Novell Access Manager 3.1 SP 2, Руководство пользователя, Страница: 47 / 126

Configuring the Agent for Authentication 47
n
ov
do
cx (e
n)
16
Ap
ril 20
10
Figure 2-2
The J2EE Server as a Protected Resource
1. The user requests access to the application server by using a published DNS name. The request
is sent to the Access Gateway, and the Access Gateway proxies the request to the agent.
2. The agent redirects the request to the Access Gateway, and the Access Gateway redirects the
user to the Identity Server, which prompts the user for a username and password.
3. The Identity Server verifies the username and password against a user store (an LDAP
directory).
4. The Identity Server builds the roles for the user and redirects the user back to the Access
Gateway.
5. The Access Gateway directs the user’s request to the application server.
6. The agent verifies the user’s credentials and obtains the user’s role information.
7. The application server allows the user to access to the requested application.
For configuration information, see Section 2.5, “Protecting the Application Server with the Access
Gateway,” on page 53 .
2.3 Configuring the Agent for Direct Access
1 In the Administration Console, click Devices > J2EE Agents > Edit .
Browser
2
LDAP Directories
3
Identity Server
J2EE Server with
Agent and Applications
4
1
4
1
5
Access Gateway
6
7