3PAR CIM API Programming Reference for InForm OS 2.3.1 (320-200164 Rev B, February 2010)

3.2
Authentication
CIM API Programming Reference InForm OS Version 2.3.1
3.2 Authentication
Authentication verifies the identity of an entity.
Management clients accessing the 3PAR CIM Server are authenticated using a request/
challenge mechanism using HTTP Basic authentication. When a request is received from a
management client, the CIM Server challenges the client to send a user name and password
encoded in the HTTP Authorization header. The user names and passwords used are the same
as those used by other management interfaces and are case sensitive.
The 3PAR CIM Server uses OpenSSL to support HTTPS connections. The server supports SSLv3
and TLSv1 by default and uses the default OpenSSL cipher list only. For more about OpenSSL,
refer to http://www.openssl.org/docs.
NOTE: 3PAR CIM does not currently support LDAP user name and password
authentication; only local user names and passwords are valid. Please see the
3PAR Concepts Guide, Chapter 3 for more information on local versus LDAP user
credentials.
NOTE: Because Basic Authentication means that client user names and passwords
are sent over the wire in unencrypted form, it is recommended that the
authentication is carried out either over a physically secure private network, or in
conjunction with HTTPS.