Sun Microsystems Netscape Enterprise Server, Руководство администратора

Страница: 327 / 532

Chapter 14, Controlling Access to Your Server 327
What Is Access Control?
User-Group Authentication
User-Group authentication requires users to authenticate themselves before
getting access to Enterprise Administration Server or the files or directories on
your web site. Authentication means that users verify their identity either by
entering a username and password or by using a client certificate installed in
their network browser, such as Netscape Communicator. The first method of
getting the username and password is the basic method, which can be done
with or without encryption. The latter method of using client certificates is the
SSL method, which must be done with encryption on. For information on using
SSL, see Chapter 5, “Working with Server Security.”
Username and Password Authentication
To require users to enter a username and password to get access to the web
server or your web site, you must store the list of users and groups in an LDAP
database such as the Netscape Directory Server. The directory server can be
running on the same machine as the web server, or you can use a directory
server installed on a remote machine.
When users attempt to access a resource that has User-Group authentication in
Enterprise Administration Server or on your web site, the web browser displays
a dialog box asking the user to enter a username and password. The server
receives this information encrypted or unencrypted, depending on whether
encryption is turned on for your server.
After entering the username and password, the user either sees the Server
Administration page if logging in to Enterprise Administration Server, the file or
directory listing requested if logging in to a web site, or a message denying
access if the username or password was invalid. You can customize the access
denied message that unauthorized users see through the Access Denied
Response page. Figure 14.1 shows the authentication dialog box. This dialog
box displays a customized login prompt message.