Tivoli SecureWay Policy Director Management Console for Windows Administration Guide Version 3.7

Transcription

1 Tivoli SecureWay Policy Director Management Console for Windows Administration Guide Version 3.7 January 2001

2 Tivoli SecureWay Policy Director Management Console for Windows Administration Guide Copyright Notice Copyright IBM Corporation 2001 All rights reserved. May only be used pursuant to a Tivoli Systems Software License Agreement, an IBM Software License Agreement, or Addendum for Tivoli Products to IBM Customer or License Agreement. No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any computer language, in any form or by any means, electronic, mechanical, magnetic, optical, chemical, manual, or otherwise, without prior written permission of IBM Corporation. IBM Corporation grants you limited permission to make hardcopy or other reproductions of any machine-readable documentation for your own use, provided that each such reproduction shall carry the IBM Corporation copyright notice. No other rights under copyright are granted without prior written permission of IBM Corporation. The document is not intended for production and is furnished as is without warranty of any kind. All warranties on this document are hereby disclaimed, including the warranties of merchantability and fitness for a particular purpose. U.S. Government Users Restricted Rights Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corporation. Trademarks IBM, the IBM logo, Tivoli, the Tivoli logo, AIX, Policy Director, and SecureWay are trademarks or registered trademarks of International Business Machines Corporation or Tivoli Systems Inc. in the United States, other countries, or both. Microsoft, Windows, Windows NT, and the Windows logo are trademarks of Microsoft Corporation in the United States, other countries, or both. UNIX is a registered trademark of The Open Group in the United States and other countries. Java and all Java-based trademarks are trademarks of Sun Microsystems, Inc. in the United States, other countries, or both. Other company, product, and service names may be trademarks or service marks of others. Notices References in this publication to Tivoli Systems or IBM products, programs, or services do not imply that they will be available in all countries in which Tivoli Systems or IBM operates. Any reference to these products, programs, or services is not intended to imply that only Tivoli Systems or IBM products, programs, or services can be used. Subject to valid intellectual property or other legally protectable right of Tivoli Systems or IBM, any functionally equivalent product, program, or service can be used instead of the referenced product, program, or service. The evaluation and verification of operation in conjunction with other products, except those expressly designated by Tivoli Systems or IBM, are the responsibility of the user. Tivoli Systems or IBM may have patents or pending patent applications covering subject matter in this document. The furnishing of this document does not give you any license to these patents. You can send license inquiries, in writing, to the IBM Director of Licensing, IBM Corporation, North Castle Drive, Armonk, New York , U.S.A.

3 Contents Preface...ix Who Should Read This Guide...x What This Guide Contains...x Typeface Conventions...xi Related Policy Director Documents...xii Accessing Online Documentation... xiii Ordering Documentation... xiii Providing Feedback about Product Documentation...xiv Contacting Customer Support...xiv Chapter 1 Introducing the PD Console 1.1 Console Manager Changing the Display Fonts The Tech Manager Menu Bar The Tech Manager Tool Bar Help Windows Chapter 2 Using the Tech Manager 2.1 Viewing the Login to a Secure Domain Window Action Buttons Starting and Stopping Tech Manager Modules Work Area - Hierarchy and Contents Panels Chapter 3 Using the Account Manager Module 3.1 Viewing the Account Manager Main Window Viewing the Account Manager Menu Bar Viewing the Account Manager Window Panels Viewing the Account Manager Hierarchy Window Viewing the Account Manager Contents Window Viewing Contents of a Protected Object in Detail View Viewing the Toolbar Defining the Policy Director Account Manager Icons Loading Users and Groups Action Buttons Adding a New User Management Console for Windows Administration Guide iii

4 3.4.1 Creating a New User Action Buttons Group Membership Tab Action Buttons GSO Resources Tab Action Buttons GSO Resource Groups Tab Viewing the GSO Resources Window Action Buttons Creating a New Group Members List Area Action Buttons Creating a New GSO Resource Action Buttons Creating a New GSO Resource Group Members List Area Action Buttons Viewing the Browse Groups Window Action Buttons Viewing the Browse Users Window Chapter 4 Using the Policy Director Object Space Module 4.1 Viewing the Object Space Main Window Viewing the Object Space Menu Bar Viewing the Object Space Window Panels Viewing the Object Space Hierarchy Window Viewing the Object Space Contents Window Viewing the Contents of a Protected Object Viewing the Contents of a Policy Container Object Viewing the Contents of a Policy Object Viewing the Toolbar Defining the Secure Domain Registry Icons Using the Find Window Action Buttons Object Search Tab iv Version 3.7

5 4.4.3 Policy Search Tab Permission Search Tab Action Buttons Using the Find Results Window Find Results Window Menu Bar Find Results Window Toolbar Find Results Window Display Area Viewing the Go To Window Using the Go To Section Action Buttons Using Drag and Drop in the Object Space Module Chapter 5 Managing ACL and POP Policies 5.1 Understanding the Object Space Module Adding an ACL Policy Action Buttons Cloning an Existing Policy Editing a Protected Object Common Tab Extended Attributes Tab Action Buttons for the Extended Attributes Tab Action Buttons for the Edit Projected Object Window Viewing the List of ACL Policies Window Action Buttons Viewing the List of POP Policies Window Action Buttons Editing an Existing ACL Policy Edit ACL Policy Menu Bar Edit ACL Policy Toolbar Edit ACL Policy Text Fields Edit ACL Policy Display Area Using the Find ACL Policy Window Modifying a Policy Using Drag and Drop Adding an ACL Policy Entry Management Console for Windows Administration Guide v

6 5.7.1 Action Buttons Add Policy Entry Common Tab Add Policy Entry Server Tab Example Action Group Tab -- bt Viewing the Browse Users or Groups Window Action Buttons Editing an ACL Policy Entry Editing Protected Object Policies (POPs) Common Tab Extended Attributes Tab Action Buttons for the Edit POP Policy Window Attaching a Protected Object Policy (POP) by Drag and Drop Attaching a Protected Object Policy (POP) Detaching a Protected Object Policy (POP) Object Space Module Tasks Adding an ACL Object Policy Cloning an ACL Policy Cloning an ACL Policy by Drag and Drop Adding an ACL Policy Entry Adding ACL Policy Entries by Drag and Drop Modifying an ACL Policy Entry Using Drag and Drop Cloning an ACL Policy Entry from the Edit Policy Window Allowing Permissions for a User Changing Permissions by Dragging Permissions Changing Permissions by Dragging a Policy Entry Chapter 6 Common Console Concepts 6.1 Menu Bar Tool Bar Icons Resource Files User Defaults Standard Manager Components Main Window Secondary Windows Menu Bar vi Version 3.7

7 Work Area Tool Bars Object Popup Drag and Drop Viewing the Bulletin Board Window Viewing the Paste Buffer Window Welcome Window Lock Understanding the View Box View Box Joy Stick Example Status Information Area Viewing the Task Manager Window View Box Options Windows Action Buttons Sort Tab Filter Tab Column Order Tab General Display Options Action Area General Tab General Tab Display Area General Colors Tab Viewing the Color Selection Window General Fonts Tab Viewing the Font Selection Window General Other Tab Icon View Tab Icon Colors Tab Icon Layout Tab Icon View Icons Tab List View Tab List Colors Tab List Layout Tab Outline View Tab Outline Colors Tab Outline Layout Tab Outline View Icons Tab Management Console for Windows Administration Guide vii

8 6.5.8 Detail View Tab Detail View Colors Tab Detail View Layout Tab Detail View Lines Tab Popup Menus Drag and Drop Using the Print Window Action Buttons Displaying Tip Messages Viewing the Installed Modules Information Window Installed Modules Section Action Buttons Customizing the Main Window Sizing the List Areas To make the Hierarchy List area wider: To make the Contents area wider: Reordering List Columns Tech Manager Options Tech Manager Options Area Module Visibility and Order Area Actions Area Using the Help File Viewer File Viewer Menu Bar File Viewer Toolbar Appendix A Glossary Appendix B Software License B.1 Java Runtime Environment... B-2 viii Version 3.7

9 Preface Preface Welcome to the Management Console for Windows Administration Guide, Version 3.7. The Management Console is a suite of products and technologies that Tivoli Incorporated has developed as an administration framework for managing multiple technologies in a heterogeneous environment. Management Console supports pluggable modules of functionality that are targeted at specific technologies, especially those that provide directory and security services. The Management Console modular approach provides an extensible toolset that can support a wide range of functionalities in multiple technologies in a common framework that is scalable and able to be customized. A chapter within this guide is the Account Manager Tech Manager module. This module assists you to manage users, groups, and GSO resources in the Object Space. In the Account Manager, you can do the following: Add, Delete, or Modify users and groups Add, Delete or Modify GSO resources Add, Delete or Modify GSO resource groups Load groups or users into the Account Manager namespace. Another set of chapters within this guide concern the Object Space Tech Manager module. The Object Space module manages polices and protected objects in the Object Space namespace. The Object Space namespace is comprised of a hiearchical portrayal of resources belonging to a secure domain and the polices that can be applied to those resources. Objects are virtual representations of an actual physical resources. Resources refer to the actual physical items. Policies are a set of controls that specifies the conditions necessary to perform certain operations on a resource. In the Object Space module, you can do the following Add, modify, or delete a protected object policy. Create, modify, or delete a junction. Allow or deny permissions to users or groups. Attach or Detach policies to objects in the Object Space namespace. View a file object in a browser-like interface. Find an entry in the Object Space namespace. Go To an entry in the Object Space namespace. Management Console for Windows Administration Guide ix

10 Preface It is highly recommended that you use Adobe Acrobat Reader, version 4.05 to view all Policy Director PDF documentation. Who Should Read This Guide The target audience for this guide includes: Security administrators System installation and deployment administrators Network system administrators IT architects Application developers What This Guide Contains Chapter 1: Introducing the PD Console Introduces the PD Console and discusses how it provides three GUI applications that provide common navigation and placeholders for utilizing functionality developed for Management Console. Chapter 2: Using the Tech Manager Discusses the initial Login to a Secure Domain window, how to start and stop the Tech Manager module, and describes some overall features of the main window. Chapter 3: Using the Account Manager Module Discusses how the Account Manager module assists you to manage users, groups, and Global Sign-On (GSO) resources in the Policy Director namespace. Chapter 4: Using the Object Space Module Introduces you to the Object Space Module GUI interface window. Assists you to perform many Object Space activities such as using the File Viewer, Find, and Go To windows, as well as how to Drag and Drop. Chapter 5: Managing ACL and POP Policies Discusses how to manage polices and protected objects in the Object Space namespace using the Object Space Module. The Object Space module also assists you to protect resources in a secure domain, by attaching an ACL policy to the logical protected object. x Version 3.7

11 Preface Chapter 6: Common Console Concepts Discusses the Tech Manager module and how it is used to display various security and directory service technologies in hierarchical form (whether it is organized that way or not) and provide a common navigation tool for manipulation of objects that are contained within the technology. Appendix A: Glossary Provides many terms and their definitions you might come across in a Policy Director environment. Appendix B: Software License Details the software license used to create the Management Console. Typeface Conventions This guide uses several typeface conventions for special terms and actions. These conventions have the following meaning: Bold Italics Monospace Command names and options, keywords, and other information that you must use literally appear in bold. Variables, command arguments, and values you must provide appear in italics. Titles of publications and special words or phrases that are emphasized also appear in italics. Code examples, command lines, screen output, and system messages appear in monospace font. Management Console for Windows Administration Guide xi

12 Preface Related Policy Director Documents The following table summarizes the available Policy Director documentation: Tivoli SecureWay Policy Director Technical Documents Installation Guides Tivoli SecureWay Policy Director Base for AIX Installation Guide Tivoli SecureWay Policy Director Base for HP-UX Installation Guide Tivoli SecureWay Policy Director Base for Solaris Installation Guide Tivoli SecureWay Policy Director Base for Windows Installation Guide Tivoli SecureWay Policy Director WebSEAL Installation Guide Tivoli SecureWay Policy Director NetSEAL Installation Guide Tivoli SecureWay Policy Director Management Console Installation Guide Administration Guides Tivoli SecureWay Policy Director Base Administration Guide Tivoli SecureWay Policy Director WebSEAL Administration Guide Tivoli SecureWay Policy Director NetSEAL Administration Guide Tivoli SecureWay Policy Director Management Console for Windows Administration Guide (this document) Developer References Tivoli SecureWay Policy Director Authorization ADK Developer Reference Tivoli SecureWay Policy Director WebSEAL Developer Reference Supplemental Documentation (updated regularly on the Tivoli support site) Tivoli SecureWay Policy Director Release Notes Tivoli SecureWay Policy Director Lotus Domino Registry Supplement Tivoli SecureWay Policy Director Performance Tuning Guide xii Version 3.7

13 Preface Accessing Online Documentation The Tivoli Customer Support Web site ( provides links to the following documentation information: Technical information, including release notes, installation and configuration guides, administration guides, and developer references. Frequently Asked Questions (FAQs) Software download information You can find the Customer Support Handbook (a guide to support services) at: You can access the index of online Tivoli publications at Click on Master Index to find product-specific support pages. You can locate Policy Director technical documentation, by product version, at: The documentation for some products is available in PDF and HTML formats. Translated documents are also available for some products. To access most of the documentation, you need an ID and a password. To obtain an ID for use on the support Web site, go to Resellers should refer to for more information about obtaining Tivoli technical documentation and support. Business Partners should refer to the Preface section entitled Ordering Documentation for more information about obtaining Tivoli technical documentation. Ordering Documentation Order Tivoli documentation online at or by calling one of the following telephone numbers: U.S. customers: (800) Canadian customers: (800) Management Console for Windows Administration Guide xiii

14 Preface Providing Feedback about Product Documentation We are very interested in hearing about your experience with Tivoli products and documentation, and we welcome your suggestions for improvements. If you have comments or suggestions about our products and documentation, contact us in one of the following ways: Send to Fill out our customer feedback survey at Contacting Customer Support The Tivoli Customer Support Handbook at: provides information about all aspects of Tivoli Customer Support, including the following: Registration and eligibility How to contact support, depending on the severity of your problem Telephone numbers and addresses, depending on the country you are in What information you should gather before contacting support xiv Version 3.7

15 1 Introducing the PD Console The PD Console is any GUI application that is available within the PD Console framework. Version 3.7 of the framework provides three GUI applications that provide common navigation and placeholders for utilizing functionality developed for PD Console. Management Console for Windows Administration Guide 1 1

16 Chapter 1: Introducing the PD Console 1.1 Console Manager A Manager is an individual GUI-based application that is a repository for similar functionality that utilizes the same look and feel or navigation methods. Each of the main tools within the Console is considered a Manager. For version 3.7 of PD Console, there are three such tools. All the managers within PD Console make every attempt to provide as much of the common features that are relevant to the functionality that they supply. The Tech Manager provides a tool for managing (navigating and manipulating) namespaces, directory services, security technologies or any type of technology that can be effectively visualized in a hierarchical manner. The Tech Manager, loads hosts and functionality only on an as-needed basis, therefore, when it is opened for the first time, it appears to be mostly empty and blank. The Policy Director Console is equivalent to the Component Manager Tech Manager with the PD Object Space Module and the Tech Manager Account Management Module including the Policy Director plug in Changing the Display Fonts You can customize fonts, colors and many other characteristics about the windows that the PD Console modules are using The Tech Manager Menu Bar The Menu Bar is a standard component for an Management Console Tech Manager Module. It is located at the top of the Tech Manager main window. See the following figure. The current selected module is what determines most of the items that appear in the menus. Many of the menu items have Short Cut keys defined for them which enables you to initiate the functionality of the menu item by pressing a combination of keys. This combination is designated to the right of each menu item (if defined). Also, there is a dotted line item on the top of each pulldown menu if the version of Java being used supports tear-off menus. If you select this dotted line item, then the pulldown menu becomes a separate dialog that enables you to access the menu items again without having to pulldown the menu The Tech Manager Tool Bar The toolbar icons tend to be fairly standardized to icons that are most commonly used by all Tech Manager modules. 1 2 Version 3.7

17 1.1.4 Help Windows Console Manager Help windows provide access to the Help information that is available for the Tech Manager and the Modules within it. Almost all windows contain tool tips. Tool tips are single lines or sentences that appear when the mouse cursor is passed over a text entry field or option. Tool tips are brief helpful explanations that describe or define what the text entry field is about. In addition, help is available in an HTML format. This form of help is HTML files that are displayed within the browser of choice. This means that you must have one of the standard Internet Browsers available on your machine. The Help pull-down is always on the right hand side of the Menu Bar. The Help itself displays in these forms: Window Help - Supplies help for the window, from which the help was initiated. For Dialogs, pressing the Help button at the bottom of the window enables this type of help. Version - Enables a dialog that displays information about the current product that you are using. Management Console for Windows Administration Guide 1 3

18 Chapter 1: Introducing the PD Console 1 4 Version 3.7

19 2 Using the Tech Manager The Tech Manager is used to display various security and directory service technologies in hierarchical form (whether it is organized that way or not) and provide a common navigation tool for manipulation of objects that are contained within the technology. A technology or Module as they are referred to within Management Console, can be as granular as necessary. For example: for DCE the functionality has been divided into two Tech Manager Modules: one showing the CDS namespace, and one showing the Security Registry. The Tech Manager lets you arrange and order the Modules and help control the footprint of the operating program. Since a Tech Manager Module is basically a template, the following sections break down the functionality GUI components. The major sections of the Tech Manager include: 2.1 Viewing the Login to a Secure Domain Window 2.2 Starting and Stopping Tech Manager Modules 2.3 Work Area - Hierarchy and Contents Panels Management Console for Windows Administration Guide 2 1

