C. Use Case: Installing and Configuring

Use Case: Installing and Configuring rsUserAuth on IGEL Thin Clients

Subject

This section explains how to configure the One Identity authentication module rsUserAuth on IGEL thin clients.

Description

The One Identity Authentication Manager session can be configured with available parameters and specific register keys, the configuration file is not mandatory.

As CardOS libraries are not integrated in IGEL, a custom partition must be used. This partition is built from an FTP server. Two files must be uploaded to this server: rsUserAuth.inf and rsUserAuth.tar.bz2.

Delivery and Customization

Delivery and Customization

The rsUserAuth.tar.bz2 file

Content

Content

The following elements are delivered:

• CardOS_API_Version_Number_x86_Linux.tar.gz: CardOS libraries.
• IGELProvisionningScript.sh: script to be executed at installation.
• start.bash: example of script to execute when the smart card is inserted (not used in case of Citrix session).
• stop.bash: example of script to execute when the smart card is removed (not used in case of Citrix session).
• ca.cert: certificate for the secured connection (must be replaced with the customer's certificate).
• authConf.txt: smart card settings (PKCS library path).

Customization

Customization

You must unzip the rsUserAuth.tar.bz2 file to include the correct certificate file with the following command line: tar -xvjf rsUserAuth.tar.bz2

The ca.cert file must be replaced with a customer certificate. A sample certificate can be generated from the EAM controller: in the Administration Tools window > Controller configuration, click Configure Directory and Audit login/password, then Select the Web Service Security tab in the Controller Configuration window.

You must rebuild the compressed file with the following command line:
tar -jcvf rsUserAuth.tar.bz2.