In order for remote browser clients to log onto the mangement console using SSO, Management Console for Unix requires that the web browser 'delegate' the user's credentials to the server. Therefore, you must enable the Management Console for Unix server for delegation.
To enable the Management Console for Unix server for delegation
Open Active Directory Users and Computers.
Navigate to the container in the domain on which the computer where Management Console for Unix is running resides.
For example, if the console is installed on a domain controller, navigate to <DomainName> | Domain controllers and find the computer object.
In the details pane, right-click the computer object and click Properties.
Open the Delegation tab, select Trust this computer for delegation to any service (Kerberos only) and click OK to save your selection and close the properties.
|
Note: In Active Directory, computer objects have a property that gets set when you select Trust this computer for delegation to any service (Kerberos only). SSO will not work if delegation is not enabled on the server. For the delegation changes to take effect in Active Directory, you may need to reboot the client. |
If you are experiencing performance degradation due to heavy demand from web service calls, simultaneous report generation, multiple browser connection querying, and so forth, One Identity recommends that you increase the JVM memory.
To tune JVM memory
Open the custom.cfg file for editing.
(See Setting Custom Configuration Settings for general information about customizing configuration settings for the mangement console.)
Set the initial or start memory size using the -Xms variable and the maximum memory size using the -Xmx variable. For example:
-Xms512m
-AND-
-Xmx512m
where "512m" specifies 512MB of memory or "1g" specifies 1GB of memory.
|
Note: 1024MB is the default memory requirement. One Identity recommendations:
These suggested specifications depend on your reporting demands. If you create more than two or three reports simultaneously, increase the memory specification. For further information on specific settings refer to <install_directory>/jvmargs.cfg |
These values are used for the JVM heap which reserves memory for the server and its database. Increasing the amount of memory available can improve performance, but increasing it too much can have a detrimental effect in the form of longer pauses for full garbage collection runs. Setting -Xms and -Xmx to the same value increases predictability by removing the most important sizing decision from the virtual machine. On the other hand, the virtual machine cannot compensate if you make a poor choice. Be sure to increase the memory as you increase the number of processors, since allocation can be parallelized. JVM heaps greater than 1.5 Gbytes require a 64-bit JVM. Anything more than that will cause the service to not start.
Numbers can include 'm' or 'M' for megabytes, 'k' or 'K' for kilobytes, and 'g' or 'G' for gigabytes. For example, 32k is the same as 32768. Unless you have problems with pauses, try granting as much memory as possible.
For further reading on garbage collection tuning refer to http://java.sun.com/docs/hotspot/gc5.0/gc_tuning_5.html and for additional VM options refer to http://java.sun.com/javase/technologies/hotspot/vmoptions.jsp
Save the custom.cfg file.
Restart the Management Console for Unix service.
(See Start/Stop/Restart Management Console for Unix Service for details about restarting the Management Console for Unix Service.)
Depending on the platform you are using, use the corresponding procedure to start, stop, or restart the Management Console for Unix service (mcu_service).
To stop, start, or restart the Management Console for Unix service (mcu_service) on a Linux/Solaris machine
To stop and restart the service automatically:
/etc/init.d/mcu_service restart
To stop the service and unload it:
/etc/init.d/mcu_service stop
To load the service and start it:
/etc/init.d/mcu_service start
© 2023 One Identity LLC. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy