戻る
-
タイトル
If all TPAM Users are configured for external authentication (such as RSA), what are some possible workarounds to gain access to the appliance if there are issues with this external authentication method? -
説明
How would an administrator gain access to the appliance if all of the Users are authenticated with an external authentication such as RSA and there was an issue with that external authentication method? -
対策
In order to be able to access the appliance in the event that an external authentication method has failed (such as RSA), one solution would be to have some locally authenticated TPAM Admin and SysAdmin Users for troubleshooting an event of this nature. Access could be gained to the appliance with these locally authenticated Users to reconfigure existing Users.
Another option would be to have working and tested CLI Admin / SysAdmin Users that could be used to adjust the authentication methods for TPAM Users.
The CLI commands "UpdateUser" or "AddUser" could be utilized to modify the authentication types for an existing user create a new user. See these options for these commands from the 2.5.915 guide for flags that would be useful:--PrimaryAuthType Opt The type of the primary authentication system for this user. Currentvalues are Local, Certificate, LDAP, WinAD, Radius or Defender. WhenLocal is used the PrimaryAuthID, PrimaryAuthExtra andPrimaryAuthSystem values are ignored.--PrimaryAuthSystem Opt* Name of the defined system to use when the PrimaryAuthType is notlocal or certificate. Systems are defined by the appliance SystemAdministrator.--SecondaryAuth Opt Secondary authentication system used for user login. Valid values areNone (default), SecureID, Safeword, Radius, WinAD, Defender andLDAP.--SecondaryAuthSystem Opt Name of the secondary authentication system of the type indicated inExternalAuth. Values are defined by the appliance SysAdmin. -
追加情報
The full information regarding CLI usage can be found in the TPAM Administration Guide and TPAM System Administration Guide. TPAM Appliance Technical Documentation"