20 Chapter 2: Using the Tech Manager 2.1 Viewing the Login to a Secure Domain Window A secure domain is a centrally controlled collection of resources that share a common set of security services. The Login to a Secure Domain window allows you to authenticate a secure domain. The Login to a Secure Domain window appears the first time the Accounts Manager, Object Space, DCE Sec Rgy, or the DCE CDS modules tab is selected in the PD Console. This window allows you to authenticate a secure domain to manage Policy Director and related technologies. The modules maintain the context you are logged into so you can switch between tabs without having to log in again. Once you are logged in to any one of these modules, you can select File > Login... on the Menu bar, (or, click the Login icon, the first icon on the left) and the Login to a secure Domain window appears so you can authenticate to a different domain if desired. See the following figure. Figure 2-1: Login to a Domain Window The NetSEAL client seamlessly allows a user to be a member of more than one secure domain. The option to log into a different domain or configure a different domain is not available on non-netseat client. Thus, on a non-netseat client, the Domains... Action button at the bottom does not appear. The Login to a Secure Domain window has the following text field options: Domain Name - Specifies the name of a secure domain. This text entry field is followed by a drop down menu where you can select another existing secure domain, if desired. The drop-down menu is only active if you are using a NetSEAT client. The default secure domain automatically appears in this field. 2 2 Version 3.7

21 Viewing the Login to a Secure Domain Window Note: If your domain does not exist in the drop-down menu, click on the Domain... Action button to configure it. Login Name - Specifies the name of the login used to authenticate the secure domain. Password - Specifies the password of the domain login Action Buttons The following action buttons appear at the bottom of the Login to a Secure Domain window: OK - Causes you to login to a secure domain so you can perform further operations. Domains... - Causes the NetSEAT Configuration window to appear so you can view or modify the NetSEAT configuration. If you are using a non-netseat client, this button does not appear. Close - Closes the Login to a Domain window with no further action. Help - Causes a Help window to appear. Management Console for Windows Administration Guide 2 3

22 Chapter 2: Using the Tech Manager 2.2 Starting and Stopping Tech Manager Modules A Tech Manager Module is an implementation of a specification defined by the Management Console framework. Each Module appears as a Tab within the Tech Manager and is required to utilize and control the contents of some standard interface objects, such as a Menu Bar, Tool Bar and the objects displayed within the Tab. Before you can use a Tech Manager Module: The Management Console Tech Manager and the Module of your choice must be installed. You must have a valid license to use the Module. To start the Tech Manager Module: 1. On an NT platform: a. Go to Start > Programs > Component Manager > Tech Manager. The Tech Manager application opens with the Hello tab active. 2. On the Tech Manager window, select the tab of your choice. The Tech Manager Module opens. See the following figure. 2 4 Version 3.7

23 Starting and Stopping Tech Manager Modules Figure 2-2: Tech Manager Initial Window To quit a Tech Manager Module: Select the Exit icon, or from the File menu in the Module main window, click Exit. Management Console for Windows Administration Guide 2 5

24 Chapter 2: Using the Tech Manager 2.3 Work Area - Hierarchy and Contents Panels The Work Area is the main focal point for each of the Modules. This area consists of two view panels or display areas. The Hierarchy Panel is the main navigation component within each of the Tech Manager Modules. This panel displays the technology as a hierarchical component (Outline View Box) and allows you to navigate (expand and contract) the various portions (branches) of the technology. This window provides outline boxes in that each object in the panel that can have child objects has a + box next to it that can be selected thereby causing the next level below to be expanded. In addition, the items displayed within this area are the ones that designate the information that appears in the Contents Panel which appears adjacent to the Hierarchy Panel. Opening an object is achieved by double clicking on the object. This changes the icon to an opened state and either the contents of that object or more detailed information for that object appears in the Contents Panel area. The Contents Panel is designed to display the contents of a particular object in the Hierarchy Panel. This panel also displays more detailed information than is available within the Hierarchy Panel. Each module is responsible for determining the contents of this panel. See the following figure. Figure 2-3: Work Area - View Panels Module Tab Example 2 6 Version 3.7

25 3 Using the Account Manager Module The Account Management Module is a one of the components available in the Tech Manager module. Version 3.7 of Account Manager assists you to manage users, groups, and Global Sign-On (GSO) resources in the Policy Director registry. The major sections of the Account Manager module include: 3.1 Viewing the Account Manager Main Window 3.2 Defining the Policy Director Account Manager Icons 3.3 Loading Users and Groups 3.4 Adding a New User Management Console for Windows Administration Guide 3 1

26 Chapter 3: Using the Account Manager Module 3.1 Viewing the Account Manager Main Window The Account Manager tab on the PD Console window enables you to manage users, groups, and GSO resources in the registry. The Account Manager window contains a Menu bar, a Toolbar, and a display area consisting of a hierarchical or tree view of users, groups, GSO resources on the left display panel, and a list or detailed view of those protected objects on the right display panel. See the following figure. Figure 3-1: The Account Manager Module Main Window Viewing the Account Manager Menu Bar The options on the menu bar across the top of the main window accesses most major Account Manager Module functions for performing management tasks, changing the appearance of the window, and acquiring information (Help) about these functions. For detailed information on selecting entries and general window operations, see chapter 6, Common Console Concepts. See the following figure. 3 2 Version 3.7

27 Viewing the Account Manager Main Window Figure 3-2: Account Management Menu Bar The following items appear in the Account Manager Menu bar: File - Specifies the following menu item choices: Login... - Allows you to log in as a user to a Policy Director domain. Print - Causes a standard Print window to appear so you can print the contents of an Account Manager container. For more information, see Section 6.8: Using the Print Window. Save - Causes the Account Manager Module to save the display state of the registry and the contents panels in the main Account Manager window. License... - Enables the licensing tool to start access to the Modules within the Tech Manager. Lock Manager - Disables all Tech Manager buttons and windows. This prevents anyone from using this tool until a password is entered. Version - Allows you to view the current version information for the PD Console and each installed module. For more information on this window, see Section 6.10: Viewing the Installed Modules Information Window. Exit - Allows you to close the PD Console window. Object - Specifies the following menu item choice: Custom Commands... - Causes the Custom Menu Item Dialog window to appear so you can create your own Object Space menu items that invoke functionality on the selected protected objects or to execute "home grown" commands or run other applications. Edit - Specifies the following menu item choices: Properties... - Allows you to view or modify details of an existing user, group, or GSO resource entry. New... - Opens a create window of the selected protected object so you can create an object of the same type. Copy - Allows you to copy selected protected objects into the paste buffer. Paste - Allows you to paste the protected object in the paste buffer into the registry. Delete - Deletes the selected protected object from Object Space main window. Management Console for Windows Administration Guide 3 3

28 Chapter 3: Using the Account Manager Module Find... - Causes the Find window to appear so you can find users, groups, and GSO resources meeting find criteria. Go To... - Finds and selects (highlights) entries in the Account Manager main window meeting the Go To criteria. View - Specifies the following menu item choices: Icons - Displays the protected objects in the Account Manager by icons. This is the default view. List - Displays the icons in the Account Manager display area in single columns. Details - Displays the Account Manager protected objects by columns of text with variable types of information. Load... - Enables you to load all or some of the users or groups available in the registry to the Account Manager main display window. Refresh - Refreshes the selected protected object with the most current information. Deselect All - Causes selected protected objects in the display area to become unselected. Show Module - Displays all Tech Manager modules and shows the current visible module as the active module. Detach Module - Creates another Tech Manager with only the current Module displayed within it. This gives you the ability to view multiple Modules simultaneously. Tools - Specifies the following menu item choices: Bulletin Board - Displays the Bulletin Board window which allows you to drag item to and from it; or cut and paste protected objects into it where they can be stored and manipulated as desired. Paste Buffer - Displays the Bulletin Board window which allows you to view the protected object that has been cut or copied into the paste buffer. You can view only one protected object at a time. Options - Specifies the following menu item choices: Tech Manager Display Options... - Opens a Tech Manager Options window so that you can choose which module is displayed initially when opening the Tech Manager application, the type of view, whether a query window appears upon exiting, and which Modules you want to display in the main Tech Manager window. For a detailed explanation of this window, see Section 6.5: General Display Options. Display Options... - Opens a General Display Options window that lets you change the visual characteristics (fonts, colors, spacing, etc.) of the interface. For a detailed descrition see Section 6.5: General Display Options. 3 4 Version 3.7

29 Viewing the Account Manager Main Window Help - Specifies the following menu item choices: Windows Help - Provides access to the Help information that is available for the main window of the Account Manager window. The help itself is HTML files that are displayed within the browser of choice Viewing the Account Manager Window Panels In the main window of the Account Manager module, there are two main display areas, the Account Manager Hierarchy window and the Account Manager Contents window. Viewing the Account Manager Hierarchy Window The hierarchy window displays the Policy Director domain, that consists of users, groups, GSO resources, and GSO resource groups. The protected objects are displayed in a hierarchical view starting with (/) the domain root directory. To view users, groups, GSO resources, or GSO resource groups, click on the respective container item. Note: To view details of an account or group, double click the policy item and go to the details view (View > Details) Viewing the Account Manager Contents Window The data in the Contents (right-most display) area in the Account Manager window can be displayed in three views: List, Icons and Details. The List view and Icons view are fairly straightforward. The Detail view needs further explanation. Note: If you go to the details view (View > Details), a quick description of the protected objects are available. The contents window can display all of the Account Manager protected objects, depending on what is opened in the outline display area. See the following possibilities: List of Users if the Users folder is opened List of Groups if the Groups folder is opened List of GSO Resources if the GSO Resources folder is opened Management Console for Windows Administration Guide 3 5

30 Chapter 3: Using the Account Manager Module List of GSO Resource Groups if the GSO Resource Groups folder is opened. Viewing Contents of a Protected Object in Detail View The following columns appear if you are viewing the contents of a protected object while in Detail View: Name - Displays the name of the protected object. Description - Displays a short description of the protected object. See the following figure for an example: Figure 3-3: Example of the Contents Detail View of a Protected Object Viewing the Toolbar The Account Manager Toolbar allows you to view properties, as well as copy, paste, and find selected protected objects. See the following figure. Figure 3-4: Account Manager Toolbar The following items detail each icon that appears in the Bulletin Board Toolbar. Secure Domain Login - Allows you to login into an Account Manager domain. Properties - Allows you to view or modify details of an existing user, group, or GSO resource entry. 3 6 Version 3.7

31 Viewing the Account Manager Main Window New... - Opens a create window of the selected protected object so you can create an object of the same type. Copy - Copies the selected Account Manager protected objects into the paste buffer. Paste - Pastes a previously cut or copied protected object into the Object Space registry. Delete - Deletes a selected protected object from the Policy Director registry. Find - Enables a dialog to customize and perform searches through the Object Space registry to look for specific attributes and values. Go To - Enables a dialog to find and select (highlight) entries in the Account Manager main window meeting the Go To criteria. Refresh - Refreshes the selected protected object with the most current information. Exit - Closes the PD Console window. Management Console for Windows Administration Guide 3 7

32 Chapter 3: Using the Account Manager Module 3.2 Defining the Policy Director Account Manager Icons The following list is to help define icons that represents protected objects in the Account Manager registry: Domain - Specifies the registry domain in which the Account Manager protected objects reside. Folder - Specifies a container of Account Manager protected objects. Security User - Specifies a single user in the secure domain. Security Group - Specifies a group in the secure domain. GSO - Specifies a Global Sign-On resource in the Account Manager registry. GSO Resource Group - Specifies a Global Sign-On resource group in the Account Manager registry. 3 8 Version 3.7

33 Loading Users and Groups 3.3 Loading Users and Groups When you first open the Account Manager module, you can view container folders for users and groups, but you must load the currents user and groups in order to view, delete, or modify them in the registry area. You can load either all available users or groups, or you can load just a few of them. Note: The Load Groups window is identical to the Load Users window. You can view the Load Users window by double-clicking the Users folder in the Account Manager registry display area (the display area on the left) or, you can select the Users folder and click View > Load... in the Menu bar. The Load Users or Groups window appears. See the following figure: Figure 3-5: The Load Users Window The following items appear in the Load Users (or Groups) window: User Name Pattern - Specifies a text entry field where you can enter a whole word or just part of one. The asterisk (*) search filter is supported. For example, a search filter of * loads all entries. A search filter of B* loads all user ID s beginning with a B. Limit to: Specifies whether you want to limit the number of users or groups to load at a given time. The default limit is 50. Append - Specifies whether you want to append any users or groups that you are about to load to the current list of users or groups you have already loaded; or, clear the previous list and display only the newly loaded users or groups. Management Console for Windows Administration Guide 3 9

34 Chapter 3: Using the Account Manager Module Action Buttons The following action buttons appear at the bottom of the Load Users or Groups window: OK - Begins to load the users (or groups) you specified in the Account Manager main window and leaves the Load Users window open. Apply - Begins to load the users (or groups) you specified in the Account Manager main window and closes the Load Users window. Close - Closes the Load Users window without any further action. Help - Causes a Help window to appear Version 3.7

35 Adding a New User 3.4 Adding a New User You can add four kinds of protected objects, depending on the type of folder icon you select when you click the Add icon in the Toolbar, or the Edit > New... item in the Menu bar. This causes the appropriate window for creating a new protected object to appear. You can either create a new user, create a new group, create a new GSO resource, or create a new GSO resource group Creating a New User The Create New User window allows you to add a new user to the Account Manager registry. See the following figure. Figure 3-6: Create New User Window Management Console for Windows Administration Guide 3 11

36 Chapter 3: Using the Account Manager Module The following text entry field appears at the top of the Create New User window: New User Name - Specifies the name of the new user. The Policy Director Account area contains the following text fields: Description - Specifies a short description of the new user. Password - Specifies a password the new user must use to access Policy Director resources. Verify Password - Specifies a text field where you can re-enter the password for verification. LDAP CN - Specifies the LDAP Common Name of the new user. For example, the name John, of John Doe is the LDAP CN. LDAP SN - Specifies the LDAP Surname of the new user. For example, the name Doe, of John Doe is the LDAP SN. LDAP DN - Specifies the Distinguished Name associated with the new user. Account Valid - Specifies the option of whether the end-user has the ability to participate in the secure domain. If this option is not selected, the account is no longer valid. The account information still remains in the registry, however. Password Valid - Specifies the option of whether you want to force a password change the next time the user logs in to the secure domain. If this option is not selected, the user is informed that the password has expired. GSO User - Specifies the option of whether you want the new user to have GSO capabilities Action Buttons The following action buttons appear at the bottom of the Create New User window. OK - Adds the new user to the display and to the Object Space registry, and closes the Create New User window. Apply - Adds the new user to the display and to the Object Space registry, and leaves the Create New User window open. Close - Closes the Add Policy window. Help - Causes a Help window to appear Version 3.7

37 Adding a New User Group Membership Tab The Group Membership tab appears near the bottom of the Create New User window and enables you to associate a new user with a specific group. This tab has a scrollable list area followed by one text entry field and two action buttons: Name - Specifies the name of a group you want to add to the list area. This field is followed by a... (More) button that causes the Browse Groups window to appear. For more information on the Browse Groups window, see Viewing the Browse Groups Window. Action Buttons Add - Allows you to add the group that appears in the Name text entry field to the list area. Remove - Enables you to remove the selected group from the list area. Note: The action buttons above assist you to add or remove groups to the display area only. If you have changed the list of groups, you must click the OK or Apply action buttons at the very bottom of the Create New User window GSO Resources Tab The GSO Resources tab enables you to associate the new user to GSO resources. See the following figure. Management Console for Windows Administration Guide 3 13

38 Chapter 3: Using the Account Manager Module Figure 3-7: GSO Resources Tab The following text entry fields appear below the list area of the GSO Resources tab: Name - Specifies the name of a GSO resource to with which you want to associate the user. Sign-on ID - Specifies the sign-on identifier used to access the GSO resource for the new user. Password - Specifies the password used with the GSO sign-on ID. Action Buttons The following action buttons appear under the GSO Resources tab: Add - Adds a GSO resource to the list area of the GSO Resources tab. Modify - Allows you to edit a selected GSO resource in the list area of the GSO Resources tab. Remove - Deletes a selected GSO resource entry from the list area of the GSO Resources tab. A Verify Password window appears when you press the Add button. This window contains one text entry field in which you must type the password again for verification purposes. Click the OK button at the bottom of this window to accept the entry and close the window, or click the Cancel button to close the window without verification Version 3.7

39 Adding a New User GSO Resource Groups Tab The GSO Resource Groups tab enables you to associate the new user to a GSO Resource Group. This tab looks identical to the GSO Resources tab discussed in the previous section Viewing the GSO Resources Window The GSO Resources window enables you to select an existing GSO resource to which to want to associate a user. The GSO Resources window appears when you click the...(more) button in the Name text entry field of the GSO Resources tab, and the GSO Resource Groups tab. See the following figure. Figure 3-8: GSO Resources Window The GSO Resources window consists of a scrollable list area that lists all of the available GSO resources or GSO Resource Groups. Action Buttons The following actions buttons appear at the bottom of the GSO Resources window: OK - Causes the selected GSO Resource to appear in the Name field of the GSO Resources tab in the New User window. The GSO Resources Management Console for Windows Administration Guide 3 15

40 Chapter 3: Using the Account Manager Module window closes. Apply - Causes the selected GSO Resource to appear in the Name field of the GSO Resources tab in the New User window. The GSO Resources window remains open. Refresh - Causes the display area to update with the most current information. Close - Closes the window without further action. Help - Causes a Help window to appear Creating a New Group The Create New Group window allows you to create a new group to add to the Policy Director registry. This window appears when you select a group folder and click the Add... icon in the Toolbar (or, you can click Edit > New... in the Menu bar). This causes the Create New Group window to appear. See the following figure. Figure 3-9: Create New Group Window 3 16 Version 3.7

