Authentication and Authorization¶
To access the Denodo Diagnostic & Monitoring Tool from the local machine, connect to http://localhost:9090/diagnostic-monitoring-tool. You will see the login dialog, as shown in Authentication dialog in the Diagnostic & Monitoring Tool.
Before clicking “Login”, you can click the icon to change the
database that will be used to check your credentials. Your user account
must have the
CONNECT privilege on this database.
The credentials introduced in the login dialog are reused in the
communications with the Diagnostic & Monitoring Virtual DataPort when
you perform a diagnostic intervention. All the diagnostic-related
metadata is stored in the same database. The Diagnostic & Monitoring
Tool creates the diagnostic database the first time you
create a diagnostic,
so make sure you use an administrator user of the
Diagnostic & Monitoring Virtual DataPort. Next time you want to create a
diagnostic, you only needs a user with the
ADMIN privilege on the
Once you successfully log in the Diagnostic & Monitoring Tool, you will access to the main window.
This window is divided into three areas:
- Header: You will find here the logout link and, under the Options menu, the configuration of the tool.
- Tree area: Here you can create servers or environments to monitor, load diagnostic information or create diagnostic intervals on it and import or export the whole environment. At the bottom, you can unfold a menu with extra information about the selected node.
- Working area: the data you are monitoring or diagnosing is presented here organized by tabs.
The Diagnostic & Monitoring Tool supports Single Sign-On using the Kerberos protocol. To enable Kerberos authentication in the Diagnostic & Monitoring Tool, you have to:
- Perform the postinstallation tasks described in the section Setting-up Kerberos Authentication of the Installation Guide.
- Enable Kerberos in the Diagnostic & Monitoring Virtual DataPort Server, as described in the section Setting-Up the Kerberos Authentication in the Virtual DataPort Server of the Virtual DataPort Administration Guide.
- Configure Kerberos in your browser.
Remember to use an absolute path when you specify the keytab file in the Kerberos configuration of the Diagnostic & Monitoring Virtual DataPort Server.
If Kerberos authentication is properly configured, the login dialog will show you a new option to connect to the Diagnostic & Monitoring Tool using Single Sign-On.
To access the Diagnostic & Monitoring Tool Server, remember to
use the Fully Qualified Domain Name of the Server Principal Name you
configured in the Diagnostic & Monitoring Virtual DataPort Server. For
example, if your Server Principal Name is
HTTP/denodo-prod.subnet1.contoso.com@CONTOSO.COM, you should access the
Diagnostic & Monitoring Tool through the URL