Selecting Access Control Options
182
Netscape Enterprise Server Administrator’s Guide • November 2001
❍
Basic
uses the HTTP method to get authentication information from the
client. The username and password are only encrypted if encryption is
turned on for the server.
❍
SSL
uses the client certificate to authenticate the user. To use this method,
SSL must be turned on for the server. When encryption is on, you can
combine Basic and SSL methods.
❍
Digest
uses the an authentication mechanism that provides a way for a
browser to authenticate based on username and password without
sending the username and password as cleartext. The browser uses the
MD5 algorithm to create a digest value using the user’s password and
some information provided by Enterprise Server. This digest value is also
computed on the server side using the Digest Authentication plug-in and
compared against the digest value provided by the client.
❍
Other
uses a custom method you create using the access control API.
•
Authentication Database
lets you select a database the server will use to
authenticate users. This option is only available through the Server Manager. If
you choose Default, the server looks for users and groups in an LDAP
directory. If you wish configure individual ACLs to use different databases,
select Other, and choose the database from the drop-down list. Non-default
databases and LDAP directories need to have been specified in the file
server_root
/userdb/dbswitch.conf
. If you use the access control API for a
custom database, such as Oracle or Informix, select Other, and enter the
database name.
Specifying the From Host
You can restrict access to the Administration Server or your web site based on
which computer the request comes from.
•
Anyplace
allows access to all users and systems
•
Only from
allows you to restrict access to specific Host Names or IP Addresses
If you select the Only from option, enter a wildcard pattern or a comma-separated
list in the Host Names or IP Addresses fields. Restricting by hostname is more
flexible than by IP address: if a user’s IP address changes, you won’t need to
update this list. Restricting by IP address, however, is more reliable: if a DNS
lookup fails for a connected client, hostname restriction cannot be used.
Summary of Contents for NETSCAPE ENTREPRISE SERVER 6.0 - ADMINISTRATOR
Page 1: ...Administrator s Guide Netscape Enterprise Server Version6 0 November 2001...
Page 18: ...18 Netscape Enterprise Server Administrator s Guide November 2001...
Page 26: ...26 Netscape Enterprise Server Administrator s Guide November 2001...
Page 48: ...Migrating a Server 48 Netscape Enterprise Server Administrator s Guide November 2001...
Page 50: ...50 Netscape Enterprise Server Administrator s Guide November 2001...
Page 146: ...146 Netscape Enterprise Server Administrator s Guide November 2001...
Page 242: ...242 Netscape Enterprise Server Administrator s Guide November 2001...
Page 294: ...294 Netscape Enterprise Server Administrator s Guide November 2001...
Page 332: ...Deleting a Virtual Server 332 Netscape Enterprise Server Administrator s Guide November 2001...
Page 378: ...378 Netscape Enterprise Server Administrator s Guide November 2001...
Page 396: ...Responses 396 Netscape Enterprise Server Administrator s Guide November 2001...
Page 414: ...Posting to JSPs 414 Netscape Enterprise Server Administrator s Guide November 2001...
Page 432: ...Further Information 432 Netscape Enterprise Server Administrator s Guide November 2001...
Page 444: ...444 Netscape Enterprise Server Administrator s Guide November 2001...
