4.2 Reconfiguring ZENworks Reporting Appliance
After configuring ZENworks Reporting, you can reconfigure the settings.
To reconfigure the ZENworks Reporting settings.
-
On the ZENworks Reporting Appliance home page, click .
-
In the tab, configure the following required settings, and then click :
The asterisk (*) indicates that one or more configurations are modified. Changes should be applied to take effect.
For more information about the ZENworks Reporting Configuration page, see ZENworks Reporting Configuration.
4.2.2 Domain Configuration
The domain is packaged in the resource file. So, when a new resource file (updated domain) is released as part of a ZENworks or ZENworks Reporting release, you will need to reconfigure domains with this resource file to get the new updates.
This page enables you to add or edit domains. To edit a configured domain, click on the name. You can choose the latest version or the earlier version of the domain or change the datasource details for that domain.
NOTE:
-
If you reconfigure a domain with the new ZENworks resource file, the existing custom reports, custom datasource, and custom domain will not be changed. Only predefined reports will be updated.
-
Before reconfiguring ZENworks Reporting, back up the ZENworks Reporting resources (reports, views and so on) as follows:
-
Log in to the ZENworks Reporting server console (https://<ip>:443) as an administrator.
-
Go to > > .
-
Save the export.zip file to your local machine.
-
For reconfiguring domains, see Reconfiguring the Domain Files
Reconfiguring the Domain Files
-
Launch the URL on a supported web browser.
The URL (https://<FQDN>:9443 or https://<ipaddress>:9443) is displayed on the Appliance console.
-
Choose the required language. If the web browser supports the selected language, then it displays in that language, else it displays in English.
-
Log in to ZENworks Reporting with the root or zenadmin credentials that were specified while configuring the appliance settings.
When you log in for the first time, you are prompted to configure ZENworks Reporting.
-
Click under ZENworks Reporting Appliance.
-
Click in the Summary tab.
-
Click .
-
On the Add Domain page, select how you want to add the domain and configure a datasource. You can add domain files in one of the following methods:
-
Add domains from ZENworks Management Zone
-
Add domain using resource file
Method 1: Add domains from ZENworks Management Zone
Prerequisites:
You can upload the domain files that you downloaded from SLD to the ZENworks Server on the following locations and then reconfigure the domains:
-
ZENworks Windows Primary Server: C:\Program Files (x86)\Micro Focus\ZENworks\resources\zrs
-
ZENworks Linux Primary Server: /opt/microfocus/zenworks/resources/zrs
For information on domain files downloaded from SLD, see Section 5.3.3, Post Migration Tasks.
-
Choose , then specify the following:
-
Server address: A valid IP address or a Fully Qualified Domain Name (FQDN) of the ZENworks Primary Server in the Management Zone. This Primary Server will be referenced to download the domain resource file and the required database information to configure the datasource for that domain.
-
Port: The port used by the Primary Server in the Management Zone.
-
Username: The Management Zone's administrator username for logging in to ZENworks Control Center.
-
Password: The password for the Management Zone's administrator user specified in the Username field.
-
Domains to add: Select the domains that you want to add.
-
Click .
-
Method 2: Add domains using resource file
NOTE:While adding Vertica domain using the resource file, ensure that you select in the .
-
Choose .
-
Resource file (*.zip): Drag and drop the domain resource file (Audit Domain - zrs-audit-res.zip, Bundle Domain - zrs-bundle-resource.zip, ZENworks Domain - zrs-resource.zip and Vertica Domain - zrs-vertica-resource.zip) that had been downloaded and is locally available.
-
Datasource: Select the datasource for the uploaded domain.
If the datasource is a database server, specify the following:
-
Server Address: A valid IP address or a Fully Qualified Domain Name (FQDN) of the database server.
-
Port: The port used by the database server.
-
Database Name: The name of the database.
-
Username: The username that has read and write permissions to access the database.
-
Password: A valid password to access the database.
If your database server is Microsoft SQL Server, then specify the following:
-
Instance name: Specify the name of the Microsoft SQL server instance that is hosting the database.
-
Authentication type: Select the authentication type.
-
Domain: This field is enabled if you select Windows Authentication. Specify the Fully Qualified Domain Name (FQDN) or hostname.
-
If the datasource is a ZENworks Management Zone, specify the following:
-
Server address: A valid IP address or a Fully Qualified Domain Name (FQDN) of the ZENworks Primary Server in the Management Zone. This Primary Server will be referenced to download the domain resource file and the required database information to configure the datasource for that domain.
-
Port: The port used by the Primary Server in the Management Zone. Until ZENworks 2020 Update 2 443 was the default port. However, from ZENworks 2020 Update 3 onwards 7443 is the default port number.
-
Username: The Management Zone's administrator username for logging in to ZENworks Control Center.
-
Password: The password for the Management Zone's administrator user specified in the Username field.
-
Click .
-
-
4.2.3 User Source Configuration
Click .
To add or edit multiple user sources.