41 Adding a New User The following text entry fields appear in the Create New Group window: Description - Specifies a short description of the new group. LDAP CN - Specifies the LDAP Common Name of the new group. LDAP DN - Specifies the Distinguished Name associated with the new group. Members List Area The Members scrollable list area allows you to view all of the users you might want to add to the new group you are creating. Under the display area is one text entry field and two action buttons: Name - Specifies the name of an existing user you want to add to your new group. This field is followed by a...(more) button. When the...(more) button is clicked, the Browse Users window appears that allows you to select any number of existing users to add to your new group. Action Buttons The following action buttons appear under the Name field of the Create New Group window: Add - Adds the user that appears in the Name field to the list area. Remove - Removes a selected user from the list area. Action Buttons The following action buttons appear at the very bottom of the Create New Group window: OK - Causes the new group to be created and adds all of the users that appear in the list area to the new group. The Create New Group window closes. Apply - Causes the new group to be created and adds all of the users that appear in the list area to the new group. The Create New Group window remains open. Close - Closes the Create New Group window without any further action. Help - Causes a Help window to appear Creating a New GSO Resource The Create GSO Resource window assists you to add a new GSO resource to the Account Manager registry. Management Console for Windows Administration Guide 3 17

42 Chapter 3: Using the Account Manager Module You can view this window by first selecting the GSO Resources folder in the Account Manager main display window. Next, click the New... icon in the Toolbar (or, click Edit > New... in the Menu bar). The Create GSO Resource window appears. See the following figure. Figure 3-10: Create GSO Resource Window The following text entry fields and button appear in the Create GSO Resource window: Name - Specifies the new name of the GSO resource you want to add. Description - Specifies a short description of the new GSO resource. Action Buttons The following Action buttons appear at the bottom of the Create GSO Resource window: OK - Adds the new GSO resource to the Policy Director registry and closes the Create GSO Resource window. Apply - Adds the new GSO resource to the Policy Director registry and leaves the Create GSO Resource window open. Close - Closes the Create GSO Resource window. Help - Causes a Help window to appear Creating a New GSO Resource Group The Create GSO Resource Group window assists you to add a new GSO resource group to the Policy Director registry. You can view this window by first selecting the GSO Resources Group folder in the Account Manager main display window. Next, click the New... icon in the Toolbar (or, click Edit > New... in the Menu bar). The Create GSO Resource Group window appears Version 3.7

43 Adding a New User See the following figure. Figure 3-11: Create GSO Resource Group Window The following text entry fields and button appear in the Create GSO Resource Group window: Name - Specifies the name of the GSO resource group you want to create. Description - Specifies a short description of the new GSO resource group. Members List Area The Members scrollable list area allows you to view all of the resource members you might want to add to the new resource group you are creating. Under the display area is one text entry field and two action buttons: Name - Specifies the name of an existing GSO Resource you want to add to your GSO resource group. This field is followed by a...(more) button. When the...(more) button is clicked, the GSO Resources window appears that allows you to select any number of existing GSO resources to add to your new group. For more information on this window, see Viewing the GSO Resources Window. Management Console for Windows Administration Guide 3 19

44 Chapter 3: Using the Account Manager Module Action Buttons The following action buttons appear under the Name field in the Create GSO Resource Group window: Add - Adds the GSO Resource that appears in the Name field to the list area. Remove - Removes a selected GSO Resource from the list area. Action Buttons The following Action buttons appear at the bottom of the Create GSO Resource Group window: OK - Adds the new GSO resource group to the Policy Director registry and closes the Create GSO Resource Group window. Apply - Adds the new GSO resource group to the Policy Director registry and leaves the Create GSO Resource Group window open. Close - Closes the Create GSO Resource Group window. Help - Causes a Help window to appear Viewing the Browse Groups Window The Browse Groups window allows you to load all groups or a specific number of groups into the display area of the Group Membership tab. You can view this window whenever the...(more) button is clicked next to the Name text entry field of the Group Membership tab in the New User window. See the following figure Version 3.7

45 Adding a New User Figure 3-12: Browse Groups Window Group Name Pattern - Specifies a text entry field in which you can enter the group names for which you want to search. Limit to - Specifies whether you want to limit the number of groups to load at a given time. The default limit is 50. Append - Specifies whether you want to append any items found to the current display list of previous searches, or, if this option is not selected, the display list is cleared of all previous searches and only the new items appear in it. Load - Causes the Account Manager to search for the groups as specified into the display area of the Browse Groups window. Stop - Allows you to stop the loading process if desired. These text fields and options are followed by a scrollable display area where loaded (or filtered) groups appear. Action Buttons The following Action buttons appear at the bottom of the Browse Groups window: OK - Causes the groups that appear in the display area to be loaded into the display list area of the New User window. The Browse Groups window closes. Management Console for Windows Administration Guide 3 21

46 Chapter 3: Using the Account Manager Module Apply - Causes the groups that appear in the display area to be loaded into the display list area of the New User window. The Browse Groups window remains open. Close - Closes the Browse Groups window with no further action. Help - Causes a Help window to appear Viewing the Browse Users Window The Browse Users window allows you to load all users or a specific number of users into the display area of the New Group window. You can view this window whenever the...(more) button is clicked next to the Name text entry field of the New Group window. For more information about this window, see the previous section, as the Browse Users window is similar to the Browse Groups window Version 3.7

47 4 Using the Policy Director Object Space Module The Policy Director Object Space module is an optional component of the Tech Manager that is available within the PD Console framework. It displays all the objects within the object space to which you can attach policies. The major sections of this chapter include: 4.1 Viewing the Object Space Main Window 4.2 Viewing the Object Space Window Panels 4.3 Defining the Secure Domain Registry Icons 4.4 Using the Find Window 4.5 Using the Find Results Window 4.6 Viewing the Go To Window 4.7 Using Drag and Drop in the Object Space Module Management Console for Windows Administration Guide 4 1

48 Chapter 4: Using the Policy Director Object Space Module 4.1 Viewing the Object Space Main Window The Object Space Module on the Tech Manager Console window assists you to view the objects and their policies. It allows you to peruse the objects within the object space, create Protected Object Policies (POP), as well as ACL Policies, and attach them to objects in the directory. The Object Space window contains a Menu bar, a Toolbar, and a display area consisting of protected name space objects, ACL Policies, and POP Policies. See the following figure. Figure 4-1: The Object Space Module Main Window The Object Space main window consists of a Menu bar, Toolbar, and two primary display areas. 4 2 Version 3.7

49 4.1.1 Viewing the Object Space Menu Bar Viewing the Object Space Main Window The options on the menu bar across the top of the main window accesses most major Object Space Module functions for performing registry tasks, changing the appearance of windows, and acquiring information (Help). For detailed information on selecting entries and general window operations, see chapter 6, Common Console Concepts. See the following figure. Figure 4-2: The Object Space Menu Bar The following items appear in the Object Space Menu bar: File - Specifies the following menu item choices: Login... - Allows you to log in to a secure domain as a specific user. Save - Causes the Object Space Module to save the display state of the Registry and the Contents panels in the main Object Space window. Note: The view in the contents panel is saved automatically each time it is changed. Print... - Allows you to print the contents of either the registry or contents view box. This is especially useful when the contents window is displaying detail information. License... - Enables the licensing tool to start or edit access to the Modules within the Tech Manager. Lock Manager - Disables the interface and prevents anyone from using this tool until a password is entered. Version - Allows you to view the current version information for each installed module. For more information on this window, see Section 6.10: Viewing the Installed Modules Information Window. Exit - Allows you to close the PD Console window. Object - Specifies the following menu item choices: New... - Allows you to create a new object, such as a POP, or add an ACL policy to a protected object. Clone - Allows you to clone (create an exact copy of) a POP or ACL policy. Management Console for Windows Administration Guide 4 3

50 Chapter 4: Using the Policy Director Object Space Module Custom Commands... - (if available) Causes the Custom Menu Item Dialog window to appear so you can create your own Object Space menu items that invoke functionality on the selected objects or to execute "home grown" commands or run other applications. Edit - Specifies the following menu item choices: Properties... - Allows you to view or modify details of the current selected object; such as an existing POP or ACL policy. It also allows you to view the contents of a file. Permissions... - Causes a Permissions window to open so you can view the applied permissions, i.e., the ACL Policy, on a protected object. Attach Policy... - Causes the Edit Protected Object window to appear so you can enter the name of an ACL or POP you want to attach to the object. Detach Policy - Allows you to detach a previously attached policy. This is only enabled if the selected protected object has an ACL or POP attached. If only one of an ACL or POP are attached, then a question dialog pop-up window appears asking if you really want to detach the acl or pop. If an ACL and a POP are attached to the object, then a question dialog pop-up window appears with two checkboxes that lets you select which policy type, or both, to detach from the protected object. Cut - Cuts the selected protected object into the paste buffer. Copy - Copies the selected protected object into the paste buffer. Paste - Pastes the protected object from the paste buffer into the registry. Delete - Deletes selected protected objects from the Object Space main window. Find... - Causes the Find window to appear so you can find protected objects or protected object policies meeting find criteria. Go To... - Searches and selects (highlights) entries in the Object Space main window meeting the Go To criteria. Select All - Selects all of the protected objects in the display area. Deselect All - Causes all selected protected objects in the display area to become unselected. Expand - Expands the currently selected item one level. Expand Branch - Expands the currently selected item through all levels. Collapse - Closes the currently expanded item. View - Specifies the following menu item choices: Icons - Displays the protected objects in the Object Space by icons. This is the default view. List - Displays the icons in the Object Space display area in single columns. 4 4 Version 3.7

51 Viewing the Object Space Main Window Details - Displays the Object Space objects by columns of text with variable types of information. Refresh - Refreshes the selected object with the most current information. Show Module - Displays all currently available Tech Manager modules and shows the current visible module as the active module. Tools - Specifies the following menu item choices: Bulletin Board - Allows you to cut and paste multiple protected objects into it where they can be stored and manipulated as desired. Paste Buffer - Allows you to view the protected objects that have been cut or copied into the paste buffer. Each time you copy or cut a protected object, the previous information in the Paste Buffer is overwritten. Options - Specifies the following menu item choices: General Options... - Opens a Tech Manager Options window so that you can choose which Modules you want to display in the main Tech Manager window. For a detailed explanation of this window, see Section : Tech Manager Options. Display Options... - Opens a General Display Options window that lets you change the visual characteristics (fonts, colors, spacing, etc.) of the interface. For a detailed explanation of this window, see Section 6.5: General Display Options. Namespace List Options... - Opens a Namespace List Object Space window that enables you to change the sort and order of the columns in the registry display area of the Object Space main window. For a detailed explanation of this window, see Section 6.4.3: View Box Options Windows. Contents List Options... - Opens a Contents List Options window that allows you to change the sort and order of the columns in the contents display area (in the detail view) of the Object Space main window. For a detailed explanation of this window, see Section 6.4.3: View Box Options Windows. Help - Specifies the following menu item choices: Windows Help - Provides access to the Help information that is available for the main window of the Object Space window. The help itself is HTML files that are displayed within the browser of choice. You must have one of the standard Internet Browsers available on your machine. Management Console for Windows Administration Guide 4 5

52 Chapter 4: Using the Policy Director Object Space Module 4.2 Viewing the Object Space Window Panels There are two main view panels in the Object Space main window. The following sections discuss the purpose of the Object Space Hierarchy and Object Space Contents windows Viewing the Object Space Hierarchy Window The hierarchy window displays the secure domain name, the protected objects, ACL Policies, and POP Policies. The protected objects are displayed in a hierarchical view starting with (/) the root directory. The other branches in the following figure include WebSEAL and NetSEAL. At the root level you can have information made secure, or sealed. For instance, WebSEAL is the Security Manager for Web-based servers and resources. WebSEAL is a high performance, multi-threaded Web server that applies fine-grained security policy to the protected Web object space. WebSEAL can provide single sign-on solutions and incorporate back-end Web application server resources into its security policy. The Object Space module allows you to add policies to WebSEAL objects. NetSEAL is the Security Manager for TCP-based communication and resources. NetSEAL is a resource manager that applies coarse-grained security policy to all incoming TCP/IP communications. NetSEAL performs access control based on the destination port and identity of the client. NetSEAL allows any network application to be integrated with the Policy Director security services. The Object Space module allows you to add policies to NetSEAL objects. MQ SEAL allows you to secure objects that are releated to MQ maniuplation. To view POP policies, (as in a list of) click on a policy container item. To view a POP policy itself, select a POP policy and click on the Edit Properties icon. To view ACL policies, (as in a list of) click on a ACL container item. To view an ACL policy itself, select an ACL Policy and click on the Edit Properties icon. Note: To view details of a protected object policy, double click the policy item and go to the details view (View > Details). The following columns appear in the hierarchy window: 4 6 Version 3.7

53 Viewing the Object Space Window Panels Name - Displays the name of the protected object, protected object policy or ACL policy. Policy - Displays a lock if a protected object has an explicit protected object policy. Description - Displays the name of the explicit protected object policy applied to the protected object. See the following example figure. Figure 4-3: The Registry View Panel of the Main Window Viewing the Object Space Contents Window The data in the Contents (right-most display) area in the Object Space window can be displayed in three views: List, Icons and Details. You can change to any of these views by clicking View > Icons, View > List, or View > Details on the Menu bar. The List view and Icons view are fairly straightforward. The Detail view needs further explanation. The columns in the Detail View change depending on the object whose contents are being displayed. The contents window can display the children of any the following: Management Console for Windows Administration Guide 4 7

54 Chapter 4: Using the Policy Director Object Space Module Children of an Object if the protected object is selected Protected Object Policies if the policy container is selected Policy Entries if a protected object policy is selected The difference between the Detail View and the Icons or List view is that the Detail view displays more information about each object than the other views. Viewing the Contents of a Protected Object The following columns appear if you are viewing the contents of a protected object: Object Name - Displays the name of the protected object. Object Type - Displays the type of the protected object, for example, Junction, Server Policy - Displays a lock icon if a protected object has an explicit protected object policy. A lock icon indicates the presence of an ACL Policy on that object. A scroll icon indicates a POP is attached. An acl-n-pop icon is used when both an ACL and a POP are attached to the same object. Description - Displays the name of the explicit policy applied to the protected object. See the following figure for an example: Figure 4-4: Example of the Contents Detail View of a Protected Object 4 8 Version 3.7

55 Viewing the Object Space Window Panels Viewing the Contents of a Policy Container Object The following columns appear if you are viewing contents of a policy container object: Name - Displays the name of the protected object policy. Description - Displays the description of the protected object policy. See the following example figure. Figure 4-5: Example of the Contents of a Policy Container Object Viewing the Contents of a Policy Object The following columns appear when you select a policy object: Entry Name - Displays the name of the secure policy directory object. Entry Type - Displays an icon that represents the type of the entry. Types can be user, group, unauthenticated access and any authenticated user. Permissions - Displays the permission bits so you can see which permissions are granted (or not) at a glance. Management Console for Windows Administration Guide 4 9

56 Chapter 4: Using the Policy Director Object Space Module Figure 4-6: Example of the Contents View when a Policy Object is Selected Viewing the Toolbar The Object Space Toolbar allows you to create, modify and delete protected object policies and junctions and attach policies to protected objects. The cut, copy and paste functionality is also provided to allow you to modify protected object policies and attach or detach them from objects. The Toolbar also allows you to find objects in the policy director database and to go to objects in the display area. See the following figure. Figure 4-7: Object Space Toolbar The following items detail each icon that appears in the Bulletin Board Toolbar: Secure Domain Login - Allows you to login to a secure domain as a user. New... - Allows you to create a junction, protected object policy, or add an ACL policy to an existing protected object policy. Clone - Allows you to clone (create an exact copy of) an existing junction, protected object policy or ACL policy. You can use this feature to create a new POP, ACL policy, or junction by cloning an existing policy and then modifying the clone Version 3.7

57 Viewing the Object Space Window Panels Properties - Allows you to view or modify details of an existing junction, protected object policy, or ACL policy. It also allows you to view the contents of a file. Permissions - Causes a Permissions window to open so you can view the applied permissions on a protected object. This is the same as an ACL Policy. Attach Policy - Causes the Edit Protected Object window to appear so you can enter the name of an ACL or POP you want to attach to the object. Detach Policy - Allows you to detach a previously attached policy. This is only enabled if the selected protected object has an ACL or POP attached. If only one of an ACL or POP are attached, then a question dialog pop-up window appears asking if you really want to detach the acl or pop. If an ACL and a POP are attached to the object, then a question dialog pop-up window appears with two checkboxes that lets you select which policy type, or both, to detach from the protected object. Cut - Cuts the explicit protected object policy on the selected object (into the paste buffer). Copy - Copies the protected object policy, ACL policy, or the explicit policy of a selected object (and into the paste buffer). Paste - Pastes the protected object in the paste buffer into the registry. Delete - Deletes selected protected objects from the Object Space main window. Find - Causes the Find window to appear so you can find protected objects or project object policies meeting find criteria. Go To - Finds and selects (highlights) entries in the Object Space main window meeting the Go To criteria. Refresh - Refreshes the selected object with the most current information. Exit - Closes the PD Console window. Management Console for Windows Administration Guide 4 11

