Proxy Authentication Using Internet Gatekeeper - F-SECURE INTERNET GATEKEEPER FOR LINUX 4.01 Administrator's Manual

10.1.3 Proxy Authentication using Internet Gatekeeper

F-Secure Internet Gatekeeper for Linux can authenticate each user with a password. The
authentication method differs depending on the protocol; HTTP proxy authentication is used for HTTP
services, SMTP authentication for SMTP services, POP user names for POP services, and FTP user
names for FTP services.
User Authentication (PAM Authentication)
You can set authentication settings independently for each user.
You can add, delete, or edit users from the "User Database".
To open the " User Database " on the web console, click " Proxy settings ". Select " Add or remove
users " from the corresponding service page.
POP, FTP Service
For POP and FTP services, F-Secure Internet Gatekeeper for Linux checks whether a user name
exists in the user database.
If multiple servers are used, specify "user name@server name" or "user name@server name". To
allow all users for a specific server, specify "@server name".
The user name is specified on the client side.
￭
The password is authenticated on the server side.
￭
The settings are stored in userdb.txt in the /opt/f-secure/fsigk/conf/pam/ directory.
If you edit the settings directly, update the userdb.db database file with the create_userdb
userdb.db < userdb.txt command.
You can also edit the PAM configuration files (/etc/pam.d/fsigk_{http,smtp,pop,ftp}) and
use external authentication methods such as UNIX account, NIS, LDAP, and Radius. These PAM
configuration files are the symbolic links of
/opt/f-secure/fsigk/conf/pam/fsigk_{http,smtp,pop,ftp}.pam. Do not edit the files
at /opt/f-secure/fsigk/conf/pam/fsigk_{http,smtp,pop,ftp}.pam directly because
they are overwritten when updated. If you edit the PAM settings, delete the symbolic links at
/etc/pam.d/fsigk_{http,smtp,pop,ftp} and create copies of the
/opt/f-secure/fsigk/conf/pam/fsigk_{http,smtp,pop,ftp}.pam files to be used for
editing.
F-Secure Internet Gatekeeper for Linux/Administrator's Guide
Web server M ail server
Access granted
Internet
User A
Internet Gatekeeper
Access prohibited
User B
102