Novell NETWARE 6-DOCUMENTATION Manual page 2203

274 Getting Results with Novell Web Services
Authenticated People Only: All users requesting the resource will have to
type a username and password before getting access.
If the username they enter isn't in the database, the access control rule
won't apply to them. However, if the rule says Deny and then a group is
listed, that group is denied, but everyone else in the database could be
allowed depending on if there is another ACL that matches their request.
All in the Authentication Database: Matches any user who has an entry in
the database. To use this option, you must also select Authenticated
People Only.
Only the Following People: Allows you to specify certain users and
groups to match.
User: Matches the individual users you specify.
Group: Matches all users in the groups you specify.
You can list the users and groups of users individually by separating the
entries with commas. Or you can enter a wildcard pattern. To use this
option, you must also select Authenticated People Only.
Prompt for Authentication: Allows you to specify message text that
appears in the authentication window. You can use this text to describe
what the user needs to enter. Depending on the operating system, the user
will see about the first 40 characters of the prompt. Netscape Navigator
and Netscape Communicator cache the username and password and
associate them with the prompt text. This means that if the user accesses
areas (files and directories) of the server that have the same prompt, the
user won't have to retype usernames and passwords. Conversely, if you
want to force users to reauthenticate for various areas, you simply need to
change the prompt for the ACL on that resource.
Authentication Methods: Specifies the method the server uses when
getting authentication information from the client.
Default: Uses the default method you specify in the OBJ.CONF file,
or Basic if there is no setting in OBJ.CONF. If you select Default in
this form, the ACL rule doesn't specify a method in the ACL file.
Default is the best choice because you can easily change the methods
for all ACLs by editing one line in the OBJ.CONF file.
Basic: Uses the HTTP method to get authentication information from
the client. The username and password are only encrypted if
encryption is turned on for the server.