Cyclades AlterPath OnBoard, Administrator'S Manual

Page: 43 / 460

Introduction 7
Understanding Authentication on the OnBoard
Note: If a remote authentication method (like RADIUS) is specified without
a local fallback option (like RADIUS Down/Local), when an administrative
user logs in through the Web Manager or through the OnBoard console, then
authentication always falls back to local authentication if the authentication
server is not available. For any other types of logins, if an authentication
method is specified without a local fallback option, and if the specified
authentication server is not available, then authentication fails and the user
cannot log in.
If configuring any authentication method other than Local, the administrator
user must make sure an authentication server is set up for that method. The
following list gives the prerequisites for configuring authentication servers.
• The OnBoard must be on the same subnet as an authentication server set
up for every authentication method specified.
• Each authentication server must be configured and operational.
• The administrator configuring the OnBoard needs to work with the
administrator of each authentication server to get user accounts set up and
to obtain information needed for configuring access to the authentication
server on the OnBoard.
For example, if LDAP authentication is to be used for logins to the OnBoard
and if Kerberos authentication is to be used for logins to devices, then the
OnBoard needs to have network access to both an LDAP and a Kerberos
authentication server, and the administrator needs to perform configuration on
the OnBoard for each type of authentication server.
An administrative user can use the Web Manager, and any administrator can
use the
cycli
utility for configuring an authentication method for the
OnBoard and for connected devices and for configuring authentication
/Local Uses local authentication if
authentication fails. X X
Local/ Uses authentication if local
authentication fails. X X
Table 1-2: Supported Authentication Types (Sheet 3 of 3)
Type Description OnBoard Device