User Management

Bright Cluster Manager® has integrated user management functionality which makes it very easy to add users to the cluster. The user is automatically added to the built-in LDAPLightweight Directory Access Protocol (LDAP) is an application protocol for querying and modifying directory services running over TCP/IP. database.

Adding a user on a cluster running Bright Cluster Manager is trivial: just go to "Users & Groups" in the resources tree, click "Add" and fill in the details.

Adding a user on a cluster running Bright Cluster Manager is trivial: just go to "Users & Groups" in the resources tree, click "Add", and fill in the details.

Authentication

There are two types of authentication in a cluster running Bright Cluster Manager:

1. Authentication to the Cluster using LDAP
   Regular users login to the cluster using SSHSecure Shell or SSH is a network protocol that allows data to be exchanged using a secure channel between two networked devices. and LDAP. This is the same type of authentication you can find on any Linux server using LDAP. LDAP is a very well established protocol used in many IT departments.
   
   The LDAP database in Bright Cluster Manager can connect to LDAP databases outside the cluster to exchange user information. Regular users that do not need access to the cluster management GUI or Shell only require this type of authentication.
2. Authentication to the Cluster Management Interface using X.509v3 Certificates
   This type of authentication is required for access to the cluster management interface (the management GUI or the management Shell). The X.509v3X.509v3 is an ITU-T standard for a public key infrastructure (PKI) for single sign-on (SSO) and Privilege Management Infrastructure (PMI). X.509v3 specifies, amongst other things, standard formats for public key certificates, certificate revocation lists, attribute certificates, and a certification path validation algorithm. authentication takes place in the SSLSecure Sockets Layer (SSL) is a cryptographic protocol that provides security for communications over networks such as the Internet. layer, which makes it very secure. Any user requiring this type of access will need be assigned both a public and a private authentication key.

Cluster Management Profiles

With Bright Cluster Manager, the system administrator can define exactly which cluster management features are available to which cluster account holders. The administrator can configure this by adding a new profile or modifying an existing profile and assigning this profile to one or more cluster account holders.

With Bright Cluster Manager, the system administrator can define exactly which cluster management features are available to which cluster account holders.

With Bright Cluster Manager, the system administrator can define exactly which cluster management features are available to which cluster account holders.

The administrator can configure this by adding a new profile or modifying an existing profile and assigning this profile to one or more cluster account holders.

The screenshot on the right shows three profiles. Profile student is a profile configured by the system administrator. Profiles admin and node are built-in profiles which cannot be edited.