Avaya Integrated Management Release 4.0.1 User Administration User Guide 14-601847 Issue 1 June 2007
2007 Avaya Inc. All Rights Reserved. Notice While reasonable efforts were made to ensure that the information in this document was complete and accurate at the time of printing, Avaya Inc. can assume no liability for any errors. Changes and corrections to the information in this document may be incorporated in future releases. For full legal page information, please see the complete document, Avaya Legal Page for Software Documentation, Document number 03-600758. To locate this document on the website, simply go to http://www.avaya.com/support and search for the document number in the search box. Documentation disclaimer Avaya Inc. is not responsible for any modifications, additions, or deletions to the original published version of this documentation unless such modifications, additions, or deletions were performed by Avaya. Customer and/or End User agree to indemnify and hold harmless Avaya, Avaya's agents, servants and employees against all claims, lawsuits, demands and judgments arising out of, or in connection with, subsequent modifications, additions or deletions to this documentation to the extent made by the Customer or End User. Link disclaimer Avaya Inc. is not responsible for the contents or reliability of any linked Web sites referenced elsewhere within this documentation, and Avaya does not necessarily endorse the products, services, or information described or offered within them. We cannot guarantee that these links will work all of the time and we have no control over the availability of the linked pages. Warranty Avaya Inc. provides a limited warranty on this product. Refer to your sales agreement to establish the terms of the limited warranty. In addition, Avaya s standard warranty language, as well as information regarding support for this product, while under warranty, is available through the following Web site: http://www.avaya.com/support Copyright Except where expressly stated otherwise, the Product is protected by copyright and other laws respecting proprietary rights. Unauthorized reproduction, transfer, and or use can be a criminal, as well as a civil, offense under the applicable law. Avaya support Avaya provides a telephone number for you to use to report problems or to ask questions about your product. The support telephone number is 1-800-242-2121 in the United States. For additional support telephone numbers, see the Avaya Web site: http://www.avaya.com/support
Contents Preface.................................. 5 The Purpose of This Guide.............................. 5 Who Should Use This Guide............................. 5 Organization of This Guide.............................. 5 Chapter 1: Avaya User Administration Overview............. 7 Accessing Avaya User Administration........................ 7 Using the On-Line Help................................ 9 Chapter 2: Working with Avaya User Administration........... 11 The User Interface................................... 11 Managing the Display................................. 12 Refreshing the Display.............................. 12 Filtering the Display................................ 13 Setting the Number of Items to Display Per Page................ 13 Understanding User Authentication and Authorization............... 13 Local and non-local Users............................ 13 User Roles..................................... 14 The "Administrator" User Account........................ 15 Account Lockout Policy.............................. 15 Managing Users.................................... 16 Creating New Users................................ 16 Deleting Users................................... 19 Modifying Users.................................. 19 Duplicating Users................................. 20 Index.................................. 21 Issue 1 June 2007 3
Contents 4 Avaya Integrated Management for Distributed Office Network Management Console User Guide
Preface Welcome to Avaya User Administration. This chapter provides an introduction to the structure and assumptions of this guide. It includes the following sections: The Purpose of This Guide - A description of the goals of this guide. Who Should Use This Guide - The intended audience of this guide. Organization of This Guide - The structure of this guide. The Purpose of This Guide This guide contains information needed to use Avaya User Administration efficiently and effectively. Who Should Use This Guide This guide is intended for network management administrators. Organization of This Guide This guide is structured to reflect the following conceptual divisions: Preface - A description of the guide s purpose, intended audience, and organization. Avaya User Administration Overview - An overview of Avaya User Administration for user management. Working with Avaya User Administration - Instructions on how to create and manage network management users in Avaya User Administration. Issue 1 June 2007 5
Preface 6 Avaya Integrated Management User Administration User Guide
