SLB™ Branch Office Manager User Guide 134
11: User Authentication Users who attempt to log in to the SLB branch office manager by means of Telnet, SSH,
the console port, or one of the device ports are granted access b y one or more
authentication methods.
The User Authentication page provides a submenu of methods (Local User s, NIS, LDAP,
RADIUS, Kerberos, and TACACS+) for authenticating users attempting to log in. Use t his
page to assign the order in which the SLB device will use the methods. By default, local
user authentication is enabled and is the first method the SLB branch off ice manager
uses to authenticate users. If desired, you can disable local user authentication or assign
it a lower precedence.
Note: Regardless of whether local user authentication is enabled, the local user
sysadmin account is always available for login.
Authentication can occur using all methods, in the order of precedence, un til a successful
authentication is obtained, or using only the first authentication m ethod that responds (in
the event that a server is down).
If you have the same user name defined in multiple authentication methods, the result is
unknown.
Example:
There is an LDAP user "joe" and an NIS user "joe" and the order of
authentication methods is:
1 - Local Users
2 - LDAP
3 - NIS
User "joe" tries to log in. Because there is an LDAP user "joe," the SLB branch
office manager tries to authenticate him against his LDAP pass word first. If he
fails to log in, then the SLB device may (or may not) try to authenticate h im
against his NIS "joe" user password.
To enable, disable, and set the precedence of authentication methods:
1. From the main menu, select User Authentication. The following page displays: