Novell ACCESS MANAGER 3.1 SP2 - ACCESS GATEWAY GUIDE 2010 Manual page 261

Determining the Protection Type Assigned to the Resource
Figure 8-6
Continue Processing
Is the PR
7
NO
Protected with
a Contract?
YES
Is
the User
8
Authenticated
YES
with the Required
Contract?
NO
Is the
9
PR Enabled
YES
for NRL?
NO
Continue Processing
You configure a protected resource as a public resource when an authentication procedure/contract
is not assigned to the protected resource. In decision point 7, the Access Gateway checks to see if a
contract has been assigned to the protected resource.
If the protected resource has not been assigned a contract, the Access Gateway is finished with
its authentication checks and continues with policy evaluation.
If the protected resource has been assigned a contract, the Access Gateway continues with the
task in decision point 8.
For a user to gain access to a resource protected by a contract, the user must have authenticated with
that contract, or if the contract is configured for it, the user can authenticate with another contract as
long as the contract is of a equal or higher level.
If the user is authenticated with the required contract, the Access Gateway is finished with its
authentication checks and continues with policy evaluation.
If the user is not authenticated with the required contract, the Access Gateway continues with
the task in decision point 9.
Is an
Authentication
9a
YES YES
Header
Present?
NO
Is the NRL
Redirect
9c
NO
Option
Enabled?
YES
Are the
Authentication
9b
Credentials
Valid?
NO
Return HTTP
401
Evaluate for Policies
Unauthorized
Troubleshooting the Access Gateway Service 261
YES