-
Notifications
You must be signed in to change notification settings - Fork 249
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge pull request #3017 from EnterpriseDB/release/2022-08-08
Release: 2022-08-08
- Loading branch information
Showing
44 changed files
with
551 additions
and
1,269 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -27,22 +27,16 @@ Perform the following installations: | |
|
||
Create users in Active Directory of the Windows server to map with the HTTP service principal for the PEM web application. | ||
|
||
1. Open **Active Directory Users and Computers > <DOMAIN_NAME> > Users**. Right-click and select **New > User** | ||
1. Open **Active Directory Users and Computers > <DOMAIN_NAME> > Users**. Right-click and select **New > User**. | ||
|
||
![Active Directory Users and Computers](../../images/active_directory_users_and_computers.png) | ||
|
||
1. Enter the user details. | ||
|
||
![Active Directory Users and Computers Create User](../../images/active_directory_users_and_computers_create_user.png) | ||
|
||
1. Give the password and make sure to clear **User must change password at next logon**. Also select **User cannot change password** and **Password never expires**. | ||
|
||
![Active Directory Users and Computers set password](../../images/active_directory_users_and_computers_set_password.png) | ||
|
||
1. Review the user details. | ||
|
||
![Active Directory Users and Computers User Details](../../images/active_directory_users_and_computers_user_details.png) | ||
|
||
1. On the PEMServer Web Properties dialog box, add the users as members of the Domain Users group: | ||
|
||
![PEM Server Web Properties](../../images/pem_server_web_properties_member_of.png) | ||
|
@@ -74,17 +68,15 @@ Extract the key tables for the service principals and map them with the respecti | |
!!! Note | ||
The command line argument `+rndpass` resets the password for the domain user pemserverweb to a random password. The `/target` option is optional. | ||
|
||
1. On the **Accounts** tab, Add Kerberos support for the user accounts. | ||
1. On the **Accounts** tab, add Kerberos support for the user accounts. | ||
|
||
![PEM Server Web Properties](../../images/pem_server_web_properties_account.png) | ||
|
||
!!! Note | ||
On the **Accounts** tab, the user logon name shows **HTTP/pem.[email protected]**. The **Delegation** tab is enabled for the `pemserverweb` user. | ||
On the **Accounts** tab, the user logon name shows **HTTP/pem.[email protected]**. The **Delegation** tab is enabled for the pemserverweb user. | ||
|
||
1. On the **Delegation** tab, select **Trust this user for delegation to any service (Kerberos only)** for the users you created. | ||
|
||
![PEM Server Web Properties Delegation](../../images/pem_server_web_properties_delegation.png) | ||
|
||
1. Copy both the key tables to the PEM server host or to the PEM web server and PEM backend database server hosts if installed on different hosts. | ||
|
||
1. On the PEM server, move the key tables to the required location and change the ownership: | ||
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.