
PC-Duo overview
authenticate itself to the server. PC-Duo implements two types of authentication to
support this:
"Identity Authentication"
"Endpoint Authentication"
Identity Authentication
In general, this operation answers the following security question: How does the server
know who the client is? A PC-Duo application acting as a server will not provide access
or information to any PC-Duo application acting as a client until it can validate that client's
identity. PC-Duo provides the server three different methods of authenticating the identity
of the PC-Duo client:
Gateway-managed (Gateway & Host are in same domain)
Master-Gateway
relationship
Gateway-Host relationship
Gateway-managed (Gateway & Host are not in same domain)
Master-Gateway
relationship
Gateway-Host relationship
Windows authentication: By default, a PC-Duo application acting as a server uses
Windows authentication to check the Windows credentials of the client application:
The Host will check the Windows credentials of the PC-Duo Master user in
the case of a peer-to-peer connection;
The Gateway will check the Windows credentials of the PC-Duo Master users
in the Master-Gateway part of a Gateway-managed connection;
The Host will check the Windows credentials of the user logged into the
Gateway in the Gateway-Host part of a Gateway-managed connection (when
Host and Gateway are in the same domain).
NOTE: If Host and Gateway are not in the same domain, Windows authentication will not
usually be available. In that case, Host and Gateway will rely on Shared secret password.
Comments to this Manuals