Vector PC-Duo Gateway Manual page 24

PC-Duo Gateway Server Guide
authenticate itself to the server. PC-Duo implements two types of authentication to
support this:
―Identity Authentication‖

―Endpoint Authentication‖

Identity Authentication
In general, this operation answers the following security question: How does the server
know who the client is? A PC-Duo application acting as a server will not provide access
or information to any PC-Duo application acting as a client until it can validate that client's
identity. PC-Duo provides the server three different methods of authenticating the identity
of the PC-Duo client:
Connection
Peer-to-peer
Gateway-managed (Gateway & Host are in same domain)

Master-Gateway
relationship

Gateway-Host relationship
Gateway-managed (Gateway & Host are not in same domain)

Master-Gateway
relationship

Gateway-Host relationship

Windows authentication: By default, a PC-Duo application acting as a server uses
Windows authentication to check the Windows credentials of the client application:

The Host will check the Windows credentials of the PC-Duo Master user in
the case of a peer-to-peer connection;

The Gateway will check the Windows credentials of the PC-Duo Master users
in the Master-Gateway part of a Gateway-managed connection;

The Host will check the Windows credentials of the user logged into the
Gateway in the Gateway-Host part of a Gateway-managed connection (when
Host and Gateway are in the same domain).
NOTE: If Host and Gateway are not in the same domain, Windows authentication will not
usually be available. In that case, Host and Gateway will rely on Shared secret password.

Simple password: Prior to making a connection, a custom password can be created
on the tab of the Host and shared with PC-Duo Master user. This feature permits
Security
24
Windows
authentication
Yes
Yes
Yes
Yes
No
Shared-
Simple
secret
password
password
Yes No
No No
No Yes
No No
No Yes