Users Guide

Setup and Administration 19
Red Hat Enterprise Linux and SUSE Linux Enterprise Server Authentication
For supported Red Hat
®
Enterprise Linux
®
and SUSE
®
Linux Enterprise Server operating systems,
Server Administrator uses various authentication methods based on the Pluggable Authentication
Modules (PAM) library. Users can log in to Server Administrator either locally or remotely using
different account management protocols, such as LDAP, NIS, Kerberos, and Winbind.
NOTE: Server Administrator authentication using Winbind and Kerberos on SUSE Linux Enterprise Server
(Version 9 Service Pack 3) is not supported because the 32-bit compatible libraries for Winbind and Kerberos are
not present in the operating system.
Encryption
Server Administrator is accessed over a secure HTTPS connection using secure socket layer (SSL)
technology to ensure and protect the identity of the system being managed. Java Secure Socket
Extension (JSSE) is used by supported Microsoft Windows, Red Hat Enterprise Linux, and SUSE Linux
Enterprise Server operating systems to protect the user credentials and other sensitive data that is
transmitted over the socket connection when a user accesses the Server Administrator home page.
Assigning User Privileges
You must properly assign user privileges to all Server Administrator users before installing Server
Administrator in order to ensure critical system component security.
The following procedures provide step-by-step instructions for creating Server Administrator users and
assigning user privileges for each supported operating system:
• "Creating Server Administrator Users for Supported Windows Operating Systems"
• "Creating Server Administrator Users for Supported Red Hat Enterprise Linux and SUSE Linux
Enterprise Server Operating Systems"
NOTICE: You must assign a password to every user account that can access Server Administrator to protect
access to your critical system components. Additionally, users who do not have an assigned password cannot log
in to Server Administrator on a system running Windows Server
®
2003 due to operating system constraints.
NOTICE: You should disable guest accounts for supported Microsoft Windows operating systems in order to
protect access to your critical system components. See "Disabling Guest and Anonymous Accounts in Supported
Windows Operating Systems" for more information.
Creating Server Administrator Users for Supported Windows Operating Systems
NOTE: You must be logged in with Administrator privileges to perform these procedures.