Table of Contents
Advertisement
Selecting Access Control Options
•
Authentication Database lets you select a database the server will use to
authenticate users. This option is only available through the Server Manager. If
you choose Default, the server looks for users and groups in an LDAP
directory. If you wish configure individual ACLs to use different databases,
select Other, and choose the database from the drop-down list. Non-default
databases and LDAP directories need to have been specified in the file
server_root
custom database, such as Oracle or Informix, select Other, and enter the
database name.
Specifying the From Host
You can restrict access to the Administration Server or your web site based on
which computer the request comes from.
•
Anyplace allows access to all users and systems
•
Only from allows you to restrict access to specific Host Names or IP Addresses
If you select the Only from option, enter a wildcard pattern or a comma-separated
list in the Host Names or IP Addresses fields. Restricting by hostname is more
flexible than by IP address: if a user's IP address changes, you won't need to
update this list. Restricting by IP address, however, is more reliable: if a DNS
lookup fails for a connected client, hostname restriction cannot be used.
182
Netscape Enterprise Server Administrator's Guide • November 2001
Basic uses the HTTP method to get authentication information from the
client. The username and password are only encrypted if encryption is
turned on for the server.
SSL uses the client certificate to authenticate the user. To use this method,
SSL must be turned on for the server. When encryption is on, you can
combine Basic and SSL methods.
Digest uses the an authentication mechanism that provides a way for a
browser to authenticate based on username and password without
sending the username and password as cleartext. The browser uses the
MD5 algorithm to create a digest value using the user's password and
some information provided by Enterprise Server. This digest value is also
computed on the server side using the Digest Authentication plug-in and
compared against the digest value provided by the client.
Other uses a custom method you create using the access control API.
/userdb/dbswitch.conf
. If you use the access control API for a
Advertisement
Table of Contents
