Specify authentication chaining mode


Set the authentication chaining mode to specify an order in which the AR Systemattempts internal and external authentication. The AR System moves in the specified order until authentication succeeds or until it has tried all the authentication methods.

To set the authentication chaining mode

  1. Open the AR System Administration: Server Information form, and click the EA tab.
  2. In the External Authentication Server RPC Program Number field, enter 390695.
  3. Select Authenticate Unregistered Users, Cross Reference Blank Password, or both.
  4. From the Authentication Chaining Mode list, select one of these values:

    Mode

    Description

    Off

    Disables authentication chaining.

    ARS - AREA

    AR System attempts to authenticate the user by using the User form and then the AREA plug-in.

    AREA - ARS

    AR System attempts to authenticate the user by using the AREA plug-in and then the User form.

    ARS - OS - AREA

    AR System attempts to authenticate the user by using the User form, then Windows or UNIX authentication, and then the AREA plug-in.

    ARS - AREA - OS

    AR System attempts to authenticate the user by using the User form, then the AREA plug-in, and then Windows or UNIX authentication.

    Make sure you configure the Pluggable Authentication Module (PAM) configuration file on the UNIX system for OS authentication to work. Create an auth file in the /etc/pam.d folder. The file contains the authentication parameters and security settings specific to UNIX systems, for example:

    #%PAM-1.0
    auth        required     pam_unix.so

    AR System behaves differently depending on the authentication chaining mode you select and other external authentication parameters you specify. For more information, see Determining-AREA-behavior.

  5. Click Apply and OK.

    If you use the AREA hub, the authentication chaining mode treats it like a single plug-in, and plug-ins installed in the AREA hub are considered in sequence until a valid response is returned. For more information, see Setting up the AREA hub.

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*