3 — Installing NetCrusader/Web

[Previous] [Next] [Contents] [Index]

This chapter describes how to install the NetCrusader/Web product. It contains the following sections:

3.1 Before You Install
3.2 Installing NetCrusader/Web
3.3 Designating a Local Configuration Administrator

For background information on the NetCrusader product line, see the NetCrusader/Web Overview Guide.

3.1 Before You Install

If you have not done so already, verify that you have satisfied the prerequisites in Chapter 1.

If you have not done so already, follow the pre-installation procedures starting with Section 2.1 on page 11 and verify that each procedure was successful

3.2 Installing NetCrusader/Web

1. Shut down all Windows applications (including Windows system applications and the Windows Control Panel), that may currently be running on your system.

2. To install the Security Adapter, you need Windows Administrator privileges. If you are not logged in under a username that has Administrator privileges, close all programs and log on as a user that has such privileges.

3. Insert the NetCrusader/Web distribution CD into the CD drive of your PC.

4. Start the NetCrusader/Web setup program by launching

   <CD drive>:\NT50\Setup.exe

   The Welcome screen appears.

5. Read the Software License Agreement. Click Yes to accept the agreement and continue.

6. Select where to install the NetCrusader/Web files. Do not install NetCrusader/Web in the same directory as the Security Server (for example, do not install in the C:\Program Files\Gradient\NetCrusader Security Server directory).

   By default, the installation program installs the Security Adapter files on your system drive in the C:\Program Files\Gradient\NetCrusader directory. Accept the default or click the Browse button to select an alternative installation location. When satisfied with your choice of destination directory, click Next.

7. You are asked which NetCrusader/Web components you want to install:
   • Commander (the NetCrusader administration tool)
     
   • Security Adapter
     
   • Samples (for developing NetCrusader/Web applications)
     

     Choose the components you want to install.

8. You may be asked if you want to overwrite a read-only DLL. Answer Yes. If you do not want to view similar messages, click the Don't Display this again box.

9. You are asked to choose a Program Group. Accept the default or enter a name.

10. A prompt appears asking you if you want to restart now or later. You must restart your computer for the NetCrusader/Web installation to complete. Select the appropriate button and click Finish.

After the reboot you may configure the Security Adapter. Information on configuring the Security Adapter appears in Chapter 4. You can find detailed information for each screen and field in the Security Adapter online help.

3.3 Designating a Local Configuration Administrator

The Gradient PC-DCE product includes a TCL/TK script that allows the cell administrator to designate a local administrator who can configure a NetCrusader security client on host machines. This allows local administrators to configure a full client into a cell without knowing the cell administrator password. This script, the preconfig.tcl script, now includes NetCrusader/Web support.

You can designate a local configuration administrator by principal name or group name. If you designate a group, any member of the group can be a local administrator.

Designating a local configuration administrator is sometimes referred to as a preconfiguration script because the script does some of the configuration ahead of time, before the local administrator finishes the configuration. It is also sometimes referred to as a split configuration because the cell administrator uses the script to perform some of the configuration and then splits off the rest of the configuration tasks to a local administrator, who performs further administrator tasks on the remote client host.

3.3.1 Before You Run the Script

The preconfig.tcl script asks for the following information:

• A list of fully qualified domain names of the hosts that you want to configure

• An entity name (principal or group name)

• The entity type for the entity name (group or principal)

• Administrator password

• Name you want to use as the default delegation group name (optional)

• Name you want to use as the identity mapping group name (optional)

The entity (single or group) name must have a valid login in the cell to which the client machine will belong.

3.3.2 What the Script Does

The script creates new groups, accounts, and CDS entries necessary for the client to perform post configuration tasks such as adding the client host to the cell.

The script asks if you want to prepare all the hosts for NetCrusader/Web. If you reply yes, the script configures the hosts (that you specified earlier) for NetCrusader/Web. You are asked to enter the default delegation and identity mapping group names. If you prefer, you may use the default delegation group name (wc-delegates) and the default identity mapping group name (wc-filters). The script creates these groups using either the default names or the names you provided. The script now has all the information it needs to configure a NetCrusader/Web host.

If you reply no when asked if you want to prepare all the hosts for NetCrusader/Web, NetCrusader/Web functionality is not enabled and the script continues with PC-DCE configuration.

The preconfig.tcl script allows local administrators to configure a full client without needing the cell administrator password. It also preconfigures each host to recognize the host-configuration permissions of these local administrators.

3.3.3 How to Designate a Local Configuration Administrator

1. Log into DCE as cell administrator.

2. Type dcecp. At the dcecp prompt, enter:

   dcecp> source path_to_Pcdce32/opt/dcelocal/dcecp/preconfig.tcl
   

3. At the prompt, enter the fully qualified domain names of the hosts you want to preconfigure.

   The host names must be separated by spaces only. In the following example, the cell administrator is preconfiguring foo.bar.com and my.machine.edu.

   foo.bar.com my.machine.edu
   

4. Enter the name of the entity to which you want to grant host configuration permission. This can be the name of a group or a principal.

   In this example, the entity name is local_admin.

   local_admin
   

5. Enter g if this entity is a group or p if this entity is a principal.

   The principal name is the name of the person who will perform the final configuration on the host machines specified in Step 3.

   If the name in step 4 is a group name, then the principal name used by the person who performs the final configuration on the host machines must be a member of the specified group.

6. Enter your cell-administrator password:

7. At "Do you wish to add NetCrusader/Web support on all of the hosts specified above? (y/n),"answer Y.

Inform the local administrator that the host machines listed in Step 3 above are ready to be configured into the cell.

The local administrators can now configure clients in the cell. See the PC-DCE Configuration Panel help file for information about configuring clients.

[Previous] [Next] [Contents] [Index]

To make comments or ask for help, contact support@entegrity.com.

Copyright © 2000-2003 Entegrity Solutions Corporation & its subsidiaries