58 Chapter 4: Using the Policy Director Object Space Module 4.3 Defining the Secure Domain Registry Icons The following list is to help define icons that represents objects in the Object Space registry: Secure Domain - Specifies the secure domain to which the user is logged in. Folder - Specifies a container of Object Space projected objects. Server - Specifies the WebSEAL or NetSEAL (for example) server protected objects. File - Represents a file. Image File - Represents any sort of image file. HTML File - Represents any kind of file that can be viewed in a Browser or in the Contents panel. POPs Container - Specifies the Protected Object Policy container object. Policy Folder - Contains the protected object polices within the current domain. POPs - Represents a Protected Object Policy. ACLs - Represents an ACL that is either inherited or attached to a POP in a secure domain. POP and ACL - Represents a POP and ACL attached to a protected object. Protected Objects Container - Specifies a container for protected objects in a secure domain. WebSEAL Container - Specifies a WebSEAL container object. junction - represents a junction. for example, a webseal junction. NetSEAL Container - Specifies a NetSEAL container object. MQ SEAL Container - Specifies an MQ SEAL container object. Corbra SEAL Container - Specifies a Corbra SEAL container object Version 3.7

59 ACL Entries Defining the Secure Domain Registry Icons User - Represents permissions for a single user in the secure domain. Group - Specifies permissions for members of a specific group in the secure domain. User Group - Specifies permissions for members of a specific user group in the secure domain. Any-authenticated - Specifies permissions for all authenticated users for its parent policy container. Unauthenticated - Specifies permissions for those users who have not been authenticated by the Security Server. Management Console for Windows Administration Guide 4 13

60 Chapter 4: Using the Policy Director Object Space Module 4.4 Using the Find Window The Object Space Find window assists you to find a protected object or a protected object policy in the name space. You can search by the object type, such as whether it is a file, directory, or junction, and so on; or, you can search by protected object policy, or by permissions. Combination searches can also be performed. For example, you can search for protected objects of the type junction that have an applied policy in which a user admin exists. If the start item is a protected object, the Find command searches for protected objects matching the criteria. If the start item is the policy container, the Find command searches for protected object policies matching the criteria. Note: In the Find window, only the items that are applicable are enabled. You can view the Find window by first selecting a directory or object, and then clicking the Find icon (looks like a pair of binoculars) on the Toolbar. Or, you can click Edit > Find... on the Menu bar. This causes the Find window to appear. See the following figure. Figure 4-8: Find Window 4 14 Version 3.7

61 Using the Find Window The Find window contains three text entry fields, followed by three tab areas - Object Search, Policy Search, and Permission Search. At the bottom of the Find window are the action buttons. The three text entry fields that appear at the very top are: Start From - Specifies the directory and path you have currently selected for the beginning of your search. Search Pattern - Specifies the specific filter you want to narrow down the search results. Search Level - Specifies a text entry field where you can designate the number of levels (or directories) you want the Search to go through. This text entry field is grayed out by default until the Search All field is deselected. Search All - Searches through all directories and objects Action Buttons The following action buttons appear at the bottom of the Find window. Find - Causes the Object Space module to look through the Object Space registry and open a Find Results window with all items that matched your filter appearing in the display area. See 4.5 Using the Find Results Window. Clear - Resets all text entry fields and options back to their default settings. Close - Closes the Find window without further action. Help - Causes a Help window to appear Object Search Tab The Object Search tab in the Find Window enables you to search the Object Space for a registry object by type of protected object. You can click the box next to the type of object you want to find. For example, you can search for all junctions in your registry. See the following figure. Management Console for Windows Administration Guide 4 15

62 Chapter 4: Using the Policy Director Object Space Module Figure 4-9: Object Search Tab for the Find Window The Object Search tab has the following types of protected objects: File - Specifies whether you want to look for file objects. Directory - Specifies whether you want to look for directory objects. Junction - Specifies whether you want to look for junction objects. WebSEAL - Specifies whether you want to look for WebSEAL server objects. NetSEAL - Specifies whether you want to look for NetSEAL server objects. Container - Specifies whether you want to look for container objects. Leaf - Specifies whether you want to look for leaf objects. 3rd Party Container - Specifies whether you want to look for third-party container objects. 3rd Party Leaf - Specifies whether you want to look for third-party leaf objects. Port - Specifies whether you want to look for port-specific objects. Management - Specifies whether you want to look for management objects. NetSEAL Network - Specifies whether you want to look for NetSEAL network objects. Other - Specifies whether you want to look for any other kind of object not already listed above Version 3.7

63 Using the Find Window Policy Search Tab The Policy Search tab in the Find window allows you to search for protected objects by the type of policy attached to the object. Or, you can search for a policy that matches the name and entry criteria. For example, you can search for all protected objects that have an explicit policy attached to it. Or, search for all protected object policies that have permissions for unauthenticated access. See the following figure. Figure 4-10: Policy Search Tab for the Find Window The following options and text entry fields appear in the Policy Search tab: Explicit Policy - Specifies whether you want to find only those protected objects that have an explicit policy attached to them. Policy Name - Specifies whether you want to find a specific policy by the name of the policy. You can use the text entry field to enter a specific policy name or to perform pattern matching. Policy Entry where - Specifies whether you want to find a specific policy by the basic attributes of that policy. You can use the menu choice option and text entry field below to customize your find pattern: Entry Type - Specifies one of the following: -user - group - any-authenticated - unauthenticated Entry Name - Specifies the name of an entry in a policy you want to find. This text field is followed by a...(more) button that causes the Browse Users (if you selected a user in the Entry Type field) window to appear. If you select a group in the Entry Type field, the...(more) button causes the Browse Groups window to appear. Management Console for Windows Administration Guide 4 17

64 Chapter 4: Using the Policy Director Object Space Module Search groups - Specifies whether you want the Find command to search for users through groups Permission Search Tab The Permission Search tab of the Find window allows you to search through protected objects or ACL policies for allowed as well as denied permissions. For example, you can search for all objects to which a specific user has write and execute permissions. Or, you can search for all protected objects where there are no traverse permissions for unauthenticated access. See the following figure. Figure 4-11: Permission Search Tab for the Find Window The Permission Search tab contains a scrollable display area with two columns. Appearing next to the display area are three action buttons. The display area has the following columns: Name - Specifies the name of the permission bit. Object Type - Specifies whether the associated permission bit is denied or allowed. Action Buttons The following action buttons appear to the right of the Permission Search tab display area: Allow - Causes a green check mark to appear in the Object Type column. Deny - Causes a red X to appear in the Object Type column. Clear - Resets all permission bits back to their default settings Version 3.7

65 4.5 Using the Find Results Window Using the Find Results Window The Find Results window allows you to view and perform additional operations on the results of a Find operation. The Find window appears when a Find operation is started. This window displays the Object Space registry objects that match the find criteria. See the following figure. Figure 4-12: Find Results Window The Find Results window contains a Menu bar, a Toolbar, and a scrollable display area with several columns of text. The display area columns change depending on whether you are searching for objects or policies Find Results Window Menu Bar The Menu bar of the Find Results window contains the following items: File - Specifies the following item: Exit - Allows you to close the Find Results window. Edit - Specifies the following items: Properties... - Allows you to view or modify details of an existing junction, protected object policy, or ACL policy entry. It also allows you to view the contents of a file. Management Console for Windows Administration Guide 4 19

66 Chapter 4: Using the Policy Director Object Space Module Permissions... - Causes a Permissions window to open so you can view the applied permissions on a protected object. Go To... - Causes a Go To window to appear so you can quickly highlight the object you want. Help - Specifies the following item: Window Help... - Provides access to the Help information that is available for the main window of the Object Space window. The help itself is HTML files that are displayed within the browser of choice. You must have one of the standard Internet Browsers available on your machine Find Results Window Toolbar The following icons appear in the Toolbar of the Find Results window: Properties - Allows you to view or modify details of an existing junction, protected object policy, or ACL policy entry. It also allows you to view the contents of a file. Permissions - Causes a Permissions window to open so you can view the applied permissions on a protected object. Go To - Enables a Go To window in which you can search for previously loaded objects displayed in the Find Results window display area. Exit - Closes the Find Results window Find Results Window Display Area The following column names appear across the top of the Find Results display area if you are searching for objects: Name - Specifies the path and name of the user or group. Object Type - Specifies the type of object: user, group, or junction. Policy - Specifies with an icon whether or not there is a protected object policy attached to a particular user, group, or junction. Policy Name - Specifies the name of the protected object policy attached to a particular user, group, or junction. If you are searching for protected object policies, the column names across the top appear as follows: 4 20 Version 3.7

67 Using the Find Results Window Name - Specifies the path and name of the protected object policy. Description - Specifies the description of the protected object policy. Management Console for Windows Administration Guide 4 21

68 Chapter 4: Using the Policy Director Object Space Module 4.6 Viewing the Go To Window Using the Go To window you can go to (highlight) an item in the hierarcy panel of the main window. The Go To window can be used to find ancestors with explicit policies. It can help with decisions to make on attaching or detaching protected object policies. It can also be used to go to the junction or server to which a protected object belongs. See the following figure. Figure 4-13: The Go To Window The Go To window has one view-only text field at the top. This text field is filled in for you once the Go To command by way of the Find action button finds the first occurrence of an item that matches your go to criteria: Selected Item - Displays the full name of the selected item Using the Go To Section The Go To section of the Go To window has several radio-button options. You can choose any one of the following: Item - Specifies whether your want to search by any character or number sequence that you enter in the text entry field. Wildcard characters are automatic. For example, if searching for all files that begin with Ind, you need only enter Ind, not Ind*. Find Nearest Policy Item - Specifies whether you want to find the closest ancestor that has an explicit policy on it. Server Item - Specifies whether you want to find the server item to which the selected protected object belongs Version 3.7

69 Viewing the Go To Window Junction Item - Specifies whether you want to find the junction item to which the selected protected object belongs. Policy Item - Specifies whether you want to find the policy item of the applied protected object policy on the selected item Action Buttons See the following action buttons that appear at the bottom of the Go To window: Find - Causes the Go To command to highlight the item that matches your criteria in the Object Space Registry display area of the main window. Previous - Causes the Go To command to highlight a previous item (if any) that matches your criteria in the Object Space Registry display area of the main window. Next - Causes the Go To command to highlight the next available item (if any) that matches your criteria in the Object Space Registry display area of the main window. Close - Closes the Go To window without any further action. Help - Causes a Help window to appear. Management Console for Windows Administration Guide 4 23

70 Chapter 4: Using the Policy Director Object Space Module 4.7 Using Drag and Drop in the Object Space Module In the table below, you can drag any item specified in the first column, onto any of the Object Space registry objects in the second column. The Action column specifies the kind of action performed, and the last column is a description of what takes place. DRAG (COPY) DROP(PASTE) ACTION DESCRIPTION Permission ACL Policy Entry (ies) COPY Add permission to the ACL policy entry item Permissions ACL Policy Entry (ies) COPY Add permissions to the ACL policy entry item ACL Policy Entry Protected Object Policy (ies) COPY Add an ACL policy entry to a protected object policy Permission (s) COPY Add permission (s) to the ACL policy entry item ACL Policy Entry (ies) COPY Add permissions from drag item to drop item (s) ACL Policy Entries Protected Object Policy (ies) COPY Add entries to protected object policy (ies) Permission(s) COPY Add permission to ACL policy entries Protected Object Policy ACL Policy Entry (ies) COPY Add entry to protected object policies Protected Object Policy (ies) COPY Add entries from drag item to drop item Protected Item (s) COPY Attach protected object policy to protected item 4 24 Version 3.7

71 Using Drag and Drop in the Object Space Module DRAG (COPY) DROP(PASTE) ACTION DESCRIPTION Protected Object Policies ACL Policy Entry (ies) COPY Add an ACL policy entry to protected object policies Protected Item (s) Policy COPY Attach protected object policy to protected item (s) Protected Item COPY Copies protected object policy from drag item to drop item MOVEMoves protected object policy from drag item to drop item Management Console for Windows Administration Guide 4 25

72 Chapter 4: Using the Policy Director Object Space Module 4 26 Version 3.7

73 5 Managing ACL and POP Policies The Object Space module manages ACL Polices and protected objects in the Object Space namespace. The major sections of this chapter include: 5.1 Understanding the Object Space Module 5.2 Adding an ACL Policy 5.3 Cloning an Existing Policy 5.4 Editing a Protected Object 5.5 Editing an Existing ACL Policy 5.6 Modifying a Policy Using Drag and Drop 5.7 Adding an ACL Policy Entry 5.8 Editing an ACL Policy Entry 5.9 Editing Protected Object Policies (POPs) 5.10 Object Space Module Tasks Management Console for Windows Administration Guide 5 1

74 Chapter 5: Managing ACL and POP Policies 5.1 Understanding the Object Space Module The Object Space registry is comprised of a hiearhical portarayal of resources belonging to a secure domain and the polices that can be applied to those resources. Policies are a set of controls that specifies the conditions necessary to perform certain operations on a resource. Version 3.7 of the Object Space Tech Manager module assists you to protect resources in a secure domain, by attaching policies to the objects within it. The following terms might aid your understanding: An Object Space protected space is the logical and hierarchical portrayal of resources belonging to a secure domain. A Protected Object Policy (POP) is a set of rules or permissions that specify the conditions necessary to perform an operation on a protected space. An Access Control List (ACL) policy defines operations permitted by a specific user, any authenticated user, unauthenticated access or a group. An ACL policy is the same as the pemissions an object is assigned or inherits. 5 2 Version 3.7

75 Adding an ACL Policy 5.2 Adding an ACL Policy The Create ACL Policy window allows you to add a new ACL Policy to the Object Space namespace. To add an ACL Policy, select the ACL policy container object in the Namespace display area of the main window and then click the Add icon on the Toolbar (or, you can click Object > New... on the Menu bar). The Create ACL Policy window appears. See the following figure. Figure 5-1: Create ACL Policy Window The following text entry fields appear in the Create ACL Policy window: Policy Name - Specifies the name of the new ACL Policy Action Buttons Policy Description - Specifies a brief description of the new ACL Policy. The following action buttons appear at the bottom of the Create ACL Policy window. OK - Add the new ACL Policy to the display and to the Object Space namespace. The new ACL Policy provides attach, browse, control and traverse permissions to the policy object to which this policy will be applied. Close - Closes the Create ACL Policy window. Help - Causes a Help window to appear. Management Console for Windows Administration Guide 5 3

76 Chapter 5: Managing ACL and POP Policies 5.3 Cloning an Existing Policy Cloning an ACL policy can be used to create a protected object policy that has similar policy entries as an existing protected object policy. The cloned protected object policy can now be modified as an independent object. To clone an ACL policy, select an existing policy and click the Clone icon on the Toolbar (or, you can click Object > Clone... on the Menu bar). This causes the Clone Policy window to appear. The Clone Policy window is identical to the Add Policy window. For more information, see 5.2 Adding an ACL Policy. Note: You can also clone a protected object policy by dragging a protected object policy and dropping it on the cloned protected object policy. 5 4 Version 3.7

77 Editing a Protected Object 5.4 Editing a Protected Object The Edit Protected Object window allows you to edit a projected object policy, attach a protected object policy, attach an ACL Policy, or assign extended attributes to a protected object. You can view this window by first selecting an object and then clicking the Properties button Policy icon in the Toolbar, or by clicking Edit > Properties... in the Menu bar. The following text entry field appears at the top of the Edit Protected Object window: Object Name - Indicates the name of the Attached Protected Object Policy want to edit. This field is followed by the button: Load - Allows you to load a different POP into this window. The Edit Protected Object window contains two tabs, Common and Extended Attributes Common Tab The Common tab allows you edit the description of a projected object, attach ACL Policies, or attach a Protected Object policy. See the following figure. Management Console for Windows Administration Guide 5 5

78 Chapter 5: Managing ACL and POP Policies Figure 5-2: The Common tab of the Edit Protected Object window The following fields and options appear under the Common tab of the Edit Protected Object window: Description - Specifies a text entry field where you can enter a short description of the protected object. Type - Indicates the type of protected object you want to edit. This field is followed by a pull-down menu that lists all of the types of protected objects available. Select one by highlighting it with your mouse. The selected type appears in the read-only field. Can a POP be attached to this object - Specifies whether you want to allow a POP to be attached to this object. Inside a Properties box outline, are the following fields: Attached ACL - Specifies a text-entry field where you can enter the name of the ACL Policy you want to attach to the Projected Object. This field is followed by these buttons:... (More) - Causes an ACL List window to appear, so you can select ACL Policies from a list. See the Section 5.4.4: Viewing the List of ACL Policies Window for more information. 5 6 Version 3.7

79 Editing a Protected Object Edit Properties Icon - Causes the ACL Editor window to appear so you can view and modify the details for the ACL Policy that is attached. See Section 5.5: Editing an Existing ACL Policy for more information. Inherited ACL - A read-only item that appears below the Attached ACL field. This indicates the name of the inherited policy if there is not a policy directly attached. Attached POP - Specifies a text-entry field where you can enter the name of the Protected Object Policy you want to attach to the Projected Object. This field is followed by these buttons:... (More) - Causes a List of POP Policies window to appear, so you can select a POP from a list. See Section 5.4.5: Viewing the List of POP Policies Window for more information. Edit Properties Icon - Causes the Edit POP Policy window to appear so you can view and modify the details for the protected object policy that you are applying. See Section 5.9.1: Common Tab for more information. Note: You can only detach a policy if it is explicitly attached Extended Attributes Tab The Extended Attributes tab allows you to assign extended attributes to a protected object. Note: The Extended Attributes tab may not appear in the current 3.7 version. See the following figure. Management Console for Windows Administration Guide 5 7

80 Chapter 5: Managing ACL and POP Policies Figure 5-3: Extended Attributes tab of the Edit Protected Object Window The Extended Attributes tab contains a display area with two columns: Name - Specifies the name given the extended attribute. Value - Specifies the value assigned to the extended attribute. These same column names appear as text entry fields below the display area. Action Buttons for the Extended Attributes Tab Add - Allows you to add the entries in the Name and Value field to the display area. Remove - Allows you to remove selected or highlighted entries from the display area. Note: You must click the OK or Apply button at the bottom of this window for extended attribute changes to be applied to the object. 5 8 Version 3.7

