Getting Started with RadiantOne
As discussed throughout this document, at the heart of most identity integration problems is the need for an identity service that can be accessed to search/retrieve a unique user profile that is used for authentication and authorization. RadiantOne comes equipped with not only an arsenal of advanced configuration tools to solve the most complex of cases, but also a set of wizards to help you get started in solving some of the most common problems that our customers encounter. This chapter provides a high-level overview of the RadiantOne administration consoles. The identity service wizards are also discussed along with guidance to help determine which will meet your needs.
Control Panels
The RadiantOne Control Panels are web-based interfaces to provide remote access to the most commonly used tools and wizards. In addition, the control panels offer monitoring, access to server statistics, reports, task management, and other administration options. They can be accessed from mobile or non-mobile devices including iPods and iPads.
To access the control panels, JavaScript must be enabled in the Internet browser you are using.
Main Control Panel
To launch the Main Control Panel on Windows, navigate to <RL_HOME>/bin and run openControlPanel.bat. This starts the web server and launches a web browser login screen for the Main Control Panel.
To launch the Main Control Panel on UNIX/Linux, after starting the Jetty web server that hosts the Control Panel application, open an Internet Browser and use the following URL:
http://<server>:7070/main
The default HTTP port for the web server hosting the control panels is 7070, and the default TLS port is 7171 (you can set the ports during the RadiantOne install).
The login page displays two fields, Username and Password. Enter your credentials you defined during the installation of RadiantOne.
Figure 1: Main Control Panel Login Page
The following tabs are accessible from the Main Control Panel.
Dashboard
The dashboard tab is displayed upon successfully logging in to the Main Control Panel. There are two sections on the Dashboard tab: Overview and Internode Health. The Overview section displays the status of all nodes, and it indicates whether each node is the cluster’s RadiantOne leader (yellow-colored triangle beside the server name). You can start and stop the service from here as long as the Jetty web server is running on the node (and as long as the RadiantOne service is not installed to run as a service). This section also displays the status of ZooKeeper, ZooKeeper SSL (ZK SSL), the RadiantOne service's LDAP and LDAPS ports, the RadiantOne service's Web Services HTTP and HTTPS.
Figure 2: The Overview section of the Main Control Panel’s Dashboard tab
The Internode Health Section contains information about ZooKeeper and the RadiantOne service’s LDAP port connectivity among cluster nodes. If you have a single node deployed, this section is not applicable. Use the legend to select the connectivity state you are interested in: ZooKeeper and/or LDAP.
Figure 3: Cluster Nodes Depicted in the Health Section
Settings
The Settings tab is where you will manage the majority of RadiantOne settings. This includes server front end and backend settings, access controls, password policies along with advanced settings like interception scripts. All changes on this tab are shared/affect all nodes if a cluster architecture is deployed.
Context Builder
The Context Builder is used to create model-driven virtual views. For details on Context Builder, see the RadiantOne Context Builder Guide.
Directory Namespace
The Directory Namespace tab is where you can configure and manage root naming contexts and persistent cache. This tab is not accessible on follower-only cluster nodes.
Different icons represent various types of configurations associated with the Root Naming Contexts. For details on the icons and the meaning, please see the Namespace Configuration Guide.
Directory Browser
The Directory Browser tab is a client interface where an administrator can view the contents of the various RadiantOne naming contexts and manage entries and attributes (create, update, delete). This tab offers search and export functions as well.
Wizards
The Data Analysis tool and Global Identity Builder can be launched from the Wizards tab. Details on the usage of each can be found in the Identity Service Wizards section.
PCache Monitoring
The PCache Monitoring Tab can be used to monitor periodic and real-time persistent cache refresh.
On the PCache Monitoring Tab, a list of cache refresh topologies appears on the left.
is the symbol for a real-time refresh.
is the symbol for a periodic refresh.
When you select a refresh topology, the persistent cache refresh components are shown on the right where you can see the number of messages processed by each component. Clicking on a component allows you to see the status and access the properties.
Replication Monitoring
RadiantOne Universal Directory (HDAP) stores across multiple sites/data centers support multi-master replication. This type of replication is referred to as inter-cluster replication. The state of inter-cluster replication can be monitored from the Replication Monitoring Tab.
