2.7
Table Of Contents
- VMware vFabric Data Director Administrator and User Guide
- Contents
- About VMware vFabric Data Director Administrator and User Guide
- VMware vFabric Data Director Overview
- Managing Data Director Resources
- Resource Management Overview
- Resource Bundles and Resource Pools
- Storage Resources and Data Director
- System Resource Bundle
- Resource Assignment
- vSphere Resource Pools and Data Director
- Viewing Resource Information
- Create the System Resource Pool
- Create the System Resource Bundle
- Monitor Resource Usage
- Create a Resource Pool
- Create a Resource Bundle
- Assign a Resource Bundle to an Organization
- Perform Advanced Cluster Configuration
- Managing Users and Roles
- User Management Overview
- Authenticating Users
- Role-Based Access Control
- Predefined Roles
- Privileges
- Propagation of Permissions and Roles
- Organization Privileges and Permissions
- Add Users to Your Organization
- Add Roles to an Organization
- Grant a Permission to a User
- Modify Organization Security Settings
- About vCenter Single Sign-On
- Register vFabric Data Director with the vCenter Single Sign-On Service
- Import vCenter Single Sign-On Service Users
- Remove vCenter Single Sign-On Registration Before Uninstalling vFabric Data Director
- Building DBVMs and Base DB Templates
- Database Virtual Machine OVA Files
- Deploy a DBVM OVA File
- Disk Configuration for DBVMs and DB Templates
- Build an Oracle, SQL Server, or Empty Base DBVM
- Build a MySQL Base DBVM
- Build an Oracle and SUSE Linux Base DBVM
- Build an Oracle DBVM with a Custom Linux Operating System
- Requirements for the Kickstart File
- Build a Base DBVM with a Custom Operating System
- Create and Validate a Base DB Template
- Database Update Configuration
- Configure a vFabric Postgres Update Chain
- Update an Oracle Database
- Identify Existing Target DBVM
- Create a Base Database VM from an Existing Template
- Apply a Patch to the Base Database Virtual Machine
- Convert a Base DBVM into a Base DB Template
- Validate a Base DB Template
- Assign a Base DB Template to a Resource Bundle
- Enable a Base DB Template
- Configure an Oracle Update Chain
- Update a Database
- Managing Organizations
- IP Whitelists
- Managing Database Groups
- Managing Database Templates
- Managing Databases
- Database Lifecycle
- Requirements for Creating Databases
- Database Creation
- Using Tags
- Managing the Organization Catalog
- Batch Operations and Scheduled Tasks
- Updating Databases
- Database Administration
- Cloning Databases
- Managing Database Entities
- Safeguarding Data
- Backup Strategies
- Backup Types
- Backup Template Settings
- Preconfigured Backup Templates
- Select a Database Backup Template
- Schedule Regular Database Backups
- Create a Database Snapshot
- Recover a Database from Backup
- Import Backups
- Recover a Database from Last State
- Use VMware Data Recovery to Back Up Data Director
- Database End of Life and Backups
- Perform Point-in-time Recovery of Management Server Database
- Add Pre-Action and Post-Action Scripts to the DBVM for Selected Agents
- High Availability and Replication
- Monitoring the Data Director Environment
- Managing Licenses
- IP Pool Management
- VMware vCloud Director Integration
- Reconfiguring Data Director Networks
- Change the vCenter IP Address
- Reconfigure the Web Console Network Mapping or Network Adapter
- Reconfigure the vCenter Network Mapping
- Reconfigure the vCenter Network Adapter Settings
- Reconfigure the DB Name Service Network or DB Name Service Network Adapter
- Reconfigure the Internal Network or Internal Network Adapter Mapping
- Verify Network Settings in Data Director
- Reconfigure the Database Access Network Used by a Database Group
- Modify IP Pool Settings
- Managing SSL Keys and Certificates
- Regenerate Management Server Key and Certificate
- Import Management Server Key and Certificate
- Edit Management Server Certificate
- Regenerate DB Name Server Key and Certificate
- Import DB Name Server Key and Certificate
- Edit DB Name Server Certificate
- Regenerate DBVM Key and Certificate
- Import DBVM Key and Certificate
- Edit DBVM Certificate
- Data Director Troubleshooting
- vCenter Server Stops Responding
- Disk Usage Exceeds Acceptable Levels
- Resource Bundles Become Unusable Because DRS Is Disabled
- Missing Resource Pool
- Troubleshooting for SSL Communication
- Database Cannot Be Connected Using the JDBC Connection String
- Unable to Import or Login Users of the Single Sign-On Service
- Index
Procedure
1 Click the Organization Settings tab.
2 Click Settings, then click Security.
3 (By Organization user management mode only) Choose one of the following Allow public registration
settings.
Setting Description
No
User registration is by invitation only.
Yes
Users can see the organization and register themselves.
4 Choose one of the following Allow System Administrator to log into Org settings.
Setting Description
No
Do not allow the system addministrator to log into the organization.
Yes
Allow the system administrator to log into the organization.
5 Click Apply to accept the settings.
About vCenter Single Sign-On
You use VMware
®
vCenter™ Single Sign-On to authenticate and manage users of VMware
®
vFabric™ Data
Director. vCenter Single Sign-On is an authentication broker and a security token exchange that provides a
secure way to access your vSphere and Data Director environments.
When you use Data Director with vSphere 5.1 and vCenter Single Sign-On, you do not log directly into vFabric
Data Director and vCenter Server with a security domain defined only by your vFabric Data Director
environment. When you log in to vFabric Data Director, you pass authentication to the vCenter Single Sign-
On server, which you can configure with multiple identity sources such as Active Directory and OpenLDAP.
After authentication, your user name and password are exchanged for a security token which you use to access
vFabric Data Director.
Register vFabric Data Director with the vCenter Single Sign-On Service
You register vFabric Data Director with the vCenter Single Sign-On service so that you can give access to users
from multiple identity sources such as Active Directory and OpenLDAP.
To register more than one vFabric Data Director instance (individual deployments of vFabric Data Director)
with a vCenter Single Sign-On service, you must create a Data Director solution user with a unique certificate
on the vCenter Single Sign-On service for each instance of vFabric Data Director that you want to register. To
create a unique certificate, import a custom Management Server SSL key and certificate to replace the key and
certificate generated by vFabric Data Director for each instance of Data Director that you want to register. Each
certificate must have a unique Subject Distinguished Name (subject DN) To create a unique certificate, see
“Import Management Server Key and Certificate,” on page 208.
After you create a unique certificate for each Data Director instance, you can register each instance with the
vSphere Single Sign-On service.
Prerequisites
n
Deploy a vCenter Single Sign-On server.
n
Ensure clock synchronization between the vFabric Data Director Management Server and the vCenter
Single Sign-On server.
n
Verify that you have the Lookup Service URL of the Single Sign-On service.
Chapter 3 Managing Users and Roles
VMware, Inc. 41