Digipass Plug-In for SBR Administrator Reference - Vasco

Digipass Plug-In for SBR Administrator Reference Table of Contents
Table of Contents
1 Introduction........................................................................................................ 11
1.1 Available Guides......................................................................................................... 11
1.2 System Requirements.................................................................................................11
1.2.1 Requirements Specific to Active Directory................................................................. 11
1.2.2 Requirements Specific to ODBC Database................................................................. 12
1.3 Software Components................................................................................................ 13
1.3.1 Required Components........................................................................................... 13
1.3.2 Optional Components............................................................................................ 14
1.3.3 Extra Utilities....................................................................................................... 15
2 Active Directory Schema......................................................................................16
2.1 Schema Extensions.....................................................................................................16
2.1.1 Added Object Classes............................................................................................ 16
2.1.2 Added Attributes.................................................................................................. 16
2.1.3 Added Permission Property Sets.............................................................................. 19
2.2 Active Directory Auditing............................................................................................20
2.3 Custom Search Options...............................................................................................21
2.3.1 Saved Queries...................................................................................................... 21
2.3.2 Using the Custom Search for Digipass...................................................................... 22
2.3.3 Using the Custom Search for Users......................................................................... 23
2.4 Active Directory Replication Issues............................................................................ 25
2.4.1 Old Data Used After Attribute Modified..................................................................... 25
2.4.1.1 Single SBR Plug-In using more than one Domain Controller....................................................25
2.4.1.2 Administrator and SBR Plug-In using different Domain Controllers...........................................26
2.4.1.3 Multiple SBR Plug-Ins Using Different Domain Controllers.......................................................26
2.4.1.4 Two Administrators Modifying the Same Attribute................................................................. 26
2.4.2 Old Data Used Overwrites New Data........................................................................ 27
2.4.3 Factors Affecting Replication Issues......................................................................... 27
2.4.4 Solutions and Mitigations....................................................................................... 28
2.4.4.1 Digipass Cache.................................................................................................................28
2.4.4.2 Identification Threshold Setting.......................................................................................... 29
2.4.4.3 Administrator Connection Strategy......................................................................................29
2.4.4.4 Set a Preferred Server.......................................................................................................30
2.4.4.5 Use Preferred Server Only Option....................................................................................... 31
2.5 DPADadmin Utility...................................................................................................... 32
2.5.1 Extend Active Directory Schema............................................................................. 32
2.5.2 Set Up Digipass Containers in Domain..................................................................... 34
2.5.2.1 Prerequisite Information.................................................................................................... 34
2.5.2.2 Set Up Digipass Configuration Container..............................................................................34
2.5.2.3 Command Syntax............................................................................................................. 34
2.5.3 Assign Digipass Permissions to a Group................................................................... 34
2.5.3.1 Pre-requisites...................................................................................................................34
2.5.3.2 Command Syntax............................................................................................................. 35
2.5.4 Upgrade RADIUS Profile Information....................................................................... 35
2.5.5 Delete all Digipass-Related Data from Active Directory............................................... 36
2.5.5.1 Run Delete Script on a Domain...........................................................................................36
3 ODBC Database....................................................................................................38
3.1 Database Support....................................................................................................... 38
3.1.1 Unicode Support................................................................................................... 38
© 2006 VASCO Data Security Inc. 3