Sun Microsystems Netscape Enterprise Server, Руководство администратора

Страница: 341 / 532

Chapter 14, Controlling Access to Your Server 341
Restricting Access to Your Web Site
To configure access control with users and groups, follow the general
directions for restricting access. When you click the Users/Groups field, a
additional options appear in the bottom frame. The following list describes the
options in the bottom frame.
• Anyone (No Authentication) is the default and means anyone can access
the resource without having to enter a username or password. However,
the user might be denied access based on other settings, such as host name
or IP address. For Enterprise Administration Server, this means that anyone
in the administrators group that you specified with distributed
administration can access the pages.
• All in the authentication database matches any user who has an entry in
the database. To use this option, you must also check “Authenticated
people only.” For Enterprise Administration Server, the users you specify
must also be in the “administrators” group you specified for distributed
administration.
• Only the following people lets you specify certain users and groups to
match. You can list the users and groups of users individually by separating
the entries with commas. Or, you can enter a wildcard pattern. To use this
option, you must also check “Authenticated people only.”
• Group matches all users in the groups you specify. For Enterprise
Administration Server, the users in the groups you specify must also be
in the “administrators” group you specified for distributed
administration.
• User matches the individual users you specify.
• Prompt for authentication lets you specify message text that appears in
the authentication dialog box. You can use this text to describe what the
user needs to enter. Depending on the operating system, the user will see
about the first 40 characters of the prompt. Netscape Navigator and
Netscape Communicator cache the username and password and associate
them with the prompt text. This means that if the user accesses areas (files
and directories) of the server that have the same prompt, the user won’t
have to retype usernames and passwords. Conversely, if you want to force
users to reauthenticate for various areas, you simply need to change the
prompt for the ACL on that resource.
• Authentication Methods specifies the method the server uses when
getting authentication information from the client.