Page History
...
Code Block | ||||
---|---|---|---|---|
| ||||
js7 { auth { # User accounts for https connections users { # Subagent ID of pairing Director Agent instance subagent-id { permissions = [ AgentDirector ] distinguished-names=[ "DNQ=SOS CA, CN=director-2-0-secondary, OU=IT, O=SOS, L=Berlin, ST=Berlin, C=DE" ] } } } } |
Explanation:
- This setting applies to use of the Subagent component within a Director Agent instance in a JS7 - Agent Cluster.
- Note that the
subagent-id
element name is an example that has to be replaced by the Subagent ID of the pairing Director Agent instance which is specified during configuration of the Agent Cluster. This is not the Agent Cluster ID. For theprivate.conf
file of a Primary Director Agent instance this setting holds the Subagent ID of the Secondary Director Agent instance and vice versa. - The
permissions
element should be used as indicated. - The
distinguished-names
element identifies the pairing Director Agent instance's Client Authentication certificate. The certificate acts as a replacement for a password.- Note that the common name (CN) element in the distinguished name has to match the fully qualified domain name (FQDN) of a Director Agent instance's host.
The following command can be used to read the distinguished name from a certificate file:
Code Block title Example for OpenSSL command to read a certificate's distinguished name # read distinguished name from the pairing Director Agent instance's certificate openssl x509 -in centostest-secondary.crt -noout -nameopt RFC2253 -subject # output is returned with a prefix "subject= " or similar that is not part of the distinguished name # subject= DNQ=SOS CA,CN=director-2-0-secondary,OU=IT,O=SOS,L=Berlin,ST=Berlin,C=DE
...
Code Block | ||||
---|---|---|---|---|
| ||||
js7 { auth { # for each Subagent specify the Subagent ID and password subagents { director-primary = "plain:secret-director-primary" director-secondary = "plain:secret-director-secondary" subagent-001 = "plain:secret-subagent-001" subagent-002 = "plain:secret-subagent-002" subagent-003 = "plain:secret-subagent-003" } } } |
...
- This setting applies to connections to a Subagent of a pairing Director Agent instance in a JS7 - Agent Cluster and to connections to any Subagents.
- Note that the
director-primary
,director-001
element name is an example that hassecondary
element names are examples that have to be replaced by the Subagent ID of the pairing Director Agent instance which is specified during configuration of the Agent Cluster. This is not the Agent Cluster ID. For theprivate.conf
file of a Primary Director Agent instance this setting holds the Subagent ID of the Secondary Director Agent instance and vice versa. - Note that the
subagent-001
and ,subagent-002, ...
element names are examples for Subagent IDs of connected Subagents. - The
password
element specifies the password indicated with the pairing Director Agent instance's and any Subagent'sjs7.auth.users.<subagent-id>.password
configuration item.- The password must be specified as plain text preceded by
plain:
. Passwords should be quoted.
- The password must be specified as plain text preceded by
...
Overview
Content Tools