Juniper NETWORK AND SECURITY MANAGER, Руководство пользователя

Страница: 215 / 340

Table 51: Secure Access Authentication Realms Configuration
Details
(continued)
Your Action Function Option
Select the mode of submission of
password to the secondary
authentication server from the
drop-down list:
• Username is specified by user on
sign-in page
—Prompts the user
to manually submit his password
to the secondary server during the
Secure Access device sign-in
process.
• Predefined user name
template
—Automatically submits
a password to the secondary
server during the Secure Access
device sign-in process.
Specifies the password for the
secondary authentication server. Password for
Secondary Auth
Enter static text or a valid variable. Specifies the predefined password. Predefined
Password
Select General > Enable Dynamic
policy evaluation to enable an
automatic timer for dynamic policy
evaluation of this realm’s
authentication policy, role mapping
rules, and role restrictions.
Uses dynamic policy evaluation for
this realm. Enable Dynamic
policy evaluation
Select General > Refresh roles to
enable this option.
Refreshes the roles of all users in
this realm. (This option does not
control the scope of the Refresh
Now button.) Refresh roles
Select General > Refresh policies to
enable this option.
Refreshes the resource policies (not
including Meeting and Email Client)
for all users in this realm. (This
option does not control the scope
of the Refresh Now button.) Refresh policies
Ener the number of minutes (5 to
1440). Specifiesy how often you want the
Secure Access device to perform
an automatic policy evaluation of
all currently signed-in realm users. Refresh interval
(minutes)
Related
Documentation
Configuring Secure Access Authentication Policies (NSM Procedure) on page 198
•
•
Configuring Secure Access Role Mapping Rules (NSM Procedure) on page 203
•
Configuring Secure Access Sign-In Policies (NSM Procedure) on page 207
197 Copyright © 2010, Juniper Networks, Inc.
Chapter 12: Configuring Authentication Realms