How do I configure an Express or Auto Logon Page for the AppManager Web Console? (NETIQKB1380)

How do I configure an Express Logon Page for the AppManager Web Console?
How do I configure an automatic logon page for the AppManager Web Console?

To set up an Express Logon page, refer to the following sections:

• Selecting and configuring a login account
• Setting up singlelogin.asp
• Setting up autologin.asp
• Setting up autologingraph.asp
• Additional information

Selecting and configuring a login account

The first step in setting up an Express Logon page is to choose the SQL Server login account that will be used to access the AppManager repository. Everyone who uses the Express Logon page will be logged in to the AppManager repository using this account. If NT Authentication is used for the autologin.asp then you will need to make sure the AppManager user has the desired level of AppManager permissions. The tasks that they can perform are controlled by this login's security profile.

Use the NetIQ AppManager Security Manager to grant this login account permission to access AppManager. Define the security profile for this login account. For example, you may want to prevent this login account from starting and stopping Knowledge Script jobs.

Setting up singlelogin.asp

This logon page configures the SQL Server login, repository server, and repository name. In Microsoft Internet Explorer, the user must specify the password of the SQL Server login account to start an Operator Web Console session.

Depending on the authentication methods your Microsoft Internet Information Service (IIS) administrator has enabled for the NetIQ resource, the user may be prompted for their Windows NT domain and user name (for example, netiq/bob smith), and password. For more information, contact your IIS administrator or see your IIS documentation. This page is not supported in Netscape Navigator.

To set up singlelogin.asp as an Express Logon page:

1. On the computer where you installed the Web management server component, locate the file singlelogin.asp. The default location is the %inetpub/wwwroot/netiq folder.
2. In an HTML editor or text editor, open the singlelogin.asp file and edit the following lines:

   • Name = "user_name"

     Replace user_name with the SQL Server login account used to access the AppManager repository. The default user name for the AppManager repository is sa.

   • Computer = "server_name"

     Replace server_name with the Windows NT name of the server where the AppManager repository you want to work with is installed.

   • Repository = "repository_name"

     Replace repository_name with the name of the AppManager repository you want to work with. The default database name for the AppManager repository is QDB.

   For example, to access a repository named QDB on the server named mango using the login account XchngOps, use:

       Name = "XchngOps"
       Computer = "mango"
       Repository = "QDB"
   

3. When you finish editing singlelogin.asp, save your changes.
4. To test your changes, in Internet Explorer, open the singlelogin.asp page. The logon page displays the name of the SQL Server computer, the repository database, and the SQL Server login account that accesses the AppManager repository. These settings cannot be edited.
5. Make sure that Operator Web Console users configure their Web browser to open the singlelogin.asp page instead of the default.htm page. For example, if the AppManager Web management server is installed on a computer named coconut, Operator Web Console users will open the page:

   http://coconut/netiq/singlelogin.asp

6. If you need to create Express Logon pages for more than one SQL Server login account or security profile, create different versions of singlelogin.asp and give each version a different name. For example, you might create singleloginro.asp, whose SQL Server login account is assigned to the Read-Only User AppManager role; and singleloginadmin.asp, whose SQL Server login account is assigned the Administrator AppManager role.

Setting up autologin.asp

This logon page automatically connects the AppManager Operator Web Console user to the repository using the SQL Server login, password, repository server, and repository name specified here.

To protect access to SQL Server, set Windows NT file access permissions on the autologin.asp file.

Depending on the authentication methods your IIS administrator has enabled for the NetIQ resource, the user may be prompted for their Windows NT domain and user name (for example, netiq/bob smith), and password. For more information, contact your IIS administrator or see your IIS documentation. This page is supported in Microsoft Internet Explorer and Netscape Navigator.

To set up autologin.asp as an Express Logon page:

1. On the computer where you installed the Web management server component, locate the file autologin.asp. The default location is the %inetpub/wwwroot/netiq folder.
2. In an HTML editor or text editor, open the autologin.asp file and edit the following lines:

   • Name = "user_name"

     Replace user_name with the SQL Server login account used to access the AppManager repository. The default user name for the AppManager repository is sa. When using NT Authentication leave the user_name field blank.

   • Password = "user_password"

     Replace user_password with the password of the SQL Server login account used to access the AppManager repository. By default, a password is not defined for the sa AppManager repository user. When using NT Authentication leave the user_password field blank.

   • Computer = "server_name"

     Replace server_name with the Windows NT name of the server where the AppManager repository you want to work with is installed.

   • Repository = "repository_name"

     Replace repository_name with the name of the AppManager repository you want to work with. The default database name for the AppManager repository is QDB.

   For example, to access a repository named QDB on the server named mango using the login account XchngOps with a password named p@ssw0rd, use:

       Name = "XchngOps"
       Password = " p@ssw0rd "
       Computer = "mango"
       Repository = "QDB"
   

3. When you finish editing autologin.asp, save your changes.
4. To test your changes, in Internet Explorer, open the autologin.asp page. The Operator Web Console appears.
5. Make sure that Operator Web Console users configure their Web browser to open the autologin.asp page instead of the default.htm page. For example, if the AppManager Web management server is installed on a computer named coconut, Operator Web Console users will open the

   http://coconut/netiq/autologin.asp

6. If you need to create Express Logon pages for more than one SQL Server login account or security profile, create different versions of autologin.asp and give each version a different name. For example, you might create autologinro.asp, whose SQL Server login account is assigned to the Read-Only User AppManager role; and autologinadmin.asp, whose SQL Server login account is assigned the Administrator AppManager role.

Formerly known as NETIQKB1380

An Express Logon page provides the user with fast access to the AppManager Operator Web Console. Set up an Express Logon page to permit one or more Operator Web Console users to quickly access AppManager using the same SQL Server account. Because the Express Logon page predefines the SQL Server login account that accesses the AppManager repository, in AppManager Security Manager, you can refine the available views for the login account and set up an Express Logon page for each AppManager role.

AppManager provides three Express Logon pages:

• Singlelogin.asp: With this logon page, the name of the SQL Server computer, the repository database, and the SQL Server login account that accesses the AppManager repository are predefined ? at logon, the user specifies only the password. This feature does not automatically connect the user to the AppManager repository. If the login account does not have a password, the user must click the Logon button to start an AppManager Web Operator Console session.
  
• Autologin.asp: With this logon page, all of the login information is predefined. When the user opens the logon page, an Operator Web Console session starts, using the login information defined in the logon page.
  
• Autologingraph.asp: With this logon page, all of the login information, along with graph information for plotting selected data streams, is predefined. When the user opens the logon page, an Operator Web Console session starts, using the login information defined in the logon page. The Operator Web Console immediately displays a graph that plots the predefined data streams.

For information on IIS authentication methods, refer to the Microsoft Internet Information Server documentation.