EditDiscussionPage history

Difference between revisions of "Environment"

 
(29 intermediate revisions by the same user not shown)
Line 1: Line 1:
 
__FORCETOC__
 
__FORCETOC__
−
=== 환경 설정 ===
+
=== Environment ===
−
환경설정에서 설정을 변경하면 모든 세션에 공통으로 적용됩니다.
 
  
−
===== 표시 =====
+
 
 +
===== Display =====
 +
We provide several formats for specific data to display.
 
{| class="wikitable"
 
{| class="wikitable"
−
! 항목 !! 하위항목 !! 설명
+
! style="width:150px" | Item !! style='width:150px' | Subitem !! Description
 +
|-
 +
| rowspan="2" | Language and Datetime || Default Language || The imRAD supports Korean and English. The first time you accessed the page, the default language is decided by the character-set of its browser. If the character-set is neither Korean nor English, a user's environment is set to this default language.
 +
You can change the language by clicking the Language Selector on the top-right after login. If you change the language, your browser always displays text in the changed language.
 +
|-
 +
| Datetime Format || It is the format of the Date and Time.
 
|-
 
|-
−
| rowspan="2" | 언어 및 시간 || 기본 언어 || 최초 관리인터페이스 접속시 적용되는 기본 언어입니다.<br>계정 단위로 언어 설정을 변경하려면 인터페이스 상단의 언어를 선택하여 변경 할 수 있습니다.<br>
+
| rowspan="2" | Address Format || IPv6 Address || It is the format of the IPv6 Address
−
[[File:top-menu.png|200px|표시 언어 변경]]
 
 
|-
 
|-
−
| 날짜 및 시간 형식 || 인터페이스에 표시되는 날짜 및 시간 형식을 변경 할 수 있습니다.
+
| [[MAC Address]] || It is the format of the MAC Address
 
|-
 
|-
−
| rowspan="2" | 주소 형식 || IPv6 주소 || 인터페이스에 표시되는 IPv6 주소의 형식을 변경 할 수 있습니다.
+
| rowspan="2" | Custom || Customer name || This is the content that will be displayed in the browser's title.
 
|-
 
|-
−
| MAC 주소 || 인터페이스에 표시되는 MAC 주소의 형식을 변경 할 수 있습니다.
+
| Customer logo || You can upload the customer logo (i.e. CI) to be displayed on the login screen.
 
|-
 
|-
 
|}
 
|}
  
  
−
===== 보안=====  
+
===== Custom Fields =====
 +
You can input the general user information in the IP addresses and the RADIUS accounts. The user information form has up to 5 fields and you can customize them.
 
{| class="wikitable"
 
{| class="wikitable"
−
! 항목 !! 하위항목 !! 설명
+
| style='width:200px' | Display Name || It displays with the specified name.
 
|-
 
|-
−
| rowspan="4" | 비밀번호 설정 || 최소 길이 || 운영 계정 비밀번호의 최소길이를 의미하며 이미 생성된 계정에는 적용되지 않습니다.
+
| Enabled || If you set it, only the enabled form is shown.
 
|-
 
|-
−
| 복잡도 || 운영 계정 비밀번호의 복잡도를 의미하며 의미하며 이미 생성된 계정에는 적용되지 않습니다.
+
| Require || If you set it, it is required.
 
|-
 
|-
−
| 비밀번호 강제 변경 || 운영 계정의 비밀번호를 지정된 기간(일)마다 강제로 변경하게 끔 유도합니다.
+
|}
 +
 
 +
 
 +
===== Dedicated Log Server =====
 +
You must configure the MySQL Database in your log server before enabling it and you can read the how-to-configure at the [[Configuring Dedicated Log Server]] section.
 +
 
 +
====== Log Server ======
 +
You can define a log server and all fields are required.
 +
{| class="wikitable"
 +
! style='width:200px' | Item !! Description
 +
|-
 +
| Enabled || Turn on to enable exporting logs.
 +
|-
 +
| Host || The IP Address of a log server.
 +
|-
 +
| Port || The MySQL port in a log server. MySQL uses default port number 3306.
 
|-
 
|-
−
| 잠금 || 지정된 회수 이상 로그인에 실패하면 지정된 시간 동안 로그인을 할 수 없습니다.
+
| User || If you did not change the default user before [[Configuring_Dedicated_Log_Server#How_to | executing the SQL file on the log server]], the user is "'''lyonlog'''".  
 
|-
 
|-
−
| rowspan="2" | 세션 || 다중 세션 허용 || 동일 계정으로 중복 로그인을 허용 할 것인지를 설정합니다.<br>
+
| Password || Input a password that you want. The [[ImRAD services(daemons) | logexp]] service initially connects to the log server with a default password and changes the default password as you specified on this. After then, the [[ImRAD services(daemons) | logexp]] service connects to the log server with the new password. In other words, if anyone connects to the log server with the default password, it will fail.
−
다중 세션 허용이 꺼진 상태(허용 안함)에서 동일 계정으로 로그인 하면<br>먼저 로그인된 세션은 강제로 해제되어 로그아웃됩니다.
 
