Assigned User Profile / AD groups /

Question

I am new to SGD and trying to figuring out how to give permission to certain AD groups for certain applications.
I have two AD groups Info_Portal and Info_Survey and five applications let say App1, App2, App3 and App4. I would like App1 and App2 applications available to info_portal only and App3 and App4 available to Info_survy only.
I kind of got picture for assigne profile for applications but I am not clear how to created this new AD profile with in SGD.
Since I am new to SGD would prefer options through Admin console.
Thanks.
Habib.

Answer 1

Hi Matt,
Sorry, you must be wondering what happened to me. Well, I had an injury and end up taking LOA. Just came back to work.
Thank you for your suggestions. I went through the document and made required changes. I guess I missed something since I can’t login to SGD at all now.
Here is the output of:
# ./tarantella config list login-ldap login-ad login-nt login-nt-domain
login-ad: 1
login-nt-domain: orgds2.hs.uci.edu
login-nt: 0
login-ldap: not found
My krb.conf file is as follows:
[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log
[libdefaults]
default_realm = HS.UCI.EDU
dns_lookup_realm = true
dns_lookup_kdc = true
ticket_lifetime = 24h
forwardable = yes
[realms]
EXAMPLE.COM = {
kdc = kerberos.example.com:88
admin_server = kerberos.example.com:749
default_domain = example.com
HS.UCI.EDU = {
kdc = hs.uci.edu:88
admin_server = hs.uci.edu:749
UCI.EDU = {
kdc = kerberos.service.uci.edu:88
admin_server = kerberos.service.uci.edu:749
[domain_realm]
.example.com = EXAMPLE.COM
example.com = EXAMPLE.COM
hs.uci.edu = HS.UCI.EDU
.hs.uci.edu = HS.UCI.EDU
uci.edu = UCI.EDU
.uci.edu = UCI.EDU
[appdefaults]
pam = {
debug = false
ticket_lifetime = 36000
renew_lifetime = 36000
forwardable = true
krb4_convert = false
What did I miss?
Thanks again for all the help.
Habib.