Sun Microsystems Netscape Enterprise Server, Руководство администратора

Страница: 457 / 532

Appendix B, ACL File Syntax 457
ACL File Syntax
Authentication Statements
ACLs can optionally specify the authentication method the server must use
when processing the ACL. There are two general methods:
• Basic requires users to enter a username and password before accessing a
resource.
• SSL requires the user to have a client certificate. For this method to work,
the web server must have encryption turned on, and the CA must be in the
list of trusted CAs.
By default, the server uses the Basic method for any ACL that doesn’t specify a
method. You can change the default setting by editing the following line in the
magnus.conf
file:
Init fn=acl-set-default-method method=SSL
Each authenticate line must specify what list (users, groups or both) the server
should use when authenticating users. The following authentication statement,
which would appear after the ACL type line, specifies basic authentication with
users matched to individual users in the database or directory:
authenticate (user) {
method = basic;
};
The following example uses SSL as the authentication method for users and
groups:
authenticate (user, group) {
method = ssl;
};
The following example allows any user whose username begins with the letters
sales
:
authenticate (user)
allow (all)
user = sales*
If the last line was changed to
group = sales
, then the ACL would fail
because there are no groups in the user lists.