Netscape ENTREPRISE SERVER 6.1 - 08-2002 ADMINISTRATOR Administrator's Manual page 183

Enterprise Server checks lists of users and groups stored in an LDAP server, such
as Directory Server.
You can allow or deny access to everyone in the database, you can allow or deny
specific people by using wildcard patterns, or you can select who to allow or deny
from lists of users and groups.
• Anyone (No Authentication) is the default and means anyone can access the
resource without having to enter a username or password. However, the user
might be denied access based on other settings, such as host name or IP
address. For the Administration Server, this means that anyone in the
administrators group that you specified with distributed administration can
access the pages.
• Authenticated people only
All in the authentication database matches any user who has an entry in
the database.
Only the following people lets you specify which users and groups to
match. You can list users or groups of users individually by separating the
entries with commas, or with a wildcard pattern, or you can select from the
lists of users and groups stored in the database. Group matches all users in
the groups you specify. User matches the individual users you specify. For
the Administration Server, the users must also be in the administrators
group you specified for distributed administration.
• Prompt for authentication allows you to enter message text that appears in the
authentication dialog box. You can use this text to describe what the user needs
to enter. Depending on the operating system, the user will see about the first 40
characters of the prompt. Browsers cache the username and password, and
associate them with the prompt text. When the user accesses files and
directories of the server having the same prompt, the usernames and
passwords won't need to be entered again. If you want users to authenticate
again for specific files and directories, you simply need to change the prompt
for the ACL on that resource.
• Authentication Methods specifies the method the server uses for getting
authentication information from the client. The Administration Server offers
only the Basic method of authentication.
Default uses the default method you specify in the
"Basic" if there is no setting in
rule doesn't specify a method in the ACL file. Choosing Default allows you
to easily change the methods for all ACLs by editing one line in the
file.
obj.conf
Selecting Access Control Options
obj.conf
. If you check Default, the ACL
obj.conf
Chapter 8 Controlling Access to Your Server
file, or
183