81 Editing a Protected Object Action Buttons for the Edit Projected Object Window The following Action buttons appear at the bottom of the Edit Protected Object window: OK - Applies any changes you have made and closes the Edit Protected Object window. Apply - Applies any changes you have made and causes the Edit Protected Object window to remain open. Close - Closes the Edit Protected Object window. Help - Causes a Help window to appear Viewing the List of ACL Policies Window The List of ACL Policies window assists you to choose a new or different ACL policy (other than the one an object is naturally inheriting) for a selected namespace object. The List of ACL Policies window appears when you click the...(more) button next to the Attached ACL text entry field in the Edit Protected Object window. See the following figure. Figure 5-4: List of ACL Policies The List of ACL Policies window consists of a scrollable display area that shows all valid ACL policies in the Object Space namespace. Management Console for Windows Administration Guide 5 9

82 Chapter 5: Managing ACL and POP Policies Action Buttons The following action buttons appear at the bottom of the List of ACL Policies window: OK - Causes the selected ACL policy to appear in the Attached ACL text entry field and closes the List of ACL Policies window. Apply - Causes the selected ACL policy to appear in the Attached ACL text entry field and leaves the List of ACL Policies window open. Refresh - Resets the display window with the most current information. Close - Closes the List of ACL Policies window without any further action. Help - Causes a Help window to appear Viewing the List of POP Policies Window The List of POP Policies window assists you to choose a new or different Protected Object Policy (POP) (other than the one an object is naturally inheriting) for a selected namespace object. The List of POP Policies window appears when you click the...(more) button next to the Attached POP text entry field in the Edit Protected Object window. See the following figure. Figure 5-5: List of POP Policies The List of POP Policies window consists of a scrollable display area that shows all valid POPs in the Object Space namespace Version 3.7

83 Action Buttons Editing a Protected Object The following action buttons appear at the bottom of the List of POP Policies window: OK - Causes the selected Protected Object Policy to appear in the Attached POP field and closes the List of POP Policies window. Apply - Causes the selected Protected Object Policy to appear in the Attached POP field and leaves the List of POP Policies window open. Refresh - Resets the display window with the most current information. Close - Closes the List of POP Policies window without any further action. Help - Causes a Help window to appear. Management Console for Windows Administration Guide 5 11

84 Chapter 5: Managing ACL and POP Policies 5.5 Editing an Existing ACL Policy The Edit ACL Policy window displays details of an ACL policy. It provides a clear view of specific operations a user or a group can perform. An ACL policy serves as a template. When an ACL policy is attached to an object, it provides rules on that object. You can view the Edit ACL Policy window by first selecting a protected object policy in the Object Space Namespace display area and clicking the Edit ACL Policy icon in the Toolbar (or, by clicking Edit > Properties on the Menu bar). See the following figure. Figure 5-6: Edit ACL Policy Window 5 12 Version 3.7

85 Editing an Existing ACL Policy The Edit ACL Policy window consists of a Menu Bar, a Toolbar, two text entry fields, and a scrollable display area Edit ACL Policy Menu Bar The Edit ACL Policy Menu bar appears at the top of the Edit ACL Policy window. See the following items: File - Specifies the following item: Exit - Closes the Edit ACL Policy window. Object - Specifies the following items: New... - Causes the Add Policy Entry window to appear so you can create a new protected object ACL policy entry. For more information on this window, see 5.7 Adding an ACL Policy Entry. Clone - Causes the Clone Policy Entry window to appear so you can clone the selected ACL policy, entry, or item. Edit - Specifies the following items: Allow - Click to change selected permissions to allow. Deny - Click to change selected permission to deny. Update Description... - Causes an Edit Description window to appear so you can alter the description of a protected object policy. Copy - Copies a selected ACL policy entry or permissions object. Paste - Pastes the permissions of a ACL policy entry or copied permissions to the selected ACL policy entry object. Delete - Removes policy entries from the protected object policy. Find - Finds all the protected objects to which the ACL is attached. Causes the Find ACL Policy window to appear. For more information, see Section 5.5.5: Using the Find ACL Policy Window. View - Specifies the following item: Show Allow Permissions - Specifies whether you want to show only the allow permissions (green check mark) or, show all permissions. Help - Specifies the following item: Window Help - Provides access to the Help information that is available for the main window of the Edit ACL Policy window Edit ACL Policy Toolbar The Edit ACL Policy Toolbar appears just below the Menu bar. See the following figure. Management Console for Windows Administration Guide 5 13

86 Chapter 5: Managing ACL and POP Policies Figure 5-7: Edit ACL Policy Toolbar The Edit ACL Policy Toolbar consists of the following items: New... - Causes the Add Policy Entry window to appear so you can create a new ACL policy entry. For more information on this window, see 5.7 Adding an ACL Policy Entry. Clone - Causes the Clone Policy Entry window to appear so you can clone an ACL policy entry. Allow Permission - Click to change selected permissions to allow. Deny Permission - Click to change selected permission to deny. Copy - Copies a selected ACL policy entry or permissions object. Paste - Pastes the permissions of an ACL policy entry or copied permissions to selected ACL policy entry object. Delete - Removes selected policy entries from the ACL Policy. Find - Finds all the protected objects to which the ACL is attached. Causes the Find ACL Policy window to appear. For more information, see Section 5.5.5: Using the Find ACL Policy Window. Exit - Closes the Edit ACL Policy window Edit ACL Policy Text Fields The following text entry fields appear just below the Toolbar: Policy Name - Specifies the name of the selected policy in the Object Space main window. This field is followed by a...(more) button that opens the List of ACL Policies window. For more information, see Section 5.4.4: Viewing the List of ACL Policies Window. Policy Description - Specifies a short description of the selected policy Edit ACL Policy Display Area The display area consists of the following two columns: 5 14 Version 3.7

87 Editing an Existing ACL Policy Name - Specifies the name of the user or groups that the entry targets. In terms of permissions, the Name column also displays the mnemonic and what the permission stands for under the selected policy. Action Group - Specifies a collection of ACL bits or permissons. This column shows the group to which the permissions belong. Description - Specifies for entries the permission string with the appropriate mnemonic set. In terms of permissions, the Description column describes the meaning of the mnemonic. For example, in the Edit ACL Policy window, under the Description column, look at the permission bit in brackets "[bt]". The name in brackets is the name of an action group. Following the name in brackets are the permissions that are in the group. If there are two action groups, "bt" and "jbgroup", then the permission string might look similar to: Tc-mdbsva-----NWA[bt]b-[jbgroup]weDw-xf Using the Find ACL Policy Window The Find ACL Policy window helps you to find all the protected objects to which the ACL is attached. This shows you what parts of the protected object tree are affected by this ACL Policy. See the following figure. Figure 5-8: The Find ACL Policy Window Management Console for Windows Administration Guide 5 15

88 Chapter 5: Managing ACL and POP Policies The Find ACL Policy window contains a scrollable display area that lists all found protected objects. The display area is followed by three action buttons: Update - Refreshes the display area to the most current found protected objects. Close - Closes the Find ACL Policy window. Help - Causes a Help window to appear. The action buttons are followed by a Status Information bar which is explained in detail in Section 6.4.2: Status Information Area Version 3.7

89 Modifying a Policy Using Drag and Drop 5.6 Modifying a Policy Using Drag and Drop Another way you can modify a protected object policy or policies is to drag and drop. Drag and drop supports adding entries to a POP by dragging multiple policy entries and dropping it on a policy. Or, replacing the policy entries of one object by another by dragging a policy and dropping it on another policy. In the table in Section 4.7: Using Drag and Drop in the Object Space Module, you can drag any item specified in the first column, onto any of the Object Space namespace objects in the second column. The Action column specifies the kind of action performed, and the last column is a description of what takes place. Management Console for Windows Administration Guide 5 17

90 Chapter 5: Managing ACL and POP Policies 5.7 Adding an ACL Policy Entry The Add Policy Entry window allows you to add a new ACL policy entry. To add an ACL policy entry, select a policy you want the entry to be added to and click the New... Icon on the Toolbar, this appears as a Plus sign (or, click Object > New... on the Menu bar). This causes the Add Policy Entry window to appear. See the following figure. Figure 5-9: The Add Policy Entry Window The Add Policy Entry window the following text fields: Entry Type - Specifies the type of policy entry you want to add. This field is followed by a drop-down menu with the following items: user - Sets permissions for a specific user in the secure domain. The user entry type requires an account name (ID). group - Sets permissions for members of a specific group in the secure domain. The group entry type requires a group name (ID). any-authenticated - Sets permissions for all authenticated users. No ID designation is required. unauthenticated - Sets permissions for unauthenticated access. No ID designation is required. Entry Name - Specifies the name of the user or group. This field is followed by a... (More) button that causes a Browse Users (or Groups) window to appear. You can use the Browse window to select a name or ID from the user and groups existing in the accounts database. To create a new user or group, see Section 3.4: Adding a New User. See Section 5 18 Version 3.7

91 Adding an ACL Policy Entry 5.7.5: Viewing the Browse Users or Groups Window for more information about the Browse Users window. Just below the Entry Name text entry field is a Permissions line followed by dashes. As you select individual permissions bits in the tab panels below, these dashes are replaced by the allowed permissions Action Buttons The following action buttons appear at the very bottom of the Add Policy Entry window: OK - Causes a new entry to be added to the ACL Policy. The Add Policy Entry window closes. Apply - Causes a new entry to be added to the ACL Policy. The Add Policy Entry window remains open. Close - Closes the Add Policy Entry window without any further action. Help - Causes a Help window to appear Add Policy Entry Common Tab The Common tab in the Add Policy Entry window allows you to set permissions to an ACL policy entry. These permissions are base and generic permissions that apply to all objects. See the following figure. Figure 5-10: Common Tab of the Add Policy Entry Window The Base permissions section contains the following permission bits: Attach(a) - Attach policy templates to objects; remove policy templates from objects. Management Console for Windows Administration Guide 5 19

92 Chapter 5: Managing ACL and POP Policies Add(A) - Allows you to add existing users to a group. The regular modify (m) permission on /Management/Groups allows you to create new groups and new users. But the capability of adding existing users to your group is powerful because the owner of a group has control over all user members of the group. If you as the owner of the group also have delete (d) permission, you can delete this user from the entire secure domain. Browse(b) - View the contents of the object space below the object. Bypass TOD(B) - Overrides the time-of-day POP policy attribute (if set) - appropriate for administrators only. Control(c) - Specifies ownership of the policy template; allowed to create, delete and modify entries for this protected object policy. Delegation(g) - Assigns trust to a WebSEAL server to act on behalf of a client, and pass that request to a junctioned WebSEAL server. Create(N) - Create or import a new user or new group. Traverse(T) - Allows the requester to hierarchically pass through the object on the way to the requested object. It does not allow any other type of access to the object. Traverse is also required on the requested object itself. Password(W) - Controls use of "user modify password" and "user modify password-valid" pdadmin commands. This permission bit is most often given to helpdesk administrators, for example, to help users reset lost or forgotten passwords. The Generic permissions section contains the following permission bits: Delete(d) - Delete the server resources definition. Modify(m) - Modify an existing object. Server Admin(s) - Perform server administration tasks (such as start, stop, suspend, resume). View(v) - View the attributes of a specific resource Add Policy Entry Server Tab The Server tab in the Add Policy Entry window allows you to set permissions to an ACL policy entry pertaining to specific operations of WebSEAL and NetSEAT. See the following figure Version 3.7

93 Adding an ACL Policy Entry Figure 5-11: Server Tab of the Add Policy Entry Window The WebSEAL server permissions section contains the following permission bits: List Directory(I) - Generate an HTTP directory auto-list. Read(r) - View the HTTP object. Execute(x) - Run the CGI program. The NetSEAL server permissions section contains the following permission bits: Connect(C) - Connect through a NetSEAL server to a local or remote protected service. Forward(f) - Permit outgoing connection across a NetSEAL junction; traverse the junction Example Action Group Tab -- bt Each action group that appears in the Edit ACL Policy window is shown in the Add Policy Entry and the Edit Policy Entry window as a new tab. So, in the Add Policy Entry figure, a tab appears for the "bt" action group. In other words, the bt name for an action group is just an example. A tab appears in the Add Policy Entry and Edit Policy Entry window for every action group that appears initially in the Edit ACL Policy window. In the action group tab, a checkbox appears for each action (permission) that has been added to the action group. See the following figure. Management Console for Windows Administration Guide 5 21

94 Chapter 5: Managing ACL and POP Policies Figure 5-12: Add Policy Entry Window - bt Tab Example In the figure above, an action group called "bt" has been created with two actions added to it, "b", and "t". Therfore, the tab has two checkboxes, one for each action that was added to the group Viewing the Browse Users or Groups Window The Browse Users (or Groups) window is used to select a specific user or group name from the user registry. The Browse Users window appears when the... (More) button is clicked next to the Name (ID) field at the top of the Add Policy Entry window. See the following figure. Figure 5-13: Browse Users (or Groups) Window 5 22 Version 3.7

95 Adding an ACL Policy Entry The Browse Users window contains the following text field and options: User (or Group) Name Pattern - Specifies a text field in which you can enter specific pattern-matching values to help narrow your search. Limit to - Specifies a choice box in which you can choose whether to limit the number of entries that display in the Search Results display area. The default number is 50, and this value can be changed. Append - Specifies a choice box in which you can choose whether to append the results of your search to previously loaded data in the Search Results display area. Under the choice boxes are two action buttons: Load - Causes the Browse window to search for any users (or groups) that match the filter criteria you specified and displays the results in the Search Results display area. Stop - Stops a search that is currently in progress. Just under the Load and Stop action buttons is the Search Results display area in which a list of users (or groups) appears. Action Buttons This display area is followed by these action buttons: OK - Causes the selected user to appear in the Entry Name field in the Add Entry Policy window. The Browse Users window closes. Apply - Causes the selected user to appear in the Entry Name field in the Add Entry Policy window. The Browse Users window remains open. Close - Closes the Browse Users window. Help - Causes a Help window to appear. Management Console for Windows Administration Guide 5 23

96 Chapter 5: Managing ACL and POP Policies 5.8 Editing an ACL Policy Entry You might want to edit an ACL policy entry in order to change or alter access for a specific user or group. The Edit Policy Entry window is identical to the Add Policy Entry window featured in 5.7 Adding an ACL Policy Entry. You can view the Edit Policy Entry window by first selecting an ACL policy entry in the Object Space namespace and clicking the Properties... Icon on the Toolbar (or, click Edit > Properties... on the Menu bar). The Edit Policy Entry window appears. Enter the appropriate changes and click the OK or Apply action buttons at the bottom of the window Version 3.7

97 Editing Protected Object Policies (POPs) 5.9 Editing Protected Object Policies (POPs) The purpose of the Edit Protected Object Policy (POPs) window is to allow you to edit the properties of a Protected Object Policy. The following text entry field appears at the top of the Edit POP Policy window: POP Name - Indicates the name of the POP you want to edit. This field is followed by the button: Load - Allows you to load a different POP into this window. The Edit POP Policy window contains two tabs, Common and Extended Attributes Common Tab The Common tab allows you edit the properties of a protected object policy. See the following figure. Figure 5-14: The Common tab of the Edit POP Policy Window The following fields and options appear under the Common tab of the Edit POP Policy window: Management Console for Windows Administration Guide 5 25

98 Chapter 5: Managing ACL and POP Policies Description - Specifies a text entry field where you can enter a short description of the Protected Object Policy. Audit Level - Indicates a level of auditing that applies when a resource is accessed to which this Protected Object Policy is attached. The possible values for this field are: All None A list of any of: permit, deny, error, or admin. Quality of Protection - Specifies the level of protection that applies when a resource is accessed to which this Protected Object Policy is attached. This field is a pull-down menu that lists the possible values. None is the default. Time of Day Access - Specifies the time of day or week during which a resource might be accessed. Warn Mode - Indicates whether policy violations related to a resource results in denial of access, or simply an audited failure. If this field is selected, attempted access to a resource to which this Protected Object applies is not denied, only audited (logged) Extended Attributes Tab The Extended Attributes tab allows you to assign extended attributes to a protected object. This window has already been described in detail. See Section 5.4.2: Extended Attributes Tab for more information. Note: The Extended Attributes tab may not appear in the current 3.7 version Action Buttons for the Edit POP Policy Window The following Action buttons appear at the bottom of the Edit POP Policy window: OK - Applies any changes you have made and closes the Edit POP Policy window. Apply - Applies any changes you have made and causes the Edit POP Policy window to remain open. Close - Closes the Edit POP Policy window. Help - Causes a Help window to appear Version 3.7

99 Editing Protected Object Policies (POPs) Attaching a Protected Object Policy (POP) by Drag and Drop To attach or detach a protected object policy by dragging and dropping see the following steps: Note: You cannot detach a policy using drap and drop. 1. Drag a POP policy entry, or a number of policy entries. 2. Drop on a protected object policy. 3. The Edit POP Policy window appears. Enter the policy name or select a policy from the... (More) button. 4. Click the Attach button. The Policy is attached to the protected object. The protected object is shown with a lock icon and the new policy name. If a policy is already attached to the drop object, the new policy replaces the current policy Attaching a Protected Object Policy (POP) To attach a protected object policy to an object, see the following steps: 1. Select an item to which you want to attach a protected object policy. 2. Click the Attach/Detach Policy Icon on the Toolbar, (or, click Object > Attach/Detach Policy on the Menu bar.) The Attach/Detach Policy window appears. 3. Enter the policy name or select a policy from the...(more) button. 4. Click the Attach button. 5. The selected item in the namespace gets modified with a lock icon and the new policy name label Detaching a Protected Object Policy (POP) To detach a previously attached Protected Object Policy, see the following steps: 1. On the main window, select a protected object on which you want to detach a protected object policy. Management Console for Windows Administration Guide 5 27

