|
I've got a multi
platform environment and was wondering if it's possible to have a single login
to Tivoli or do I need to setup separate accounts for each user account on each
platform?
Contributed
By:
Cliff Hobbs [MVP SMS]
You can use the widmap command to
achieve this single signon as follows:
- First you need to create an ID map using the
"
widmap
add_map <map_name>"
command. The map can be called anything you want, but it's probably best to
call it something along the lines of the user you're setting up access for.
So, if for example I was setting up access for the user "cliff",
I'd use the following command:
widmap add_map cliff
Next you need to add in entries for each of the operating system platforms the
user is going to need access to and the accounts to be used on those platforms
using the "widmap
add_entry <map_name> <platform> <account_name>"
command. So if a user has an account called "cliffs"
on the Solaris platform you'd use the following command:
"widmap
add_entry cliff solaris2 cliffs"
Let's also say that the user has an account called "cliffNT"
on the Windows platform that you also want them to be able to use by logging
into Tivoli as "cliff",
then you'd use the following command:
"widmap
add_entry cliff w32-ix86 cliffNT"
To check that you've successfully added the
entries to the
"cliff"
map you'd use the
"widmap
list_entries <map_name>"
command, which in this case would be
"widmap
add_map
cliff".
The next step is to configure the Tivoli
account. Load the Tivoli Desktop and from Administrators collection
either create a new user or edit the user if they've already been setup.
In the "User Login
Name:" box enter "$<map_name>" (which
would be "$cliff" in this example). The
"$" is vital as it tells Tivoli that this is a
login map and not a 'normal' Tivoli account.
Dismiss the message about the fact that if
the user currently has a copy of the Desktop loaded they'll need to logout/in
in order to pickup the changes.
When the user loads the Tivoli Desktop, in
the "Log In As:" box, the user still needs to
login to Tivoli using a valid account on the operating system on which Tivoli
is validating them, NOT the map name.
|