Enabling Authentication and RBAC for Administrator Logins

Administrators are authenticated both by Sybase Control Center and by Unwired Server. To make first-time installs easier, the Unwired Platform installer collects a single password that is used to configure and enable a security provider called PreconfiguredUser login module.

1. Gathering Information on the LDAP Directory
   Production environments rely on an LDAP directory to authenticate administrators. Consider which users need to be in the SUP Administrator or SUP Domain Administrator role, then identify or create LDAP groups corresponding to these roles. You must also allocate a group for the DCN User role.
2. Logging Into Sybase Control Center With Installer Defined Password
   The person acting as Platform administrator logs into Sybase Control Center for the first time after all Unwired Platform components are installed. During installation, an administrator user and password was defined. The Platform administrator must use these values to log into Sybase Control Center.
3. Setting Up Login Security for Unwired Server
   Extend installation security defaults with new production-ready providers. Because you are also configuring server logs to capture detailed security events, you will be able to validate these changes later in this task flow before finalizing the server security setup.
4. Replicating Unwired Server Setup in Sybase Control Center
   To prevent unexpected login issues, the changes you implement for the "admin" security configuration need to be repeated for Sybase Contorl Center. This task effects changes against two files: <UnwiredPlatform_InstallDir>\SCC-XX\conf\csi.properties and roles-map.xml.
5. Validating the LDAP Provider
   Once LDAP has been added as a provider to both the "admin" security configuration for Unwired Server and the CSI property file for Sybase Control Center you can test to see that the login works successfully before removing the PreconfiguredUser login module from both components' configurations.