Skip to Content
Information
Unsupported content This version of the documentation is no longer supported. However, the documentation is available for your convenience.You will not be able to leave comments.

Configuring the Authentication Service for domain authentication

Use the Application Server Administration console (blasadmin utility) to configure the BMC Server Automation Authentication Service so that the service can use the Kerberos configurations that you set up in previous procedures.

To configure the Authentication Service

  1. On the reports server, start the Application Server Administration console (the blasadmin  utility) as follows.
    • (Windows) Navigate to the BDSSAInstallationDirectoty\bin directory and enter the following command: blasadmin.
    • (UNIX) Navigate to the BDSSAInstallationDirectoty/br directory and enter the following command: blasadmin.

  2. To allow users to log on by using domain authentication, enter the following command:

    set AuthServer isDomainAuthEnabled true

    By default, this value is set to false.

  3. If you are not using the default file name of blappserv_krb5.conf, enter the following command to enable the Authentication Server to locate the file. Otherwise, you can skip this step.

    set AuthServer AuthSvcKrb5Config <fileName>

    <fileName> is the name of the blappserv_krb5.conf file. This file is essential for supporting Kerberos. By default, AuthSvcKrb5Config is set to a value of blappserv_krb5.conf.

  4. If you are not using the default file name of blappserv_login.conf, enter the following command to enable the Authentication Server to locate the file. Otherwise, you can skip this step.

    set AuthServer AuthSvcKrb5LoginConfig <fileName>

    <fileName> is the name of the blappserv_login.conf file. This file is essential for supporting Kerberos. By default AuthSvcKrb5LoginConfig is set to a value of blappserv_login.conf.

  5. Restart the Authentication Service.

    Warning

    Note

    (Applies to only version 8.5.00)

    On UNIX, if umask is not set to 022, the Authentication Service will not start. Run the following commands from BDSSAInstallationDirectory and start the authentication service:

    #chmod –R 775 br/
    #umask 022
    #cd br
    #./blauthservice start

Related topic

Configuring-the-Authentication-Server-to-refresh-domain-session-credentials

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*

BMC Decision Support for Server Automation 8.5