User`s guide

BLACK BOX® CS Installation, Administration, and User’s Guide 11
Authentication
Authentication
CS supports a number of authentication methods that can help the
administrator with the user management. Authentication can be performed
locally or with a remote server, such as RADIUS, TACACS+, LDAP, or
Kerberos. An authentication security fallback mechanism is also employed,
should the negotiation process with the authentication server fails. In such
situations, the CS follows an alternate defined rule when authentication server
is down or does not authenticate the user.
The following table lists the supported authentication methods.
Table 1-2: CS Supported Authentication Methods
Authentication Type Definition
None
No authentication.
Kerberos
Authentication is performed using a Kerberos
server.
Kerberos/Local
Kerberos authentication is tried first, switching
to Local if unsuccessful.
KerberosDownLocal
Local authentication is performed only when
the Kerberos server is down.
LDAP
Authentication is performed against an LDAP
database using an LDAP server.
LDAP/Local
LDAP authentication is tried first, switching to
Local if unsuccessful.
LDAPDownLocal
Local authentication is performed only when
the LDAP server is down.
Local
Authentication is performed locally. For
example using the /etc/passwd file.
Local/Radius
Authentication is performed locally first,
switching to Radius if unsuccessful.