Establishing Single Sign-On

Single sign-on is the ability to create DSMIT credentials automatically whenever a valid DSMIT administrator logs onto a valid DSMIT managing machine.

To perform this task:

1. Follow the steps in "Security Configuration for DSMIT" to create a valid administrator and managing machine.
2. On each managing machine:
   1. become root
   2. edit the /etc/security/login.cfg file and add the following lines:

      dsmitlogin: 
         program = /usr/dsmit/bin/dsmit-41log

   3. edit the /etc/security/user file for each DSMIT administrator (this assumes the user already exists). Add the following lines:

         SYSTEM = "compat AND dsmitlogin"

      For example, if bob is the DSMIT administrator on the managing machine M1, then on M1 the entry in /etc/security/user should look like the following:

      bob:
      SYSTEM = "compat AND dsmitlogin"

      If a SYSTEM line for bob already exists, modify it and add dsmitlogin. There may be additional lines associated with bob that do not pertain to DSMIT.

Related Information

Distributed System Management Interface Tool (DSMIT) Overview.