Chapter 1: Avaya User Administration Overview Avaya User Administration is a graphic user interface for administrating network management user accounts. Network management user accounts are used to authenticate users who access the following network management applications via the web interface or who launch client applications locally on the server machine: Network Management Console (NMC) Secure Access Administration (SAA) Software Update Manager (SUM) Device Managers Distributed Office Central Manager (DOCM) Configuration Manager Network management users are required to login through a single user name and password dialog box that authenticates the user in all client/server interactions throughout the user s session, through all types of communication channels. This includes all HTTPS based interactions (presentation and web services) as well as interactions via RMI (over SSL) and invocation of EJBs. Accessing Avaya User Administration You can access Avaya User Administration from NMC and from DOCM. To access Avaya User Administration from Avaya Network Management Console: From the Avaya Network Management Console, select Actions > Avaya User Administration. Avaya User Administration opens. Issue 1 June 2007 7
Avaya User Administration Overview Figure 1: Avaya User Administration Accessed From NMC Note: Note: Administrator privileges are required to access the Avaya User Administration application. To access Avaya User Administration from DOCM: In the Managed Objects area, select Utilities > Administrators. Avaya User Administration opens. Note: Note: Administrator privileges are required to access the Avaya User Administration application. 8 Avaya Integrated Management User Administration User Guide
Using the On-Line Help Figure 2: Avaya User Administration Accessed From DOCM Using the On-Line Help This section explains how to use the on-line help in Avaya User Administration. To open the help: Click Help. The online help opens to the contents page. Issue 1 June 2007 9
Avaya User Administration Overview 10 Avaya Integrated Management User Administration User Guide
Chapter 2: Working with Avaya User Administration This chapter describes how to perform all administrative tasks in Avaya User Administration. It includes the following sections: The User Interface - Describes the Avaya User Administration user interface. Managing the Display - Describes how to manage the display of the users list in Avaya User Administration. Understanding User Authentication and Authorization - Describes how network management users are authenticated and authorized. Managing Users - Describes what you can do to manage network management user accounts in Avaya User Administration. The User Interface When you log in to Avaya User Administration, the user interface displays the following: Users list - A list of the users currently defined and their properties. Operation buttons - Buttons displayed above the users list that enable you to perform operations, such as creating new users and deleting users. Users list controls - Controls below the users list that enable you to scroll through pages of users and control the number of users displayed per page. When you click an operation button, the user interface hides the users list, operation buttons, and users list controls, and displays the fields and buttons relevant to the operation. When you complete an operation, the users list, operation buttons, and users list controls are displayed again. Issue 1 June 2007 11
Working with Avaya User Administration Figure 3: The Avaya User Administration User Interface Operation buttons Users list Users list controls Managing the Display This section describes how to manage the users list displayed in Avaya User Administration and contains the following topics: Refreshing the Display Filtering the Display Setting the Number of Items to Display Per Page Refreshing the Display To refresh the users list: Click Refresh. The display is refreshed. 12 Avaya Integrated Management User Administration User Guide
Understanding User Authentication and Authorization Filtering the Display To filter information displayed in the Users List: 1. Click Enable Filtering. A new row appears, highlighted in blue. 2. In the new row, enter the filter criteria in the column you want to search. You can enter information in more than one field to narrow your search. 3. Click Filter to apply your changes. Setting the Number of Items to Display Per Page To change the number of items displayed per page: From the Items per Page drop-down list below the users list, select the number of items to display per page. Understanding User Authentication and Authorization This section describes how network management users are authenticated and authorized and how user accounts are controlled and contains the following topics: Local and non-local Users User Roles The "Administrator" User Account Account Lockout Policy Local and non-local Users Each user is defined as a local or non-local user. Local users are authenticated by a password you assign to the user in Avaya User Administration and authorized according to the role that you assign to the user in Avaya User Administration. The password and role, along with other properties of the user account are stored in the local user repository on the database server. Alternatively, network management users can be authenticated by a RADIUS or LDAP server, and, if authenticated by an LDAP server, users can be authorized by LDAP. If you define a user as a non-local user, the user is authenticated and authorized according to policies configured in the configuration file aimproperties.xml, stored on the application server. The file is located at C:\Program Files\Avaya\jboss-4.0.4.GA\server\conf\aimproperties.xml. Issue 1 June 2007 13
