Post-Installation Configuration
This post-installation step may not be required for all deployments. It only applies when access to the Open iT Ingress web interface is restricted.
Depending on your environment and configuration, you can allow access using one of the following methods:
Configure Access via IP Whitelist
In environments where Open iT Ingress is deployed on a system without a graphical interface, administrators may need to update the IP whitelist configuration to allow access to the Ingress web interface from a remote machine.
Ingress can restrict access to the web interface using the IpWhitelist.json configuration file. To allow an administrator to connect, add the IP address of the machine that will access the interface.
While this configuration is available on Windows, it is not required for most Windows-based setups unless IP-based access control is specifically needed.
- Windows
- Unix
Step 1: Open the Ingress Configuration Directory
-
Go to the Open iT Ingress configuration directory.
By default, this is located at:
C:\Program Files\OpeniT\Ingress\configuration.
Step 2: Create or Open the Override File
-
Create a copy of
IpWhitelist.json. -
Rename the duplicate file to
IpWhitelist.Override.json. -
Open the existing
IpWhitelist.Override.json, if there is already one.
Step 3: Update the IP Whitelist
-
In the override file, add the IP address of the machine that will access the Ingress web interface.
IpWhitelist.Override.json{
"IPWhitelist": {
"IncludeLocalMachine": true,
"AllowedIPs": [
// Add IP addresses or CIDR ranges here
// Examples:
"192.168.1.38",
// "10.0.0.0/24",
// "172.16.0.0/16",
"198.51.100.xxx"
]
}
} -
Save the file.
Step 4: Restart the Open iT Ingress Service
-
Open the Task Manager.
-
Go to the Services tab.
-
Restart the OpeniTIngress service.
Step 1: Open the Ingress Configuration Directory
-
Go to the Open iT Ingress configuration directory.
By default, this is located at:
/opt/openit/ingress/configurations.
Step 2: Create or Open the Override File
-
Create a copy of
IpWhitelist.json. -
Rename the duplicate file to
IpWhitelist.Override.json. -
Open the existing
IpWhitelist.Override.json, if there is already one.
Step 3: Update the IP Whitelist
-
In the override file, add the IP address of the machine that will access the Ingress web interface.
IpWhitelist.Override.json{
"IPWhitelist": {
"IncludeLocalMachine": true,
"AllowedIPs": [
// Add IP addresses or CIDR ranges here
// Examples:
"192.168.1.38",
// "10.0.0.0/24",
// "172.16.0.0/16",
"198.51.100.xxx"
]
}
} -
Save the file.
Step 4: Restart the Ingress Service
-
Run the following command to restart Ingress:
Command Syntaxsystemctl restart openit-ingress-api
Configure Access via Windows Authentication
In environments where Windows authentication is used, access to the Open iT Ingress web interface can also be controlled through the Authentication.json configuration file. This approach allows administrators to define which users are permitted to access the interface.
Step 1: Open the Ingress Configuration Directory
-
Go to the Open iT Ingress configuration directory.
By default, this is located at:
C:\Program Files\OpeniT\Ingress\configuration
Step 2: Create or Open the Override File
-
Create a copy of
Authentication.json. -
Rename the duplicate file to
Authentication.Override.json. -
Open the existing
Authentication.Override.json, if there is already one.
Step 3: Update the Authentication Configuration
-
In the override file, add the user that will access the Ingress web interface.
Authentication.Override.json{
"Authentication": {
"Type": "Negotiate",
"Administrators": [
"DOMAIN\\AdminUser1",
"DOMAIN\\AdminUser2",
"SVG\\UserAlpha"
]
},
"Oidc": {
"ClientId": "",
"ClientSecret": "",
"Authority": "",
"Scopes": ["openid", "profile", "email", "roles", "offline_access"]
}
} -
Save the file.
Step 4: Restart the Open iT Ingress Service
-
Open the Task Manager.
-
Go to the Services tab.
-
Restart the OpeniTIngress service.