Administrator Guide

7-6 System Administrator’sGuide
Authentication
The SFU telnet server supports Windows NT LAN Manager (NTLM) for authentication
of client logins. NTLM allows users to be automatically authenticated to the telnet
server based on their Windows NT login. This makes using telnet completely trans-
parent to users, while ensuring that clear text passwords do not pass over the
network. NTLM must be supported on the client side of the login as well, however.
When using NTLM login, users are restricted to local drives on the system they are
logged in to. If they need to map network resources, they can do so by explicitly map-
ping with full credentials.
Administration
The telnet server is administered using the SFU MMC snap-in, or the tnadmin
program.
The options available are:
• Authentication gives you the choices of NTLM and Username/Password.
• Auditing enables you to set event logging to a separate log file, or the Event Log,
and set what events to log.
• Server Settings enables you to set the following options:
— Maximum number of simultaneous connections
— Maximum number of failed login attempts
— Map Alt Key to CtrlA
— Telnet Port
— Mode of Operation allows you to choose Console or Stream.
— Default Domain Name is the domain name that is automatically added to
theloginusername.Thedefaultis“.”, which disables this feature.
— Idle Session Timeout is the time until an idle session is forcibly
disconnected.
— Terminate all programs when disconnecting toggles with Continue to
run programs started with the command bgjob.
• Sessions allows you to see data about the currently active sessions (such as
user, domain, system, logon date/time) and either send a message to the session
or terminate it.
Services For UNIX MMC Console
SFU UNIX includes a single MMC for managing all of SFU. This MMC provides a
cohesive management interface that lets you administer all systems on the network
from any console. Further, since SFU supports the Windows Management Interface
(WMI), management can be scripted from the command line.