Appendix H - Web User Management
User Guide
407
How Web User Management works
When a user logs in, the username and the password are encrypted and stored in the
browser. Whenever a URL is requested, the User Manager will perform the following tasks:
Task 1: Check the URL in the Access Limit List
The Web server first scans for the full URL, and then it looks for the subdirectories, until
reaching the root directory “/.” (In the URL http://CAS/goform/cfg/IPTablesRulesHandle, the
access limits will be scanned in the following order: /goform/cfg/IPTablesRulesHandle, /
goform/cfg, /goform and /.) When the URL matches an Access Limit, the following informa-
tion will be available:
Accessibility
When configured as FULL ACCESS, the URL can be accessed without any
authentication; otherwise, the user can authenticate with BASIC, DIGEST
or COOKIE authentication. The last type is recommended, because it
allows the user to log out in the end of the session. The page will not be
accessible when the accessibility is configured as NO ACCESS.
Security
When set to be secure, the page will be accessed only through HTTPS,
which will encrypt the pages through OpenSSL. If the browser is in
unsecure mode, the protocol and the port will change to HTTPS.
Privilege
This is the level of accessibility of the page. If the privilege is USER, any
user will be able to access the page. If the privilege is FULL, only users
with full access will be able to access the page. There are two levels
between them: MONITOR and ADMINISTRATOR.
