Nortel 1000 Installation And Configuration Manual

Also see for 1000 Con?guration guide: Brochure Reference User manual Overview User guide

Contents

Nortel 1000 Installation And Configuration Manual Manual pdf 138 page image

138 Security Management553-3001-230 Standard 10.01 September 2007Access to Web applications applies to a group, not to individual users. To change thesecurity access for individual users, their group membership should be changed. Forinformation about setting user access, refer to “User groups” on page 142.With the exception of Administrators, do not place a person in multiple groups. The firstgroup detected by TM 3.0 is used to determine access permissions. There is norestriction on the Administrators group. Users may belong to other groups, but if theybelong to the Administrators group, the Administrators profile overrides all otherprofiles.There is a Default user category. Default users can successfully log in to the WebNavigator, but they do not have a user group defined in their Directory record.TM 3.0 administrators and Help desk users have user accounts in a Windows domain.End users may have accounts either in a Windows domain or through a CND server.TM 3.0 administrators and Help desk users can access and change their own telephonesthrough either the Web Navigator or the Desktop Services end user pages. Access to theend-user pages requires the appropriate CND Directory setup (user login and usergroup) for these administrators and Help desk users.AuthenticationAuthentication requests are passed to TM 3.0 Watchdog, which applies the configuredauthentication method and creates a session for the user. For authentication on “LocalTM 3.0 server account” or “Windows Domain account,” the standard Windows SecurityProvider is used. For authentication using CND Authentication for Endusers, the loginname and the password are passed to the CND server.In TM 3.0, Windows and Web users are authenticated using the settings configuredeither on the User Authentication Web page or in the User Authentication dialog box.The information that appears on the Web page and in the dialog box is identical. TheWeb link to the User Authentication page is found under Web administration in the TM3.0 Web Navigator tree. The User Authentication dialog box is accessed from theSecurity menu in the TM 3.0 Windows Navigator.Authentication methodsThe following user authentication methods are available:• Local TM 3.0 server account• Windows Domain account• CND authentication