SLC™ Console Manager User Guide
165
12: User Authentication
Users who attempt to log in to the SLC console manager by means of Telnet, SSH, the console
port, or one of the device ports are granted access by one or more authentication methods.
The User Authentication page provides a submenu of methods (Local Users, NIS, LDAP,
RADIUS, Kerberos, and ) for authenticating users attempting to log in. Use this page to
assign the order in which the SLC unit will use the methods. By default, local user authentication is
enabled and is the first method the SLC console manager uses to authenticate users. If desired,
you can disable local user authentication or assign it a lower precedence.
Note:
Regardless of whether local user authentication is enabled, the local user
sysadmin account is always available for login.
Authentication can occur using all methods, in the order of precedence, until a successful
authentication is obtained, or using only the first authentication method that responds (in the event
that a server is down).
If you have the same user name defined in multiple authentication methods, the result is unknown.
Example:
There is an LDAP user "joe" and an NIS user "joe" and the order of authentication methods is:
1.
Local Users
2.
LDAP
3.
NIS
User "joe" tries to log in. Because there is an LDAP user "joe," the SLC unit tries to authenticate
him against his LDAP password first. If he fails to log in, then the SLC device may (or may not) try
to authenticate him against his NIS "joe" user password.
To enable, disable, and set the precedence of authentication methods:
1.
From the main menu, select
User Authentication
. The following page displays:
Summary of Contents for SLC8
Page 1: ...Part Number 900 449 Revision J July 2014 SLC Console Manager User Guide SLC8 SLC16 SLC32 SLC48...
Page 95: ...8 Device Ports SLC Console Manager User Guide 95 Figure 8 4 Device Ports Settings...
Page 217: ...13 Maintenance SLC Console Manager User Guide 217 Figure 13 1 Maintenance Firmware Config...
