Users Guide

Dell OpenManage Security 39
Authentication
The Server Administrator authentication scheme ensures that the access types
are assigned to the correct user privileges. Additionally, when you invoke the
CLI, the Server Administrator authentication scheme validates the context
within which the current process is running. This authentication scheme
ensures that all Server Administrator functions, whether accessed through the
Server Administrator home page or CLI, are properly authenticated.
Microsoft Windows Authentication
For supported Windows operating systems, Server Administrator
authentication uses Integrated Windows Authentication (formerly
called NTLM) to authenticate. This authentication system allows Server
Administrator security to be incorporated in an overall security scheme
for your network.
Red Hat Enterprise Linux and SUSE Linux Enterprise Server Authentication
For supported Red Hat
®
Enterprise Linux
®
and SUSE
®
Linux Enterprise
Server operating systems, Server Administrator authentication is based on the
Pluggable Authentication Modules (PAM) library. This documented library of
functions allows an administrator to determine how individual applications
authenticate users.
Encryption
Access to Server Administrator is enabled over a secure HTTPS connection
using secure socket layer (SSL) technology to ensure and protect the identity
of the system being managed. Java Secure Socket Extension (JSSE) is used by
supported Windows, Red Hat Enterprise Linux, and SUSE Linux Enterprise
Server operating systems to protect the user credentials and other sensitive
data that is transmitted over the socket connection when a user accesses the
Server Administrator.
Microsoft Active Directory
The Active Directory Service (ADS) software acts as the central authority for
network security. ADS allows the operating system to verify a user's identity
and control that user’s access to network resources. For Dell OpenManage
applications running on supported Windows platforms, Dell provides schema
extensions for customers to modify their Active Directory database to support