Novell ZENWORKS 10 CONFIGURATION MANAGEMENT SP3 - SYSTEM ADMINISTRATION REFERENCE 10.3 16-04-2010 System Administration Manual page 260

Wizard Page
Authentication Mechanisms
page
260 ZENworks 10 Configuration Management System Administration Reference
Details
Select the mechanism used to authenticate users to the ZENworks
Management Zone. The available mechanisms depend on whether
you are configuring a Novell eDirectory or a Microsoft Active
Directory user source.
Kerberos: Active Directory only. Enables Kerberos*
authentication in which the Active Directory server generates a
Kerberos ticket that Novell Common Authentication Services
Adapter (CASA) uses to authenticate the user, instead of using
a username and password. Kerberos authentication is often
used with smart cards.
Username/Password: eDirectory or Active Directory. Enables
simple authentication using a username and password.
Shared Secret: eDirectory only. Enables a user to
automatically log in to ZENworks when a smart card is used to
log in to eDirectory. This option is enabled only if the schema
of the eDirectory specified in the
is extended using the novell-zenworks-configure tool.
If Shared Secret is not selected as an authentication
mechanism, a ZENworks login dialog box is displayed when
the user on the managed device attempts to log in to
eDirectory using a smart card. After the user specifies the
eDirectory username and password, that password is stored in
Novell SecretStore. The next time the user uses a smart card
to log in to eDirectory, the password is retrieved from
SecretStore and the user is logged in to the ZENworks without
having to specify the password.
If you select both available mechanisms (Kerberos and Username/
Password for Active Directory or Username/Password and Shared
Secret for eDirectory), ZENworks Configuration Management
attempts to use the first mechanism for authentication. If
authentication fails, the next mechanism is used. For example, if
you select Kerberos and Username/Password for Active Directory,
ZENworks Configuration Management first attempts to use
Kerberos authentication. If Kerberos authentication fails, simple
Username/Password authentication is used.
Connection Information page