HP Advanced Server V7.3B for OpenVMS and HP PATHWORKS V6.1 for OpenVMS (Advanced Server)

HP PATHWORKS V6.1 for OpenVMS (Advanced Server)
Flexible Security Models
The Advanced Server allows you to choose one of two modes of security, depending on the
needs of your environment:
• In Advanced Server Only mode, only the Advanced Server (Windows NT Server style)
security model is enforced.
This mode is sufficient for most network environments. The Advanced Server employs a
user-level security model that provides precise control over access to shared resources,
including disk devices, directories, and printers. Control is based on a password assigned
to each user account and the specific access permissions defined for the resources.
The Advanced Server incorporates enhanced features that provide a high level of control
over user and resource permissions and auditing. These features include support of
discretionary access control permissions on individual files, directories, and resources and
complete auditing capabilities.
Like Windows NT Servers, Advanced Server does not support share-level security and
operates in user-level security mode only.
• In the Advanced Server and OpenVMS security mode, both the OpenVMS and Advanced
Server security models are enforced.
Use of both security models is never necessary to control user access to resources, but
is provided to allow administrators of systems with complex OpenVMS security controls
already in place to use those same controls to restrict access by client users. Note that
use of the Advanced Server and OpenVMS security model results in the extra overhead of
validating both the Advanced Server and OpenVMS settings.
In addition, the Advanced Server supports external authentication (allowing OpenVMS users
to log in at the OpenVMS prompt using their domain user name and password) and password
synchronization between OpenVMS and Advanced Server systems, and it supports user
account lockout.
Domain Support
PATHWORKS Advanced Server allows the network to be subdivided into domains (administrative
groups of servers and clients). Each PATHWORKS Advanced Server can be a member of a
single domain. A PATHWORKS Advanced Server can be a primary domain controller (PDC), a
backup domain controller (BDC), or a member server. Domains are a convenient mechanism
for controlling user access to the network and for managing large networks.
The Advanced Server can be deployed as the PDC in a network comprising other Advanced
Servers, Windows NT Servers, PATHWORKS for OpenVMS (LAN Manager) servers, or
LAN Manager for OS/2 servers. It also can act as a BDC for other Advanced Servers and
Windows NT Server computers. In addition, the Advanced Server can act as a BDC and/or as
a member server in Windows 2000 mixed-mode and Windows 2003 interim domains, or as a
member server in Windows 2000 native-mode and Windows 2003 domains, in accord with the
limitations imposed by Microsoft on Windows NT V4-compatible servers.
22