HP 3600 v2 Series Security Configuration Manual page 150

Post requests are used when users submit username and password pairs, log on the system, and log
•
off the system.
Rules on Post request attributes
Observe the following requirements when editing a form of an authentication page:
1.
• An authentication page can have multiple forms, but there must be one and only one form whose
action is logon.cgi. Otherwise, user information cannot be sent to the local portal server.
The username attribute is fixed as PtUser, and the password attribute is fixed as PtPwd.
•
Attribute PtButton is required to indicate the action that the user requests, which can be Logon or
•
Logoff.
A logon Post request must contain PtUser, PtPwd, and PtButton attributes.
•
A logoff Post request must contain the PtButton attribute.
•
Authentication pages logon.htm and logonFail.htm must contain the logon Post request.
2.
The following example shows part of the script in page logon.htm.
<form action=logon.cgi method = post >
<p>User name:<input
maxlength=64>
<p>Password :<input type="password" name = "PtPwd" style="width:160px;height:22px"
maxlength=32>
<p><input
onclick="form.action=form.action+location.search;>
</form>
Authentication pages logonSuccess.htm and online.htm must contain the logoff Post request.
3.
The following example shows part of the script in page online.htm.
<form action=logon.cgi method = post >
<p><input type=SUBMIT value="Logoff" name="PtButton" style="width:60px;">
</form>
Rules on page file compression and saving
A set of authentication page files must be compressed into a standard zip file. The name of a zip
•
file can contain only letters, numerals, and underscores. The zip file of the default authentication
pages must be saved with name defaultfile.zip.
The set of authentication pages must be located in the root directory of the zip file.
•
• Zip files can be transferred to the device through FTP or TFTP. The default authentication pages file
must be saved in the root directory of the device, and other authentication files can be saved in the
root directory or the portal directory under the root directory of the device.
Examples of zip files on the device:
<Sysname> dir
Directory of flash:/portal/
0 -rw-
1 -rw-
2 -rw-
3 -rw-
2540 KB total (1319 KB free)
type="text"
type=SUBMIT value="Logon"
1405 Feb 28 2011 15:53:31
1405 Feb 28 2011 15:53:20
1405 Feb 28 2011 15:53:39
1405 Feb 28 2011 15:53:44
name = "PtUser"
name = "PtButton"
ssid2.zip
ssid1.zip
ssid3.zip
ssid4.zip
139
style="width:160px;height:22px"
style="width:60px;"