Connecting to the application web interface

If you connect to the web interface for the first time after installing the application, you will need to create a new cluster before you start.

You can view and edit different application settings depending on the user account you are using to connect to the web interface.

For local user accounts of privileged users, the set of permissions is determined by their roles. The 'Administrator' privileged user account that is created during installation of the application has the full set of permissions.
A user that has access to the functionality of the application management console. The items available in the management console menu depend on the role that is assigned to the user.
Users with a domain user account can connect to the web interface in privileged user mode or personal user mode and view sections in accordance with the permissions configured in the application.
An Active Directory domain user for which Single Sign-On (SSO) authentication with the application is configured, and which does not have any role assigned.

To connect to the application web interface using a local privileged user account:

Enter the following address in your browser:
https://<IP address or fully qualified domain name (FQDN) of the Control node>:<port for connecting to the web interface>

This opens the web interface authorization page prompting you to enter the user name and password.
In the User name field, enter the name of the user account, for example, Administrator.
In the Password field, enter the password of the user account.
The password of the 'Administrator' user account is configured during the initial configuration of the application.

If you enter a wrong password five times, authorization with a privileged user account is disabled for five minutes. The capability for authorization under a domain account via the NTLM protocol will remain available.
Click Log in.

This opens the main window of the application web interface.

To log into to the application web interface with a user account with SSO authentication:

Enter the following address in your browser:

https://<IP address or fully qualified domain name (FQDN) of the Control node>:<port for connecting to the web interface>

If you configured authentication with Kerberos Single Sign-On, you only need to enter the address in FQDN format.

The rest of the authorization procedure depends on your answers to the following questions:

Which protocol is being used for authentication?
Is the computer in an Active Directory domain configured for SSO authentication?

The figure below shows the authorization procedure depending on the factors listed above.

The figure shows the authentication scheme that the application uses.

Authorization procedure when connecting to the web interface in user mode

* If you enter the wrong password five times when prompted by a browser for your user's domain account credentials, NTLM authentication will be disabled for five minutes. Authorization under the privileged user account remains available.

If the application is configured to use Kerberos and NTLM authentication simultaneously, the authorization procedure is as follows:

Attempt to complete authorization using the Kerberos protocol.
If unsuccessful, attempt to complete authorization using the NTLM protocol.
If unsuccessful, you are prompted to enter the application user account credentials.

For automatic authorization to work correctly on computers that are members of an Active Directory domain that is configured to use SSO authentication, additional configuration is required in the operating system and in the browser settings.

If authorization is successful, the main window of the application web interface is opened. If the user with SSO authentication has the permissions to access different web interface viewing modes, the user will be able to switch between these modes.