Authentication

Menu Authentication is used for the general settings to work with the users.

Here you define what type of users you want to have in the system, you can define an LDAP server, and set the auto-off time.

Authentication configuration contains the following items:

• User directory: defines whether to use only internal user database, or whether you require a connection to the LDAP directory server.
• Items for accessing LDAP, if you choose Local + Active Directory (LDAP):
  • Host: IP address of the LDAP server.
  • Host secondary: IP address of the secondary LDAP server.
  • SSL: If is required the secure communications.
  • Port: On which port you have LDAP service running.
  • DN: The base directory structure, e.g.: DC=test,DC=example,DC=com
  • Suffix: Suffix directory structure, e.g.: @test.example.com

    Don’t forget to proceed with settings LDAP Groups, where it’s necessary to connect LDAP groups with Logmanager system user groups.

  • Bind:
    • Username: Which username will access the information in Active Directory.
    • Password: The password for that user.

• Auto Logout: Automatic logoff on idle (in minutes)
  • Default auto log-out time is set to 30 minutes.
  • Maximal value for the automatic log-out can be set up to 12 hours.

• Vendor support:
  • This function is Disabled by default. Only after being instructed by vendor technical support personnel – enable this option. If enabled, it starts SSH server in the given Logmanager and will allow vendor technician to have an access to the server, i.e., for solving unexpected issues.

Vendor support does not allow direct access from the internet or create any type of reverse connection to the Logmanager development. Therefore, system administrator will be asked for additional connection through the VPN or a jump host (RDP/virtual meeting/TeamViewer etc.). This should only happen under an approval and/or supervision of customer’s administrator and only for the period of technical assistance. After the vendor technical support is complete, please disable this function again. Vendor technician will use unique SSH access key from its secured storage to connect to the box. There are no SSH keys provided to customers and/or 3rd party.

• Automaticaly send usage statistics report to vendor:
  • This function (usually known as Telemetry) is Enabled by default. User can disable this function in Users > Authentication page. On the same page you can also view what data is being sent to vendor by clicking on eye icon next to the function name.
  • Report contains basic telemetry data about:
    • what functions are used in LM system
    • what Blockly blocks are used and how many times
    • CPU details
    • index sizes and memory consumption
  • Report never contains any device collected (customer) data. If enabled - telemetry report is being sent automatically daily at around 15:00 CET to vendor update server “up.logmanager.cz” in a protected way. First telemetry report is sent if Logmanager device has at least 7 days of uptime, so Logmanager administrator has enough time to disable this function, if required.

Please do not disable this function, report does not contain any sensitive information, and it is huge help to development team. Collected data are used for improving the product. If we see what features Logmanager users are using, we can focus on improving them, instead of improving functions rarely used.

This function does not allow any additional direct access to Logmanager appliance from any location. This function does not send any customer or sensitive data as configuration, usernames, passwords, etc.

• Automatically send error reports to vendor:
  • This function is Disabled by default. Only after being instructed by vendor’s technical support personnel – enable this option. It starts automated reporting of system internal errors (if any) to vendor’s server at address: “bugreport.logmanager.cz”. Enabling this function will allow vendor’s technician to analyze Logmanager appliance without a need of remote access.

• Technical support report (TSR):
  • Not directly in menu. If asked by Vendor’s technical support personnel, Logmanager appliance can create a detailed encrypted TSR file. You will be guided by support, how to create TSR.

Technical support report is a detailed set of internal logs of individual components and subsystems of a given instance of Logmanager, as well as detailed data created by internal monitoring of the Logmanager system. TSR does not contain any customer data, usernames or even passwords or keys. It contains only the data needed to diagnose performance issues or possible problems. The TSR is encrypted using the unique key of the given Logmanager. The reason for encryption is mainly a guarantee of the TSR content and overall security of the transmitted data.