XYGATE User Authentication Reference Manual

XYGATE
®
User Authentication
™
Reference Manual
Introduction
XYPRO Technology Corporation xviii Proprietary and Confidential
Time-Based Logon Control
XYGATEUA can restrict logons based on the time of the day. Time-based logon can
be configured either by using the TIME keyword within a UAGROUP or can be
configured for a TIMEGROUP. This is described in Chapter 6 and Appendix B:
Impersonation Feature
The impersonation feature removes the need for users to share sensitive IDs such as
that of SUPER.SUPER to logon. This is described in Chapter 11.
LDAP Authentication
XUA can be configured to divert user authentication on the NonStop server to an
LDAP database. This brings the NonStop server to the single sign-on schema. The
need to maintain passwords on the NonStop is eliminated by this feature. This is
described in Chapter 12.
RSA SecurID
®
Authentication
XUA may be configured to require the RSA SecurID
®
authentication. This is described
in Chapter 13.
RADIUS Authentication
XUA may be configured to work in conjunction with RADIUS authentication. This is
described in Chapter 14.
Mapping NonStop IDs to Alternative Authentication Databases
XUA provides the capability to map the NonStop user database to an alternative
authentication database such as LDAP, RSA SecurID or RADIUS. This is described in
Chapter 15.
XUA Provides Testing Tools
XUA includes a What-if function to allow testing of logon rules before putting them into
production. What-if testing optionally writes entries in the audit file, which can be
reviewed using any of the report formats provided with XUA. This is described in
Chapter 16.