User authentication using the web interface
When the server is installed, you can log in using the default root password (username=root, password=default).
Once logged in, you can specify how the general user authentication should be done:
Admin (
) | Authentication (
) Authentication mechanism
This will reveal the three different modes of authentication as shown in figure 4.2.
Figure 4.2: Three modes of user authentication.
The options are:
- Built-in authentication. This option will enable you to set up user authentication using the server's built-in user management system. This means that you create users, set passwords, assign users to groups and manage groups using the web interface or the Workbench. All the user information is stored on the server and is not accessible from other systems.
- LDAP directory. This option will allow you to use an existing LDAP directory. This means that all information needed during authentication and group memberships is retrieved from the LDAP directory. If needed, the LDAP integration can use Kerberos / GSSAPI.
- Active directory. This option will allow you to use an existing Active directory which is Microsoft's LDAP counterpart. This means that all information needed during authentication and group memberships is retrieved from the Active directory.
Note that membership of an administrative group is used to control which users can access the admin part of the web interface. These users will also be able to set permissions on folders (see Access privileges and permissions). For the built-in authentication method, this means adding particular users to the built-in admin group. For Active Directory or LDAP, this means designating a group in the box labeled Admin group name and adding any users who should be administrators of the CLC Server to this group.
Subsections