Configuring the authentication broker on node saturn

Configure a new authentication broker (AB) on node saturn. This AB belongs to root broker RB1.

To configure the authentication broker on node saturn

  1. Create a principal for node saturn on root broker RB1. Execute the following command on root broker RB1.

    # vssat addprpl --pdrtype root --domain domainname \
     --prplname prplname --password password \
     --prpltype service

    For example:

    # vssat addprpl --pdrtype root \
    --domain root@RB1.brokers.example.com \
    --prplname saturn.nodes.example.com \
    --password flurbdicate --prpltype service
  2. Ensure that there is no clock skew between the times on node saturn and RB1.

  3. Copy the /opt/VRTSat/bin/root_hash file from RB1 to node saturn.

  4. Configure AB on node saturn to talk to RB1.

    # vxatd -o -a -n prplname -p password -x vx -y domainname -q \
    rootbroker -z 2821 -h roothash_file_path

    For example:

    # vxatd -o -a -n saturn.nodes.example.com -p flurbdicate \
    -x vx -y root@RB1.brokers.example.com -q RB1 \
    -z 2821 -h roothash_file_path
  5. Verify that AB is configured properly.

    # vssat showbrokermode

    The command should return 1, indicating the mode to be AB.