Table of Contents
Advertisement
What Is Access Control?
•
Which programs they can access
•
Who can access the files or directories on your web site
You can control access to the entire server or to parts of the server, or the files or
directories on your web site. You create a hierarchy of rules called access control
entries (ACEs) to allow or deny access. Each ACE specifies whether or not the
server should check the next ACE in the hierarchy. The collection of ACEs you
create is called an access control list (ACL).
By default, the server has one ACL file that contains multiple ACLs. After
determining the virtual server to use for an incoming request, Enterprise Server
checks if any ACLs are configured for that virtual server. If ACLs are found that
apply for the current request, Enterprise Server evaluates their ACEs to determine
whether access should be granted or denied.
You allow or deny access based on:
•
Who is making the request (User-Group)
•
Where the request is coming from (Host-IP)
•
When the request is happening (for example, time of day)
•
What type of connection is being used (SSL)
Setting Access Control for User-Group
You can limit access to your web server to certain users or groups. User-Group
access control requires users to enter a username and password before gaining
access to the server. The server compares the information in a client certificate, or
the client certificate itself with a directory server entry.
The Administration Server uses only the basic authenticaton. If you wish to require
client authentication on your Administration Server, you must manually edit the
ACL files in
User-Group authentication methods for server instances include:
•
Default
•
Basic
•
SSL
•
Digest
•
Other
160
Netscape Enterprise Server Administrator's Guide • November 2001
changing the method to SSL.
obj.conf
Advertisement
Table of Contents
