Novell OPEN ENTERPRISE SERVER 2 SP2 Installation Manual page 70

Configured SLP Directory Agents: This option lets you manage the list of hostname or
IP addresses of one or more external servers on which a SLP Directory Agent is running.
2 Click Next and confirm your selection if necessary, then continue with
Modular Authentication Services (NMAS) Login
Selecting the Novell Modular Authentication Services (NMAS) Login Method
1 On the Novell Modular Authentication Services page, select all the login methods you want to
install.
IMPORTANT: The NMAS
where you want to use the NMAS login methods. The NMAS client software is included with
the Novell Client software.
The following methods are available:
CertMutual: The Certificate Mutual login method implements the Simple Authentication
and Security Layer (SASL) EXTERNAL mechanism, which uses SSL certificates to
provide client authentication to eDirectory through LDAP.
Challenge Response: The Challenge-Response login method works with the Identity
Manager password self-service process. This method allows either an administrator or a
user to define a password challenge question and a response, which are saved in the
password policy. Then, when users forget their passwords, they can reset their own
passwords by providing the correct response to the challenge question.
DIGEST-MD5: The Digest MD5 login method implements the Simple Authentication
and Security Layer (SASL) DIGEST-MD5 mechanism as a means of authenticating the
user to eDirectory through LDAP.
NDS: The NDS
authentication to eDirectory. This method supports the traditional NDS password when
the NMAS client is in use and is installed by default. Reinstallation is necessary only if the
NDS login method object has been removed from the directory.
Simple Password: The Simple Password NMAS login method provides password
authentication to eDirectory. The Simple Password is a more flexible but less secure
alternative to the NDS password. Simple Passwords are stored in a secret store on the user
object.
SASL GSSAPI: The SASL GSSAPI login method implements the Generic Security
Services Application Program Interface (GSSAPI) authentication. It uses the Simple
Authentication and Security Layer (SASL), which enables users to authenticate to
eDirectory through LDAP by using a Kerberos* ticket.
For more information about installing and configuring eDirectory, see
Novell eDirectory on Linux
For more information on these login methods, see the online help and
Post-Login Methods and
Administration
2 Click Next, then continue with
page 71.
70 OES 2 SP2: Installation Guide
client software must be installed on each client workstation
TM
®
login method provides secure password challenge-response user
in Novell eDirectory 8.8 Installation
Sequences" in the
Guide.
"Configuring Novell Open Enterprise Server Services" on
Method.
Guide.
Novell Modular Authentication Services 3.3.1
Selecting the Novell
"Installing or Upgrading
"Managing Login and