Configure Security for Cache Cluster

Note

This feature is only available in NCache Enterprise Edition.

In order to configure security for NCache Web Manager, you need to provide valid domain information of LDAP directory. Follow the steps provided below to configure Web Manager security.

Configure Security for Web Manager

Launch NCache Web Manager by browsing to http://localhost:8251 (Windows) or <server-ip>:8251 (Windows + Linux).
In the right corner, click on to open Manager Settings.
From the left bar, click on Manager Security.
Provide the valid credentials for your LDAP directory like name of Domain Controller, Search Base, Port (optional), User Name, User DN and Password.

NCache Web Manager Security

Click on Verify Settings. If settings are verified, you will be prompted with a success message. Click on Apply.

Important

If node level security is enabled, you will not be able to add security on any cache containing that node unless you provide that node's admin credentials.

Configure Cache Level Security

After you have created cache, API level security for the cache cluster can be configured in following ways:

Using NCache Web Manager

In the left navigation bar, click on Clustered Caches or Local Caches, based on the cache to configure.
Against the cache name, click on View Details.

View Details

This opens up the detailed configuration page for the cache. Go to the Advanced Settings tab and click on Security and Encryption in the left bar.
Under Security, check the box Enable Security.

Enable NCache Security

Expand the Domain Users list which will display all users under the search base you entered previously. Select the respective users from Domain Users by clicking on > button.

Domain Users

Click on Save Changes to apply the configurations to cache.
This adds security for the respective cache, which is also saved in config.ncconf under the <security> tag.

Using PowerShell

Add-CacheSecurity cmdlet configures server cache level security.

The following command enables cache security against user john_smith on 20.200.20.38.

Add-CacheSecurity -EnableSecurity -UserID john_smith -Password mypassword -DomainController yourdomain.org -DomainControllerPort 389 -Server 20.200.20.38 -Name demoClusteredCache