Manual ResistTel IP2 / IP152
Page 181
ExResistTel IP2 / IP154
Figure 191: HTTPS Basic Authorisation
1.
The browser sends user name and password to the box, using
HTTPS basic
authentication
.
2.
The box then uses
Kerberos
to obtain a ticket on behalf of the user from the
Kerberos server for its own web server.
If that was successful and the password is valid, then the user is authenticated.
4.3.2.1.2.3
Cross Realm Authentication
Cross-realm authentication means that users from one realm/domain can login to
services from another realm/domain. To do so, the realms have to trust each other
and have a shared secret password to decrypt tickets from the other realm. This
password has to be configured on both Kerberos servers. The picture shows how
cross-realm authentication is used to login with a Windows domain user at a device.
Summary of Contents for ExResistTel IP2/IP154
Page 43: ...Manual ResistTel IP2 IP152 Page 43 ExResistTel IP2 IP154 Figure 9 Set View ...
Page 386: ...Page 386 Manual ResistTel IP2 IP152 ExResistTel IP2 IP154 ...
Page 387: ...Manual ResistTel IP2 IP152 Page 387 ExResistTel IP2 IP154 ...
Page 390: ...Page 390 Manual ResistTel IP2 IP152 ExResistTel IP2 IP154 ...