ZPE Nodegrid Bold SR, Руководство пользователя

Страница: 162 / 227

Authentication
Authentication is the process of validating who you are or who you claim to be, which is
usually done using credentials. Credentials take most often the form of a username and
password.
Authorization is the essential security part, that complements authentication. Once you are
authenticated using your credentials, authorization determines what you have access to, e.g.
certain directories, power or serial devices, etc.
Nodegrid has a built-in admin user account named ' admin ' with full access and rights to set
all configurable aspects of the unit, network, security, authentication, authorization, devices
to be managed, including other users. This special user account, '
admin ' cannot be deleted
and it has the default password ' admin '.
Note: For security reasons, administrators are strongly advised to change the default
password during the first login by using the
Change Password option on the pull-down
menu under your username in the top right corner of the WebUI.
The Nodegrid platform fully the supports Authentication of local users and groups as well as
external users and groups. External authentication of users and groups can be done
through LDAP/AD, , Radius and Kerberos.
All users have access to all enabled managed devices by default. Fine Grain Authorisation
can be enabled by selecting the option
Device access enforced via user group
authorization under Services .
Based on the groups they are assigned to, these users have limited access to Nodegrid
Web portal management attributes. Privileges of users can be modified by setting profile
and access rights in an authorization group. A user who belongs to the group
Admin will
have the same administrative privileges as the admin user. Each user must have a specific
user account on Nodegrid or on an external authentication server. A user can be assigned
to one or more authorization groups.
Local Accounts
New local users can be added, deleted, changed and locked under Local Accounts in
Security
. Administrators can force passwords to be changed upon next login and set
expiration dates for the user accounts. Regardless of activation options, users can change
their own passwords at any time. This feature lists all users and their respective information.
user name and password
hash format password (optional)
account expiration (optional)
groups, the user is part of
Manage Local Users