100 Chapter 5: Managing ACL and POP Policies 2. Click the Edit Properties icon on the Toolbar, (or, click Object > Edit Properties... on the Menu bar.) The Edit Protected Object window appears. 3. Remove the entry in the Attached POP text entry field. 4. Click the OK or Apply button at the bottom of the Edit Protected Object window Version 3.7

101 Object Space Module Tasks 5.10 Object Space Module Tasks The following procedures are typical tasks you might want to perform while using the Object Space module Adding an ACL Object Policy To create a new ACL Policy, see the following steps: 1. Select an ACL Policy container object in the Object Space namespace. 2. Click on the New... icon (looks like a plus sign) or select Object > New from the Menu bar. The Add Policy window appears. 3. Enter the name for the new ACL Policy. 4. Enter the policy description (optional). 5. Click the OK button. (This creates a new ACL Policy used to limit access for the user that created the policy). The Edit Policy window appears so you can make additional changes Cloning an ACL Policy Another way you can add a new ACL policy entry is by cloning an existing one. The Clone Policy Entry window used in this procedure is identical to the Add Policy Entry window featured in 5.7 Adding an ACL Policy Entry. To add an ACL policy entry by cloning an existing ACL policy entry, see the following steps: 1. Select the ACL Policies container object in the Object Space namespace. 2. Click the Clone icon (looks like two sheep) or select the Object > Clone from the Menu bar. The Clone Policy window appears. 3. Enter the name for the new protected ACL policy. 4. Enter the description (optional). 5. Click the OK button. (This creates a new ACL policy with the same entries as the cloned ACL policy.) The Edit Policy window appears so you can make additional changes, if desired. Management Console for Windows Administration Guide 5 29

102 Chapter 5: Managing ACL and POP Policies Cloning an ACL Policy by Drag and Drop See the following steps to clone an ACL Policy by dragging and dropping: 1. Drag the ACL policy you want to clone. 2. Drop it on another policy. This causes the first policy to be identical to the protected object policy on which it was dropped Adding an ACL Policy Entry To add an ACL policy entry, see the following steps: 1. Select an ACL policy in the Object Space namespace. 2. Click on the New... Icon (looks like a Plus sign), or select Object > New... from the Menu bar. The Add Policy Entry window appears. 3. Select the entry type. 4. Enter the entry name, or, load a name from the Browse Users window. 5. Click on the General Tab. 6. Select the permissions you want. 7. Click the Server Tab. 8. Select the permissions you want. 9. Click the OK button to add a policy entry to the protected object policy Adding ACL Policy Entries by Drag and Drop To add ACL policy entries by dragging and dropping them, see the following steps: 1. Drag an ACL policy entry, or a number of policy entries. 2. Drop it (or them) on a protected object policy. 3. The entries are added to the policy as soon as they are dropped. If an entry already exists, it gets modified Modifying an ACL Policy Entry Using Drag and Drop Another way you can modify entries is to drag and drop. Drag and drop supports adding or delete permissions of an ACL policy entry by dragging the 5 30 Version 3.7

103 Object Space Module Tasks allow or deny permissions and dropping them on an entry; or, you can replace the permissions of an entry by dragging an entry and dropping it on an another entry. You can also modify multiple entries by dragging entries and dropping them on a permission. In the table in Section 4.7: Using Drag and Drop in the Object Space Module, you can drag any item specified in the first column, onto any of the Object Space objects in the second column. The Action column specifies the kind of action performed, and the last column is a description of what takes place Cloning an ACL Policy Entry from the Edit Policy Window To clone an ACL policy entry, see the following steps: 1. Select an ACL policy entry in the Edit Policy window. 2. Click the Clone icon (looks like two sheep) or select the Object > Clone from the Menu bar. The Clone Policy Entry window appears. 3. Select an entry type. 4. Enter an entry name, or, load a name from the Browse Users window. 5. Change permissions as required. 6. Click the OK button to add a policy entry to the policy Allowing Permissions for a User To specify the allow permissions for a user, see the following steps: 1. Open the user entry in the Edit Policy window to view the detail permissions. 2. Select the denied permissions (the red X ). 3. Click the Allow icon (looks like a green check mark) or, click Edit > Allow in the Menu bar Changing Permissions by Dragging Permissions To change permissions by dragging them, see the following steps: 1. Drag a set of allowed and denied permissions. 2. Drop them (or it) on an ACL policy entry. Management Console for Windows Administration Guide 5 31

104 Chapter 5: Managing ACL and POP Policies 3. The ACL policy entry is modified by adding the allowed permissions and removing the denied permissions Changing Permissions by Dragging a Policy Entry To change permissions by dragging an ACL policy entry, see the following steps: 1. Drag an ACL policy entry on which you want to change permissions. 2. Drop it on another ACL policy entry. 3. The ACL policy entries permissions are replaced by the permissions of the dragged entry Version 3.7

105 6 Common Console Concepts A major goal of the PD Console is to provide tools that have a similar look and feel. To accomplish this, all GUI based tools developed within PD Console use standard graphical components provided by CGL (Common Graphics Library) to construct their Graphical Interfaces. CGL is an abstraction of the Java Swing components and provides extended functionality to standard graphical components such as buttons, text fields, etc. as well as more complicated widgets such as tables, outlines and trees. CGL enables coordination between the components and extended functionality such as automated testing, auto-replay and drag-n-drop capabilities. The PD Management Console contains many features and concepts such as the Menu Bar and Toolbar, for example, that are commonly used by all Tech Manager modules. The major sections of the Common Console Concepts include: 6.1 Menu Bar 6.2 Tool Bar Icons 6.3 Resource Files 6.4 Understanding the View Box 6.5 General Display Options 6.8 Using the Print Window 6.9 Displaying Tip Messages 6.6 Popup Menus 6.7 Drag and Drop 6.10 Viewing the Installed Modules Information Window 6.11 Customizing the Main Window Management Console for Windows Administration Guide 6 1

106 Chapter 6: Common Console Concepts 6.12 Using the Help File Viewer 6 2 Version 3.6

107 Menu Bar 6.1 Menu Bar The Menu Bar is a standard component for an Management Console Tech Manager Module. It is located at the top of the Tech Manager main window. See the following figure. The current selected module is what determines most of the items that appear in the menus. Many of the menu items have Short Cut keys defined for them which enables you to initiate the functionality of the menu item by pressing a combination of keys. This combination is designated to the right of each menu item (if defined). Also, there is a dotted line item on the top of each pulldown menu if the version of Java being used supports tear-off menus. If you select this dotted line item, then the pulldown menu becomes a separate dialog that enables you to access the menu items again without having to pulldown the menu. Figure 6-1: Tech Manager Menu Bar The following are the standard pulldown menus and their definitions and purpose: File Provides access to functionality that deals with the Tech Manager or entire Module. For example, functions like Login or Logout appear here since that affects access to all the information in the Module. The standard set of File functions for the Tech Manager are: Login - Displays a dialog box which allows you to log in as a user (where provided). Save - Provides the ability to save the current state of the module to User Defaults for later use. Print - Allows you to produce a printable version of the namespace or contents lists. License - Displays a window presenting information about which Modules you have a "License" to use. Lock - Removes access to all Tech Manager windows. Version Information... - Allows you to view specific version levels. Exit - Allows you to exit the Tech Manager program. Object Contains actions that can be performed on the GUI objects displayed in the work area, such as creating new GUI objects. These specific actions are specified by the individual Modules. Management Console for Windows Administration Guide 6 3

108 Chapter 6: Common Console Concepts New - Displays the dialog box for creating new objects in the work area (when applicable). This can also be a pulldown menu if necessary. Clone - Displays a dialog box to create copies of the selected objects. Custom Commands - Supplies the ability for an end user to create their own menu items that invoke functionality on the selected objects or to execute "home grown" commands or run other applications. This menu item displays the dialog box used to specify the specifics of a command. Edit Provides editing functions that apply to the objects within the Namespace Panel or the Contents Panel. These menu items are context sensitive, i.e., they are only enabled when an object is selected that can have that function performed on the selected item. Functions in this menu would include items such as: Properties - Displays the properties window of the selected item. Permissions - Shows the permissions of the selected item. Cut - Cuts the selected entry(s). Copy - Copies the selected entry(s). Paste - Pastes an entry at the specified place. Delete - Removes the current entry(s). Find - Finds an entry(s) in the module. GoTo - Finds and displays an entry(s) within the current work area. Select All - Selects all entries in the contents box. Deselect All - Deselects all entries currently selected in the contents area. Expand - Expands the currently selected item one level. Expand Branch - Expands the currently selected item through all levels. If leaves are displayed in the hierarchical view, then leaves the branch would be expanded display all leaf nodes. Collapse - Closes the currently selected item. View Provides functions that change the visual characteristics of the objects within the Namespace Panel or the Contents Panel. For many of the Modules the Contents Panel can be displayed as a list or as a table with more detailed information about the items. Place the ability to change from list to a table in this menu. The standard set of View functions that the Tech Manager supplies for each of the Modules regardless of the Module are: Icons - Enables the Tech Manager to display module-specific entries in the contents list as icons. 6 4 Version 3.6

109 Menu Bar List - Enables the Tech Manager to display module-specific entries in the contents list as an ordered list represented by an icon and a label. Details - Enables the Tech Manager to display module-specific entries in the contents list as columns of text with variable types of information. Refresh - Refreshes the contents of a selected object if any changes have been made since you first displayed it. Show Module - Displays all currently visible Tech Manager modules and shows the current visible module as the active module. Tools Provides a menu where supplemental tools can be started. A supplemental tool is any window that can be considered a separate application but provides functionality within the same or related technology. For example, the Agent Manager is a tool that allows you to control who has the ability to configure events on an agent machine running the Agent. With the Agent Manager, you can easily add users to a host machine and write log entries to disk. This tool could also be a separate application but is still providing functionality within the context of the Management Console. The standard set of tools provided by the Tech Manager regardless of Module are: Bulletin Board - Allows the end user to pin data using drag-and-drop. The data can then be copied into other modules or windows as appropriate. Paste Buffer - Allows the user to view the contents of the Tech Manager Paste Buffer. Options Supplies functionality that changes the visual and behavioral characteristics of the Tech Manager and of the Module. The Tech Manager itself supplies general options to change the visual characteristics (fonts, colors, spacing, etc.) of the interface. Tech Manager Options - Supplies a window that lets the end user decide which of the Modules they want to appear on their interface. Display Options - Provides a window in which the end-user can alter the fonts, colors, and other display parameters. Namespace List Options - Supplies standard view box options for the Namespace list that allows the end user to specify sort and filter criteria (if applicable). Contents List Options - Supplies standard options for the Contents list that allows the end user to specify sort and filter criteria (if applicable). Management Console for Windows Administration Guide 6 5

110 Chapter 6: Common Console Concepts Help Provides access to the Help information that is available for the Tech Manager and the Modules within it. The help itself is HTML files that are displayed within the browser of choice. This means that you must have one of the standard Internet Browsers available on your machine. The Help pull-down is always on the right hand side of the Menu Bar. The Help itself displays in these forms: Window Help - Supplies help for the window, from which the help was initiated. For Dialogs, pressing the Help button at the bottom of the window enables this type of help. Table of Contents - Supplies the table of contents for specific help documents. Master Index - Supplies a list of all available documents from the Management Console tools. Version - Enables a dialog that displays information about the current product that you are using. 6 6 Version 3.6

111 Tool Bar Icons 6.2 Tool Bar Icons Located directly below the Menu Bar is an area for the Tech Manager and the Modules to place Quick Access functions to be directly available without having to pulldown a menu. Note: Any tool bar button should have its functionality represented by at least one item in the menu bar pulldowns. Functionality provided by the tool bars is also up to the Modules. The Tech Manager supplies the Exit button on the far right of the Toolbar as a standard button. Figure 6-2: Tool Bar Example Management Console for Windows Administration Guide 6 7

112 Chapter 6: Common Console Concepts 6.3 Resource Files All of the text and the messages that appear within the console windows are contained within resource files. The enables PD Console interfaces to easily use an alternate language should the resource file be created User Defaults Each of the Console windows has visual and behavioral attributes that the user can customize. These customizations are stored in files in a directory that is created upon first usage time or installation time. This directory resides below the users home directory and is named.cmgr on UNIX systems, or cmgr on Windows NT 4.0. This directory contains files that hold information about the individual tools within the PD Console framework customized to the user s specifications. When a user changes some of the options that are available within the interfaces (such as fonts, colors, etc.,) the user can save this information as it is written into files in this directory Standard Manager Components This section is used to describe the graphical components that are common in both the Tech Manager and the Event Manager. Main Window This is the initial window that the user is presented as a result of enabling any of the graphical applications within PD Console that provides many of the capabilities listed below. Secondary Windows You can naviagate through most secondary windows by clicking on the Tab key. The Tab key takes you to the next field. The Enter key performs the default button action. The default buttons are in the following order: OK, Apply, Close, and Help. Each secondary window can have its own default button. Menu Bar The Menu Bar is located at the top of window and provides pulldown menus providing access to other functions, features and displays. Each Module should 6 8 Version 3.6

113 Resource Files adhere to the Manager Module requirements as to the location of specific functionality within the Menu Bar. Work Area The Work Area Window is the main focus of the Managers. This provides an interface or interfaces for navigating and manipulating objects that are relevant to the Manager. Tool Bars Functionality provided by the tool bars is up to the modules. The main window provides the ability to control and display multiple tool bars. The specific options available on each of the toolbars might change depending on what view is selected. Object Popup The Managers provide a mechanism for custom Popups for Selected Objects. This is the popup dialog that is enabled when the right mouse button is clicked. Drag and Drop The Managers support as much drag and drop functionality as possible to increase usability. Refer to the individual Module documentation to determine if a specific drag and drop functionality is contained within. Viewing the Bulletin Board Window The Bulletin Board window allows you to cut and paste objects into it where they can be stored and manipulated as desired. You can view the Bulletin Board window by clicking on Tools > Bulletin Board... in the Menu Bar of most main windows of PD Console. See the following figure. Management Console for Windows Administration Guide 6 9

114 Chapter 6: Common Console Concepts Figure 6-3: Bulletin Board Window Example The Bulletin Board window contains a menu bar, a toolbar, and a display area for each of the objects pasted or dragged into it. Bulletin Board Menu Bar The following items appear in the Bulletin Board Menu bar: File - Specifies the following menu item choice: Exit - Allows you to close the Bulletin Board window. Edit - Specifies the following menu item choices: Properties - Causes a File Properties window to open so you can view the property information of a selected file. See Viewing the File Properties Window in the System Files Tech Manager book for more information. Permissions - Causes a Permissions window to open so you can view the permission of a selected object. Copy - Allows you to copy selected objects into the paste buffer. Paste - Allows you to paste the object in the paste buffer into the namespace. Remove - Deletes the selected object from the Bulletin Board display. Select All - Selects all of the objects in the display area. Deselect All - Causes selected objects in the display area to become unselected Version 3.6

115 Resource Files View - Specifies the following menu item choices: Icons - Displays the objects in the Bulletin Board by icons. This is the default view. List - Displays the icons in the Bulletin Board display area in single columns. Details - Displays the Bulletin Board objects by columns of text with variable types of information. Help - Specifies the following menu item choices: Windows Help - Provides access to the Help information that is available for the main window of the Bulletin Board window. The help itself is HTML files that are displayed within the browser of choice. You must have one of the standard Internet Browsers available on your machine. Bulletin Board Toolbar The Bulletin Board toolbar allows you to view properties, permissions, as well as cut, copy and paste selected objects. See the following figure. Figure 6-4: Bulletin Board Toolbar The following items detail each icon that appears in the Bulletin Board toolbar. Properties - Allows you to view the properties of a selected object. Permissions - Allows you to view the permission set of the selected object. Copy - Copies the selected Bulletin Board object. Paste - Pastes a previously selected object into the Bulletin Board. Delete - Removes a selected object from the Bulletin Board display area. Exit - Closes the Bulletin Board window. Viewing the Paste Buffer Window The Paste Buffer window allows you to view the objects that have been cut or copied into the paste buffer. You can view one object at a time. For example, if Management Console for Windows Administration Guide 6 11

116 Chapter 6: Common Console Concepts you cut a selected object, and then select another object and cut it also, the first object is overwritten in the Paste Buffer window. You can view the Paste Buffer window by clicking on Tools > Paste Buffer... in the Menu Bar of most main and tool windows of PD Console. See the following figure. Figure 6-5: Paste Buffer Window Example The Paste Buffer window consists of three text fields and labels, followed by a display area that lists all of the dynamically generated supported data types for the current object. The three data types that are the most common (standard) are List of Strings, Unicode String, and Plain Text. The following text fields appear at the top of the Paste Buffer window: Name - Specifies the icon type along with the name of the object. Full Name - Specifies the full path and file name of the object. Source - Specifies the name of the parent directory of the selected object. Action Buttons Clear - Clears all text fields and display areas. Close - Closes the Paste Buffer window. Help - Displays a Help window Version 3.6

117 6.3.3 Welcome Window Lock Resource Files The Tech Manager and the Event Manager each present a Welcome window that is displayed when the application is enabled. The purpose for this window is two-fold: Provides product version information Provides corporate contact information Each of the Managers provides the ability to Lock the interface to prevent unauthorized use of the product should the user wish to take a break from using the PD Console console. Initiating the lock functionality enables a dialog that allows the user to enter any password that must be used to re-open the tool. The only operation available when the tool is locked is to exit the tool. Management Console for Windows Administration Guide 6 13

