This article has been superseded by Entuity v21.0. To view the latest information on this topic, please see this article.
To create or amend an emergency user account
To enable an emergency user account
To identify emergency user accounts
To delete an emergency user account
In Entuity, an emergency user profile allows you to log in to an Entuity server that is configured for external LDAP authentication. When enabled, the emergency user account is always available, but would usually be used when Entuity cannot communicate with an LDAP server. The emergency user profile is intended only for administrators, to be used when LDAP authentication is not functioning.
The emergency user account is maintained through authtool (please see this link for further help and information on how to use authtool).
To create or amend an emergency user account:
- Navigate to entuity_home\bin. On the command line, enter:
./authtool [command]
- Enter the name of a local administrator user:
admin
- Enter the local administrator's password, e.g.:
admin
- Enter the name of the emergency user, e.g.:
eUser
- Enter the emergency user's password, e.g.:
Grty3KN
- Re-enter the emergency user's password, e.g.:
Grty3KN
- Entuity confirms the creation, or amendment, of the emergency user profile:
Emergency access is enabled in the security config file.
Password set for the user 'eUser' - Once you have defined an emergency user account, you will need to restart Tomcat before you can log in on this emergency user account.
To enable or disable an emergency user account:
There are two ways in which you can enable or disable emergency user access:
Via the UI:
- In the Main Menu, click Administration.
- Click Account Management.
- Under the LDAP Settings tab, tick or untick the Enable Emergency User box as appropriate.
Via the command line:
- Navigate to entuity_home\etc\security.cfg.xml.
- Under the module Authentication, set the value of the attribute allowSuperUserAccess to true or false as appropriate.
Notes:
- Applying LDAP before the LDAP integration has been correctly configured will lock users out of the tool.
- Clicking Apply LDAP Settings on the Account Management page will cause Tomcat to restart.
To identify emergency user accounts:
You can use the authtool list function to list the emergency user accounts in the security database. To list emergency user accounts:
- From entuity_home\bin, on the command line enter:
./authtool list
Entuity displays the state of emergency access and the configured emergency access user profiles:
Emergency access is enabled in the security config file.
Users:
eUser
root
Total User(s) 2
To delete an emergency user account:
The authtool delete user function allows you to delete emergency users from the security database.
- Navigate to entuity_home\bin. On the command line, enter:
./authtool delete
- Enter the name of the emergency user, e.g.:
eUser
- Entuity prompts you to confirm the deletion of the emergency user. Enter Yes. Entuity confirms the deletion of the profile:
User 'eUser' deleted
Comments
0 comments
Please sign in to leave a comment.