Establishing Single Sign-On

Single sign-on is the ability to create DSMIT credentials automatically whenever a valid DSMIT administrator logs onto a valid DSMIT managing machine.

To perform this task:

1. Follow the steps in "Security Configuration for DSMIT" to create a valid administrator and managing machine.
2. On each managing machine:
   1. become root
   2. edit the /etc/security/login.cfg file and add the following lines:

      dsmitlogin: 
         program = /usr/dsmit/bin/dsmit-41log

   3. edit the /etc/security/user file for each DSMIT administrator (this assumes the user already exists). Add the following lines:

         SYSTEM = "compat AND dsmitlogin"

      For example, if bob is the DSMIT administrator on the managing machine M1, then on M1 the entry in /etc/security/user should look like the following:

      bob:
      SYSTEM = "compat AND dsmitlogin"

      If a SYSTEM line for bob already exists, modify it and add dsmitlogin . There may be additional lines associated with bob that do not pertain to DSMIT.

Related Information

Distributed System Management Interface Tool (DSMIT) Overview.