118 Chapter 6: Common Console Concepts 6.4 Understanding the View Box A View Box is a graphical container that provides a means to look at multiple objects and information in different ways or views. View Boxes are extensively used throughout the PD Console interfaces to provide Lists, Outlines, and Tables. In addition, each of the views comes with a customizer that allows the user to edit various characteristics of the view. Many of the PD Console interfaces allow the users to change these by way of Option dialogs. The objects in the View Box can have a hierarchical relationship in that an object can have subordinate or child objects. This hierarchical relationship can exist regardless of the view. Whether you can see this hierarchical relationship depends on the kind of view used View Box Joy Stick Example It is common for a view box to include a joy stick which appears as a small circle at the junction of two scroll bars. To use this feature, click the small circle and hold the left mouse button down. As you do so, both horizontal and vertical scroll bars move at the same time. See the following example of a Joy Stick figure. Figure 6-6: Example of a Joy Stick 6 14 Version 3.6

119 6.4.2 Status Information Area Understanding the View Box At the very bottom of some large PD Console windows is a set of status information components. Each of these components is optional and may not need to appear at the bottom of every primary or secondary window. See the following figure for a Status Information area example: If they do appear, see the following descriptions: Information Message - Displays a single line of words describing what is happening at a given moment. Percent Complete - Displays a rectangle with a moving bar so you can view how far along a given operation is processing. Time of Operation - Displays a timer that shows the number of hours, minutes, and seconds the operation has been processing. The Time of Operation item is followed by two Status buttons: Stop Operation - Allows you to stop running operations. This button becomes active during operations that can be canceled. Clicking the Stop button does not close or exit the current window (unless you click it while the application is initializing) and does not affect other operations outside of this application. Animated Button Becomes active (animates) when tasks are being run in the background. Pressing the Animated button displays the Task Manager. See Viewing the Task Manager Window in the following section. Viewing the Task Manager Window The Task Manager window allows you to view the status of tasks that are currently running in the background. You can also stop, pause, or resume a selected task. You can view the Task Manager window by pressing the Animated button at the bottom right of most primary or secondary windows of PD Console while a task is running in the background. The Task Manager window consists of a Menu Bar, Toolbar, and a Thread Status display area. Management Console for Windows Administration Guide 6 15

120 Chapter 6: Common Console Concepts See the following figure. Figure 6-7: Task Manager Window Task Manager Menu Bar The following items appear in the Task Manager Menu Bar: File - Specifies the following menu item choice: Exit - Closes the Task Manager window. Object - Allows you to perform any of the following options: Abort - Stops a running operation. Suspend - Pauses a running operation. Resume - Continues a previously suspended operation. Edit - Specifies the following menu item choices: Select All - Selects all of the running operations in the display area. Deselect All - Causes selected running operations in the display area to become unselected. Option - Specifies the following menu item choice: Task Manager List Options... - Causes the Task Manager List Options window to appear. See the View Box Options Windowspage 17 for more information about this window. Help - Specifies the following menu item choices: 6 16 Version 3.6

121 Understanding the View Box Window Help - Provides access to the Help information that is available for the Task Manager window. The help itself is HTML files that are displayed within the browser of choice. You must have one of the standard Internet Browsers available on your machine. Task Manager Toolbar The following icons appear in the Task Manager Toolbar: Abort - Allows you to stop running operations. This button becomes active if you first select the task of a running operation you wish to stop. Clicking the Stop button does not close or exit the current window and does not affect other operations outside of this application. Suspend - Allows you to pause a running task or operation. Resume - Causes a previously suspended task to continue running. Exit - Allows you to close or exit the Task Manager window. Thread Status Display Area The following column headings appear in the Thread Status Display area: Name - Specifies the name of the running thread. State - Specifies the status of the running thread, such as loading icon. Percent Done - Specifies how complete the thread is in terms of a percent. Elapsed Time - Specifies in hours, minutes, and seconds how much time has elapsed since the operation was begun. Start Time - Specifies the exact time the operation was started. Description - Specifies a quick description of what the running operation is doing View Box Options Windows The Hierarchy or Contents List Options window is a common Tech Manager and Event Manager window. The actual name of this window is module-specific; but the contents are the same. It contains three tabs - Sort, Filter, and Column Order. You can open this window from any Tech Manager module by first selecting an object and then clicking the Management Console for Windows Administration Guide 6 17

122 Chapter 6: Common Console Concepts Options > Contents List Options... or Options > Hierarchy List Options... on the Menu bar. Note: In order to see the Column Order tab when you bring up this window, you must first select an object and then go to View > Details (or change to the Detail view mode as appropriate). You can also get this same window from the Display Options of the Log Viewer (a tool available in the Agent Manager module). See the following Contents List Options example window. Figure 6-8: Contents List Options Window - View Box Example In the Action area at the bottom of the Contents List Options window, are the following options: Current and future sessions - Applies changes immediately and the next time the tool is started. This option works in coordination with the OK or Apply button. Current session only - Applies changes only to the current session. All 6 18 Version 3.6

123 Understanding the View Box changes made in this window will be lost the next time the tool is started, and only default settings apply. This option works only if the OK or Apply button is also selected. Action Buttons Perform or apply the changes you specified: OK - Applies the changes you made and closes the Contents List Options window. Apply - Applies the changes you made but keeps the Contents List Options window open. Preview - Allows you to view changes made in the view box without having to commit to them. Reset - Removes all changes and replaces them with the default settings. Close - Closes this dialog and takes no further action. Help - Enables the window help for this dialog. Sort Tab Attributes can determine the order of the rows when the View Box is displaying a detail view. The sort tab example below is used in the base Event Manager (Options > Contents List Options...) and in some specific Tech Manager modules. See the following figure. Management Console for Windows Administration Guide 6 19

124 Chapter 6: Common Console Concepts Figure 6-9: Sort Options Tab The following columns appear across the top of the Sort Options Tab: Change Order - Specifies two up/down arrows: Move Up Arrow - Allows the user to move the selected Column up in the order of the sorting criteria. Move Down Arrow - Allows the user to move the selected Column down in the order of the sorting criteria. Sort By - Specifies the list of the columns that are to be used as sort criteria. At the bottom of the Criteria and Sort Order columns are the following buttons: Ascend - Causes the selected item or items to toggle in the Sort Order column, to an ascending sort order. (This means the sort is from top to bottom, such as A to Z.) Descend - Causes the selected item or items to toggle in the Sort Order column to an descending sort order. (This means the sort is from bottom to top, such as Z to A.) Add/Remove - Specifies the following add and remove arrows: < Add Arrow - Allows the user to move an item from the Available Criteria into the active criteria or Sort By list. Remove > Arrow - Allows the user to remove the selected item in the Sort By list into the Available Criteria, effectively removing it from the sort criteria. Available Criteria - Specifies a list of all the columns within the target detail view box that are currently not part of the sort criteria Version 3.6

125 Understanding the View Box Filter Tab This tab allows you to define criteria such that you can build logical expressions that are used to filter the items that are displayed within the view box. For example, where type and date are columns within the view box, expressions like if the type is directory and the date matches Dec 25 or the date matches June 25 can be constructed and used as filter criteria. The Filter tab example below is used in the base Event Manager (Options > Contents List Options...) and in some specific Tech Manager modules. See the following figure. Figure 6-10: Filter Options Tab Conjunction Defines how each logical expression relates to others in the list. If there are no filter criteria in place then this option button is disabled. If there are one or more filter criteria, then this can be any of the following: (For clarity and example, two criteria are considered): AND Both of the expressions must be true to pass the filter. OR Either of the expressions can be true to pass the filter. AND NOT The first expression must be true and the second must be false. OR NOT The first expression can be true or the second expression can be false. XOR One and only one of the expressions must be true to pass the filter. Management Console for Windows Administration Guide 6 21

126 Chapter 6: Common Console Concepts Column Name Contains a list of each of the columns that is present in the view box that is being filtered. Condition Defines the relationship of the value in the value text field, to the value of the selection in Column Name. The Condition choice button has the following comparison types: is equal to is not equal to is greater than is less than is greater than or equal to is less than or equal to matches Criteria Value Text Field Specifies the text field that appears on the top right of the tab window. This is used to enter the value that the column value (or cell) is compared against. Expression List Specifies a list of all the expressions that are to be used as the filter criteria for the view box. Criteria Action Buttons Specifies the buttons associated with the Expression List area. Add Adds a new expression to the expression list using the settings of the Conjunction, Column Name, Condition and the Value Field. Insert Behaves the same as Add except that the new entry is placed before the current selected expression in the expression list. Replace Replaces the selected entry in the expression list with the settings in the expression widgets. Remove Removes the selected entry in the expression list. Selected Criteria Action Buttons Specifies the buttons associated with items that are selected. Group Allows the user to Group the expressions, if two entries are selected, so that they can be considered as a sub-expression to be evaluated together. Effectively and visually this is like placing parenthesis around the selected expressions. Ungroup Ungroups two entries that have been previously grouped. Hide Items Failing Filter Tells the view box to hide the items that fail the filter and show the items that pass the filter. Select Items Passing Filter Provides the ability to select items within the parent view box that pass the filter and not affect their visibility Version 3.6

127 Column Order Tab Understanding the View Box This tab allows editing of the attributes that determine the order from left to right of the columns in a detail view. Note: In order to see the Column Order tab when you bring up this window, you must first select an object and then go to View > Details (or change to the Detail view mode as appropriate). Note: You can also change column order by pressing the primary mouse button on the column title in the View Box and dragging it to its new position. The Column Order tab example below is used in the base Event Manager (Options > Contents List Options...) and in some specific Tech Manager modules. See the following figure. Figure 6-11: Column Order Tab Visible Columns Specifies a list of the columns in the View Box that are visible (even if you have to scroll to it). Hidden Columns Specifies a list of the columns that are currently not being displayed. < Show Arrow Moves the selected item in the Hidden Columns List into the Visible Column List. Hide > Arrow - Moves the selected item in the Visible Column List into the Hidden Column List. Move Up Arrow Moves the selected item in the Visible Column List up in the drawing order. Management Console for Windows Administration Guide 6 23

128 Chapter 6: Common Console Concepts Move Down Arrow Moves the selected item in the Visible Column List down in the drawing order. Note: The drawing order from top to bottom in the Visible Column list is how the columns are drawn from left to right in the View Box Version 3.6

129 General Display Options 6.5 General Display Options This section is used to describe how you can customize the general display of the interfaces that are presented within the PD Console framework. This allows you to select fonts, colors and many other characteristics about the windows that the PD Console modules are using. This is the dialog that is presented whenever you select the Options > Display Options...(guiMI) within the Tech Manager or Event Manager programs. There are several potential categories of options that appear as separate tabs within this dialog. See the following figure. Figure 6-12: General Display Options Window Management Console for Windows Administration Guide 6 25

130 Chapter 6: Common Console Concepts The General Display Options window has five tab areas with an example area for each tab. The example (display) area shows a sample of what the PD Console application looks like when the changes have taken effect. The following is a description of each of the main tabs at the top of the Display Options window: General View - Specifies the tab that applies for all general components as shown in the previous figure. Icon View - Places all the objects in the display area of the Display Options window in an Icon format with an icon image and the name of the object. The orientation of the text and the direction that the objects are laid out is able to be configured. List View - Places all the objects in the display area of the Display Options window in a simple list format with an icon image and name of the object. The items are presented in a single column. Outline View - Displays the parent child relationship between objects of the Display Options window in a manner in that each generation of children appears below the parent and is indented and connected with a line. An object that can or does have children objects will have a + box next to it that can be used to expand the branch (and display the children) as well as a - box that contracts the child branch. Detail View - Presents objects in a row/column format of the Display Options window with multiple columns that can display text, images/icons or other graphical objects within them. Columns can be easily sorted or re-arranged Action Area The following options appear at the bottom of the Display Options window and is common to all five tabs: Current and future sessions - Specifies whether to apply changes immediately and the next time the tool is started. Current session only - Specifies whether to apply changes only to the current session. All changes made in the Display Options window will be lost the next time the tool is started, and only default settings apply. Action Buttons Perform or apply the changes you specified: OK - Applies the changes you made and closes the General Display Options window Version 3.6

131 6.5.2 General Tab General Display Options Apply - Applies the changes you made but leaves the General Display Options window open. Reset - Resets all fields back to their currently-saved default value from the user defaults file. Close - Closes this dialog and takes no further action. Help - Enables the window help for this dialog. The General tab details changes you can make that are common to all components throughout the PD Console tool. See the following figure. Figure 6-13: General Display Options - General Tab General Tab Display Area The items that appear in the General Tab Display area are for example only. They are there so that you can instantly preview changes you make to colors, fonts, or mouse and browser settings, when you press the Apply button in any of the secondary windows that appear when you press the... (More) button next to each of the color, or other option panels. Management Console for Windows Administration Guide 6 27

132 Chapter 6: Common Console Concepts The following tab areas (Colors, Fonts, and Other) appear below the General Tab Display area and are unique to the General tab. General Colors Tab This allows you to select the colors that are the defaults for all of the modules within the Tech Manager application. See the following figure. Figure 6-14: General Colors Tab The following items appear in the Colors tab: General Background Specifies the color of the background of most of the container GUI objects. This is the predominate background color of the user s interface. General Foreground Specifies the color that is used for most of the text and lines that appear in the PD Console application. Entry Text Background Specifies the background color of any input text that the user is allowed, or required to provide. List Background Specifies the background color of lists in the interface. Select Background Specifies the color that is used as a foreground (text) color for individual items that are selected Viewing the Color Selection Window The... (More) button next to each of the color panels in the General Display Options window, enables a color selector that can be used to modify the corresponding color Version 3.6

133 General Display Options The Color Selection window allows you to select your own color scheme to display for specific classes of graphical objects. Generally, this dialog is enabled as a result of selecting the... (More) button located next to a color value in the Options dialogs. See the following figure. Figure 6-15: Color Selection Window Predefined Colors Provides an option menu button that lists standard named colors from which you can select. The default is the current value of the color. Red, Green, Blue Specifies the RGB color values from that define a color. Each contains a slider and a numeric text field that allows the user to change the color. Color Panel Shows an example of the color using the settings in the RGB area. Lighter Makes the current color lighter and changes the values within the Red, Green and Blue values. Darker Makes the current color darker and changes the values within the Red, Green and Blue values. Action Buttons Perform or apply the changes you specified: OK - Applies the changes and closes the window. Apply - Applies the changes leaving the window visible. Management Console for Windows Administration Guide 6 29

134 Chapter 6: Common Console Concepts Close - Closes the window and takes no further action. Help - Opens a Help window panel. General Fonts Tab This allows you to view the current font for the interfaces in the Tech Manager application. The... (More) button next to the font name allows the user to enable the Font Selector so that a new font can be selected. See the following figure. Figure 6-16: General Fonts Tab Labels and Lists Displays the name of the font being used for all the Labels, Checkboxes, Menus, etc. Selecting the... (More) button allows you to change this value. Texts Displays the name of the font being used for all the Text (single and multi-line). Selecting the... (More) button enables the Font Selector to change this value. Note: If you make font changes, you might need to resize any opened windows in order to fully see the labels in the new font Viewing the Font Selection Window The Font Selection window is used to select a font wherever appropriate. This is enabled as a result of selecting the... (More) button within any of the Options dialogs that provide the ability to select fonts. See the following figure Version 3.6

135 General Display Options Figure 6-17: Font Selection Window Font Contains a list of all the fonts that are currently available for Java on the box that the application is being displayed. Style Allows the user to change the style of the font. The font Style choices are: Plain, Bold, Italic and Bold+Italic. Size Specifies the point size of the font. Demonstration Area Shows an example of the font using the settings specified above. Action Buttons Perform or apply the changes you specified: OK - Applies the changes and closes the window. Apply - Applies the changes leaving the window visible. Close - Closes the window and takes no further action. Help - Opens a Help window panel. General Other Tab The Other tab provides options that are used for all Tech Manager modules. See the following figure. Management Console for Windows Administration Guide 6 31

136 Chapter 6: Common Console Concepts Figure 6-18: General Other Tab Mouse Type Specifies a button choice so you can pick the type of mouse you are using. Display Tips Enables the Display Tips area for all windows. This is a text area located at the bottom of the PD Console windows that displays information about the graphical components within the windows. This displayed information changes as the cursor moves across different elements. Note: If you change the status of the Display Tips option, you will need to restart the tool to implement the change. Browser Type Specifies the type of browser (Netscape or Microsoft Explorer) you would like to use to display the Help information. Browser Location Specifies the location of the browser Icon View Tab The Icon View tab allows you to change attributes when the view box is displaying items in an Icon (or simple list) format. See the following figure Version 3.6

137 General Display Options Figure 6-19: General Display Options - Icon View Tab The following tab areas (Colors, Layout, and Icons) are unique to the Icon View tab. Icon Colors Tab The Colors tab allows you to change attributes when the view box is displaying items in an Icon format. See the following figure. Figure 6-20: Icon View Colors Tab Management Console for Windows Administration Guide 6 33

138 Chapter 6: Common Console Concepts The following items appear in the Icon View Colors tab area: Background Color Specifies the background color of the view box. Foreground Color Specifies the foreground color that applies mostly to text. Highlight Mode Defines the appearance of an item that has been selected. This is only relative to Icon, List, and Outline Views. The two choices of modes are: Large Box - Places a single box around the icon and the text Individual Boxes - Places separate smaller boxes around the icon and the text The... (More) button next to each of the color panels enables a Color Selector that can be used to modify the corresponding color. For more information, see Viewing the Color Selection Windowpage 28. Icon Layout Tab The Layout tab allows you to change the layout, or orientation view, when the main display area is showing items in an Icon (or simple list) format. See the following figure. Figure 6-21: Icon View Layout Tab The following items appear in the Icon View Layout tab area: Layout Orientation Defines the direction the items are distributed within the View Box. Vertical - Positions the items from top to bottom and then left to right. Horizontal - Positions the items from left to right and then top to bottom. Icon Packing Mode Determines how the items within the view box are packed or distributed within the window. The values are: 6 34 Version 3.6

