL Server, the value of the Data Source parameter must be set in the format
    <server name>\\<instance name>.

    Code Block
    "ConnectionStrings": {
	"DefaultConnection": "Data Source=
    sqlserver\SQLEXPRESS; … } IdentitySettings: AdminSids - SID пользователя, который имеет права на работу с консолью администратора, если пользователей консоли несколько, то их SID указывается через запятую.
    MSSQLServer\\Named instance; ..."
}


    Database:

    In the Provider section, select the DBMS connection provider:

    • mssql - is for the MS SQL Server
    • pgsql - is for the PostgreSQL Pro

    Example for the PostgreSQL Pro:

    Code Block
    languagejs
    "Database":{
   "Provider": "pgsql"
},

    IdentitySettings:

    • AdminSids -
     SID пользователя, который получит доступ к консоли администратора (можно указать более одного через запятую)
    • is SID of the user to get access to administrator console. If there are several of them, then the SIDs must be divided by comma

    • GatewaySecret - Hash for client keys for additional authentication of Indeed PAM Gateway

      Note
      iconfalse

      The secret and its hash are generated by the console utility Pam.ConsoleApp.exe (located in \Misc\ConsoleApp folder) when configuring Indeed PAM Gateway.


    • IdpUrl -
    URL адрес IDP.
    • is URL Indeed PAM IdP
    • Lang - is the user interface language of the component, set it to "en" value.
    • SshProxyClientSecret - Hash for client keys for additional authentication of Indeed PAM SSH Proxy, generated when setting up Indeed PAM SSH Proxy in the same way as GatewaySecret
    • Enable2FaCacheForClients - List of client IDs for which the 2nd factor caching will work
    • SecondFaCacheLifetimeSeconds - 2nd factor caching time in seconds
      List of available client IDs:
      • "console-app"
      • "ssh-proxy-app"
      • "pam-management-console"
      • "pam-user-console"
      • "pam-gateway"
    Пример:
    Code Block
    languagejs
    firstline5
    "IdentitySettings":{
	"AdminSids": [ "S-1-5-21-1487179672-2651565253-5257550508-0000", "S-1-5-21-1487179672-2651565253-5257550508-0001" ],
	"GatewaySecret": "bQAl17Y58+Htv982eadHmFaDguAPNrjd+Bl9vN0Uw5c=", 
	"IdpUrl": "https://pam.
    domain.demo:4003"}
    indeed-id.local/idp",
	"Lang": "en",
    "SigningCertificate": "",
	"ConsoleAppClientSecret": ""
    "SshProxyClientSecret": "+Q/anzbwy6ikV7LS3LvUsCpThBGzUOWWo76Idcy8c1E=",
    "Enable2FaCacheForClients": ["pam-management-console"],
    "SecondFaCacheLifetimeSeconds": 60
},


    PamSettings:

    AdminConsoleUrl - URL адрес консоли администратора.
    • ManagementConsoleUrl - URL of Indeed PAM Management Console
    • UserConsoleUrl - URL
    адрес консоли пользователя.ProxySessionLifeTime - максимальное время жизни сессии, значение указывается в секундах (не менять).
    • of Indeed PAM User Console
    Пример:
    Code Block
    languagexml
    themeConfluence
    "PamSettings": {
	"
    AdminConsoleUrl
    ManagementConsoleUrl": "https://pam.indeed
    .demo:4001
    -id.local/mc",
	"UserConsoleUrl": "https://pam.indeed
    .demo:4002
    -id.local/uc",
	"
    ProxySessionLifetime
    SessionLifetime": 43200
},

    EventsSettings:

    • EventCacheDirectory - a temporary folder for event writing
    {{"PamSettings":}}
    • Url - URL API for the uniform event log
    Code Block
    languagexml
    themeConfluence
    "EventsSettings": {
	"AppId": "pam",
    "Component": "idp",
    "EventCacheDirectory": "C:\\Temp\\ILS\\IdP\\EventCacheDirectory",
    "EventCacheSendingIntervalSec": "10",
    "Url": "https://pam.indeed-id.local/ils/api",
    "CertificateThumbprint": "",
    "CertificateFilePath": "",
    "CertificateFilePassword": ""
},

    Backtotop
    Delay0
    Distance250