3Com 3C421600A, Management Manual

Page: 191 / 300

NOS Authentication
189
To change the encryption key, follow these steps:
1 Unload the security client on the Novell server:
UNLOAD SNDS or UNLOAD SBIN “secret”
2 Reload the security client on the server with the new secret.
LOAD SNDS “secret_password(key)”c:\”context_name” debug
or
LOAD SBINDERY “secret_password(key)” debug
The RAS 1500 does NOT support CHAP authentication with Novell NOS
Authentication. This means that the password sent by the client to the
RAS 1500 is not encrypted. The password sent from the RAS 1500 to the
Novell Security Client is encrypted as described above.
Installing and
Configuring NOS
Authentication
Software
(Windows NT)
The RAS 1500 NT Security Client 1.1 application software provides
centralized user logon authentication service for the RAS 1500 on an NT
workstation. The advantage of this authentication mechanism is that a
large number of user accounts can be easily administered on NT user
account database with NT User Account Manager.
This application software is a NT service that processes authentication
requests from the RAS 1500. The NT Security Client uses a 3Com
proprietary communication protocol to communicate with the RAS 1500.
This protocol, which runs on top of registered UDP service "crsecacc",
provides secured end-to-end communication services such as messages
encryption and the protection against message replay.
When an RAS 1500 is setup to use NT authentication service, the logon
username and password are forwarded to the designated NT workstation
for authentication. After receiving the authentication request, the RAS
1500 Security Client uses the NT Security Support Provider (SSP) library to
perform authentication against NT user account database. Once the
authentication is complete, the RAS 1500 Security Client sends the results
back to the RAS 1500.
This application software has to run on NT 3.51 or later release. In
addition, the NT workstation has to have TCP/IP service installed.
Depending on the NT workstation setup, the user authentication can be
performed on three different databases: