Novell OPEN ENTERPRISE SERVER - CONVERSION GUIDE 12-2010, Руководство по внедрению

Страница: 175 / 296

Access Control and Authentication 175
16.2.2 Planning for Authentication
For planning topics, see the “ Access, Authenticate, Log in ” in the OES online documentation.
16.2.3 Authentication Coexistence and Migration
For authentication and security coexistence and migration information, see “ Chapter 21, “Security,”
on page 219 and Chapter 22, “Certificate Management,” on page 227 ” in this guide.
16.2.4 Configuring and Administering Authentication
For a list of configuration and administration topics, see “ Access, Authenticate, Log in ” in the OES
online documentation.
Universal Universal Password (UP) enforces a uniform password policy across multiple
authentication systems by creating a password that can be used by all protocols and
authentication methods.
Universal Password is managed in iManager by the Secure Password Manager
(SPM), a component of the NMAS module installed on OES 2 servers. All password
restrictions and policies (expiration, minimum length, etc.) are supported.
All the existing management tools that run on clients with the UP libraries
automatically work with the Universal Password.
Universal Password is not automatically enabled unless you install Novell AFP,
Novell CIFS, Domain Services for Windows, or Novell Samba on an OES 2 server.
You can optionally choose to have the Samba hash password stored separately.
This requires, however, that users always synchronize the Samba password when
changing their eDirectory password.
The Novell Client supports the Universal Password. It also supports the NDS
password for older systems in the network. The Novell Client automatically upgrades
to use Universal Password when UP is deployed.
For more information, see “ Deploying Universal Password ” in the Novell Password
Management 3.3.1 Administration Guide .
Password Type Description