Specifications

RMX 1500/2000/4000 Release Notes for Maximum Security Environments - Version 7.5.0.J
58
•Multiple application-users can be configured the same FQDN name if multiple
applications are hosted on the same server
• If the system is downgraded the application-user’s FQDN information is not deleted
from the RMX’s user records.
•A System Flag, PASS_EXP_DAYS_MACHINE, enables the administrator to
change the password expiration period of application-user’s independently of
regular users. The default flag value is 365 days.
• The server hosting an application-user whose password is about to expire will
receive a login response stating the number of days until the application-user’s
password expires. This is determined by the value of the
PASSWORD_EXPIRATION_WARNING_DAYS System Flag. The earliest
warning can be displayed 14 days before the password is are due to expire and the
latest warning can be displayed 7 days before passwords are due to expire. An
Active Alarm is created stating the number of days before the password is due to
expire.
•The MIN_PWD_CHANGE_FREQUENCY_IN_DAYS System Flag does not effect
application-user accounts. Applications typically manage their own password
change frequency.
•If an application-user identifies itself with an incorrect FQDN, its account will not be
locked, however the event is written to the Auditor Event File.
• If an application-user identifies itself with a correct FQDN and an incorrect
password, its account will be locked and the event written to the Auditor Event File.
•An application-user cannot be the last administrator in the system. The last
administrator must be regular user.
Monitoring
•An application-user and it’s connection is represented by a specific icon.
Active Directory
• When working with Active Directory, CMA and DMA cannot be registered within
Active Directory as regular users. CMA and DMA application-users must be
registered manually.
• The only restriction is that TLS mode is enabled together with client certificate
validation.
• If the above configuration are set off it will not be possible to add machine
accounts.
• When setting the TLS mode off the system should check the existence of a machine
account and block this operation until all machine accounts are removed.
When defining a new user as described in the RMX 1500/2000/4000 Administrator’s
Guide,
"Adding a New User” on page 13-3:
1 In the User Properties dialog box, select the Associate with a machine check box.
2 Enter the FQDN of the server that hosts the application who’s application-user
name is being added. Example: cma1.polycom.com
3 Click the OK button.