|
1 | 1 | # RES Integration
|
2 | 2 |
|
| 3 | +[Research and Engineering Studio](https://aws.amazon.com/hpc/res/) (RES) si an open source, easy-to-use web-based portal for administrators to create and manage secure cloud-based research and engineering environments. |
| 4 | +It enables users to self-provision virtual desktops. |
| 5 | +It currently doesn't have integrated support for an HPC cluster. |
| 6 | +We'll describe here how to integrate RES virtual desktops with one or more ParallelCluster clusters and use them from the RES desktops. |
| 7 | + |
3 | 8 | First you will need to deploy RES.
|
4 | 9 | The easiest way is to [deploy the demo environment](https://docs.aws.amazon.com/res/latest/ug/create-demo-env.html) which provides all of the prerequisites and completely automates the deployment.
|
5 | 10 | If you want to use an existing VPC or Active Directory, then you will need to follow the instructions to [deploy the product](https://docs.aws.amazon.com/res/latest/ug/deploy-the-product.html).
|
@@ -131,3 +136,57 @@ When you are done, remove the following files or else new virtual desktops creat
|
131 | 136 | ```
|
132 | 137 | rm /root/bootstrap/semaphore/*.lock
|
133 | 138 | ```
|
| 139 | + |
| 140 | +## Environment Password Management |
| 141 | + |
| 142 | +The RES environment has 2 special AD users that it uses. |
| 143 | +The default AD password policy requires passwords to be changed every 30 days. |
| 144 | +If you don't change them, then the passwords will expire and the RES web portal will stop working. |
| 145 | +You can prevent this by manually resetting the passwords in AD or you can set the passwords for these |
| 146 | +2 users to never expire. |
| 147 | + |
| 148 | +The admin users are: |
| 149 | + |
| 150 | +* Admin |
| 151 | +* ServiceAccount |
| 152 | + |
| 153 | +Their passwords are stored in Secrets Manager. |
| 154 | + |
| 155 | +Make sure that you follow your company's security policies on how you manage these users' passwords. |
| 156 | + |
| 157 | +### Reset Admin User passwords |
| 158 | + |
| 159 | +Retrieve the password for the user in Secrets Manager. |
| 160 | +Go to the AD console and reset the user's password using the same password. |
| 161 | +You can also update to a new password, save it in Secrets Manager, and then update the password in AD. |
| 162 | + |
| 163 | +### Change the Password Policy in AD |
| 164 | + |
| 165 | +Use a Windows RDP client to connect to the AdDomainWindowsNode as the Admin user using the password from Secrets Manager. |
| 166 | + |
| 167 | +Click the Windows start button and find the Windows Administrative tools. |
| 168 | + |
| 169 | + |
| 170 | + |
| 171 | +Expand and double click on Active Directory Users and Computers. |
| 172 | + |
| 173 | + |
| 174 | + |
| 175 | +Expand the corp.res.com. |
| 176 | + |
| 177 | + |
| 178 | + |
| 179 | +Then expand corp and select Users. |
| 180 | + |
| 181 | + |
| 182 | + |
| 183 | +Double click on the Admin user, select the Account tab, and check the box for "Password never expires". |
| 184 | +Click Apply and OK. |
| 185 | + |
| 186 | + |
| 187 | + |
| 188 | +Do the same for the ServiceAccount user. |
| 189 | + |
| 190 | + |
| 191 | + |
| 192 | +Log out and stop the AdDomainWindowsNode instance. |
0 commit comments