Authentication; Authentication Configuration; Local Authentication - Tripp Lite B092-016 Owner's Manual

Chapter 9: Authentication
The Tripp Lite Console Server is a dedicated Linux computer, and it embodies popular and proven Linux software modules for
secure network access (OpenSSH) and communications (OpenSSL) and sophisticated user authentication (PAM, RADIUS,
TACACS+, Kerberos and LDAP).
• This chapter details how the Administrator can use the Management Console to establish remote AAA authentication for
all connections to the Console Server and attached serial and network host devices
• This chapter also covers establishing a secure link to the Management Console using HTTPS and using OpenSSL and
OpenSSH to establish a secure Administration connection to the Console Server
9.1

Authentication Configuration

Authentication can be performed locally, or remotely using an LDAP , Radius or TACACS+ authentication server. The default
authentication method for the Console Server is Local.
Any authentication method that is configured will be used for authentication of any user attempting to log in through Telnet,
SSH or the Web Manager to the Console Server and any connected serial port or network host devices.
The Console Server can be configured to the default (Local) or an alternate authentication method (TACACS, RADIUS
Kerberos or LDAP) with the option of a selected order in which local and remote authentication is to be used:
Local TACACS /RADIUS/LDAP/Kerberos: Tries local authentication first, falling back to remote if local fails
TACACS /RADIUS/LDAP/Kerberos Local: Tries remote authentication first, falling back to local if remote fails
TACACS /RADIUS/LDAP/Kerberos Down Local: Tries remote authentication first, falling back to local if the remote
authentication returns an error condition (e.g. the remote authentication server is down or inaccessible)
9.1.1

Local authentication

• Select Serial and Network: Authentication and check Local
• Click Apply
136