Working with Avaya User Administration The following table describes the parameters that control authentication and authorization policies in the aimproperties.xml configuration file. Table 1: aimproperties.xml parameters for authentication and authorization policies Parameter settings.policy.authenticate settings.policy.authorize Description Sets the authentication policy. Possible values: local - Non-local users are authenticated according to the local user repository. ldap - Non-local users are authenticated according to an LDAP server. radius - Non-local users are authenticated according to a RADIUS server. Sets the authorization policy. Possible values: local - Non-local users are authorized according to the user roles defined in the local user repository. ldap - Non-local users are authorized by an LDAP server. If this value is set, settings.policy.authenticate must also be set to ldap. User Roles User account properties are saved to a local user repository on the database server. This includes, minimally, the user name and role of each user. The role determines the user s level of access to network management applications. The following roles can be assigned to users: Administrator - This role gives the user read, write, and create access to all resources, including other user accounts. Advanced - The access rights associated with this role are defined by each application. These users cannot launch SAA and create device user accounts. Standard - The access rights associated with this role are defined by each application. As for Advanced, these users cannot launch SAA and create device user accounts. Backup-Administrator - This role gives the user the ability to perform backups and restores only. 14 Avaya Integrated Management User Administration User Guide
Understanding User Authentication and Authorization The "Administrator" User Account There is a reserved user account with username "Administrator." The "Administrator" account has the following properties: The account is created at installation and cannot be changed, except for the password. The initial password is entered at installation time. The password does not expire. The account cannot be deleted or locked out. The account is stored in the local user repository. The role of this account is Administrator. Account Lockout Policy Network management user accounts are locked under the following circumstances: After a configurable number of successive login attempts were made with the same user name and an incorrect password, the user account is locked temporarily for a configurable delay period. After a series of successive login attempts from the same client machine with the same username and an incorrect password, in a number that exceeds a configurable lockout threshold, the user account is locked indefinitely. A user account is locked indefinitely after password expiration. You can configure the following lockout parameters in the configuration file...\avaya\ jboss-4.0.4.ga\server\default\conf\aimproperties.xml: temporaryseconds - The amount of delay time for which an account is locked temporarily. temporaryattempts - The number of successive login attempts after which a user account is locked temporarily. permanentattempts - The lockout threshold for indefinite lockout. User account lockouts due to successive failed login attempts are written to the log and cause a notification to be sent to the NMC trap manager. The notification and the log record contain the user name, client station IP address, date, and time. Issue 1 June 2007 15
Working with Avaya User Administration Managing Users This section describes how to manage user accounts and contains the following topics: Creating New Users Deleting Users Modifying Users Duplicating Users Creating New Users To create a new user: 1. Click Add. The user property fields appear. Figure 4: Creating a New User Expiration Date New Password Confirm New Password 16 Avaya Integrated Management User Administration User Guide
Managing Users The following table provides a list of the user property fields: Table 2: New User Fields Field Name Name Notes Role Local User Password Change Not Allowed Account Locked Description The name of the user. This is a required field. Note: Note: You cannot assign the name "Administrator" to a user you create, since it is reserved for the reserved user account. An optional text string. The role of the user. The role determines the user s level of access to network management applications. Possible values: Administrator - Read, write, and create access to all resources, including other user accounts. Advanced - Access rights defined per application. Standard - Access rights defined per application. Backup-Administrator - Ability to perform backups and restores only. This is a required field. Check this box to define the user as a local user. Uncheck this box to define the user as a non-local user. For information about local and non-local users, refer to Account Lockout Policy on page 15. When this box is checked, all property fields appear. When the user logs in, all of the user s properties will be retrieved from the local user repository. When this box is unchecked, the Name, Comment, Role, and Local User fields are active. All other fields disappear. Check this box to prevent the user from changing the user s password. Check this box to lock the user s account. Uncheck this box to unlock the user s account. You might want to do this if the account has been locked automatically. For example, if a user s password has expired, the account is automatically locked indefinitely. For information about when user accounts are locked automatically, refer to Account Lockout Policy on page 15. 1 of 2 Issue 1 June 2007 17
