Password Management - YOKOGAWA GX10 User Manual

1.4 Password Management
1-22
The password management function enables you to manage access to the GX/GP by using
the Kerberos v5 authentication protocol.
For the setting procedure and operating instructions, see section Chapter 3, "Password
Management".
System Configuration
The following figure shows the configuration of the authentication system.
(Windows Server 2008/Windows Server 2003
Authentication
Login
Sign in
User A
User B
GX
Register user privileges to grant the user.
The authentication system consists of the devices listed below connected on an Ethernet.
• KDC server
Windows Server 2008, Windows Server 2003, or Windows Server 2012. Manages the
account of a GX/GP on the network (host account) and the user accounts for accessing
the GX/GP.
• GX/GP
Of the user accounts on the KDC server, you can specify which accounts to use (login
settings) on which GX/GPs. You can also set different user privileges for each user on
each GX/GP.
• Client PC for maintenance
This device is used to change user account passwords and for other maintenance. It is
not explained in this manual.
Operation
When you log in to the GX/GP or use the signature function, you will be prompted for a
user name and password (the password management function does not use user IDs).
The GX/GP will then perform the communication with the KDC server that is necessary for
authentication. When authentication completes successfully, you can operate the GX/GP.
The server manages the passwords and their expiration period. Monitor users (Monitor level
users) are excluded from this function.
If the connection to the KDC server is broken, or if no users can be authenticated for some
other reason, you can operate the GX/GP using a special user account (root).
See Note in section 3.2.1, "Logging In and Out".
Note
• Cross-realm authentication (authentication of different domain names) is not supported.
• You cannot change user account passwords from the GX/GP.
KDC server
/Windows Server 2012)
Login
Sign in
User C
User D
GX
Host account
GX
User account
User A
User B
User C
User D
User E
User F
Password change
Client PC
Password change
IM 04L51B01-05EN