activcard系統(tǒng)實(shí)施方案和產(chǎn)品簡(jiǎn)介2-展示頁
2025-05-12 01:40本頁面
【正文】 記錄。 系統(tǒng)實(shí)施根據(jù)ActivCard動(dòng)態(tài)口令身份驗(yàn)證系統(tǒng)的特點(diǎn)，整個(gè)系統(tǒng)實(shí)施工作可以分為如下幾個(gè)部分，本系統(tǒng)運(yùn)行在在SUN Solaris平臺(tái)下，數(shù)據(jù)庫基于Oracle9i。安裝ActivCard AAA Server在這臺(tái)機(jī)器上：? Install ActivPack for Solaris? Launch the Configurator (configures server access and parameters)? Launch the ActivPack AAA Server安裝步驟：1. Login as root, and at the prompt type:/usr/sbin/pkgadd d ./2. Press “Enter” to continue The distribution displays the following information:The following packages are available:1 ActivPack (ActivPack Server for Solaris)(SolarisforSPARC) Select package(s) you wish to process (or 39。 to process allpackages) (default:all) [?,??,q]:3. At the prompt, type all and press “Enter” to continue. The following lines display.Processing package instance ActivPack from /xxx/xxx/xxx/ActivThe distribution displays version and copyright information and the following prompt:Enter the installation path [ActivCard/ActivPack] [?,q]. By default, the distribution installs the ActivCard AAA Server in the ActivCard/ActivPack directory.Take the appropriate action.? Press “Enter” to leave the default path set to ActivCard/ActivPack.? Type an alternate path, and press “Enter” to continue.The distribution processes the package information, verifies disk space requirements, checks forconflicts with previously installed ActivCard AAA Server packages, and checks for setuid/setidprograms. It then warns you that the package contains scripts which will be executed with superuserpermissions during the installation, and then it displays the following prompt:Do you want to continue with the installation of ActivPack[y,n,?]? Press “N” and “Enter” to abort the installation.? Press “Y” and “Enter” to continue.The ActivCard AAA Server confirms a successful installation and reminds you that you must now“create the database” (create tables) using SQL scripts before you configure the server.5. To create database tables, at the prompt, type:cd /opt/ActivCard/ActivPack6. Press “Enter” to continue. At the prompt, type the following:$ORACLE_HOME/bin/sqlplus UserName/Passworddatabasename7. The SQL*Plus utility starts. At the prompt, type the following:’/opt/ActivCard/ActivPack/Sql/’8. Press Enter to continue. The ActivCard AAA Server tells you when the table space has been successfullycreated and displays the SQL prompt. At the prompt, type quit to exit the SQL*Plus utility.配置服務(wù)器：在安裝完成后，需要對(duì)整個(gè)系統(tǒng)進(jìn)行詳細(xì)的配置，根據(jù)功能要求，選擇適合自己的ActivPack AAA Server服務(wù)器配置。首先我們要確定ActivPack AAA Server系統(tǒng)服務(wù)已經(jīng)啟動(dòng)，設(shè)定好管理員用戶名和密碼后（需要管理員自己設(shè)定用戶名和密碼，為了保障系統(tǒng)的安全性，建議管理員密碼不要太簡(jiǎn)單；并且每次登錄進(jìn)來的時(shí)候，系統(tǒng)并不會(huì)顯示上一次登錄所使用的用戶名和密碼），就可以進(jìn)入系統(tǒng)管理界面，如下圖所示。4，配置以下的選項(xiàng)：? ActivPack database access: change the login ID and password for the configuration program.? Oracle database access: change the login ID and password for the ActivCard AAA Server database access.? Log and trace files configuration: configure the settings for active or inactive trace, and specify the log size and path.* ErrLog is located (by default) in /var/log/ActicPack/.* Trace is located (by default) in /var/log/ActicPack/? RADIUS and TACACS dictionaries path: set the paths for your dictionaries. The default isset to /opt/ActivCard/ActivPack/Dico.? Decipher database: toggles on/off the cipher/decipher database function. Every critical database field is Triple DES encrypted. This option permits you to decipher (or recipher) the database. We remend you maintain the database in cipher mode (toggle on).5，保存你的配置文件：press “0” to Quit and answer Yes to confirm that you want tosave your settings and exit the Solaris settings menu.6，配置程序會(huì)提示你重新啟動(dòng)AAA server。并且這個(gè)端口也是可變的，為了控制安全性，我們可以更改該控制端口，并且在防火墻上作相應(yīng)的設(shè)置來屏蔽該端口，從而避免外部針對(duì)該端口的非法訪問。首先我們要設(shè)定系統(tǒng)需要連接的LDAP服務(wù)器。在每一部分設(shè)定好之后，可以立刻進(jìn)行測(cè)試以認(rèn)證設(shè)定的正確性和有效性，只需要單擊右邊的Test按鈕即可。我們?cè)谀夸浿胁榈搅诵畔ⅲ@就表明，我們的LDAP服務(wù)器連接設(shè)置正確，系統(tǒng)可以在LDAP內(nèi)通過指定條件查詢用戶信息了。首先要做的是我們先要建立一個(gè)Servers，然后依次建立Gate、LDAP Server、Profiles、Group，定義每一項(xiàng)具體的設(shè)置，在設(shè)置完成后我們就應(yīng)該在Group的查詢里查找到LDAP內(nèi)的每一個(gè)用戶信息。每一個(gè)Gate使用不同的配置文件Profiles，來滿足不同的身份認(rèn)證的要求。另外我們還可以建立基于IIS的應(yīng)用，只需要簡(jiǎn)單的設(shè)定一個(gè)配置文件，利用這個(gè)配置文件創(chuàng)建一個(gè)新的Gate就可以了。這
公司管理相關(guān)推薦
鄂ICP備17016276號(hào)-1