Using an SSO Client to Log In to a Database Resource for Operations

Supported Protocols and Clients

Table 1 describes the database protocols that support SSO-based operations as well as supported clients and versions.

Notes and Constraints

• The database operation audit is available only in professional editions.
• Multiple Navicat clients can be opened to maintain databases.
• The client timeout period (Idle timeout in Configuring Client Login) configured in the system does not apply to MongoDB databases.
• If you upgrade a bastion host of a version earlier than V3.3.56.0 to V3.3.56.0 or later, you need to download and install SsoDBSettings again. For details, see Step 1: Download the SSO Tool (Required for the First Login).
• The bastion host cannot verify SSL-enabled databases. To log in to such a database, you are advised to use the DBeaver client and disable SSL on the client. (Under Database > Driver Manager, add the sslmode property to the connection properties and set its value to disable.)
• The SsoTool.msi remote tool can be installed only in the default path C:\sso\SsoTool. If you install it in other paths, the tool may fail to be started.

Prerequisites

• Your role has the management permission for the Host Operations module. For details about how to check the permissions of each role, see Role.
• You have obtained the access permissions for the resources.
• You have installed the supported client tool on your local PC. For details, see Supported Protocols and Clients.
• The network connection between the managed host and the system is normal, and the account username and password for logging in to the managed host are correct.

Step 1: Download the SSO Tool (Required for the First Login)

1. Log in to your bastion host system.
2. Click in the upper right corner to go to the download center.
3. On the Common Tools tab, click on the right of SSOTool Windows to download the tool to your local PC.
4. Double-click SsoTool.msi and install the tool on the local PC as prompted.

Step 2: Configure the Client Path of the SSO Tool (Required for the First Login)

The following uses Navicat as an example. The procedure for configuring the path of other clients is similar.

1. Start local SSO tool SsoDBSettings.
2. Click the path configuration icon next to Navicat Path.
3. Find the absolute path where the Navicat client is installed, select the .exe file, and click Open.
4. Go to the SsoDBSettings SSO tool configuration page and view the selected Navicat client path.
5. Click Save.

Step 3: Log In to a Database for O&M

1. Log in to your bastion host system.
2. Choose Operation > Host Operations to go to the Host Operations page.
3. Quickly search for the target database.
   1. Expand Resource Group on the left to check the resource group view.

      In the Personal Resource Group or Public Resource Group area on the left of the content pane, click a resource group name. Then only the host or database resources in the selected resource group will be displayed in the list. If no resource group is selected, all host or database resources are displayed by default.

   2. Above the host list, enter a keyword in the search box to quickly search for resources by host name or host address.

4. Locate a server with a database protocol and click Login in the Operation column.

   The client tool selection window is displayed.

5. Select the client tool (for example, Navicat) installed on the local PC and click OK.

   The system automatically calls the local database client tool to log in to the database.