Altusen ALTUSEN CC2000, Руководство пользователя, Страница: 80 / 271

CC2000 User Manual
66
Authentication Services
The CC2000 provides an internal Username / Password authentication service.
In addition, the CC2000 supports the following third party external
authentication servers: LDAP, LDAPS, Active Directory, RADIUS,
, and Windows NT Domain.
Note: 1. Authentication refers to determining the authenticity of the person
logging in; authorization refers to assigning permission to use the
device’s various functions.
2. These external servers provide authentication services only – they do
not provide authorization services. Authorization is provided through
the CC2000 management system.
By adding an external authentication server to the CC2000 management
system (see page 68 for details), when you add a user account, you can select
the external authentication server from the list of authentication servers (see
Adding User Accounts , page 50).
Note: For LDAP, LDAPS, and Active Directory there is an additional
authentication method in which the user attempting to log in does not
have an account on the CC2000. In this case, the CC2000 checks the
external server to see if it contains an account with the username and
password of the user attempting to log in. If it does, the CC2000 checks
to see if the user belongs to a group that corresponds to a group that
exists on the CC2000. If it does, the CC2000 lets the user log in and
assigns him the access rights of the group. See
Group Authorization ,
page 72, for details
When you click Authentication Services on the menu bar, the Authentication
Server List appears in the Interactive Display panel, showing all the
authentication services that have been configured:
cc2k.book Page 66 Tuesday, December 21, 2010 4:00 PM