-
Click to add a user source, specify the following details:
-
Server Address: Specify the Fully Qualified Domain Name (FQDN) or IP address of the User Source, which is used for user authentication.
-
Port: The default port value is displayed based on the selected SSL. The default SSL port is 636 and the default non-SSL port is 389. If the user source is configured with a different port, other than the above mentioned default ports, then the port must be updated accordingly.
-
Username: ZENworks Reporting server needs read-only access to the LDAP directory to authenticate every login attempt. The credentials of this user is used to get read-only access.
Specify the username in distinguished name (DN) format. For example:
-
eDirectory: cn=ReadOnlyUser,o=mycompany
-
Microsoft Active Directory: cn=ReadOnlyUser,cn=users,dc=organization,dc=com
After configuration, if the credentials of this user is modified, ZENworks Reporting server will not be able to access the LDAP directory to authenticate login attempts. You must reconfigure ZENworks Reporting with the new credentials.
Active Directory allows you to create an organization unit (OU) and username with some special characters that are not accepted by the ZENworks Reporting Appliance (the appliance does not proceed further with the unsupported special characters). In this scenario, each of these special characters ; = , + < >" must be appended with a backslash “\”. For example, specify ReadOnly,User as ReadOnly\,User
-
-
Password: Specify the password of the first authentication user.
-
Click to check whether the connection to the user source is established.
If you have enabled the check box, then a certificate popup is displayed. Verify the details, and then click Accept.
-
Click to continue.
-
-
Delete: Select the user source that you want to remove and click . If a user source is deleted, the users from that user sources cannot have access to ZENworks Reporting.
-
Move up: Select the user source that you want to step up in the list. This ensures that the user authentication for this user source is attempted with higher priority than those listed below.
-
Move down: Select the user source that you want to step down in the list. This ensures that the user authentication for this user source is attempted with lower priority than those listed above.
-
Test: Select the user source that you want to test, and then click to check whether the connection to the user source is established.
4.2.4 User Group Configuration
To add user groups from the configured user sources so as to get ZENworks Reporting administrator rights for the members of the those groups.
-
Click and specify the following to add a LDAP group:
-
Source: Select a configured user source.
-
Look in: You can search the entire user source or click to select a specific search container from the user source. Select the check box to search the container recursively.
-
Search for: Specify the name or a few characters that contain the name of the group you want to search and click the search icon. The names of the groups in the search container that contain the search text is displayed. You can select one or more groups from the search results, then click to add user groups. Else, click if you want to configure them and continue.
-
-
Select one or more groups from the list and click to revoke administrator privileges from the users belonging to these administrator groups.
-
Select the check box to select all the groups from the list and delete.
IMPORTANT:
-
Only administrators have access permissions to ZENworks Reporting. The administrator privileges are:
-
View, run, schedule, create, save, and delete various ZENworks Reporting resources (For example: reports, views, domain, and data sources)
-
Assign access permissions (read, write, delete, execute, and administer) for various ZENworks Reporting resources to other users either at a role level or at a user level.
-
Manage ZENworks Reporting server settings
-
Delete users or roles
-
-
If you have selected a parent group (a group containing other sub-groups), note the following:
-
For Active Directory: Users in those sub-groups will not have administrator privileges. To assign these users administrator privileges, configure them individually.
-
For eDirectory: All the sub-groups will also have administrator privileges.
-
4.2.5 Admin Group Configuration
Configure the groups from the configured User Sources as ZENworks Reporting administrator groups. Users belonging to these groups will have administrator privileges in ZENworks Reporting.
-
Add: Click Add to add groups from a configured User Source. These groups will be listed below after they are configured.
Specify the following to add a Admin Group:
-
Source: Select a configured user source.
-
Look in: You can search the entire user source or click Browse to select a specific search container from the user source. Select the Search sub-folders check box to search the container recursively.
-
Search for: Specify the name or a few characters that contain the name of the group you want to search and click the search icon. The names of the groups in the search container that contain the search text are displayed. You can select one or more groups from the search results and click Add if you want to configure them and continue.
-
-
Delete: Select one or more groups from the list and click Delete to revoke administrator privileges from the users belonging to these administrator groups.
-
Select All: Select the Group check box to select all the groups from the list. You may then perform a bulk delete action on the selected groups.
IMPORTANT:
-
Only administrators have access permissions to ZENworks Reporting. The administrator privileges are:
-
View, run, schedule, create, save, and delete various ZENworks Reporting resources (For example: reports, views, domain, and data sources)
-
Assign access permissions (read, write, delete, execute, and administer) for various ZENworks Reporting resources to other users either at a role level or at a user level.
-
Manage ZENworks Reporting server settings
-
Delete users or roles
-
-
If you have selected a parent group (a group containing other sub-groups), note the following:
-
For Active Directory: Users in those sub-groups will not have administrator privileges. To assign these users administrator privileges, configure them individually.
-
For eDirectory: All the sub-groups will also have administrator privileges.
-