Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

DirectLink Account - problem

Hello,

We use a DirectLink Account to get graphs for another monitoring server (Hobbit).

The problem is that when someone go to our Orion URL, it is automatically connected in DirectLink without credential prompt and have access to all functionality (except Admin).

Where is our mistake when configuring this DirectLink Account ?We have follow theses steps:

To enable a DirectLink account for Orion:

1. Log in to the Orion Web Console as an administrator.
2. Click Admin in the top menu bar.
3. Click Account Manager from the left pane menu, and then click Add.
4. Type DirectLink as the new User Name.
5. Type a Password, confirm it, and click Submit.
6. Create a custom view to be used as the home page of the DirectLink account. For more information, see “Creating New Views”.

For the step 6., what have you put on the DirectLink view ?

7. Specify the new DirectLink view as a default view in Account Manger. For more information, see “Editing User Accounts”.
8. If you would like to limit the DirectLink account to specific devices or device types, see “Setting Account Limitations”.

The step 8., is not necessary for us.

Is there any particular configuration on IIS (or other) to prevent automatic login ?

Our Orion configuration :

Operating System	Windows 2003 Standard Edition
OS Version	5.2.3790
Service Pack	2.0

Package	Orion Network Performance Monitor V8 SL500
Version	8.5.1 (SP3)
Release	Orion Version 8.5.1 - October 2007

Thanks in advance for your attention.

Find more posts tagged with

Accepted answers

All comments

qle

Is there any particular configuration on IIS (or other) to prevent automatic login ?

Perhaps, I'm confused but that's the purpose of a DirectLink account. It's supposed to allow you to login automatically without prompting for login credentials. If you want to prevent automatic login, you'll have to disable/delete the DirectLink account.

Network_Guru

I have found the same issue in 8.1
With the directlink account enabled, anyone can connect to a single page if they have a direct link and then browse anywhere on the Orion website with impunity.

The directlink account was originally designed to allow access to a only single page, such as a chart or report.
Following links to other pages was not permitted (disabled).

I'm pretty sure this is a bug that has not yet been noted, and has been around for some time (I saw this behaviour in V7.8 as well).

Geolem

As it say in the Orion Documentation (here) :

The presence of the DirectLink account in Orion Network Performance Monitor enables an Orion Network Performance Monitor user to provide a non-Orion Network Performance Monitor user with a hyperlink to a specific Orion Network Performance Monitor web page. Any URL that refers directly to an Orion Network Performance Monitor web page will bypass the login screen, logging the user into the DirectLink account. Alternatively, a URL that does not directly specify an Orion Network Performance Monitor web page will display the Orion Network Performance Monitor Login page. The DirectLink account is created like any other account and can include custom views and/or account limitations.

So, if I understand well, if someone go to our Orion NPM portal, the user will be prompted for credentials. In my case, it isn't like that (

Should I contact the Solarwinds support for this ?

dave.woolterton

I upgrade my system last week and had the same problem. I have raised a ticket with Solarwinds Ticket No 31667. Solarwinds are aware and working on the problem.

Hope this helps.

David

Geolem

Thanks