Posit Connect makes it easy to use enterprise access control systems for your data science content. If your organization has Pluggable Authentication Modules (PAM) from a vendor like Delinea (previously know as Centrify), which will integrate UNIX account functionality with directory systems like Lightweight Directory Access Protocol (LDAP), you may need to make some adjustments to your configuration for Connect to work properly.
To integrate Delinea’s PAM modules with Posit Connect, you should first ensure that the `rstudio-connect` role exists:
dzdo dzinfo rstudio-connect --roles | grep rstudio-connect
If nothing is returned, you may need to add the `rstudio-connect` role in Delinea. You should consult the documentation or the vendor point-of-contact for your Delinea installation for instructions on how to accomplish this.
Once Delinea has been prepared for Posit Connect, you should update the Connect server configuration file:
; /etc/rstudio-connect/rstudio-connect.gcfg
[Authentication]
Provider = pam
[PAM]
Service = <my-delinea-service>
Note: The <my-delinea-service> value should be replaced with the PAM service you use to authenticate Delinea sessions. If none is provided, Posit Connect will use the `rstudio-connect` service.
Once the configuration file has been updated, you can restart Posit Connect and log on with your LDAP or Active Directory credentials. The first user to log in will become the administrator. This can be changed using the `usermanager` command line tool, which is described in the Posit Connect Admin Guide.