Working with Avaya User Administration Table 2: New User Fields (continued) Field Name User Must Change Password Create New Password Expiration Date New Password Confirm New Password Description Check this box to require the user to change the password on the next login to the account. When the user next logs in, the user will be prompted with a password change dialog box immediately after successful login. The password change dialog box will request the old password, the new password, and a confirmation for the new password. The user will not be able to proceed without completing this dialog box. Check this box if you want to create a new password for the user. When you check this box, the New Password and Confirm New Password fields become active and their labels appear. The date on which the user s current password expires. If the user does not change the password before the expiration date, the user account is locked indefinitely. To set the date, click and select the date from the pop-up calendar. During a certain period of time before the expiration date, whenever the user logs in to the account, the system prompts the user with a warning of password expiration and a password change dialog box, which the user can choose to skip. If you do not specify an expiration date, the password expires after the number of days defined in the configuration file aimproperties.xml, stored on the application server. Use this field to specify the user s password. If you do not specify a password, the default password "inipass0" is created. A password must: Have eight or more characters. Contain characters of at least two of the following types: lowercase, uppercase, numeric, non-alphanumeric. Not contain three or more repeated and/or sequential characters, as in "asdfjkl;", "123456", "abcde", or "bbbbbbb". Not match any of the 10 previously used passwords. Not contain the user name. If you entered a password in the New Password field, reenter the same password in this field for confirmation. 2 of 2 2. Click Save changes. The new user is created and the users list appears with the new user added to the list. 18 Avaya Integrated Management User Administration User Guide
Managing Users Deleting Users Deleting a user removes the user account details from the local user repository. Note: Note: You cannot delete the "Administrator" user account. To delete a user: 1. In the Users List, select the user whose account you want to delete. Note: Note: You cannot delete the default user Administrator. 2. Click Remove. The Continue dialog box appears. 3. Click Continue. The user is deleted and the users list appears without the user you deleted. Modifying Users Modifying a user enables you to edit a user s properties. To modify a user: 1. In the Users List, select the user whose account you want to modify. 2. Click Edit. OR 3. In the Users List, double-click the user you want to modify. Note: Note: You cannot modify the default Administrator user account. The user s properties appear. Issue 1 June 2007 19
Working with Avaya User Administration Figure 5: Modifying a User 4. Make any changes you require. For information about the fields, refer to Table 2: New User Fields on page 17. 5. Click Save Changes. The changes you made are saved and the Users List appears. Duplicating Users Duplicating a user creates a new user with identical properties to an existing user, except the user s name and password. To duplicate an existing user: 1. Select the user you want to duplicate. 2. Click Duplicate. The user property fields appear with all fields displaying the values of the user you selected, except the Name and Password fields. For information about the fields, refer to Table 2: New User Fields on page 17. 3. Enter a new name and password for the new user. 4. Modify any other fields you want. 5. Click Save Changes. A new user is created with the properties you selected. 20 Avaya Integrated Management User Administration User Guide
Index Index A Accessing Avaya User Administration......... 7 Account lockout policy............... 15 Authentication of users, understanding....... 13 Authentication policy................ 13 Authorization of users, understanding........ 13 Authorization policy................ 13 B Buttons.......................11 C Configuration file parameters permanentattempts............... 15 settings.policy.authenticate........... 14 settings.policy.authorize............. 14 temporaryattempts............... 15 temporaryseconds............... 15 Creating new users................ 16 D Deleting users................... 19 Display filtering..................... 13 number of items per page............ 13 refreshing................... 12 Duplicating users................. 20 E Editing users................... 19 F Filtering the display................ 13 H Help........................ 9 I Items per page displayed.............. 13 L LDAP authentication................ 13 Local and non-local users.............. 13 Lockout policy................... 15 M Modifying users.................. 19 N New user, create.................. 16 O Operation buttons................. 11 Organization of this manual.............. 5 Overview of Avaya User Administration........ 7 P Purpose of this manual................ 5 R RADIUS authentication............... 13 Refreshing the display............... 12 Reserved user account............... 15 Roles, user..................... 14 S Scrolling buttons.................. 11 U User create..................... 16 delete..................... 19 duplicate.................... 20 modify..................... 19 User account lockout policy.................. 15 reserved.................... 15 User authentication, understanding......... 13 User authorization, understanding.......... 13 Issue 1 June 2007 21
Index User interface....................11 User roles..................... 14 Users list......................11 Users, local and non-local............. 13 W Who should use this manual............. 5 22 Avaya Integrated Management User Administration User Guide