 
|-
 
|-
−
| 휴면 세션 종료 || 지정된 시간 이상 활동이 감지되지 않으면 세션을 종료해 강제로 로그아웃됩니다.
+
| Skip sql error || If you set it to "Yes", the [[ImRAD services(daemons) | logexp]] service skips the log that was occurred an error while executing in the log server. If "No", the [[ImRAD services(daemons) | logexp]] service executes the same query for a log until the result is successful. We recommend you set it to "Yes".<br>
 
|-
 
|-
 
|}
 
|}
  
 +
======Log exporting status======
 +
It shows the status of exporting logs. The "Remain" indicates the number of logs that will be exporting. If the number is high, you need to check the logexp service is running via the [[CLI - Control services(daemons) | CLI ]] or confirm the "Skip sql error" is "Yes".
 +
 +
======Target Log======
 +
You can choose target log tables. The maximum age indicates how many logs keep in the log server. For example, if you set it to 6, logs that are less than six months from now in the log server will be deleting. If you click the erase icon beside the Log table name, the service exports all logs again. The "Remain" indicates how many logs remain and the "Exported" indicates how many logs have been exported.
 +
 +
 +
===== System Messages =====
 +
[[File:system_messages.png|200px|thumb|System Messages]]
 +
The System Messages are events for the imRAD system activities. The imRAD system notifies several messages when a job exceeds the specified threshold. You can see the messages by clicking the bell icon on the top-right after login.
 +
 +
{{note|Note that If it encounters low disk space, you should increase available disk space by clearing some files. The [[CLI - System | CLI - System > storage]] section describes how to do it.}}
 +
 +
 +
If you want to ignore some event, please do not select a check box.
  
−
===== 사용자 정보=====
 
 
{| class="wikitable"
 
{| class="wikitable"
−
| 표시이름 || IP 주소 상세 및 RADIUS 사용자 정보에 표시되는 이름입니다.
+
| style='width:300px' | Warning threshold for Disk utilization rate || If the total used size of disk exceeds the threshold, it generates a "Warning" message.
 +
|-
 +
| Critical threshold for Disk utilization rate || If the total used size of disk exceeds the threshold, it generates a "Critical" message. You must clear some logs after connecting a system via the [[CLI - System | CLI - System > storage]].
 +
|-
 +
| Idle detection timeout for system activity || If the system information is not updated above the threshold, it is considered abnormal and we call it "Idle System".
 +
|-
 +
| Idle detection timeout for service activity || If the service information is not updated above the threshold, it is considered abnormal and we call it "Idle Service".
 +
|-
 +
| Inactive service || It indicates that an enabled service is not running. You need to check a service by the [[CLI - Services(daemons) | CLI]].
 +
|-
 +
| Threshold for DHCP Pool utilization rate || If the utilization rate of more than or equal to one DHCP Pool exceeds the threshold, it generates messages. You must increase the Pool.
 +
|-
 +
| [[Systems | Seconds behind master]] || It indicates there are records in the master database more than the threshold. It means the Database replication is delaying. Please refer to the [[Systems]] section to solve this problem.
 
|-
 
|-
−
| 사용 || 선택되면 해당 항목이 표시됩니다.
+
| Replication error || It generates a message when the Replication error occurs. Please refer to the [[Systems]] section to solve this problem.
 
|-
 
|-
−
| 필수 || 선택되면 정보 입력시 반드시 입력해야 합니다.
+
| The number of log remains || It generates a message when the log to be transferred exists above the threshold. please refer to the [[Environment | Environment > Dedicated Log Server]] to resolve this problem.
 +
 
 
|-
 
|-
 +
| Connection errors of external databases(DBMS or LDAP) || if a system failed to connect to external database or LDAP server that was configured in the RADIUS, a message is generated.
 
|}
 
|}
  
  
−
===== 로그 전용 서버 =====  
+
===== Others =====
−
로컬 데이터베이스에 저장되는 로그를 외부 로그 서버로 전송하기 위한 설정으로 자세한 정보는 [[로그전용서버]]를 참고하세요
+
* Checking new updates
 +
imRAD automatically checks for new updates once a day and displays the results in the system message if a new update is available.
 +
 
 +
* Dormant Data cleanup interval
 +
This is the cycle for processing dormant RADIUS users, maintenance accounts, and DHCP reservations.
  
 +
* External Database/LDAP Connection Check interval
 +
This cycle checks the connection status of external databases and LDAP.
  
−
===== 시스템 메시지=====
+
* SSL Certificates for HTTPS
−
시스템에서 발생하는 중요 이벤트를 "[[운영 / 시스템 메시지|시스템 메시지]]"로 표시하기 위한 기능입니다.
+
The system comes with a Self-Signed Certificate by default, allowing secure access to the management interface through an encrypted channel. However, since Self-Signed Certificates are not publicly certified, certificate errors may occur during initial access. If you wish to use a "Public Certificate" held by your organization, you can upload the certificate through this menu.<br>
 +
'''Self-Signed Certificate Security Level'''<br>
 +
RSA 2048 / aes-256-cbc
  
−
===== 기타 ======
+
{{note|All Public Certificates are issued based on domain name, so if you use your organization's Public Certificate, you need to access the management interface via the domain name (e.g., https://imrad.mycompany.com).}}

Latest revision as of 17:12, 9 August 2023

Environment

Display

We provide several formats for specific data to display.

