Skip to content

Commit 1a6a4fb

Browse files
authored
Update RES docs (#312)
Add info on how to manage critical user passwords.
1 parent 905d3a1 commit 1a6a4fb

7 files changed

+59
-0
lines changed

docs/images/res-Admin-properties.png

95.7 KB
Loading
97.5 KB
Loading
123 KB
Loading
91.6 KB
Loading

docs/images/res-users.png

152 KB
Loading
Loading

docs/res_integration.md

+59
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,10 @@
11
# RES Integration
22

3+
[Research and Engineering Studio](https://aws.amazon.com/hpc/res/) (RES) si an open source, easy-to-use web-based portal for administrators to create and manage secure cloud-based research and engineering environments.
4+
It enables users to self-provision virtual desktops.
5+
It currently doesn't have integrated support for an HPC cluster.
6+
We'll describe here how to integrate RES virtual desktops with one or more ParallelCluster clusters and use them from the RES desktops.
7+
38
First you will need to deploy RES.
49
The easiest way is to [deploy the demo environment](https://docs.aws.amazon.com/res/latest/ug/create-demo-env.html) which provides all of the prerequisites and completely automates the deployment.
510
If you want to use an existing VPC or Active Directory, then you will need to follow the instructions to [deploy the product](https://docs.aws.amazon.com/res/latest/ug/deploy-the-product.html).
@@ -131,3 +136,57 @@ When you are done, remove the following files or else new virtual desktops creat
131136
```
132137
rm /root/bootstrap/semaphore/*.lock
133138
```
139+
140+
## Environment Password Management
141+
142+
The RES environment has 2 special AD users that it uses.
143+
The default AD password policy requires passwords to be changed every 30 days.
144+
If you don't change them, then the passwords will expire and the RES web portal will stop working.
145+
You can prevent this by manually resetting the passwords in AD or you can set the passwords for these
146+
2 users to never expire.
147+
148+
The admin users are:
149+
150+
* Admin
151+
* ServiceAccount
152+
153+
Their passwords are stored in Secrets Manager.
154+
155+
Make sure that you follow your company's security policies on how you manage these users' passwords.
156+
157+
### Reset Admin User passwords
158+
159+
Retrieve the password for the user in Secrets Manager.
160+
Go to the AD console and reset the user's password using the same password.
161+
You can also update to a new password, save it in Secrets Manager, and then update the password in AD.
162+
163+
### Change the Password Policy in AD
164+
165+
Use a Windows RDP client to connect to the AdDomainWindowsNode as the Admin user using the password from Secrets Manager.
166+
167+
Click the Windows start button and find the Windows Administrative tools.
168+
169+
![Windows start menu Administrative Tools](images/res-windows-administrative-tools.png)
170+
171+
Expand and double click on Active Directory Users and Computers.
172+
173+
![Windows start menu Active Directory Users and Computers](images/res-start-ad-users-and-computers.png)
174+
175+
Expand the corp.res.com.
176+
177+
![Active Directory Users and Computers with corp.res.com selected](images/res-ad-users-and-computers.png)
178+
179+
Then expand corp and select Users.
180+
181+
![Active Directory Users and Computers with corp.res.com and corp expanded and Users selected](images/res-users.png)
182+
183+
Double click on the Admin user, select the Account tab, and check the box for "Password never expires".
184+
Click Apply and OK.
185+
186+
![Admin user properties with Account tab selected](images/res-Admin-properties.png)
187+
188+
Do the same for the ServiceAccount user.
189+
190+
![ServiceAccount user properties with Account tab selected](images/res-ServiceAccount-properties.png)
191+
192+
Log out and stop the AdDomainWindowsNode instance.

0 commit comments

Comments
 (0)