139 General Display Options None - Places the items together using the spacing parameters with no attempt to line them up. Equalize Secondary - Distributes items evenly in the opposite layout orientation. For example, if the layout orientation is Vertical, then the items are distributed evenly (each occupying the same amount of space) in the Horizontal direction. Equalize All - Distributes items evenly in both vertically and horizontally. All items occupy the same amount of space. Row Spacing Allows you to set how much horizontal space is placed between each row. Column Spacing Allows you to set the vertical spacing between each item. Icon View Icons Tab The Icons tab allows you to change attributes about the icons themselves, when the view box is displaying items in an Icon (or simple list) format. See the following figure. Figure 6-22: Icon View Icons Tab The following items appear in the Icon View Icons tab area: Text Location Determines whether the text appears to the Right, to the Left, on Top of, or on the Bottom of, the icon List View Tab Image-Text Separation Determines the spacing (in pixels) between the icon and the text. The List View tab allows you to change attributes when the view box is displaying items in a simple list format. See the following figure. Management Console for Windows Administration Guide 6 35

140 Chapter 6: Common Console Concepts Figure 6-23: List View Tab The List View tab has the Colors and Layout tabs at the bottom of the List View tab window. List Colors Tab The Colors tab allows you to change attributes when the view box is displaying items in a simple list format. The following items appear in the List View Colors tab area: Background Color Specifies the background color of the view box. Foreground Color Specifies the foreground color that applies mostly to text. Highlight Mode Defines the appearance of an item that has been selected. The two choices of modes are: Large Box Places a single box around the icon and the text Individual Boxes Places separate smaller boxes around the icon and the text 6 36 Version 3.6

141 General Display Options The... (More) button next to each of the color panels enables a Color Selector that can be used to modify the corresponding color. For more information, see Viewing the Color Selection Windowpage 28. List Layout Tab The Layout tab allows you to change the layout, or orientation view, when the display area of the main window is showing items in a simple list format. See the following figure. Figure 6-24: List View Tab - Layout Area The following items appear in the List View Layout tab area: Icon Packing Mode Determines how the items within the view box are packed or distributed within the window. The values are: None - Places the items together using the spacing parameters with no attempt to line them up. Equalize Secondary - Distributes items evenly in the horizontal direction. Equalize All - Distributes items evenly in both vertically and horizontally. All items occupy the same amount of space. Row Spacing Allows you to set how much horizontal space is placed between each row. Image-Text Separation Determines the spacing (in pixels) between the icon and the text Outline View Tab This tab allows the end user to change attributes when the view box is displaying items in an Outline format. See the following figure. Management Console for Windows Administration Guide 6 37

142 Chapter 6: Common Console Concepts Figure 6-25: General Display Options - Outline View Tab The Outline View tab displays the branches in hierarchical outline form. This view places a plus sign next to the parent so that you can expand or contract the children. The following tab areas (Colors, Layout, and Icons) appear below the Outline View Tab display area and are unique to the Outline View tab. Outline Colors Tab The Colors tab that appears under the Outline View tab of the Display Options window allows you to select the colors that are the defaults for any type of outline view in the Tech Manager application. See the following figure Version 3.6

143 General Display Options Figure 6-26: Outline View - Colors Tab The following items appear in the Outline View Colors tab area: Background Color Specifies the background color of the main display area. Foreground Color Specifies the foreground color that applies mostly to text. Line Color Specifies the color of the line drawn from one item to another, as well as the color of the + and - boxes. Highlight Mode Defines the appearance of an item that has been selected. This applies only when you are in Icon, List, or Outline Views. The two choices of modes are: Large Box Places a single box around the icon and the text Individual Boxes Places separate smaller boxes around the icon and the text The... (More) button next to each of the color panels enables a Color Selector that can be used to modify the corresponding color. For more information, see Viewing the Color Selection Windowpage 28. Outline Layout Tab The Layout tab allows you to change how closely the icons are spaced, relative to their rows and columns, when the Outline View Layout tab is selected. See the following figure. Management Console for Windows Administration Guide 6 39

144 Chapter 6: Common Console Concepts Figure 6-27: Outline View - Layout Tab The following items appear in the Outline View Layout tab area: Pack Mode Defines the way the icons and the text within an item is packed together. The choices are: None Specifies that each icon and text is considered separate and is placed next to each other. Equalize Specifies that the largest icon for all the children of a parent item is used to determine the common spacing between the icons and the text for each of the children. Row Spacing Defines the vertical distance (in pixels) between items. Sub-Level Indent Determines the number of pixels to indent to show the parent/child relationship, for each generation or level of children. Outline View Icons Tab The Outline View Icons tab allows you to change how closely the icons and their labels are spaced, when the Outline View Icons tab is selected. See the following figure. Figure 6-28: Outline View - Icons Tab The following items appear in the Outline View Icons tab area: 6 40 Version 3.6

145 General Display Options Image Text Separation Defines the distance in pixels between the icon image and the text that defines an item. Box Size Determines the size of the + and - box that is used to expand and contract the children of an item Detail View Tab This tab provides the attributes for the main display area when it is displaying items in a Detail format. See the following figure. Figure 6-29: General Display Options - Detail View Tab The columns that appear in the display area of the Detail tab, such as Employee Name, ID Number, and so on, are examples of information as it would appear in a detail view, so that you can preview any changes you might choose to make. The following tab areas (Colors, Layout, and Lines) are specific to the Detail View tab. Management Console for Windows Administration Guide 6 41

146 Chapter 6: Common Console Concepts Detail View Colors Tab The Colors tab that appears under the Detail View tab of the General Display Options window allows you to select the colors that are the defaults for all types of detail views in the Tech Manager module. See the following figure. Figure 6-30: Detail View - Colors Tab The following items appear in the Detail View Colors tab area: Background Color Specifies the background color of the view box. Foreground Color Specifies the foreground color that applies mostly to text. Line Color Allows the user to select the color of the dividing lines within the detail view. These lines are displayed between the rows and columns. Etch Color Specifies the color that etches the line color. An Etch color gives the line a 3-D effect. You can set the etch color of either the Row or Column. Etch Color appears when Line Styles are set to etched and the line thickness is greater than one (1). The... (More) button next to each of the color panels enables a Color Selector that can be used to modify the corresponding color. For more information, see Viewing the Color Selection Windowpage 28. Detail View Layout Tab The Layout tab allows you to change the arrangement of the icons, relative to their rows and columns, when the Detail View Layout tab is selected. See the following figure Version 3.6

147 General Display Options Figure 6-31: Detail View - Layout Tab The following items appear in the Detail View Layout tab area: Row Pack Mode Specifies the vertical spacing between the rows. Choose one of two row packing types: None -Treats the rows as individual entities that have their own heights. Equalize - Sets all rows to have the same height. Column Pack Mode Specifies the horizontal spacing between the columns. Choose one of two column pack modes: None -Treats the columns as individual entities that have their own widths. Equalize - Sets all columns to have the same width. Row Margin Specifies the spacing that goes on the top and bottom of each row. Column Margin Specifies the spacing that goes on the left and right of each column. Detail View Lines Tab The Lines tab allows you to alter the way the lines in between rows and columns appear, when the Detail View Lines tab is selected. See the following figure. Management Console for Windows Administration Guide 6 43

148 Chapter 6: Common Console Concepts Figure 6-32: Detail View - Lines Tab The following items appear in the Detail View Lines tab area: Row Line Style Allows the user to set the line type that is displayed between each row. No Lines - Turns the line in between rows off. Solid - Specifies the line style as a single solid line. Etched In - Specifies two lines using the Line Color on top of the Etch Color. Etched Out - Specifies two lines using the Etch Color on top of the Line Color. Column Line Style Specifies the line type that is displayed between each column. See Row Line Style for values. Row Line Thickness Determines the width of the line drawn between rows. Column Line Thickness Determines the width of the line drawn between columns Version 3.6

149 Popup Menus 6.6 Popup Menus Each Module is responsible for providing Popup menus for Selected Objects that appear in the View Panels. Generally, these Popup Menus are activated when you press the menu pop-up mouse button when the cursor is located in one of the view panels. The menu items that appear in these Popup Menus can contain any functionality, but it is recommended they include the Edit pulldown functions and any other function directly related to the selected objects. Management Console for Windows Administration Guide 6 45

150 Chapter 6: Common Console Concepts 6.7 Drag and Drop All Tech Manager Modules attempt to support as much drag and drop functionality as possible to increase usability. This functionality is to select an object and while holding the drag mouse button down, move the object over another object and release the mouse button or drop it on top of it. If it is possible to move or copy an object from one location to another, all effort is made to implement drag-n-drop as a means of implementing this functionality Version 3.6

151 Using the Print Window 6.8 Using the Print Window The Print window provides a means by which you can print the contents of a specific display area. This is especially useful for those display areas which have "detail" information. You can view this window by clicking on the File > Print... menu option, or, click the Printer icon on the toolbar where available. See the following figure. Figure 6-33: Print Window See the following explanations of the labels, options, and text fields associated with this window: View Box - Specifies either a label containing the name of a single view box, or a list of view boxes from which you must select the view box to print. This is located at the top left of this window. In the previous figure, the specific window or display area that has been chosen to be printed is called the Log Viewer. Print To File - Specifies a choice option whether to print to a file. Specify a filename in the text field adjacent to the Print To File checkbox and the output of the view box is sent to the file. Management Console for Windows Administration Guide 6 47

152 Chapter 6: Common Console Concepts... (More) - Enables the file selection box to select a file for the Print To File field. Print Command - Specifies the command which is used to print files on the platform machine which is running PD Console. For example: on a UNIX box the actual print command is not automatic, and so to print to a printer named myprinter, you could place lpr -PmyPrinter in this text field. Number of Copies - Specifies a text field that is associated with the Print Command and tells this window how many copies of the output to print using the print command. Print Items - Specifies three radio choice buttons: All - Prints all of the items appearing in the main display window. Selected - Prints only the selected items in the main display window. Visible - Prints only those items that are visible based on the filter criteria you have set. Output Title - Specifies an optional field which is used to enter a title for the output. Child Indentation - Specifies a text field which defines the number of spaces that are placed between each generation of children if the current view is either an "Outline" or a "Detail Outline" type. So if the Child Indentation is 4, then the output for 3 generations looks like this: Grandfather Father Son Draw Lines Between Rows - If the view type is detailed, then selecting this checkbox causes the output to contain a row of dashes '-' between each row of output. Draw Lines Between Columns - If the view type is detailed, then selecting this checkbox causes the output to contain a ' ' character between each of the columns. Action Buttons OK - Causes the output of the view box to be generated using the above attributes. Reset - Clears the data in the various fields. Cancel - Closes this window and no further action is taken Version 3.6

153 Using the Print Window Help - Enables a help window with information about this window. Management Console for Windows Administration Guide 6 49

154 Chapter 6: Common Console Concepts 6.9 Displaying Tip Messages In each module, you can customize the tools to display tips, or contextual hints on your windows. Displaying Tip Messages option shows help cues as pop-ups of tool windows when cursor encounters an element in the display. Tip messages provide hints about the items in the windows of the tool as you move the pointer across them. To change whether Tip messages are displayed (in the Tech Manager Modules): 1. On the menu bar, select Options > Display Options. The General Display Options window appears. 2. While under the General tab, select the Other tab. 3. Toggle the Display Tips option to activate or deactivate Tip message display as appropriate. 4. Click OK. The General Display Options window closes and your changes take affect the next time you start an PD Console Module Version 3.6

155 Viewing the Installed Modules Information Window 6.10 Viewing the Installed Modules Information Window The Installed Modules Information window allows you to view all of the installed modules in your PD Console environment, the version number, and the date of installation. The version and module information that appears in this window is read-only. You can view this window by clicking on File > Version Information... in the Menu bar of Tech Manager. See the following figure. Figure 6-34: Installed Modules Information Window The following read-only fields appear at the top of the Installed Modules Information window: Base Version - Specifies the version number of PD Console. Release Date - Specifies the date and time PD Console was installed on your console host machine Installed Modules Section The following columns appear in the main display area of the Installed Modules Information: Module Name - Specifies the name of a module that you currently have installed in your PD Console environment. Version - Specifies the version number of a specific module. Management Console for Windows Administration Guide 6 51

156 Chapter 6: Common Console Concepts Release Date - Specifies the date and time a specific module was released. Module Vendor - Specifies the name of the vendor that distributed the module Action Buttons The following Actions buttons appear at the bottom of the Installed Modules Information window: Close - Causes the Installed Modules Information window to close. Help - Causes a Help window to appear Version 3.6

157 6.11 Customizing the Main Window Customizing the Main Window While working in a session, you can change the width of the Hierarchy List area relative to the Contents area (for the current session only). You can also display different fields of information in the lists, delete operation verification prompts, display QuickHelp hints in the message area, and choose which technologies you want to display. You can make these changes to the current session and save them to the preferences file for use with future sessions Sizing the List Areas You can size the Hierarchy List area to show more information, but it makes the Contents area narrower (which shows less of this information) or vice versa. These changes are valid only for the current session. To make the Hierarchy List area wider: 1. Position the cursor between the two window areas until the cursor changes to a single-headed arrow with a vertical end-mark. 2. Hold down the Select mouse button and slide the mouse to the right. The single-headed arrow moves to the right and the Hierarchy List area becomes wider as the Contents area gets narrower. 3. Release the Select mouse button. To make the Contents area wider: 1. Position the cursor between the two window areas until the cursor changes to a single-headed arrow with a vertical end-mark. 2. Hold down the Select mouse button and slide the mouse to the left. The double-headed arrow moves to the left and the Hierarchy List area becomes narrower as the Contents area gets wider. 3. Release the Select mouse button Reordering List Columns To change the order of the columns in the Contents area: 1. Place the mouse pointer over the title of the column you wish to move and select and hold down the Select Mouse button. Management Console for Windows Administration Guide 6 53

158 Chapter 6: Common Console Concepts 2. Drag the mouse to the new column position and release the mouse button. The list redraws with the new column order. Another method to re-order list columns is as follows: 1. Go to the Options menu and select Contents List Options. If you currently are in detail mode (that is, you have the Details selected under the View menu), the Contents List Options window opens with a Column Order tab. 2. Move the order of the columns as needed by selecting them and then pressing the Move Up or Move Down buttons as needed. You can also hide (from view) any columns you wish by pressing the Hide button. You can return the columns you have hidden by pressing the Show button Tech Manager Options The Tech Manager provides a General Display Options window so that you can choose which module is displayed initially when opening the Tech Manager application, the type of view, whether a query window appears upon exiting, and which technologies you want to display in the main Tech Manager window. To open this window, go to the Menu bar and choose Options > General Options... The Tech Manager Options window opens. See the following figure Version 3.6

159 Customizing the Main Window Figure 6-35: Tech Manager Options The Tech Manager Options window has three main areas: an Options area, a Module Visibility and Order area, and an Action area. Tech Manager Options Area The Tech Manager Options area has two items: Query before exiting Tech Manager - Causes a query pop-up window to appear when you select the Exit icon for the File > Exit menu option. This pop-up window gives you the option of closing the Tech Manager application. Save size of Tech Manager when exiting - Causes the Tech Manager to remember the size of its main window when it is re-enabled. Module Visibility and Order Area The Module Visibility and Order area contains two main display areas with arrows so that you can change the order of displayed technologies, or hide them altogether: Order - Contains up and down arrows for changing the order of shown technologies. Displayed Modules - Displays all currently visible Tech Manager modules in a scrollable display area. Management Console for Windows Administration Guide 6 55

160 Chapter 6: Common Console Concepts Move - Contains a right and left arrow for moving selected entries in either area from one to the other. You can select more than one entry and move them all at once, if desired. Hidden Modules - Displays all Tech Manager modules in a scrollable display area that you wish to remain hidden from the main view of the Tech Manager. This display area is blank by default when the Tech Manager is first started. The following options appear below the Modules Visibility and Order display area: Current and future sessions - Applies the changes to both the current Tech Manager session as well as any future ones. Current session only - Applies the changes to the current Tech Manager session only. When the Tech Manager is started again, the changes made in the Tech Manager Options window are lost and only default settings apply. Actions Area The following buttons appear at the bottom of the Technology Display Options window: OK - Causes the changes made to be applied immediately to the Tech Manager display and closes the Tech Manager Options window. Apply - Causes the changes made so far to be applied immediately to the Tech Manager display but leaves the Tech Manager Options window open. Reset - Causes all changes made in this window to revert back to their default settings. Close - Closes the Tech Manager Options window with no further action. Help - Causes a Help window to appear Version 3.6

161 Using the Help File Viewer 6.12 Using the Help File Viewer The File Viewer window allows you to view many different kinds of files, such as HTML files, for example, in a browser-like window with the ability to apply policies while viewing the file. The File Viewer window allows you to quickly view the contents of a protected file object to determine if the permissions of an explicit policy is as you desire. If not, you can modify the applied policy or attach a different policy to the object. You can view the File Viewer window by double-clicking an existing file that exists under the WebSEAL folder in the main display area of the Object Space registry. The File Viewer window appears. See the following figure. Figure 6-36: The File Viewer Window with an Example Protected HTML File The File Viewer window consists of a menu bar, Toolbar, a Go to text field, and a large scrollable display area in which you can view the contents of a file. The File Viewer enables you to view the contents of any browser-compatible, Management Console for Windows Administration Guide 6 57