Configuring JDZY Remote Authentication

Prerequisites

• You have obtained the permission to manage the System module in the CBH system.
• You have created a user on the JDZY platform and obtained related configurations on the JDZY platform.
• The JDZY login name field obtained by the bastion host is loginname. If the JDZY server login name field is not loginname, contact technical support.

Procedure

1. Log in to your bastion host.
2. Choose System > System Config > Authenticate to go to the authentication configuration page.
   Figure 1 Configuring remote authentication
   

3. In the JDZY Authentication Config area, click Edit. The configuration window is displayed.
   Figure 2 JDZY Authentication Config
   

   Table 1 JDZY authentication parameters

   Parameter	Description
   Status	Enable or disable JDZY authentication. The default value is . : JDZY authentication is enabled. Remote JDZY authentication is enabled when the user starts a login. : JDZY authentication is disabled.
   Cover Existing Users	Whether to enable the JDZY overwriting function. The default value is . : If an account with the same username already exists, the existing account will be overwritten. : If an account with the same name already exists, the JDZY user fails to be created in the system.
   client_id	Enter the JDZY client ID.
   client_secret	Enter the JDZY client password.
   redirect_uri	Redirection URI, which is required when you configure authentication on the JDZY platform.
   Authorization Code Address	Enter the JDZY authorization code address.
   Token Address	Enter the JDZY token address.
   User Resource Address	Enter the address for obtaining user resources from JDZY.

4. Click Network Detection to check the network connectivity to the JDZY platform.
   Configure parameters according to Table 2 and click Execute.

   Table 2 Network detection parameters

   Parameter	Description
   Infotype	Select a network diagnosis method. You can select ping, traceroute, or TCP port.
   Host Address	Enter the JDZY server IP address.
   Port	This parameter is valid only when Infotype is set to TCP port. Enter the JDZY server access port.

5. After the network detection is successful, click OK. The configuration is complete.

Follow-up Operations

After the configuration is complete, users can log in to the bastion host system using a web browser after a successful JDZY authentication. For details, see JDZY Authentication Login.