Установка тестовой среды с JMS 4 LX

Подготовка сервера ALSE 1.7.4 для JMS4LX

Перечень компонент:
УЗ:
Доп. настройки:

Задать hostname

sudo hostnamectl set-hostname jms
nano /etc/hosts

Ввести компьютер в домен:

sudo tee /etc/security/limits.d/90-fsize.conf 2&>/dev/null << EOF
* hard fsize unlimited
* soft fsize unlimited
EOF
sudo apt install astra-ad-sssd-client -y
sudo astra-ad-sssd-client -y -d {{ server.domain }} -u {{ defaults.domainadmin }}

sudo apt install postgresql postgresql-contrib

#установить из base repo
sudo apt install gss-ntlmssp -y

sudo tee ./InitialConfigurationAD.ini << EOF
[service]
execPath=/opt/eap-engine/Aladdin.EAP.Engine
integrationManagerUrls=http://*:8120
controlManagerUrls=http://localhost:8119
authenticationManagerUrls=http://*:8121
clientManagerUrls=http://*:8122
 
[database]
type=PostgreSQL
serverAddress=127.0.0.1
serverPort=5432
databaseName=JMS4DB-AD
serverLogin=postgres
serverPassword=VzHgRoC7cvWgMEHjqrkw
databaseLogin=postgres
databasePassword=VzHgRoC7cvWgMEHjqrkw
 
[accountSystem]
type=AD
name=ald.sovint.ru
serverAddress=dc01.ald.sovint.ru
container=OU=root,dc=ald,dc=sovint,dc=ru
userName=ALD\jmduser
password=0680i7Pk8M5jxdcYnMbs
disabledContainers=Program Data,System,Application
useSsl=false
;useSsl=true
mapping=false
attributes=*
referralChasing=false
 
[primaryUser]
accountName=jmsadmin
 
[licenses]
path=/opt/eap-engine/licenses/ald.sovint.ru.lic
EOF

sudo mkdir /opt/eap-engine/licenses/ -pv
sudo cp /distrib/ald.sovint.ru.lic /opt/eap-engine/licenses/ -v

Certificate Authority

Domain Controller

certlm.msc - Выпустить сертификат на Контроллеры домена по шаблону Kerberos Authentication
Group Policy Management
- Создать политику, действующую на компьютеры домена:
  - Computer Configuration → Policies → Windows Settings → Security Settings → System Services → Smart Card Removal Policy → Automatic
  - Computer Configuration → Policies → Windows Settings → Security Settings → Local Policies → Security Options → Interactive Logon: Smart Card Removal Behavior → Disconnect if a remote Remote Desktop Services session