Global Sync
The Global Sync tab is for managing synchronization pipelines and monitoring their activities. You can also set connector properties and perform uploads from here. For details on Global Sync, see the RadiantOne Global Sync Guide.
ZooKeeper
From the ZooKeeper tab, you can view configuration files maintained in ZooKeeper. Certain configuration files like the vds_server.conf can be edited from here as well by clicking on the Edit Mode button. The entire ZooKeeper configuration can also be exported from here (for keeping a backup copy) by clicking on the Export button.
Server Control Panel
To open the Server Control Panel, click the "Server Control Panel" icon located at the top of the Main Control Panel's Health section. The Server Control Panel opens in a new browser tab and the user currently logged into the Main Control Panel is automatically signed into the Server Control Panel.
The following tabs are accessible from the Server Control Panel.
Dashboard
The Dashboard tab displays detailed server-level statistics in each section. To change the time frame for data displayed in the graphs, click the Graph range drop-down menu and select a value. Graphs for the following items are displayed.
- CPU of the machine hosting RadiantOne.
- Memory usage of the RadiantOne service
- Disk Space on the machine hosting RadiantOne
- Disk Latency on the machine hosting RadiantOne
- Connection usage to RadiantOne
Usage & Activity
From the Usage & Activity tab, you can access information about the RadiantOne software version installed on the node, monitor the current connections and operations, view statistics for all RadiantOne Universal Directory (HDAP) stores and view network latency between nodes (only applicable to cluster deployments).
Tasks
The Tasks tab allows you to start and stop the scheduler and manage defined tasks. When you perform various actions in the tools or wizards, like importing an LDIF file to initialize a persistent cache for example, a notification appears alerting you that the task has been defined and added to the scheduler. These tasks can be viewed and updated in the task list section of the Tasks tab. You can define a task as re-occurring in addition to setting to execution interval. You can also configure the task to run inside a dedicated JVM and specify any custom JVM parameters required.
Log Viewer
The Log Viewer Tab is the console where you can view all RadiantOne log files.
Related Material
- RadiantOne System Administration Guide
Identity Service Tools
RadiantOne includes a couple of tools designed to assist administrators with creating views containing unique lists of identities. The Data Analysis tool helps discover data quality issues and identify ideal attributes to base correlation rules on. The Global Identity Builder tool guides administrators through the identity integration and correlation process. For more information on the tools, please see the sections below.
For step-by-step instructions on using the tools, please see the Global Identity Builder Guide and RadiantOne Data Analysis Guide.
Global Identity Builder
The Global Identity Builder is used to build an integrated list of identities from multiple heterogeneous data sources. This process establishes a common index (union) and reference list for all identities. The result of this process is a virtual view containing a unique list of identities from multiple data sources which are extended with all relevant attributes required to comprise a global profile, with information remapped into whatever format the client application expects.
The Global Identity Builder should be used in situations where applications require a single source to locate all users required for authentication and/or need to access a complete user profile for attribute-based authorization. It should be used in cases where the data sources contain overlapping users whether there is a single existing common identifier. It can also be used in cases where there are no overlapping users but a complete aggregated flat list of users is required. At the end of the Global Identity Builder process, a persistent cache is configured and initialized for the identity data. Configure a cache refresh strategy from the Main Control Panel > Directory Namespace tab > Cache node.
Identity Data Analysis
The RadiantOne Identity Data Analysis tool analyzes the quality of data in the backends, helping you determine which attributes would be the best candidates for correlation rules.
The Identity Data Analysis tool generates a report for each of your data sources. These reports give you a glimpse of your existing data and provide insight on the quality of your data and what is available for you to use for correlation logic.
You can also choose to mount virtual views from each of your data sources below a global root naming context in RadiantOne and point the Identity Data Analysis tool to this location to perform a single analysis/report from all of your sources at once. This helps you detect attribute uniqueness and statistics across heterogeneous data sources.
Related Material
- RadiantOne Global Identity Builder Guide
- RadiantOne Data Analysis Guide