Sun Microsystems Netscape Enterprise Server, Руководство администратора

Страница: 348 / 532

Access Control Examples
348 Netscape Enterprise Server Administrator’s Guide
Access Control Examples
This section describes some common examples for restricting access to a web
server and its contents. Some of these examples assume you set up the
“default” ACL to deny anyone access to the server. You can also add a “deny
all” line as the first rule to each of these examples, as done in the example for
the entire server (see “Restricting Access to the Entire Server” on page 348).
Restricting Access to the Entire Server
This example allows access to users in a group called “employees” who access
the server from computers in a subdomain. There are no access control rules
for other resources on the server. You might use this example if you have a
server for a department and you only want users to access the server from
computers in a specific subdomain of your network.
To restrict access to the entire server, perform the following steps:
1.
In Enterprise Server, choose Server Preferences.
2.
Click the Restrict Access link.
The Access Control List Management page appears.
3.
In the section called Pick a Resource, select “The entire server” from the
Editing drop-down list and then click Edit Access Control.
The two-frame page appears.
4.
Click New Line.
The default rule appears, which denies all access to the server. Typically,
you should deny all access to your server, and then allow specific access to
users, groups, and computers; however, you might change this if you want
to deny access only to a small group of users or groups. Click New Line
again to create a second rule.
5.
Click the Deny link in the second rule. In the bottom frame that appears,
check Allow, and then click Update.