Stat 6.2 - System Administration Guide

Stat allows you to use variables for First Name and Last Name fields so that the default value is dynamically applied to each user account, for example: "CN=%first_name%_%last_name%,OU=Employees"


	NOTE: You do not need to specify a password. The Password field is for test connections purposes only.

Select Append Base DN to append the base DN with the template DN.

To define an LDAP connection (using the SAM-Account-Name attribute):

Click New to create a new LDAP connection.

In the LDAP Cd field, enter a code that uniquely identifies the LDAP connection.

In the Description field, enter a short description of the LDAP connection.

In the Host field, enter the network name that identifies the host machine on which the LDAP server is installed.

In the Ports field, enter the port number of the LDAP server. The port number is typically 389.

In the LDAP Domain field, enter the domain name for the connection.

To enable SSL:

If your site is equipped to use SSL and you want to use it to encrypt communication between Stat and the LDAP server, select SSL. Then specify the location of the SSL keystore for the Stat Windows Client or the Stat Web Client:

•

For the Stat Windows Client, enter the location of the SSL keystore in the Keystore Location field.

•

For the Stat Web Client, enter the location of the SSL keystore In the Agent Keystore field.

As an alternative, you can rely on your $JAVA_HOME/jre/lib/security/jssecacerts keystore to provide the certificate for your LDAP server. In this case, you can leave the Keystore Location field blank provided that jssecacerts exists in the Windows client jre/lib/security directory and that jssecacerts contains the LDAP certificate. For the Stat Central Agent, you can leave the Agent Keystore field blank provided that jssecacerts exists in the Central Agent's jre/lib/security directory and that jssecacerts contains the LDAP certificate.

Note that if both your Stat Central Agent and your LDAP server are running in secure mode, you have to rely on $JAVA_HOME/jre/lib/security/jssecacerts to contain both the LDAP certificate and the Stat Central certificate. This is true for the Windows Client JAVA_HOME and for Stat Central Agent's JAVA_HOME. In this case, both Keystore Location and Agent Keystore fields should be left blank.

Click OK or Apply to save your work.

After defining an LDAP connection, you can assign it to users. You can also copy LDAP connections and use the copy as the basis for a new LDAP connection. To copy an LDAP connection, select it and click Copy.

Assigning LDAP Connections to Users

To assign a LDAP connection to users:

Select the LDAP connection you want to assign to users and click Assign Users.

The Assign Users window displays all the active users in Stat. You can filter the list to show users currently assigned to particular LDAP connections as well as users that are not currently assigned to a connection.

Select the user(s) you want to assign to the connection.

Click Update User DN.

This updates the user’s DN by appending the selected LDAP domain’s Base DN to the Template DN. For connections using the SAM-Account-Name attribute, User DN is left blank and the Stat User ID is passed in for samAccountName when the user attempts to log in to Stat. You may also overwrite the Stat User ID by entering a samAccountName value in the User DN field.

Click OK or Apply to save your changes.

Connection Manager

The maximum number of active users (meaning users who can connect to Stat as specified in the User Maintenance table) equals the number of licensed seats. Once the number of active users equals the number stipulated in the license agreement, new user connections are denied.

The Connection Manager window displays a list of all the users currently connected to Stat as well as a record of denied and terminated connections. From this window you can manually disconnect users from the Stat Repository, thereby opening seats and allowing other users to connect.

Connection Manager security is controlled by the user class right, Database Connections - Manage.

To open the Connection Manager window, select Maintenance | Security Settings | Connections.

The Current Tab

This tab displays the list of users currently connected to Stat. The number of licensed seats and the number in use are displayed at the bottom of the list. Once the number of licensed seats is met, Stat denies any more connection requests.


	NOTE: A Connection Manager window appears on users’ workstations whenever their connection to the Stat database is severed, either by a system administrator through the Current tab or due to a network problem.

The Current tab contains the following fields (columns):

Flag

When a connection has been terminated, this column is marked with a red X. Terminating a connection forces the connected user to disconnect. When this happens, a notification appears on the disconnected user’s screen.

The unique identifier assigned by the System

User

The name of the user connected to Stat

Connect Dt/Tm

Date and time the user connected to Stat

Last Update Dt/Tm

Approximately every 60 seconds, Stat updates this table to indicate that it still has an active connection. This column indicates the last time this update took place.

Refresh

Click this button to refresh the window