Sun Microsystems Netscape Enterprise Server, Руководство администратора

Страница: 342 / 532

Restricting Access to Your Web Site
342 Netscape Enterprise Server Administrator’s Guide
• Default uses the default method you specify in the
obj.conf
file, or
“Basic” if there is no setting in
obj.conf
. If you check Default, the
ACL rule doesn’t specify a method in the ACL file. Default is the best
choice because you can easily change the methods for all ACLs by
editing one line in the
obj.conf
file.
• Basic uses the HTTP method to get authentication information from the
client. The username and password are only encrypted if encryption is
turned on for the server.
• SSL uses the client certificate to authenticate the user. If you use this
method, SSL must be turned on for the server. If you have encryption
on, you can combine Basic and SSL methods.
• Other uses a custom method you create using the access control API.
• Authentication Database lets you select a database that the server uses to
authenticate users. The default setting means the server looks for users and
groups in an LDAP directory. However, you can configure individual ACLs
to use different databases. You can specify different databases and LDAP
directories in the file
server_root /userdb/dbswitch.conf
. Then,
you can choose the database you want to use in the ACL by selecting it in
the drop-down list. If you use the access control API to use a custom
database (for example, to use an Oracle or Informix database), you can
type the name of the database in the “Other” field in the User/Group
window.
Specifying Host Names and IP Addresses
You can restrict access to Enterprise Administration Server or your web site
based on which computer the request comes from. You specify this restriction
by using wildcard patterns that match the computers’ host names or IP
addresses. For example, to allow or deny all computers in a specific domain,
you would enter a wildcard pattern that matches all hosts from that domain,
such as
*.netscape.com
. You can set different hostnames and IP addresses
that the superuser must use when accessing Enterprise Administration Server.
To specify users from hostnames or IP addresses, follow the directions for
restricting access in “Restricting Access to Your Web Site” on page 334. When
you click the From Host field (the link called “anyplace”), additional options
appear in the bottom frame. Check the “Only from” option and then type either
a wildcard pattern or a comma-separated list of hostnames and IP addresses.