Cyclades AlterPath ACS, Справочник по командам

Страница: 69 / 420

..........................................................................
Chapter 3
Chapter 3 - Authentication Authentication
This chapter presents the procedures for assigning and configuring the authentication
service(s) that the ACS, system or any of its components and devices will be using.
Authentication is the process by which the system, or more specifically, an
authentication service such as Kerberos, Ldap or Tacacs, verifies the identity of users (to
verify who they claim to be) as well as to confirm receipt of communication to
authorized recipients. This chapter includes the following topics:
•
Device Authentication
•
Linux-PAM
•
Shadow Passwords
•
HTTP Signed Digital Certificate
•
X.509 Certificate on SSH
3.1 Device Authentication
Authentication is the process of identifying an individual, usually based on a username
and password. In security systems, authentication is distinct from authorization, which
is the process of giving individuals access to system objects based on their identity.
Authentication merely ensures that the individual is who he or she claims to be, but says
nothing about the access rights of the individual. With the ACS, authentication can be
performed locally, or with a remote Radius, Tacacs, ldap database, or kerberos.
How to configure
Follow the steps below to configure an authentication type.
VI mode - Parameters involved and passed values
To configure the authenticaton type of the ACS, follow the steps below:
Step 1 - Edit the /etc/portslave/pslave.conf file.
Edit the all.authtype parameter in the pslave.conf file to specify the type of
authentication server being configured. The table below contains a brief
description of each authentication type.