Black Box Advanced Console Server, User Manual

Page: 250 / 392

Security Menu & Forms
220
2 Fill in the form according to your local server configuration.
3 To apply “Authorization” in addition to authentication to the box and ports,
select the “Enable Raccess Authorization” check box.
By default “Raccess Authorization” is disabled, and no additional
authorization is implemented. When “Raccess Authorization” is enabled,
the authorization level of users trying to access CS or its ports using
authentication is checked. Users with administrator privileges
have administrative access, and users with regular user privileges have
regular user access.
4
To specify a time out period in seconds for each authentication attempt, type a
number in the “Timeout” field.
If the authentication server does not respond to the client’s login attempt
before the specified time period, the login attempt is cancelled. The user may
retry depending on the number specified in the “Retries” field on this form.
5
To specify a number of times the user can request authentication verification
from the server before sending an authentication failure message to the user,
enter a number in the “Retries” field.
6
Click “apply changes.”
The changes are stored in
/etc/tacplus.conf
on the CS.
Group Authorization on
Using an authorization method in addition to authentication provides an extra
level of system security. Selecting Security > Authentication > in
Expert mode brings up the form where an administrators can
configure a authentication server and can also enable user
authorization checking.
By checking the “Enable Raccess Authorization” check box, an additional
level of security checking is implemented. After each user is successfully
authenticated through the standard login procedure, the CS uses to
authorize whether or not each user is allowed to access specific serial ports.
By default the “Enable Raccess Authorization” is disabled allowing all users
full authorization. When this feature is enabled by placing a check mark in the
box, users are denied access unless they have the proper authorization, which
must be set on the authentication server itself. To see the