Item Subitem Description
Language and Datetime Default Language The imRAD supports Korean and English. The first time you accessed the page, the default language is decided by the character-set of its browser. If the character-set is neither Korean nor English, a user's environment is set to this default language.

You can change the language by clicking the Language Selector on the top-right after login. If you change the language, your browser always displays text in the changed language.

Datetime Format It is the format of the Date and Time.
Address Format IPv6 Address It is the format of the IPv6 Address
MAC Address It is the format of the MAC Address
Custom Customer name This is the content that will be displayed in the browser's title.
Customer logo You can upload the customer logo (i.e. CI) to be displayed on the login screen.


Custom Fields

You can input the general user information in the IP addresses and the RADIUS accounts. The user information form has up to 5 fields and you can customize them.

Display Name It displays with the specified name.
Enabled If you set it, only the enabled form is shown.
Require If you set it, it is required.


Dedicated Log Server

You must configure the MySQL Database in your log server before enabling it and you can read the how-to-configure at the Configuring Dedicated Log Server section.

Log Server

You can define a log server and all fields are required.

Item Description
Enabled Turn on to enable exporting logs.
Host The IP Address of a log server.
Port The MySQL port in a log server. MySQL uses default port number 3306.
User If you did not change the default user before executing the SQL file on the log server, the user is "lyonlog".
Password Input a password that you want. The logexp service initially connects to the log server with a default password and changes the default password as you specified on this. After then, the logexp service connects to the log server with the new password. In other words, if anyone connects to the log server with the default password, it will fail.
Skip sql error If you set it to "Yes", the logexp service skips the log that was occurred an error while executing in the log server. If "No", the logexp service executes the same query for a log until the result is successful. We recommend you set it to "Yes".
Log exporting status

It shows the status of exporting logs. The "Remain" indicates the number of logs that will be exporting. If the number is high, you need to check the logexp service is running via the CLI or confirm the "Skip sql error" is "Yes".

Target Log

You can choose target log tables. The maximum age indicates how many logs keep in the log server. For example, if you set it to 6, logs that are less than six months from now in the log server will be deleting. If you click the erase icon beside the Log table name, the service exports all logs again. The "Remain" indicates how many logs remain and the "Exported" indicates how many logs have been exported.


System Messages
System Messages

The System Messages are events for the imRAD system activities. The imRAD system notifies several messages when a job exceeds the specified threshold. You can see the messages by clicking the bell icon on the top-right after login.

Note that If it encounters low disk space, you should increase available disk space by clearing some files. The CLI - System > storage section describes how to do it.


If you want to ignore some event, please do not select a check box.

Warning threshold for Disk utilization rate If the total used size of disk exceeds the threshold, it generates a "Warning" message.
Critical threshold for Disk utilization rate If the total used size of disk exceeds the threshold, it generates a "Critical" message. You must clear some logs after connecting a system via the CLI - System > storage.
Idle detection timeout for system activity If the system information is not updated above the threshold, it is considered abnormal and we call it "Idle System".
Idle detection timeout for service activity If the service information is not updated above the threshold, it is considered abnormal and we call it "Idle Service".
Inactive service It indicates that an enabled service is not running. You need to check a service by the CLI.
Threshold for DHCP Pool utilization rate If the utilization rate of more than or equal to one DHCP Pool exceeds the threshold, it generates messages. You must increase the Pool.
Seconds behind master It indicates there are records in the master database more than the threshold. It means the Database replication is delaying. Please refer to the Systems section to solve this problem.
Replication error It generates a message when the Replication error occurs. Please refer to the Systems section to solve this problem.
The number of log remains It generates a message when the log to be transferred exists above the threshold. please refer to the Environment > Dedicated Log Server to resolve this problem.
Connection errors of external databases(DBMS or LDAP) if a system failed to connect to external database or LDAP server that was configured in the RADIUS, a message is generated.


Others
  • Checking new updates

imRAD automatically checks for new updates once a day and displays the results in the system message if a new update is available.

  • Dormant Data cleanup interval

This is the cycle for processing dormant RADIUS users, maintenance accounts, and DHCP reservations.

  • External Database/LDAP Connection Check interval

This cycle checks the connection status of external databases and LDAP.

  • SSL Certificates for HTTPS

The system comes with a Self-Signed Certificate by default, allowing secure access to the management interface through an encrypted channel. However, since Self-Signed Certificates are not publicly certified, certificate errors may occur during initial access. If you wish to use a "Public Certificate" held by your organization, you can upload the certificate through this menu.
Self-Signed Certificate Security Level
RSA 2048 / aes-256-cbc

All Public Certificates are issued based on domain name, so if you use your organization's Public Certificate, you need to access the management interface via the domain name (e.g., https://imrad.mycompany.com).